bisecting cause commit starting from e0a092ebebf714c7b6723cae764fc865e2f8c2a7 building syzkaller on c402d8f1aa5d2fdc219d2155fa467fb7f02321a5 testing commit e0a092ebebf714c7b6723cae764fc865e2f8c2a7 with gcc (GCC) 8.1.0 all runs: crashed: WARNING in smc_unhash_sk testing release v5.0 testing commit 1c163f4c7b3f621efff9b28a47abb36f7378d783 with gcc (GCC) 8.1.0 all runs: OK # git bisect start e0a092ebebf714c7b6723cae764fc865e2f8c2a7 v5.0 Bisecting: 6959 revisions left to test after this (roughly 13 steps) [dd1c3ed76f26504621b5ce08b894666aafa38e47] Merge tag 'xtensa-20190307' of git://github.com/jcmvbkbc/linux-xtensa testing commit dd1c3ed76f26504621b5ce08b894666aafa38e47 with gcc (GCC) 8.1.0 all runs: OK # git bisect good dd1c3ed76f26504621b5ce08b894666aafa38e47 Bisecting: 3498 revisions left to test after this (roughly 12 steps) [5af7f115886f7ec193171e2e49b8000ddd1e7147] Merge branch 'next-tpm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security testing commit 5af7f115886f7ec193171e2e49b8000ddd1e7147 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 5af7f115886f7ec193171e2e49b8000ddd1e7147 Bisecting: 1748 revisions left to test after this (roughly 11 steps) [1bdd3dbfff7a308643c7f9ef74e4a8ef3923e686] Merge tag 'io_uring-20190323' of git://git.kernel.dk/linux-block testing commit 1bdd3dbfff7a308643c7f9ef74e4a8ef3923e686 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 1bdd3dbfff7a308643c7f9ef74e4a8ef3923e686 Bisecting: 841 revisions left to test after this (roughly 10 steps) [0548740e53e6fe674f850d36db51eccb0557d938] Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net testing commit 0548740e53e6fe674f850d36db51eccb0557d938 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 0548740e53e6fe674f850d36db51eccb0557d938 Bisecting: 420 revisions left to test after this (roughly 9 steps) [fe1ec0bdfba4e7bfe6db81a1e4ac74beb36691e8] ehea: remove set but not used variables 'epa' and 'cq_handle_ref' testing commit fe1ec0bdfba4e7bfe6db81a1e4ac74beb36691e8 with gcc (GCC) 8.1.0 run #0: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/tmp/syz-executor531381113" "root@10.128.0.244:./syz-executor531381113"]: exit status 1 ssh: connect to host 10.128.0.244 port 22: Connection timed out lost connection run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect good fe1ec0bdfba4e7bfe6db81a1e4ac74beb36691e8 Bisecting: 258 revisions left to test after this (roughly 8 steps) [869e3305f23dfeacdaa234717c92ccb237815d90] Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net testing commit 869e3305f23dfeacdaa234717c92ccb237815d90 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 869e3305f23dfeacdaa234717c92ccb237815d90 Bisecting: 129 revisions left to test after this (roughly 7 steps) [7d60070668e4bf53571f43c6cf30838ca5dccffd] net: hns3: remove resetting check in hclgevf_reset_task_schedule testing commit 7d60070668e4bf53571f43c6cf30838ca5dccffd with gcc (GCC) 8.1.0 all runs: OK # git bisect good 7d60070668e4bf53571f43c6cf30838ca5dccffd Bisecting: 64 revisions left to test after this (roughly 6 steps) [94c59aab42ced3af2140acf90b795b4d4f867012] Merge branch 'bpf-l2-encap' testing commit 94c59aab42ced3af2140acf90b795b4d4f867012 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 94c59aab42ced3af2140acf90b795b4d4f867012 Bisecting: 32 revisions left to test after this (roughly 5 steps) [909620ff72c8fcf95b6ef1dca850b24bf016dd27] tipc: use standard write_lock & unlock functions when creating node testing commit 909620ff72c8fcf95b6ef1dca850b24bf016dd27 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 909620ff72c8fcf95b6ef1dca850b24bf016dd27 Bisecting: 16 revisions left to test after this (roughly 4 steps) [56490b623aa0ffa8526611e3e76a8ac546fe78f6] selftests: Add debugging options to pmtu.sh testing commit 56490b623aa0ffa8526611e3e76a8ac546fe78f6 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 56490b623aa0ffa8526611e3e76a8ac546fe78f6 Bisecting: 8 revisions left to test after this (roughly 3 steps) [6dc400af216a79c10cb082f25a7337bcbf532045] xen-netback: add reference from xenvif to backend_info to facilitate coredump analysis testing commit 6dc400af216a79c10cb082f25a7337bcbf532045 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 6dc400af216a79c10cb082f25a7337bcbf532045 Bisecting: 4 revisions left to test after this (roughly 2 steps) [bc36d2fc93eb2eaef3ab7fbe40d9fc1c5e8bf969] net/smc: consolidate function parameters testing commit bc36d2fc93eb2eaef3ab7fbe40d9fc1c5e8bf969 with gcc (GCC) 8.1.0 all runs: crashed: WARNING in smc_unhash_sk # git bisect bad bc36d2fc93eb2eaef3ab7fbe40d9fc1c5e8bf969 Bisecting: 1 revision left to test after this (roughly 1 step) [4ada81fddfbbda360bb692aa469d472ebb06b37d] net/smc: fallback to TCP after connect problems testing commit 4ada81fddfbbda360bb692aa469d472ebb06b37d with gcc (GCC) 8.1.0 all runs: crashed: WARNING in smc_unhash_sk # git bisect bad 4ada81fddfbbda360bb692aa469d472ebb06b37d Bisecting: 0 revisions left to test after this (roughly 0 steps) [50717a37db032ce783f50685a73bb2ac68471a5a] net/smc: nonblocking connect rework testing commit 50717a37db032ce783f50685a73bb2ac68471a5a with gcc (GCC) 8.1.0 all runs: crashed: WARNING in smc_unhash_sk # git bisect bad 50717a37db032ce783f50685a73bb2ac68471a5a 50717a37db032ce783f50685a73bb2ac68471a5a is the first bad commit commit 50717a37db032ce783f50685a73bb2ac68471a5a Author: Ursula Braun Date: Fri Apr 12 12:57:23 2019 +0200 net/smc: nonblocking connect rework For nonblocking sockets move the kernel_connect() from the connect worker into the initial smc_connect part to return kernel_connect() errors other than -EINPROGRESS to user space. Reviewed-by: Karsten Graul Signed-off-by: Ursula Braun Signed-off-by: David S. Miller :040000 040000 a85dd8a64aa44f2f73ddb0317e6d97e9cb681ee2 1faf0e9b56a1e08fc2a888067f8560779c7026fc M net revisions tested: 16, total time: 4h4m29.384420099s (build: 1h32m18.849790879s, test: 2h25m55.226550768s) first bad commit: 50717a37db032ce783f50685a73bb2ac68471a5a net/smc: nonblocking connect rework cc: ["davem@davemloft.net" "kgraul@linux.ibm.com" "linux-kernel@vger.kernel.org" "linux-s390@vger.kernel.org" "netdev@vger.kernel.org" "ubraun@linux.ibm.com"] crash: WARNING in smc_unhash_sk WARNING: CPU: 0 PID: 7062 at include/net/sock.h:666 smc_unhash_sk+0x1b4/0x220 net/smc/af_smc.c:98 Kernel panic - not syncing: panic_on_warn set ... CPU: 0 PID: 7062 Comm: syz-executor.1 Not tainted 5.1.0-rc4+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x113/0x167 lib/dump_stack.c:113 panic+0x212/0x41d kernel/panic.c:214 __warn.cold.8+0x1b/0x36 kernel/panic.c:571 report_bug+0x1a4/0x200 lib/bug.c:186 fixup_bug arch/x86/kernel/traps.c:179 [inline] do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:272 do_invalid_op+0x36/0x40 arch/x86/kernel/traps.c:291 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:973 RIP: 0010:sk_del_node_init include/net/sock.h:666 [inline] RIP: 0010:smc_unhash_sk+0x1b4/0x220 net/smc/af_smc.c:95 Code: 3c 02 00 75 54 48 8b 7b 30 ba ff ff ff ff e8 b3 57 b0 fe 4c 89 ef e8 fb c2 33 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b eb 95 4c 89 e7 e8 80 a7 2f fb eb 80 e8 99 a7 2f fb e9 bd fe RSP: 0018:ffff8880a9817d40 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff88808ee6f280 RCX: ffffffff8667b56c RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88808ee6f300 RBP: ffff8880a9817d70 R08: ffffed1011dcde61 R09: ffffed1011dcde60 R10: ffffed1011dcde60 R11: ffff88808ee6f303 R12: ffff88808ee6f300 R13: ffffffff88c939c0 R14: ffff88808ee6f2a8 R15: 0000000000000000 smc_release+0x282/0x6e0 net/smc/af_smc.c:164 __sock_release+0xc7/0x2a0 net/socket.c:599 sock_close+0x10/0x20 net/socket.c:1247 __fput+0x252/0x800 fs/file_table.c:278 ____fput+0x9/0x10 fs/file_table.c:309 task_work_run+0x10e/0x190 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_usermode_loop+0x1a9/0x200 arch/x86/entry/common.c:166 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x40d/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4129e1 Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 RSP: 002b:00007ffdfa2d69e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004129e1 RDX: 0000001b2bc20000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 0000000000740340 R08: 000000000001373a R09: 000000000001373a R10: 00007ffdfa2d6ab0 R11: 0000000000000293 R12: 0000000000000001 R13: 000000000001373e R14: 000000000001376b R15: 000000000073bf0c Kernel Offset: disabled Rebooting in 86400 seconds..