bisecting cause commit starting from a32db7e1172439240202b843642465618498170d
building syzkaller on 2e29b534005e52c57d726201644ea28ba33a9a3d
testing commit a32db7e1172439240202b843642465618498170d with gcc (GCC) 8.1.0
all runs: crashed: general protection fault in veth_get_stats64
testing release v5.3
testing commit 4d856f72c10ecb060868ed10ff1b1453943fc6c8 with gcc (GCC) 8.1.0
all runs: OK
# git bisect start a32db7e1172439240202b843642465618498170d v5.3
Bisecting: 7402 revisions left to test after this (roughly 13 steps)
[734d1ed83e1f9b7bafb650033fb87c657858cf5b] Merge tag 'fscrypt-for-linus' of git://git.kernel.org/pub/scm/fs/fscrypt/fscrypt
testing commit 734d1ed83e1f9b7bafb650033fb87c657858cf5b with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 734d1ed83e1f9b7bafb650033fb87c657858cf5b
Bisecting: 3821 revisions left to test after this (roughly 12 steps)
[3e414b5bd28f965fb39b9e9419d877df0cf3111a] Merge tag 'for-5.4/dm-changes' of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm
testing commit 3e414b5bd28f965fb39b9e9419d877df0cf3111a with gcc (GCC) 8.1.0
run #0: crashed: WARNING: ODEBUG bug in netdev_freemem
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
# git bisect bad 3e414b5bd28f965fb39b9e9419d877df0cf3111a
Bisecting: 1837 revisions left to test after this (roughly 11 steps)
[c87237110f2553b4200a8b3401a01198edfcf0d9] Merge tag 'drm-misc-next-2019-08-23' of git://anongit.freedesktop.org/drm/drm-misc into drm-next
testing commit c87237110f2553b4200a8b3401a01198edfcf0d9 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good c87237110f2553b4200a8b3401a01198edfcf0d9
Bisecting: 833 revisions left to test after this (roughly 10 steps)
[574cc4539762561d96b456dbc0544d8898bd4c6e] Merge tag 'drm-next-2019-09-18' of git://anongit.freedesktop.org/drm/drm
testing commit 574cc4539762561d96b456dbc0544d8898bd4c6e with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 574cc4539762561d96b456dbc0544d8898bd4c6e
Bisecting: 443 revisions left to test after this (roughly 9 steps)
[1ddd00276fd5fbd14dd5e366d8777dcd5f2d1b65] Merge tag 'vfio-v5.4-rc1' of git://github.com/awilliam/linux-vfio
testing commit 1ddd00276fd5fbd14dd5e366d8777dcd5f2d1b65 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 1ddd00276fd5fbd14dd5e366d8777dcd5f2d1b65
Bisecting: 223 revisions left to test after this (roughly 8 steps)
[f97c81dc6ca5996560b3944064f63fc87eb18d00] Merge tag 'armsoc-late' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc
testing commit f97c81dc6ca5996560b3944064f63fc87eb18d00 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good f97c81dc6ca5996560b3944064f63fc87eb18d00
Bisecting: 111 revisions left to test after this (roughly 7 steps)
[395b59a116a24916019cfc5e34b3f44743c01b2d] RDMA/hns: Package operations of rq inline buffer into separate functions
testing commit 395b59a116a24916019cfc5e34b3f44743c01b2d with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 395b59a116a24916019cfc5e34b3f44743c01b2d
Bisecting: 55 revisions left to test after this (roughly 6 steps)
[66204f1d2d1b42962033dfa867442f3dfd898d5f] mm/mmu_notifiers: prime lockdep
testing commit 66204f1d2d1b42962033dfa867442f3dfd898d5f with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 66204f1d2d1b42962033dfa867442f3dfd898d5f
Bisecting: 28 revisions left to test after this (roughly 5 steps)
[84da111de0b4be15bd500deff773f5116f39f7be] Merge tag 'for-linus-hmm' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma
testing commit 84da111de0b4be15bd500deff773f5116f39f7be with gcc (GCC) 8.1.0
run #0: crashed: WARNING: ODEBUG bug in netdev_freemem
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
# git bisect bad 84da111de0b4be15bd500deff773f5116f39f7be
Bisecting: 16 revisions left to test after this (roughly 4 steps)
[56c631f5aec35117b0b5862a09a447a72dfbd678] Merge tag 'gcc-plugins-v5.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux
testing commit 56c631f5aec35117b0b5862a09a447a72dfbd678 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 56c631f5aec35117b0b5862a09a447a72dfbd678
Bisecting: 8 revisions left to test after this (roughly 3 steps)
[ba170f76b69d1d45a60eaa9ec920c8fddd4c16f3] mm, notifier: Catch sleeping/blocking for !blockable
testing commit ba170f76b69d1d45a60eaa9ec920c8fddd4c16f3 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good ba170f76b69d1d45a60eaa9ec920c8fddd4c16f3
Bisecting: 4 revisions left to test after this (roughly 2 steps)
[eb111869301e15b737315a46c913ae82bd19eb9d] compiler-types.h: add asm_inline definition
testing commit eb111869301e15b737315a46c913ae82bd19eb9d with gcc (GCC) 8.1.0
all runs: OK
# git bisect good eb111869301e15b737315a46c913ae82bd19eb9d
Bisecting: 2 revisions left to test after this (roughly 1 step)
[32ee8230b2b06c50f583e14fcd174d7d2edb52f5] x86: bug.h: use asm_inline in _BUG_FLAGS definitions
testing commit 32ee8230b2b06c50f583e14fcd174d7d2edb52f5 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 32ee8230b2b06c50f583e14fcd174d7d2edb52f5
Bisecting: 1 revision left to test after this (roughly 1 step)
[62974fc389b364d8af70e044836362222bd3ae53] libnvdimm: Enable unit test infrastructure compile checks
testing commit 62974fc389b364d8af70e044836362222bd3ae53 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 62974fc389b364d8af70e044836362222bd3ae53
Bisecting: 0 revisions left to test after this (roughly 0 steps)
[227c3e9eb5cf3552c2cc83225df6d14adb05f8e8] Merge tag 'compiler-attributes-for-linus-v5.4' of git://github.com/ojeda/linux
testing commit 227c3e9eb5cf3552c2cc83225df6d14adb05f8e8 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 227c3e9eb5cf3552c2cc83225df6d14adb05f8e8
84da111de0b4be15bd500deff773f5116f39f7be is the first bad commit
revisions tested: 17, total time: 4h53m4.297781055s (build: 1h40m36.625808633s, test: 3h5m41.696532792s)
first bad commit: 84da111de0b4be15bd500deff773f5116f39f7be Merge tag 'for-linus-hmm' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma
cc: ["airlied@linux.ie" "bskeggs@redhat.com" "daniel@ffwll.ch" "dri-devel@lists.freedesktop.org" "guoren@kernel.org" "linux-kernel@vger.kernel.org" "nouveau@lists.freedesktop.org" "torvalds@linux-foundation.org"]
crash: WARNING: ODEBUG bug in netdev_freemem
ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x90 arch/x86/include/asm/paravirt.h:756
WARNING: CPU: 0 PID: 9795 at lib/debugobjects.c:484 debug_print_object+0x168/0x210 lib/debugobjects.c:481
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 9795 Comm: kworker/u4:0 Not tainted 5.3.0+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x113/0x167 lib/dump_stack.c:113
 panic+0x223/0x4dc kernel/panic.c:219
 __warn.cold.10+0x1b/0x37 kernel/panic.c:576
 report_bug+0x1a4/0x200 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:272
 do_invalid_op+0x36/0x40 arch/x86/kernel/traps.c:291
 invalid_op+0x23/0x30 arch/x86/entry/entry_64.S:1028
RIP: 0010:debug_print_object+0x168/0x210 lib/debugobjects.c:481
Code: 43 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 92 00 00 00 48 8b 14 dd c0 94 43 87 4c 89 fe 48 c7 c7 c0 89 43 87 e8 1a a7 35 fe <0f> 0b 83 05 63 f9 f3 05 01 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f
RSP: 0018:ffff88807829f850 EFLAGS: 00010086
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff89dde0e0
RBP: ffff88807829f890 R08: ffffed1015d44101 R09: ffffed1015d44101
R10: ffffed1015d44100 R11: ffff8880aea20807 R12: 0000000000000001
R13: ffffffff883ae900 R14: ffffffff81596a70 R15: ffffffff87439120
 __debug_check_no_obj_freed lib/debugobjects.c:963 [inline]
 debug_check_no_obj_freed+0x2db/0x436 lib/debugobjects.c:994
 kfree+0xf6/0x2c0 mm/slab.c:3755
 kvfree+0x2c/0x30 mm/util.c:488
 netdev_freemem+0x47/0x60 net/core/dev.c:9148
 netdev_release+0x6c/0x90 net/core/net-sysfs.c:1635
 device_release+0x6a/0x1c0 drivers/base/core.c:1100
 kobject_cleanup lib/kobject.c:693 [inline]
 kobject_release lib/kobject.c:722 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put.cold.8+0x229/0x27c lib/kobject.c:739
 netdev_run_todo+0x459/0x6a0 net/core/dev.c:9053
 rtnl_unlock+0x9/0x10 net/core/rtnetlink.c:112
 default_device_exit_batch+0x2e9/0x3d0 net/core/dev.c:9836
 ops_exit_list.isra.6+0xd3/0x120 net/core/net_namespace.c:175
 cleanup_net+0x430/0x950 net/core/net_namespace.c:594
 process_one_work+0x856/0x1630 kernel/workqueue.c:2269
 worker_thread+0x85/0xb60 kernel/workqueue.c:2415
 kthread+0x331/0x3f0 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Kernel Offset: disabled
Rebooting in 86400 seconds..