bisecting cause commit starting from 8720bd951b8e8515ffd995c7631790fdabaa9265 building syzkaller on 0fc5c330fea4b4129567aaa44ea5a134cb850bbb testing commit 8720bd951b8e8515ffd995c7631790fdabaa9265 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 197aa60aebf38f5a6841afbc90076d33713a35e9984a4e8df26a9db0836f9b28 all runs: crashed: WARNING in skb_tunnel_check_pmtu testing release v5.18 testing commit 4b0986a3613c92f4ec1bdc7f60ec66fea135991f compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 33cb9332fd62c4869f8c3826286a063e3e185fbf05e2437fb24c280c717ac9c2 all runs: OK # git bisect start 8720bd951b8e8515ffd995c7631790fdabaa9265 4b0986a3613c92f4ec1bdc7f60ec66fea135991f Bisecting: 7256 revisions left to test after this (roughly 13 steps) [d7227785e384d4422b3ca189aa5bf19f462337cc] Merge tag 'sound-5.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound testing commit d7227785e384d4422b3ca189aa5bf19f462337cc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: c0d09c1aca94d67e1c89ebf7f5356bbc1e1d54a298dc1fa0c15833c0c51b5243 all runs: OK # git bisect good d7227785e384d4422b3ca189aa5bf19f462337cc Bisecting: 3633 revisions left to test after this (roughly 12 steps) [09f73a1ab8207481d1d6bd91ab7d0125c6722005] Merge tag 'perf-tools-for-v5.19-2022-05-28' of git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux testing commit 09f73a1ab8207481d1d6bd91ab7d0125c6722005 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: affab749fd4e8d992eed20d9b56a0274b36a875c75b8c9b662a7e5ec18da136b all runs: OK # git bisect good 09f73a1ab8207481d1d6bd91ab7d0125c6722005 Bisecting: 1772 revisions left to test after this (roughly 11 steps) [932c2989b59008e530ffcc7c7e6ef507a28b28ca] Merge tag 'tty-5.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty testing commit 932c2989b59008e530ffcc7c7e6ef507a28b28ca compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: cbfcc6f547153b6cf686035bd25711cfa383ae831403c38e5d2430804f1d65a8 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #1: OK run #2: OK run #3: OK run #4: OK run #5: boot failed: INFO: task hung in add_early_randomness run #6: boot failed: INFO: task hung in add_early_randomness run #7: boot failed: INFO: task hung in add_early_randomness run #8: boot failed: INFO: task hung in add_early_randomness run #9: boot failed: INFO: task hung in add_early_randomness # git bisect good 932c2989b59008e530ffcc7c7e6ef507a28b28ca Bisecting: 884 revisions left to test after this (roughly 10 steps) [71e80720dbf0f08c6979e54f21ddaa5735ce742d] Merge tag 'kbuild-v5.19-3' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild testing commit 71e80720dbf0f08c6979e54f21ddaa5735ce742d compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 13c8613eb1a70166febf1246281b79be68e097609d88802d9122119cc05b10a1 run #0: OK run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: boot failed: INFO: task hung in add_early_randomness run #7: boot failed: INFO: task hung in add_early_randomness run #8: boot failed: INFO: task hung in add_early_randomness run #9: boot failed: INFO: task hung in add_early_randomness # git bisect good 71e80720dbf0f08c6979e54f21ddaa5735ce742d Bisecting: 442 revisions left to test after this (roughly 9 steps) [7c80b038d23e1f4c7fcc311f43f83b8c60e7fb80] net: fix sk_wmem_schedule() and sk_rmem_schedule() errors testing commit 7c80b038d23e1f4c7fcc311f43f83b8c60e7fb80 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: ecf018091c314e09255c59bf9df1ba83c75d4d66d0fe859750eacd0f1ba5a4c7 run #0: OK run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: boot failed: INFO: task hung in add_early_randomness run #7: boot failed: INFO: task hung in add_early_randomness run #8: boot failed: INFO: task hung in add_early_randomness run #9: boot failed: INFO: task hung in add_early_randomness # git bisect good 7c80b038d23e1f4c7fcc311f43f83b8c60e7fb80 Bisecting: 246 revisions left to test after this (roughly 8 steps) [48a23ec6ff2b2a5effe8d3ae5f17fc6b7f35df65] Merge tag 'net-5.19-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit 48a23ec6ff2b2a5effe8d3ae5f17fc6b7f35df65 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: a5a5ca73de84874c27ebb36ced946680bbb932ce081287a44be2e339b0483c87 all runs: OK # git bisect good 48a23ec6ff2b2a5effe8d3ae5f17fc6b7f35df65 Bisecting: 130 revisions left to test after this (roughly 7 steps) [4875d94c69d5a4836c4225b51429d277c297aae8] tipc: cleanup unused function testing commit 4875d94c69d5a4836c4225b51429d277c297aae8 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9114234391b6bb0919026437bd29e14b4926bb3eab1fbba67ec225fabcfabbfe all runs: OK # git bisect good 4875d94c69d5a4836c4225b51429d277c297aae8 Bisecting: 65 revisions left to test after this (roughly 6 steps) [c4cac71fc8a55cebd9abf30a3b287063be34b512] libbpf: add support for sleepable uprobe programs testing commit c4cac71fc8a55cebd9abf30a3b287063be34b512 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f6c960af48bd16627ddde9f15eeb3cf28197826ac700041930f5628a4cd71deb all runs: OK # git bisect good c4cac71fc8a55cebd9abf30a3b287063be34b512 Bisecting: 32 revisions left to test after this (roughly 5 steps) [9776fe0f424b7d11af953b52322961845e2b5763] sfc/siena: Fix typo in comment testing commit 9776fe0f424b7d11af953b52322961845e2b5763 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 934f3616ccc4c28226be39b34b462eed90de9a2dce1a153fbfeca774ffd6eacf run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect good 9776fe0f424b7d11af953b52322961845e2b5763 Bisecting: 16 revisions left to test after this (roughly 4 steps) [1b1c198c306c4a0c2bbfc095efd158f1bc368a8a] mlxsw: Add support for egress FID classification after decapsulation testing commit 1b1c198c306c4a0c2bbfc095efd158f1bc368a8a compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 5e823ce09e7d3a27da21f11c5282925f66f501a8bf3f7d24275361efbd4b15b5 all runs: OK # git bisect good 1b1c198c306c4a0c2bbfc095efd158f1bc368a8a Bisecting: 8 revisions left to test after this (roughly 3 steps) [534a0431e9e68959e2c0d71c141d5b911d66ad7c] net: dsa: microchip: move tag_protocol to ksz_common testing commit 534a0431e9e68959e2c0d71c141d5b911d66ad7c compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 4651c31ee1957feef5897a7fb5aadad46e6b683a65a0a3325fba7fe73164f019 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #1: crashed: WARNING in skb_tunnel_check_pmtu run #2: crashed: WARNING in skb_tunnel_check_pmtu run #3: crashed: WARNING in skb_tunnel_check_pmtu run #4: crashed: WARNING in skb_tunnel_check_pmtu run #5: crashed: WARNING in skb_tunnel_check_pmtu run #6: crashed: WARNING in skb_tunnel_check_pmtu run #7: crashed: WARNING in skb_tunnel_check_pmtu run #8: crashed: WARNING in skb_tunnel_check_pmtu run #9: crashed: WARNING in skb_tunnel_check_pmtu # git bisect bad 534a0431e9e68959e2c0d71c141d5b911d66ad7c Bisecting: 3 revisions left to test after this (roughly 2 steps) [af185d8c76333daa877678e0166a7b45e63bf3c4] raw: complete rcu conversion testing commit af185d8c76333daa877678e0166a7b45e63bf3c4 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 7e80e315b4cd3944b9168fbb87312a772187616e0a5e9e2ad4dd46bdd0a9b96e all runs: crashed: WARNING in skb_tunnel_check_pmtu # git bisect bad af185d8c76333daa877678e0166a7b45e63bf3c4 Bisecting: 1 revision left to test after this (roughly 1 step) [4336487e30c37a2e82a1fed2370d3134cc5b6505] Merge branch 'mlxsw-unified-bridge-conversion-part-1' testing commit 4336487e30c37a2e82a1fed2370d3134cc5b6505 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: ae67a1579c41b1f0d786a57c57e63334704e7b7a63982ae79ebff2656104d6d7 all runs: OK # git bisect good 4336487e30c37a2e82a1fed2370d3134cc5b6505 Bisecting: 0 revisions left to test after this (roughly 0 steps) [f9aefd6b2aa38b9787d2705f0f1161dfd23cdb8f] net: warn if mac header was not set testing commit f9aefd6b2aa38b9787d2705f0f1161dfd23cdb8f compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 976f2c6a0696347908498152190604656bc38185353df572d1c779191fed42be run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #1: crashed: WARNING in skb_tunnel_check_pmtu run #2: crashed: WARNING in skb_tunnel_check_pmtu run #3: crashed: WARNING in skb_tunnel_check_pmtu run #4: crashed: WARNING in skb_tunnel_check_pmtu run #5: crashed: WARNING in skb_tunnel_check_pmtu run #6: crashed: WARNING in skb_tunnel_check_pmtu run #7: crashed: WARNING in skb_tunnel_check_pmtu run #8: crashed: WARNING in skb_tunnel_check_pmtu run #9: crashed: WARNING in skb_tunnel_check_pmtu # git bisect bad f9aefd6b2aa38b9787d2705f0f1161dfd23cdb8f f9aefd6b2aa38b9787d2705f0f1161dfd23cdb8f is the first bad commit commit f9aefd6b2aa38b9787d2705f0f1161dfd23cdb8f Author: Eric Dumazet Date: Mon Jun 20 02:30:17 2022 -0700 net: warn if mac header was not set Make sure skb_mac_header(), skb_mac_offset() and skb_mac_header_len() uses are not fooled if the mac header has not been set. These checks are enabled if CONFIG_DEBUG_NET=y This commit will likely expose existing bugs in linux networking stacks. Signed-off-by: Eric Dumazet Link: https://lore.kernel.org/r/20220620093017.3366713-1-eric.dumazet@gmail.com Signed-off-by: Paolo Abeni include/linux/skbuff.h | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) culprit signature: 976f2c6a0696347908498152190604656bc38185353df572d1c779191fed42be parent signature: ae67a1579c41b1f0d786a57c57e63334704e7b7a63982ae79ebff2656104d6d7 revisions tested: 16, total time: 3h51m54.881074111s (build: 1h47m30.099228479s, test: 2h2m44.783722455s) first bad commit: f9aefd6b2aa38b9787d2705f0f1161dfd23cdb8f net: warn if mac header was not set recipients (to): ["edumazet@google.com" "linux-kernel@vger.kernel.org" "pabeni@redhat.com"] recipients (cc): ["davem@davemloft.net" "dsahern@kernel.org" "edumazet@google.com" "imagedong@tencent.com" "keescook@chromium.org" "kuba@kernel.org"] crash: WARNING in skb_tunnel_check_pmtu ------------[ cut here ]------------ WARNING: CPU: 0 PID: 4109 at include/linux/skbuff.h:2784 skb_dst include/linux/skbuff.h:1098 [inline] WARNING: CPU: 0 PID: 4109 at include/linux/skbuff.h:2784 skb_dst_update_pmtu_no_confirm include/net/dst.h:550 [inline] WARNING: CPU: 0 PID: 4109 at include/linux/skbuff.h:2784 skb_tunnel_check_pmtu+0x4a9/0x3420 net/ipv4/ip_tunnel_core.c:416 Modules linked in: CPU: 0 PID: 4109 Comm: syz-executor.0 Not tainted 5.19.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:skb_mac_header_len include/linux/skbuff.h:2784 [inline] RIP: 0010:skb_tunnel_check_pmtu+0x4a9/0x3420 net/ipv4/ip_tunnel_core.c:413 Code: ff ff ff 0f 0b 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 84 f9 fe ff ff e8 2c 3a 70 fa e9 ef fe ff ff <0f> 0b e9 21 fd ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 RSP: 0018:ffffc90002e4f540 EFLAGS: 00010246 RAX: 000000000000ffff RBX: 1ffff920005c9eb8 RCX: 0000000000000000 RDX: 000000000000000e RSI: ffff888020aba500 RDI: ffff888012b691fa RBP: ffffc90002e4f668 R08: 0000000000000001 R09: ffff888020aba543 R10: ffffed10041574a8 R11: ffff888012b691b0 R12: 000000000000ffcd R13: ffff888012b69208 R14: ffff888012b69200 R15: ffff888012b69140 FS: 00007f79a7e08700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000080 CR3: 0000000020af7000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: geneve_xmit_skb drivers/net/geneve.c:927 [inline] geneve_xmit+0xb5b/0x2f20 drivers/net/geneve.c:1107 __netdev_start_xmit include/linux/netdevice.h:4805 [inline] netdev_start_xmit include/linux/netdevice.h:4819 [inline] __dev_direct_xmit+0x43d/0x640 net/core/dev.c:4309 dev_direct_xmit include/linux/netdevice.h:3007 [inline] packet_direct_xmit+0x185/0x260 net/packet/af_packet.c:282 packet_snd net/packet/af_packet.c:3073 [inline] packet_sendmsg+0x1c30/0x4a80 net/packet/af_packet.c:3104 sock_sendmsg_nosec net/socket.c:714 [inline] sock_sendmsg+0xab/0xe0 net/socket.c:734 ____sys_sendmsg+0x5c2/0x7a0 net/socket.c:2489 ___sys_sendmsg+0xd3/0x150 net/socket.c:2543 __sys_sendmsg+0xb9/0x150 net/socket.c:2572 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP: 0033:0x7f79a6c89109 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f79a7e08168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f79a6d9bf60 RCX: 00007f79a6c89109 RDX: 0000000000000000 RSI: 0000000020000a00 RDI: 0000000000000003 RBP: 00007f79a6ce305d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe2c2e9aaf R14: 00007f79a7e08300 R15: 0000000000022000