bisecting cause commit starting from 1a8024239dacf53fcf39c0f07fbf2712af22864f building syzkaller on 0740de696b19a870c7208bd97f3194988281c282 testing commit 1a8024239dacf53fcf39c0f07fbf2712af22864f with gcc (GCC) 10.2.1 20210217 kernel signature: 0a10abc80e6e7d6c65a27b8cdac11b031cf47ef956ecf7661d7fdde2f35a6e00 all runs: crashed: general protection fault in kcm_sendmsg testing release v5.12 testing commit 9f4ad9e425a1d3b6a34617b8ea226d56a119a717 with gcc (GCC) 10.2.1 20210217 kernel signature: 20a3195b0c2adea39c30d2e9f830a6fa425a34f031f28cd84a5fc4bf09ce8f4d all runs: OK # git bisect start 1a8024239dacf53fcf39c0f07fbf2712af22864f 9f4ad9e425a1d3b6a34617b8ea226d56a119a717 Bisecting: 7848 revisions left to test after this (roughly 13 steps) [d72cd4ad4174cfd2257c426ad51e4f53bcfde9c9] Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi testing commit d72cd4ad4174cfd2257c426ad51e4f53bcfde9c9 with gcc (GCC) 10.2.1 20210217 kernel signature: 9a4e766e7eaa0a67b3718e7c6d01fb0bbf6081fc724748ca16ae5e53a16bb9f5 all runs: OK # git bisect good d72cd4ad4174cfd2257c426ad51e4f53bcfde9c9 Bisecting: 3748 revisions left to test after this (roughly 12 steps) [b71428d7ab333a157216a1d73c8c82a178efada9] Merge tag 'sound-5.13-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound testing commit b71428d7ab333a157216a1d73c8c82a178efada9 with gcc (GCC) 10.2.1 20210217 kernel signature: b02418b4f9036ca4bd71fb9d218ab019d5f5e4bf8e40aad63740853ce2ac6a68 run #0: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #1: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #2: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #3: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #4: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #5: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #6: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #7: crashed: WARNING in __nf_unregister_net_hook run #8: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect bad b71428d7ab333a157216a1d73c8c82a178efada9 Bisecting: 1989 revisions left to test after this (roughly 11 steps) [56aa7b21a5a7d30484ab5833641cb172356225f1] Merge tag 'wireless-drivers-next-2021-04-18' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next testing commit 56aa7b21a5a7d30484ab5833641cb172356225f1 with gcc (GCC) 10.2.1 20210217 kernel signature: e1a689e97d0a0829faf7244a7ab6e78e6e5e17d31d5ae4484cf6c7ff827115f4 run #0: boot failed: KASAN: slab-out-of-bounds Read in page_to_skb run #1: boot failed: KASAN: slab-out-of-bounds Read in page_to_skb run #2: boot failed: KASAN: slab-out-of-bounds Read in page_to_skb run #3: boot failed: KASAN: slab-out-of-bounds Read in page_to_skb run #4: boot failed: KASAN: slab-out-of-bounds Read in page_to_skb run #5: boot failed: KASAN: use-after-free Read in page_to_skb run #6: boot failed: KASAN: use-after-free Read in page_to_skb run #7: boot failed: KASAN: slab-out-of-bounds Read in page_to_skb run #8: boot failed: KASAN: slab-out-of-bounds Read in page_to_skb run #9: boot failed: KASAN: use-after-free Read in page_to_skb # git bisect skip 56aa7b21a5a7d30484ab5833641cb172356225f1 Bisecting: 1989 revisions left to test after this (roughly 11 steps) [2e20521b80c76ba517a060a5db752a9ca21c597c] ice: Remove unnecessary blank line testing commit 2e20521b80c76ba517a060a5db752a9ca21c597c with gcc (GCC) 10.2.1 20210217 kernel signature: a63003fa67b2548017b198bcb5b9d0d48866632a1bb4d11c07adabbd43698ab1 all runs: OK # git bisect good 2e20521b80c76ba517a060a5db752a9ca21c597c Bisecting: 1412 revisions left to test after this (roughly 10 steps) [4a52dd8fefb45626dace70a63c0738dbd83b7edb] net: selftest: fix build issue if INET is disabled testing commit 4a52dd8fefb45626dace70a63c0738dbd83b7edb with gcc (GCC) 10.2.1 20210217 kernel signature: d8352e14b30253edfc7056093d359a5cc97d847de2733252f0a5ec104be132d8 run #0: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #1: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #2: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #3: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #4: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #5: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #6: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #7: crashed: WARNING in __nf_unregister_net_hook run #8: crashed: WARNING in __nf_unregister_net_hook run #9: basic kernel testing failed: WARNING in __nf_unregister_net_hook # git bisect bad 4a52dd8fefb45626dace70a63c0738dbd83b7edb Bisecting: 576 revisions left to test after this (roughly 9 steps) [af1fa6b696cca5c559ed6d38cad0213544f299a0] Merge branch 'r8152--new-chips' testing commit af1fa6b696cca5c559ed6d38cad0213544f299a0 with gcc (GCC) 10.2.1 20210217 kernel signature: 98c12d7792e2d556cb012d4dbdb5f89ded132bf25b9bee46a48340a6f87bb680 all runs: OK # git bisect good af1fa6b696cca5c559ed6d38cad0213544f299a0 Bisecting: 417 revisions left to test after this (roughly 9 steps) [36e69da892f1224dabc4a5d0a5948764c318b117] net: ethernet: ravb: Fix release of refclk testing commit 36e69da892f1224dabc4a5d0a5948764c318b117 with gcc (GCC) 10.2.1 20210217 kernel signature: bbd723c3456a876d7916bf07bb838782631f05de3ee58ac83968d16d6fcaec03 run #0: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/bin/linux_amd64/syz-executor" "root@10.128.0.128:./syz-executor"]: exit status 1 Warning: Permanently added '10.128.0.128' (ECDSA) to the list of known hosts. client_loop: send disconnect: Broken pipe lost connection run #1: basic kernel testing failed: failed to copy test binary to VM: timedout ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/bin/linux_amd64/syz-execprog" "root@10.128.1.83:./syz-execprog"] Warning: Permanently added '10.128.1.83' (ECDSA) to the list of known hosts. run #2: basic kernel testing failed: failed to copy test binary to VM: timedout ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/bin/linux_amd64/syz-execprog" "root@10.128.0.234:./syz-execprog"] Warning: Permanently added '10.128.0.234' (ECDSA) to the list of known hosts. run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect good 36e69da892f1224dabc4a5d0a5948764c318b117 Bisecting: 223 revisions left to test after this (roughly 8 steps) [47a6959fa331fe892a4fc3b48ca08e92045c6bda] netfilter: allow to turn off xtables compat layer testing commit 47a6959fa331fe892a4fc3b48ca08e92045c6bda with gcc (GCC) 10.2.1 20210217 kernel signature: 3d75c969896418dc1c49288dab74d9aa4ed446185bc8bc5b60d7c16325c5301b run #0: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #1: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #2: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #3: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #4: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #5: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #6: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #7: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #8: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect bad 47a6959fa331fe892a4fc3b48ca08e92045c6bda Bisecting: 100 revisions left to test after this (roughly 7 steps) [9382531ec63fc123d1d6ff07b0558b6af4ea724b] Merge tag 'mt76-for-kvalo-2021-04-21' of https://github.com/nbd168/wireless testing commit 9382531ec63fc123d1d6ff07b0558b6af4ea724b with gcc (GCC) 10.2.1 20210217 kernel signature: 62b585239bf7cd91f922a4e714a05024480acfde844937cb6cabebb33d9841d2 run #0: basic kernel testing failed: failed to copy test binary to VM: timedout ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/bin/linux_amd64/syz-fuzzer" "root@10.128.1.108:./syz-fuzzer"] Warning: Permanently added '10.128.1.108' (ECDSA) to the list of known hosts. run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect good 9382531ec63fc123d1d6ff07b0558b6af4ea724b Bisecting: 50 revisions left to test after this (roughly 6 steps) [7ce9c3d363ac1af38fb7add7ef2db7e8509a5962] enetc: fix locking for one-step timestamping packet transfer testing commit 7ce9c3d363ac1af38fb7add7ef2db7e8509a5962 with gcc (GCC) 10.2.1 20210217 kernel signature: 1757f79d1e48ca88954aedee5522a45f62c707d979626732f643c5163649a7ba all runs: OK # git bisect good 7ce9c3d363ac1af38fb7add7ef2db7e8509a5962 Bisecting: 24 revisions left to test after this (roughly 5 steps) [bd6e229f86c2c5210ccba80b3c71808135a3718a] Merge branch 'mptcp-msg-flags' testing commit bd6e229f86c2c5210ccba80b3c71808135a3718a with gcc (GCC) 10.2.1 20210217 kernel signature: 13b8652b74f53ae6989c2d8596c99f13bbb4f6c93a27b80e710504fd4491ad24 all runs: OK # git bisect good bd6e229f86c2c5210ccba80b3c71808135a3718a Bisecting: 12 revisions left to test after this (roughly 4 steps) [4d705399191c3cfe1264588b3a4a8115e6c3b161] netfilter: arptables: unregister the tables by name testing commit 4d705399191c3cfe1264588b3a4a8115e6c3b161 with gcc (GCC) 10.2.1 20210217 kernel signature: f8c8a68a4b97fe36d0d71c35df33d89891331c229a12cb4b56eaa8a8e547ed68 all runs: OK # git bisect good 4d705399191c3cfe1264588b3a4a8115e6c3b161 Bisecting: 5 revisions left to test after this (roughly 3 steps) [593268ddf3887362ba8b8998cb85433596a3e8f5] netfilter: nf_log_syslog: Unset bridge logger in pernet exit testing commit 593268ddf3887362ba8b8998cb85433596a3e8f5 with gcc (GCC) 10.2.1 20210217 kernel signature: d81b70c9326ada406174898d8a1e03c3ef6b5e4bd4ced1ed96796caa875a1996 run #0: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #1: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #2: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #3: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #4: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #5: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #6: crashed: WARNING in __nf_unregister_net_hook run #7: crashed: WARNING in __nf_unregister_net_hook run #8: crashed: WARNING in __nf_unregister_net_hook run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect bad 593268ddf3887362ba8b8998cb85433596a3e8f5 Bisecting: 3 revisions left to test after this (roughly 2 steps) [ae689334225ff0e4ef112459ecd24aea932c2b00] netfilter: ip_tables: pass table pointer via nf_hook_ops testing commit ae689334225ff0e4ef112459ecd24aea932c2b00 with gcc (GCC) 10.2.1 20210217 kernel signature: aead905270ea021f2299103d5afd659ce5eca3250e318f25bbf3fdeaea490dee all runs: OK # git bisect good ae689334225ff0e4ef112459ecd24aea932c2b00 Bisecting: 1 revision left to test after this (roughly 1 step) [ee177a54413a33fe474d55fabb5f8ff390bb27d7] netfilter: ip6_tables: pass table pointer via nf_hook_ops testing commit ee177a54413a33fe474d55fabb5f8ff390bb27d7 with gcc (GCC) 10.2.1 20210217 kernel signature: 1e4da7af3d60ee6641a07e67c1ac2ff0f91dd43ebcf3c819caefa1fea4fa0195 run #0: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #1: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #2: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #3: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #4: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #5: crashed: kernel panic: panic_on_warn set run #6: crashed: WARNING in __nf_unregister_net_hook run #7: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #8: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect bad ee177a54413a33fe474d55fabb5f8ff390bb27d7 Bisecting: 0 revisions left to test after this (roughly 0 steps) [f9006acc8dfe59e25aa75729728ac57a8d84fc32] netfilter: arp_tables: pass table pointer via nf_hook_ops testing commit f9006acc8dfe59e25aa75729728ac57a8d84fc32 with gcc (GCC) 10.2.1 20210217 kernel signature: 6f4c3fc420e9d66ef0d5a77f8cd20be176d02a738d70bad3195a00ccf34c394e run #0: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #1: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #2: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #3: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #4: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #5: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #6: crashed: WARNING in __nf_unregister_net_hook run #7: crashed: WARNING in __nf_unregister_net_hook run #8: crashed: WARNING in __nf_unregister_net_hook run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect bad f9006acc8dfe59e25aa75729728ac57a8d84fc32 f9006acc8dfe59e25aa75729728ac57a8d84fc32 is the first bad commit commit f9006acc8dfe59e25aa75729728ac57a8d84fc32 Author: Florian Westphal Date: Wed Apr 21 09:51:08 2021 +0200 netfilter: arp_tables: pass table pointer via nf_hook_ops Same change as previous patch. Only difference: no need to handle NULL template_ops parameter, the only caller (arptable_filter) always passes non-NULL argument. This removes all remaining accesses to net->ipv4.arptable_filter. Signed-off-by: Florian Westphal Signed-off-by: Pablo Neira Ayuso include/linux/netfilter_arp/arp_tables.h | 2 +- net/ipv4/netfilter/arp_tables.c | 43 +++++++++++++++++++++----------- net/ipv4/netfilter/arptable_filter.c | 6 ++--- 3 files changed, 32 insertions(+), 19 deletions(-) culprit signature: 6f4c3fc420e9d66ef0d5a77f8cd20be176d02a738d70bad3195a00ccf34c394e parent signature: aead905270ea021f2299103d5afd659ce5eca3250e318f25bbf3fdeaea490dee revisions tested: 18, total time: 4h49m16.075601289s (build: 2h19m55.790136063s, test: 2h27m26.288968594s) first bad commit: f9006acc8dfe59e25aa75729728ac57a8d84fc32 netfilter: arp_tables: pass table pointer via nf_hook_ops recipients (to): ["coreteam@netfilter.org" "davem@davemloft.net" "dsahern@kernel.org" "fw@strlen.de" "fw@strlen.de" "kadlec@netfilter.org" "kuba@kernel.org" "netdev@vger.kernel.org" "netfilter-devel@vger.kernel.org" "pablo@netfilter.org" "pablo@netfilter.org" "yoshfuji@linux-ipv6.org"] recipients (cc): ["linux-kernel@vger.kernel.org"] crash: WARNING in __nf_unregister_net_hook ------------[ cut here ]------------ hook not found, pf 3 num 0 WARNING: CPU: 1 PID: 9 at net/netfilter/core.c:480 __nf_unregister_net_hook+0x17a/0x560 net/netfilter/core.c:480 Modules linked in: CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 5.12.0-rc7-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net RIP: 0010:__nf_unregister_net_hook+0x17a/0x560 net/netfilter/core.c:480 Code: 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 a7 03 00 00 8b 53 1c 44 89 e6 48 c7 c7 20 bc 9e 89 4c 89 04 24 e8 fe 3a 62 01 <0f> 0b 4c 8b 04 24 e9 ba 00 00 00 48 89 ea 48 c1 e2 04 49 8d 7c 10 RSP: 0018:ffffc90000ce7bf0 EFLAGS: 00010282 RAX: 0000000000000000 RBX: ffff888021d17500 RCX: 0000000000000000 RDX: 0000000000000001 RSI: 0000000000000004 RDI: fffff5200019cf70 RBP: 0000000000000001 R08: 0000000000000001 R09: ffff8880ba11fa1b R10: ffffed1017423f43 R11: 0000000000000001 R12: 0000000000000003 R13: ffff88802d790000 R14: ffff888021d1751c R15: ffff88802d790f60 FS: 0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f351c4a56c0 CR3: 000000001ce92000 CR4: 00000000001506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: nf_unregister_net_hook net/netfilter/core.c:502 [inline] nf_unregister_net_hooks+0xb1/0xf0 net/netfilter/core.c:576 ops_pre_exit_list net/core/net_namespace.c:165 [inline] cleanup_net+0x3a4/0x990 net/core/net_namespace.c:583 process_one_work+0x84c/0x13b0 kernel/workqueue.c:2275 worker_thread+0x598/0xf80 kernel/workqueue.c:2421 kthread+0x36f/0x450 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294