bisecting cause commit starting from 125b7e0949d4e72b15c2b1a1590f8cece985a918 building syzkaller on acb51638141ff960f547431757130749bc176bc0 testing commit 125b7e0949d4e72b15c2b1a1590f8cece985a918 with gcc (GCC) 8.1.0 run #0: boot failed: failed to create instance: googleapi: got HTTP response code 502 with body: Error 502 (Server Error)!!1

502. That’s an error.

The server encountered a temporary error and could not complete your request.

Please try again in 30 seconds. That’s all we know. run #1: crashed: BUG: corrupted list in rxrpc_local_processor run #2: crashed: BUG: corrupted list in rxrpc_local_processor run #3: crashed: BUG: corrupted list in rxrpc_local_processor run #4: crashed: BUG: corrupted list in rxrpc_local_processor run #5: crashed: BUG: corrupted list in rxrpc_local_processor run #6: crashed: BUG: corrupted list in rxrpc_local_processor run #7: crashed: BUG: corrupted list in rxrpc_local_processor run #8: crashed: BUG: corrupted list in rxrpc_local_processor run #9: crashed: BUG: corrupted list in rxrpc_local_processor testing release v5.2 testing commit 0ecfebd2b52404ae0c54a878c872bb93363ada36 with gcc (GCC) 8.1.0 all runs: OK # git bisect start 125b7e0949d4e72b15c2b1a1590f8cece985a918 v5.2 Bisecting: 7200 revisions left to test after this (roughly 13 steps) [ef8f3d48afd6a17a0dae8c277c2f539c2f19fd16] Merge branch 'akpm' (patches from Andrew) testing commit ef8f3d48afd6a17a0dae8c277c2f539c2f19fd16 with gcc (GCC) 8.1.0 run #0: OK run #1: OK run #2: crashed: general protection fault in send_hsr_supervision_frame run #3: OK run #4: OK run #5: crashed: general protection fault in send_hsr_supervision_frame run #6: crashed: general protection fault in send_hsr_supervision_frame run #7: OK run #8: crashed: general protection fault in send_hsr_supervision_frame run #9: OK # git bisect bad ef8f3d48afd6a17a0dae8c277c2f539c2f19fd16 Bisecting: 3941 revisions left to test after this (roughly 12 steps) [8f6ccf6159aed1f04c6d179f61f6fb2691261e84] Merge tag 'clone3-v5.3' of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux testing commit 8f6ccf6159aed1f04c6d179f61f6fb2691261e84 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 8f6ccf6159aed1f04c6d179f61f6fb2691261e84 Bisecting: 1954 revisions left to test after this (roughly 11 steps) [f7623d340794620ac8d933477cc265be77c78fe5] Merge branch 'for-upstream' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next testing commit f7623d340794620ac8d933477cc265be77c78fe5 with gcc (GCC) 8.1.0 all runs: OK # git bisect good f7623d340794620ac8d933477cc265be77c78fe5 Bisecting: 1158 revisions left to test after this (roughly 10 steps) [97ff4ca46d3279134cec49752de8c5a62dc68460] Merge tag 'char-misc-5.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc testing commit 97ff4ca46d3279134cec49752de8c5a62dc68460 with gcc (GCC) 8.1.0 run #0: OK run #1: OK run #2: OK run #3: OK run #4: crashed: general protection fault in send_hsr_supervision_frame run #5: crashed: general protection fault in send_hsr_supervision_frame run #6: crashed: general protection fault in send_hsr_supervision_frame run #7: crashed: general protection fault in send_hsr_supervision_frame run #8: crashed: general protection fault in send_hsr_supervision_frame run #9: crashed: general protection fault in send_hsr_supervision_frame # git bisect bad 97ff4ca46d3279134cec49752de8c5a62dc68460 Bisecting: 429 revisions left to test after this (roughly 9 steps) [64b08df460cfdfc2b010263043a057cdd33500ed] Merge tag 'hwmon-for-v5.3' of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging testing commit 64b08df460cfdfc2b010263043a057cdd33500ed with gcc (GCC) 8.1.0 run #0: OK run #1: OK run #2: crashed: general protection fault in send_hsr_supervision_frame run #3: crashed: general protection fault in send_hsr_supervision_frame run #4: OK run #5: crashed: general protection fault in send_hsr_supervision_frame run #6: crashed: general protection fault in send_hsr_supervision_frame run #7: crashed: general protection fault in send_hsr_supervision_frame run #8: crashed: general protection fault in send_hsr_supervision_frame run #9: crashed: general protection fault in send_hsr_supervision_frame # git bisect bad 64b08df460cfdfc2b010263043a057cdd33500ed Bisecting: 142 revisions left to test after this (roughly 8 steps) [af144a983402f7fd324ce556d9f9011a8b3e01fe] Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net testing commit af144a983402f7fd324ce556d9f9011a8b3e01fe with gcc (GCC) 8.1.0 run #0: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/tmp/syz-executor818214050" "root@10.128.10.46:./syz-executor818214050"]: exit status 1 ssh: connect to host 10.128.10.46 port 22: Connection timed out lost connection run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect good af144a983402f7fd324ce556d9f9011a8b3e01fe Bisecting: 71 revisions left to test after this (roughly 6 steps) [67bd0d5ea7974d9dc9c502c7b4096e16a80a553d] net: flow_offload: add flow_block_cb_{priv, incref, decref}() testing commit 67bd0d5ea7974d9dc9c502c7b4096e16a80a553d with gcc (GCC) 8.1.0 run #0: OK run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: crashed: general protection fault in send_hsr_supervision_frame run #9: OK # git bisect bad 67bd0d5ea7974d9dc9c502c7b4096e16a80a553d Bisecting: 34 revisions left to test after this (roughly 5 steps) [216dcb059b767ef526499f3ed287e98b37af03c3] Merge branch 'net-sched-Introduce-tc-connection-tracking' testing commit 216dcb059b767ef526499f3ed287e98b37af03c3 with gcc (GCC) 8.1.0 run #0: OK run #1: OK run #2: OK run #3: OK run #4: crashed: general protection fault in send_hsr_supervision_frame run #5: OK run #6: OK run #7: crashed: general protection fault in send_hsr_supervision_frame run #8: OK run #9: crashed: general protection fault in send_hsr_supervision_frame # git bisect bad 216dcb059b767ef526499f3ed287e98b37af03c3 Bisecting: 17 revisions left to test after this (roughly 4 steps) [427545b3046326cd7b4dbbd7869f08737df2ad2b] nfp: tls: count TSO segments separately for the TLS offload testing commit 427545b3046326cd7b4dbbd7869f08737df2ad2b with gcc (GCC) 8.1.0 run #0: OK run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: crashed: general protection fault in send_hsr_supervision_frame run #9: crashed: general protection fault in send_hsr_supervision_frame # git bisect bad 427545b3046326cd7b4dbbd7869f08737df2ad2b Bisecting: 8 revisions left to test after this (roughly 3 steps) [1c13475368b697d4fc9c0630b5d4ee51d5ca0790] sctp: remove prsctp_enable from asoc testing commit 1c13475368b697d4fc9c0630b5d4ee51d5ca0790 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 1c13475368b697d4fc9c0630b5d4ee51d5ca0790 Bisecting: 4 revisions left to test after this (roughly 2 steps) [3cab2afb149ceedd324d14c6562224fb925252a6] sctp: remove rcu_read_lock from sctp_bind_addr_state testing commit 3cab2afb149ceedd324d14c6562224fb925252a6 with gcc (GCC) 8.1.0 run #0: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/tmp/syz-executor850888263" "root@10.128.1.36:./syz-executor850888263"]: exit status 1 ssh: connect to host 10.128.1.36 port 22: Connection timed out lost connection run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect good 3cab2afb149ceedd324d14c6562224fb925252a6 Bisecting: 2 revisions left to test after this (roughly 1 step) [ff8869d5ed4e798c6dad89809689cb9d2e2ab2f8] nfp: tls: move setting ipver_vlan to a helper testing commit ff8869d5ed4e798c6dad89809689cb9d2e2ab2f8 with gcc (GCC) 8.1.0 all runs: OK # git bisect good ff8869d5ed4e798c6dad89809689cb9d2e2ab2f8 Bisecting: 0 revisions left to test after this (roughly 1 step) [f6dfa31509a03817fa7830b7fd4214f7f48df938] nfp: ccm: increase message limits testing commit f6dfa31509a03817fa7830b7fd4214f7f48df938 with gcc (GCC) 8.1.0 all runs: OK # git bisect good f6dfa31509a03817fa7830b7fd4214f7f48df938 427545b3046326cd7b4dbbd7869f08737df2ad2b is the first bad commit commit 427545b3046326cd7b4dbbd7869f08737df2ad2b Author: Jakub Kicinski Date: Mon Jul 8 19:53:12 2019 -0700 nfp: tls: count TSO segments separately for the TLS offload Count the number of successfully submitted TLS segments, not skbs. This will make it easier to compare the TLS encryption count against other counters. Signed-off-by: Jakub Kicinski Reviewed-by: Dirk van der Merwe Signed-off-by: David S. Miller :040000 040000 8f7693c5f1554b6f9f4d108eea50d979b0d64655 6de2bcf680f3c6332cec9dbb8356f421356ef1bf M drivers revisions tested: 15, total time: 4h7m32.485056547s (build: 1h29m15.790041898s, test: 2h33m25.347206128s) first bad commit: 427545b3046326cd7b4dbbd7869f08737df2ad2b nfp: tls: count TSO segments separately for the TLS offload cc: ["davem@davemloft.net" "dirk.vandermerwe@netronome.com" "edumazet@google.com" "jakub.kicinski@netronome.com" "jiri@mellanox.com" "john.hurley@netronome.com" "linux-kernel@vger.kernel.org" "netdev@vger.kernel.org" "oss-drivers@netronome.com"] crash: general protection fault in send_hsr_supervision_frame kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.2.0-rc6+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:send_hsr_supervision_frame+0x30/0xf60 net/hsr/hsr_device.c:255 Code: 89 e5 41 57 41 56 41 55 49 89 fd 41 54 41 89 d4 48 89 c2 53 48 c1 ea 03 48 83 ec 50 48 89 45 d0 48 b8 00 00 00 00 00 fc ff df <80> 3c 02 00 89 75 c8 0f 85 83 0c 00 00 48 b8 00 00 00 00 00 fc ff RSP: 0018:ffff8880aeb09c68 EFLAGS: 00010282 RAX: dffffc0000000000 RBX: ffff88809811ad80 RCX: ffffffff8156c074 RDX: 0000000000000002 RSI: 0000000000000017 RDI: 0000000000000000 RBP: ffff8880aeb09ce0 R08: ffffed1015d66c80 R09: ffffed1015d66c7f R10: ffffed1015d66c7f R11: ffff8880aeb363fb R12: 0000000000000000 R13: 0000000000000000 R14: ffff8880aeb09db8 R15: ffff8880aeb24b80 FS: 0000000000000000(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000006e6d20 CR3: 00000000967db000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: hsr_announce+0xd9/0x2b0 net/hsr/hsr_device.c:339 call_timer_fn+0x14d/0x510 kernel/time/timer.c:1322 expire_timers kernel/time/timer.c:1366 [inline] __run_timers kernel/time/timer.c:1685 [inline] run_timer_softirq+0xc6f/0x1330 kernel/time/timer.c:1698 __do_softirq+0x260/0x958 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0x17f/0x1c0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x13e/0x540 arch/x86/kernel/apic/apic.c:1068 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:806 RIP: 0010:native_safe_halt+0x12/0x20 arch/x86/include/asm/irqflags.h:61 Code: 11 ff ff ff 4c 89 e7 e8 1c 60 ee fa eb 97 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 e9 07 00 00 00 0f 00 2d b0 ed 5c 00 fb f4 <5d> c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e9 07 00 00 RSP: 0018:ffff8880a98e7d70 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 RAX: dffffc0000000000 RBX: ffff8880a98d4340 RCX: 0000000000000000 RDX: 1ffffffff10643e1 RSI: 0000000000000006 RDI: ffffffff88321f08 RBP: ffff8880a98e7d70 R08: 0000000000000006 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 R13: ffffffff88321ef8 R14: 0000000000000001 R15: ffffffff88f70fb8 arch_safe_halt arch/x86/include/asm/paravirt.h:156 [inline] default_idle+0x51/0x310 arch/x86/kernel/process.c:580 arch_cpu_idle+0xa/0x10 arch/x86/kernel/process.c:571 default_idle_call+0x6d/0x90 kernel/sched/idle.c:94 cpuidle_idle_call kernel/sched/idle.c:154 [inline] do_idle+0x3e4/0x590 kernel/sched/idle.c:263 cpu_startup_entry+0x18/0x20 kernel/sched/idle.c:354 start_secondary+0x367/0x4b0 arch/x86/kernel/smpboot.c:265 secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:243 Modules linked in: ---[ end trace 48685fab78c43643 ]--- RIP: 0010:send_hsr_supervision_frame+0x30/0xf60 net/hsr/hsr_device.c:255 Code: 89 e5 41 57 41 56 41 55 49 89 fd 41 54 41 89 d4 48 89 c2 53 48 c1 ea 03 48 83 ec 50 48 89 45 d0 48 b8 00 00 00 00 00 fc ff df <80> 3c 02 00 89 75 c8 0f 85 83 0c 00 00 48 b8 00 00 00 00 00 fc ff RSP: 0018:ffff8880aeb09c68 EFLAGS: 00010282 RAX: dffffc0000000000 RBX: ffff88809811ad80 RCX: ffffffff8156c074 RDX: 0000000000000002 RSI: 0000000000000017 RDI: 0000000000000000 RBP: ffff8880aeb09ce0 R08: ffffed1015d66c80 R09: ffffed1015d66c7f R10: ffffed1015d66c7f R11: ffff8880aeb363fb R12: 0000000000000000 R13: 0000000000000000 R14: ffff8880aeb09db8 R15: ffff8880aeb24b80 FS: 0000000000000000(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000006e6d20 CR3: 00000000967db000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400