bisecting cause commit starting from c01ebd6c46980654220f6d2b660308a074ee29df building syzkaller on 2e29b534005e52c57d726201644ea28ba33a9a3d testing commit c01ebd6c46980654220f6d2b660308a074ee29df with gcc (GCC) 8.1.0 all runs: crashed: general protection fault in sit_exit_batch_net testing release v5.3 testing commit 4d856f72c10ecb060868ed10ff1b1453943fc6c8 with gcc (GCC) 8.1.0 all runs: OK # git bisect start c01ebd6c46980654220f6d2b660308a074ee29df v5.3 Bisecting: 5832 revisions left to test after this (roughly 13 steps) [81160dda9a7aad13c04e78bb2cfd3c4630e3afab] Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next testing commit 81160dda9a7aad13c04e78bb2cfd3c4630e3afab with gcc (GCC) 8.1.0 all runs: OK # git bisect good 81160dda9a7aad13c04e78bb2cfd3c4630e3afab Bisecting: 2924 revisions left to test after this (roughly 12 steps) [8c2b418c3f95a488f5226870eee68574d323f0f8] Merge tag 'arm64-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux testing commit 8c2b418c3f95a488f5226870eee68574d323f0f8 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 8c2b418c3f95a488f5226870eee68574d323f0f8 Bisecting: 1462 revisions left to test after this (roughly 11 steps) [5d4156ac48a4f4c0b7f980a51937e33362f78911] firmware: bcm47xx_nvram: _really_ correct size_t printf format testing commit 5d4156ac48a4f4c0b7f980a51937e33362f78911 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 5d4156ac48a4f4c0b7f980a51937e33362f78911 Bisecting: 727 revisions left to test after this (roughly 10 steps) [cbafe18c71028d5e0ee1626b4776fea5d5824a78] Merge branch 'akpm' (patches from Andrew) testing commit cbafe18c71028d5e0ee1626b4776fea5d5824a78 with gcc (GCC) 8.1.0 run #0: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/tmp/syz-executor433943121" "root@10.128.0.213:./syz-executor433943121"]: exit status 1 ssh: connect to host 10.128.0.213 port 22: Connection timed out lost connection run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect good cbafe18c71028d5e0ee1626b4776fea5d5824a78 Bisecting: 361 revisions left to test after this (roughly 9 steps) [e37e3bc7e265d05d00f14079767537699cf6bd46] Merge tag 'pwm/for-5.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/thierry.reding/linux-pwm testing commit e37e3bc7e265d05d00f14079767537699cf6bd46 with gcc (GCC) 8.1.0 all runs: OK # git bisect good e37e3bc7e265d05d00f14079767537699cf6bd46 Bisecting: 177 revisions left to test after this (roughly 8 steps) [9c5efe9ae7df78600c0ee7bcce27516eb687fa6e] Merge branch 'sched-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip testing commit 9c5efe9ae7df78600c0ee7bcce27516eb687fa6e with gcc (GCC) 8.1.0 all runs: OK # git bisect good 9c5efe9ae7df78600c0ee7bcce27516eb687fa6e Bisecting: 88 revisions left to test after this (roughly 7 steps) [4f6570d7206bb052f42718d55fbe72977f0318ea] ipv6: add priority parameter to ip6_xmit() testing commit 4f6570d7206bb052f42718d55fbe72977f0318ea with gcc (GCC) 8.1.0 all runs: OK # git bisect good 4f6570d7206bb052f42718d55fbe72977f0318ea Bisecting: 44 revisions left to test after this (roughly 6 steps) [174e23810cd3183dc2ca3f5166ef965a55eaaf54] sk_buff: drop all skb extensions on free and skb scrubbing testing commit 174e23810cd3183dc2ca3f5166ef965a55eaaf54 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 174e23810cd3183dc2ca3f5166ef965a55eaaf54 Bisecting: 20 revisions left to test after this (roughly 5 steps) [edf445ad7c8d58c2784a5b733790e80999093d8f] Merge branch 'hugepage-fallbacks' (hugepatch patches from David Rientjes) testing commit edf445ad7c8d58c2784a5b733790e80999093d8f with gcc (GCC) 8.1.0 all runs: OK # git bisect good edf445ad7c8d58c2784a5b733790e80999093d8f Bisecting: 10 revisions left to test after this (roughly 3 steps) [36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc] net: rtnetlink: add linkprop commands to add and delete alternative ifnames testing commit 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc with gcc (GCC) 8.1.0 all runs: crashed: general protection fault in sit_exit_batch_net # git bisect bad 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc Bisecting: 4 revisions left to test after this (roughly 2 steps) [5f71c84038d39def573744a145c573758f52a949] r8152: Factor out OOB link list waits testing commit 5f71c84038d39def573744a145c573758f52a949 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 5f71c84038d39def573744a145c573758f52a949 Bisecting: 2 revisions left to test after this (roughly 1 step) [be2644aac3e1db02d09f45d56206bbdafca582a2] tcp: add ipv6_addr_v4mapped_loopback() helper testing commit be2644aac3e1db02d09f45d56206bbdafca582a2 with gcc (GCC) 8.1.0 all runs: OK # git bisect good be2644aac3e1db02d09f45d56206bbdafca582a2 Bisecting: 0 revisions left to test after this (roughly 1 step) [ff92741270bf8b6e78aa885f166b68c7a67ab13a] net: introduce name_node struct to be used in hashlist testing commit ff92741270bf8b6e78aa885f166b68c7a67ab13a with gcc (GCC) 8.1.0 all runs: crashed: general protection fault in sit_exit_batch_net # git bisect bad ff92741270bf8b6e78aa885f166b68c7a67ab13a Bisecting: 0 revisions left to test after this (roughly 0 steps) [6958c97a488c69c2421760e4b73834fb63d6a935] net: procfs: use index hashlist instead of name hashlist testing commit 6958c97a488c69c2421760e4b73834fb63d6a935 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 6958c97a488c69c2421760e4b73834fb63d6a935 ff92741270bf8b6e78aa885f166b68c7a67ab13a is the first bad commit commit ff92741270bf8b6e78aa885f166b68c7a67ab13a Author: Jiri Pirko Date: Mon Sep 30 11:48:15 2019 +0200 net: introduce name_node struct to be used in hashlist Introduce name_node structure to hold name of device and put it into hashlist instead of putting there struct net_device directly. Add a necessary infrastructure to manipulate the hashlist. This prepares the code to use the same hashlist for alternative names introduced later in this set. Signed-off-by: Jiri Pirko Signed-off-by: David S. Miller :040000 040000 d7d201b4400f091b62db991ee23f07ae3e4acd74 baf927da0d808f45e8cd0f1a791f297c13c0d477 M include :040000 040000 b2d0d3468ea4de0b34839afc84c81c027c99e096 2a1b108a71085b5bde53c857bd09b9ac685daea3 M net revisions tested: 16, total time: 4h20m4.95937309s (build: 1h37m35.085177752s, test: 2h37m26.702434162s) first bad commit: ff92741270bf8b6e78aa885f166b68c7a67ab13a net: introduce name_node struct to be used in hashlist cc: ["davem@davemloft.net" "edumazet@google.com" "f.fainelli@gmail.com" "gbastien@versatic.net" "idosch@mellanox.com" "jiri@mellanox.com" "linux-kernel@vger.kernel.org" "netdev@vger.kernel.org" "pabeni@redhat.com" "petrm@mellanox.com" "sd@queasysnail.net" "stephen@networkplumber.org" "willemb@google.com"] crash: general protection fault in sit_exit_batch_net kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 7523 Comm: kworker/u4:5 Not tainted 5.3.0+ #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net RIP: 0010:dev_net include/linux/netdevice.h:2182 [inline] RIP: 0010:sit_destroy_tunnels net/ipv6/sit.c:1831 [inline] RIP: 0010:sit_exit_batch_net+0x2d6/0x5a0 net/ipv6/sit.c:1894 Code: 00 49 8d 7c 24 18 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 8c 01 00 00 49 8b 44 24 18 48 8d b8 80 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 57 01 00 00 4c 3b a8 80 05 00 00 74 0c 48 8d 75 RSP: 0018:ffff88807a28fb68 EFLAGS: 00010202 RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888099270c18 RDX: 00000000000000b0 RSI: ffffffff88f20060 RDI: 0000000000000580 RBP: ffff88807a28fc18 R08: fffffbfff11e4001 R09: fffffbfff11e4001 R10: fffffbfff11e4000 R11: ffffffff88f20007 R12: ffff888099869540 R13: ffff888086c42380 R14: 0000000000000030 R15: ffff88809112fe50 FS: 0000000000000000(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff41896ddb8 CR3: 0000000090c3a000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ops_exit_list.isra.6+0xd3/0x120 net/core/net_namespace.c:175 cleanup_net+0x430/0x950 net/core/net_namespace.c:594 process_one_work+0x856/0x1630 kernel/workqueue.c:2269 worker_thread+0x85/0xb60 kernel/workqueue.c:2415 kthread+0x331/0x3f0 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Modules linked in: ---[ end trace 0810f10e0a97684d ]--- RIP: 0010:dev_net include/linux/netdevice.h:2182 [inline] RIP: 0010:sit_destroy_tunnels net/ipv6/sit.c:1831 [inline] RIP: 0010:sit_exit_batch_net+0x2d6/0x5a0 net/ipv6/sit.c:1894 Code: 00 49 8d 7c 24 18 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 8c 01 00 00 49 8b 44 24 18 48 8d b8 80 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 57 01 00 00 4c 3b a8 80 05 00 00 74 0c 48 8d 75 RSP: 0018:ffff88807a28fb68 EFLAGS: 00010202 RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888099270c18 RDX: 00000000000000b0 RSI: ffffffff88f20060 RDI: 0000000000000580 RBP: ffff88807a28fc18 R08: fffffbfff11e4001 R09: fffffbfff11e4001 R10: fffffbfff11e4000 R11: ffffffff88f20007 R12: ffff888099869540 R13: ffff888086c42380 R14: 0000000000000030 R15: ffff88809112fe50 FS: 0000000000000000(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff41896ddb8 CR3: 000000008cdb9000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400