bisecting cause commit starting from a99d8080aaf358d5d23581244e5da23b35e340b9 building syzkaller on 76630fc9477809305ab0fc257f92826e7671cb7e testing commit a99d8080aaf358d5d23581244e5da23b35e340b9 with gcc (GCC) 8.1.0 all runs: crashed: general protection fault in j1939_priv_get_by_ndev_locked testing release v5.3 testing commit 4d856f72c10ecb060868ed10ff1b1453943fc6c8 with gcc (GCC) 8.1.0 all runs: OK # git bisect start a99d8080aaf358d5d23581244e5da23b35e340b9 v5.3 Bisecting: 7459 revisions left to test after this (roughly 13 steps) [7d14df2d280fb7411eba2eb96682da0683ad97f6] Merge tag 'for-5.4-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux testing commit 7d14df2d280fb7411eba2eb96682da0683ad97f6 with gcc (GCC) 8.1.0 all runs: crashed: general protection fault in j1939_priv_get_by_ndev_locked # git bisect bad 7d14df2d280fb7411eba2eb96682da0683ad97f6 Bisecting: 3781 revisions left to test after this (roughly 12 steps) [77dcfe2b9edc98286cf18e03c243c9b999f955d9] Merge tag 'pm-5.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm testing commit 77dcfe2b9edc98286cf18e03c243c9b999f955d9 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 77dcfe2b9edc98286cf18e03c243c9b999f955d9 Bisecting: 1884 revisions left to test after this (roughly 11 steps) [c1b3ddf7c319722d939b09c288968feb12c12c15] Merge tag 'mac80211-next-for-davem-2019-09-11' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next testing commit c1b3ddf7c319722d939b09c288968feb12c12c15 with gcc (GCC) 8.1.0 all runs: crashed: general protection fault in j1939_priv_get_by_ndev_locked # git bisect bad c1b3ddf7c319722d939b09c288968feb12c12c15 Bisecting: 948 revisions left to test after this (roughly 10 steps) [6c7a00339e2a64b068c986301f37bd31eb83d7e9] cfg80211: Support assoc-at timer in sta-info testing commit 6c7a00339e2a64b068c986301f37bd31eb83d7e9 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 6c7a00339e2a64b068c986301f37bd31eb83d7e9 Bisecting: 473 revisions left to test after this (roughly 9 steps) [1ddee6d843d841414039414923620c8160aec623] Merge branch 'gianfar-some-assorted-cleanup' testing commit 1ddee6d843d841414039414923620c8160aec623 with gcc (GCC) 8.1.0 all runs: crashed: general protection fault in j1939_priv_get_by_ndev_locked # git bisect bad 1ddee6d843d841414039414923620c8160aec623 Bisecting: 237 revisions left to test after this (roughly 8 steps) [ce37115e3a5741219ceb0bb26de23faba6b93881] r8169: factor out reading MAC address from registers testing commit ce37115e3a5741219ceb0bb26de23faba6b93881 with gcc (GCC) 8.1.0 all runs: OK # git bisect good ce37115e3a5741219ceb0bb26de23faba6b93881 Bisecting: 115 revisions left to test after this (roughly 7 steps) [94810bd365cbcce4abc4af497aef4b68db7b4f2a] Merge tag 'mlx5-updates-2019-09-01-v2' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux testing commit 94810bd365cbcce4abc4af497aef4b68db7b4f2a with gcc (GCC) 8.1.0 all runs: OK # git bisect good 94810bd365cbcce4abc4af497aef4b68db7b4f2a Bisecting: 61 revisions left to test after this (roughly 6 steps) [f4d7c8e3da9173ac7b0498abc3aab0d320efe997] vsock/virtio: a better comment on credit update testing commit f4d7c8e3da9173ac7b0498abc3aab0d320efe997 with gcc (GCC) 8.1.0 all runs: OK # git bisect good f4d7c8e3da9173ac7b0498abc3aab0d320efe997 Bisecting: 40 revisions left to test after this (roughly 5 steps) [9d71dd0c70099914fcd063135da3c580865e924c] can: add support of SAE J1939 protocol testing commit 9d71dd0c70099914fcd063135da3c580865e924c with gcc (GCC) 8.1.0 all runs: crashed: general protection fault in j1939_priv_get_by_ndev_locked # git bisect bad 9d71dd0c70099914fcd063135da3c580865e924c Bisecting: 10 revisions left to test after this (roughly 3 steps) [6625a18e9ff6462ff81f740a331899b69ad6033e] can: af_can: give variable holding the CAN receiver and the receiver list a sensible name testing commit 6625a18e9ff6462ff81f740a331899b69ad6033e with gcc (GCC) 8.1.0 all runs: OK # git bisect good 6625a18e9ff6462ff81f740a331899b69ad6033e Bisecting: 5 revisions left to test after this (roughly 3 steps) [bdfb5765e45b86b599caf377a99826409f8403cb] can: af_can: remove NULL-ptr checks from users of can_dev_rcv_lists_find() testing commit bdfb5765e45b86b599caf377a99826409f8403cb with gcc (GCC) 8.1.0 all runs: OK # git bisect good bdfb5765e45b86b599caf377a99826409f8403cb Bisecting: 2 revisions left to test after this (roughly 2 steps) [9868b5d44f3df9dd75247acd23dddff0a42f79be] can: introduce CAN_REQUIRED_SIZE macro testing commit 9868b5d44f3df9dd75247acd23dddff0a42f79be with gcc (GCC) 8.1.0 all runs: OK # git bisect good 9868b5d44f3df9dd75247acd23dddff0a42f79be Bisecting: 0 revisions left to test after this (roughly 1 step) [f5223e9eee651e005c0f6d6d078909087601b7e9] can: extend sockaddr_can to include j1939 members testing commit f5223e9eee651e005c0f6d6d078909087601b7e9 with gcc (GCC) 8.1.0 all runs: OK # git bisect good f5223e9eee651e005c0f6d6d078909087601b7e9 9d71dd0c70099914fcd063135da3c580865e924c is the first bad commit commit 9d71dd0c70099914fcd063135da3c580865e924c Author: The j1939 authors Date: Mon Oct 8 11:48:36 2018 +0200 can: add support of SAE J1939 protocol SAE J1939 is the vehicle bus recommended practice used for communication and diagnostics among vehicle components. Originating in the car and heavy-duty truck industry in the United States, it is now widely used in other parts of the world. J1939, ISO 11783 and NMEA 2000 all share the same high level protocol. SAE J1939 can be considered the replacement for the older SAE J1708 and SAE J1587 specifications. Acked-by: Oliver Hartkopp Signed-off-by: Bastian Stender Signed-off-by: Elenita Hinds Signed-off-by: kbuild test robot Signed-off-by: Kurt Van Dijck Signed-off-by: Maxime Jayat Signed-off-by: Robin van der Gracht Signed-off-by: Oleksij Rempel Signed-off-by: Marc Kleine-Budde :040000 040000 6438450435a8d8353573ce224b3dc9bcc05336fa 7305e82a35c355e46b2660329eb868aa551e2b4c M Documentation :100644 100644 a081c477d1d16934701a8f744f6a44e0d280b3f9 844f416437c427107d7410ab5ab972a202ebe86a M MAINTAINERS :040000 040000 dd56832348e76ffa1949ca007d838d21854a0bfa dfca2d178b96f019a0a7ae1ab81a813b2064f5d3 M include :040000 040000 93492ef857a6d33d4eafc56c27db9f1e31803033 356932da79a67691bcedc6e71faa591f7e5f7392 M net revisions tested: 15, total time: 3h35m17.247651994s (build: 1h28m44.689207855s, test: 2h1m45.721584244s) first bad commit: 9d71dd0c70099914fcd063135da3c580865e924c can: add support of SAE J1939 protocol cc: ["bst@pengutronix.de" "dev.kurt@vandijck-laurijssen.be" "ecathinds@gmail.com" "linux-can@vger.kernel.org" "lkp@intel.com" "maxime.jayat@mobile-devices.fr" "mkl@pengutronix.de" "o.rempel@pengutronix.de" "robin@protonic.nl" "socketcan@hartkopp.net"] crash: general protection fault in j1939_priv_get_by_ndev_locked kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 7644 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:j1939_ndev_to_priv net/can/j1939/main.c:210 [inline] RIP: 0010:j1939_priv_get_by_ndev_locked+0xc9/0x150 net/can/j1939/main.c:222 Code: 03 80 3c 02 00 0f 85 86 00 00 00 48 8b 9b 88 05 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 28 60 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 6b 4c 8b a3 28 60 00 00 4d 85 e4 74 0d 49 8d bc 24 RSP: 0018:ffff88808361f998 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff8880a1502c90 RDX: 0000000000000c05 RSI: ffffffff88e08eb8 RDI: 0000000000006028 RBP: ffff88808361f9a8 R08: 0000000000000004 R09: ffffed10106c3f24 R10: ffffed10106c3f24 R11: 0000000000000003 R12: 0000000000000000 R13: 0000000000000006 R14: ffffffff88e08e60 R15: ffffffff88e19f80 FS: 0000555555a64940(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000117f000 CR3: 0000000097779000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: j1939_priv_get_by_ndev net/can/j1939/main.c:234 [inline] j1939_netdev_notify+0x42/0xf0 net/can/j1939/main.c:344 notifier_call_chain+0x8a/0x160 kernel/notifier.c:95 __raw_notifier_call_chain kernel/notifier.c:396 [inline] raw_notifier_call_chain+0x11/0x20 kernel/notifier.c:403 call_netdevice_notifiers_info+0x28/0x60 net/core/dev.c:1749 call_netdevice_notifiers_extack net/core/dev.c:1761 [inline] call_netdevice_notifiers net/core/dev.c:1775 [inline] rollback_registered_many+0x59c/0xb90 net/core/dev.c:8239 rollback_registered+0xdc/0x190 net/core/dev.c:8281 unregister_netdevice_queue+0x186/0x240 net/core/dev.c:9328 unregister_netdevice include/linux/netdevice.h:2633 [inline] unregister_netdev+0x17/0x20 net/core/dev.c:9369 slip_close+0x13b/0x190 drivers/net/slip/slip.c:895 tty_ldisc_close.isra.4+0xe8/0x150 drivers/tty/tty_ldisc.c:494 tty_ldisc_kill+0x7f/0x120 drivers/tty/tty_ldisc.c:642 tty_ldisc_release+0xdb/0x1c0 drivers/tty/tty_ldisc.c:814 tty_release_struct+0x12/0x50 drivers/tty/tty_io.c:1612 tty_release+0x97e/0xc60 drivers/tty/tty_io.c:1785 __fput+0x25a/0x770 fs/file_table.c:280 ____fput+0x9/0x10 fs/file_table.c:313 task_work_run+0x108/0x180 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_usermode_loop+0x24e/0x2e0 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline] syscall_return_slowpath arch/x86/entry/common.c:274 [inline] do_syscall_64+0x462/0x540 arch/x86/entry/common.c:299 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x413db1 Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 RSP: 002b:00007ffc96007c10 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413db1 RDX: 0000001b2d320000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff R10: 00007ffc96007cf0 R11: 0000000000000293 R12: 000000000075bfc8 R13: 000000000000e958 R14: 00000000007601c8 R15: 000000000075bfd4 Modules linked in: ---[ end trace 9b52de9758c477a8 ]--- RIP: 0010:j1939_ndev_to_priv net/can/j1939/main.c:210 [inline] RIP: 0010:j1939_priv_get_by_ndev_locked+0xc9/0x150 net/can/j1939/main.c:222 Code: 03 80 3c 02 00 0f 85 86 00 00 00 48 8b 9b 88 05 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 28 60 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 6b 4c 8b a3 28 60 00 00 4d 85 e4 74 0d 49 8d bc 24 RSP: 0018:ffff88808361f998 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff8880a1502c90 RDX: 0000000000000c05 RSI: ffffffff88e08eb8 RDI: 0000000000006028 RBP: ffff88808361f9a8 R08: 0000000000000004 R09: ffffed10106c3f24 R10: ffffed10106c3f24 R11: 0000000000000003 R12: 0000000000000000 R13: 0000000000000006 R14: ffffffff88e08e60 R15: ffffffff88e19f80 FS: 0000555555a64940(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000117f000 CR3: 0000000097779000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400