bisecting fixing commit since 4dd58158254c8a027f2bf5060b72ef64cafa3b9d
building syzkaller on d797d2018f9550530c469ce03b5ae36cfa1ebd23
testing commit 4dd58158254c8a027f2bf5060b72ef64cafa3b9d with gcc (GCC) 8.1.0
kernel signature: 78c035cf0eec4a1a3f3dc62281e1db1f03fef9639b3463abbf1d04ac4188ae1b
all runs: crashed: KASAN: null-ptr-deref Read in llcp_sock_getname
testing current HEAD 9786cab674574239b04df638f825ee0e7d76a48c
testing commit 9786cab674574239b04df638f825ee0e7d76a48c with gcc (GCC) 8.1.0
kernel signature: d10c6b41f02d029d0619d3a1c97038980d1d872d9f29db89609180197049006e
run #0: crashed: KASAN: null-ptr-deref Read in llcp_sock_getname
run #1: crashed: KASAN: null-ptr-deref Read in llcp_sock_getname
run #2: crashed: KASAN: null-ptr-deref Read in llcp_sock_getname
run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in llcp_sock_getname
run #4: crashed: KASAN: null-ptr-deref Read in llcp_sock_getname
run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in llcp_sock_getname
run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in llcp_sock_getname
run #7: crashed: KASAN: null-ptr-deref Read in llcp_sock_getname
run #8: crashed: KASAN: null-ptr-deref Read in llcp_sock_getname
run #9: crashed: KASAN: null-ptr-deref Read in llcp_sock_getname
revisions tested: 2, total time: 18m18.072237844s (build: 10m58.398162179s, test: 6m35.585543019s)
the crash still happens on HEAD
commit msg: Merge tag 'selinux-pr-20200416' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux
crash: KASAN: null-ptr-deref Read in llcp_sock_getname
==================================================================
BUG: KASAN: null-ptr-deref in memcpy include/linux/string.h:381 [inline]
BUG: KASAN: null-ptr-deref in llcp_sock_getname+0x341/0x440 net/nfc/llcp_sock.c:519
Read of size 1 at addr 0000000000000000 by task syz-executor.3/7877

CPU: 0 PID: 7877 Comm: syz-executor.3 Not tainted 5.7.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x12d/0x187 lib/dump_stack.c:118
 __kasan_report.cold.11+0x5/0x4e mm/kasan/report.c:515
 kasan_report+0x38/0x50 mm/kasan/common.c:625
 check_memory_region_inline mm/kasan/generic.c:187 [inline]
 check_memory_region+0x1cc/0x1f0 mm/kasan/generic.c:193
 memcpy+0x23/0x60 mm/kasan/common.c:106
 memcpy include/linux/string.h:381 [inline]
 llcp_sock_getname+0x341/0x440 net/nfc/llcp_sock.c:519
 __sys_getpeername+0x123/0x220 net/socket.c:1948
 __do_sys_getpeername net/socket.c:1961 [inline]
 __se_sys_getpeername net/socket.c:1958 [inline]
 __x64_sys_getpeername+0x6e/0xb0 net/socket.c:1958
 do_syscall_64+0xca/0x630 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x49/0xb3
RIP: 0033:0x45a219
Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f8ebc62cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000034
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ebc62d6d4
R13: 00000000004c0f29 R14: 00000000004d3dd8 R15: 00000000ffffffff
==================================================================