bisecting fixing commit since e6986423d28362aafe64d3757bbbc493f2687f8f building syzkaller on b0e8efcb4b0aac61f4647a76bbe54a5d38a370ba testing commit e6986423d28362aafe64d3757bbbc493f2687f8f with gcc (GCC) 8.1.0 kernel signature: 3c74bfacfc369c06fc02cd74d39df00346c42fab2f19fc7b9c2dd7db6468be9e run #0: crashed: WARNING: locking bug in __icmp_send run #1: crashed: KASAN: null-ptr-deref Read in ip6_hold_safe run #2: crashed: KASAN: null-ptr-deref Read in ip6_hold_safe run #3: crashed: unregister_netdevice: waiting for DEV to become free run #4: crashed: general protection fault in dst_dev_put run #5: crashed: unregister_netdevice: waiting for DEV to become free run #6: crashed: INFO: rcu detected stall in inet_sendmsg run #7: crashed: INFO: rcu detected stall in inet_sendmsg run #8: crashed: general protection fault in dst_dev_put run #9: crashed: INFO: rcu detected stall in inet_sendmsg testing current HEAD a1d21081a60dfb7fddf4a38b66d9cef603b317a9 testing commit a1d21081a60dfb7fddf4a38b66d9cef603b317a9 with gcc (GCC) 8.1.0 kernel signature: 08e597a533cf1bc72d245723c3ed1a4a4bf9fb846d322732d5743638123eab41 all runs: OK # git bisect start a1d21081a60dfb7fddf4a38b66d9cef603b317a9 e6986423d28362aafe64d3757bbbc493f2687f8f Bisecting: 61232 revisions left to test after this (roughly 16 steps) [850e0a99361b6fd88f8def26f9422a0561654c2f] Merge tag 'tee-optee-fix-for-5.5' of git://git.linaro.org:/people/jens.wiklander/linux-tee into arm/fixes testing commit 850e0a99361b6fd88f8def26f9422a0561654c2f with gcc (GCC) 8.1.0 kernel signature: bea302894cc29354f8aecd301b6ff7b3d83e9947ac99da9aa4ca747a09ff9c1c all runs: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get # git bisect good 850e0a99361b6fd88f8def26f9422a0561654c2f Bisecting: 30616 revisions left to test after this (roughly 15 steps) [b41dc4ae3264960cfd85f7bd2e946bfad79abfe9] Merge branch 'net-dsa-felix-tc-taprio-and-CBS-offload-support' testing commit b41dc4ae3264960cfd85f7bd2e946bfad79abfe9 with gcc (GCC) 8.1.0 kernel signature: f2b3d929d7ee4a098c642d95d550403f63057a011e4e23a1c567383092f821ff all runs: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get # git bisect good b41dc4ae3264960cfd85f7bd2e946bfad79abfe9 Bisecting: 15308 revisions left to test after this (roughly 14 steps) [9277f8334ffc719fe922d776444d6e4e884dbf30] ocfs2: fix value of OCFS2_INVALID_SLOT testing commit 9277f8334ffc719fe922d776444d6e4e884dbf30 with gcc (GCC) 8.1.0 kernel signature: 147c15fb40339a6e473f137584d8669a2939f2dd8495b9b995c4c6fd182f2d03 all runs: OK # git bisect bad 9277f8334ffc719fe922d776444d6e4e884dbf30 Bisecting: 7653 revisions left to test after this (roughly 13 steps) [8977a27b663ebb3bc745a1e7f91b2927b4522861] proc: rename "catch" function argument testing commit 8977a27b663ebb3bc745a1e7f91b2927b4522861 with gcc (GCC) 8.1.0 kernel signature: 29c543df3099c768a3cffe9bb00832fbbc5f57c34124c5b5e5ca808c6cdd5a3c all runs: OK # git bisect bad 8977a27b663ebb3bc745a1e7f91b2927b4522861 Bisecting: 3398 revisions left to test after this (roughly 12 steps) [faa392181a0bd42c5478175cef601adeecdc91b6] Merge tag 'drm-next-2020-06-02' of git://anongit.freedesktop.org/drm/drm testing commit faa392181a0bd42c5478175cef601adeecdc91b6 with gcc (GCC) 8.1.0 kernel signature: 1026044790f0080604b8c6daf1592e9ee17b64c7452ea5e4a25000f7935c9ce0 run #0: OK run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: boot failed: can't ssh into the instance # git bisect bad faa392181a0bd42c5478175cef601adeecdc91b6 Bisecting: 2112 revisions left to test after this (roughly 11 steps) [533b220f7be4e461a5222a223d169b42856741ef] Merge tag 'arm64-upstream' of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux testing commit 533b220f7be4e461a5222a223d169b42856741ef with gcc (GCC) 8.1.0 kernel signature: 304a50797769dbe58848220c6e7244bb5ed510447ef4c813dff9bcaecc73b22a all runs: OK # git bisect bad 533b220f7be4e461a5222a223d169b42856741ef Bisecting: 1069 revisions left to test after this (roughly 10 steps) [2a02ca0428cfe68cce600111acb4c6f7d85cf71f] Merge branches 'edac-i10nm' and 'edac-misc' into edac-updates-for-5.8 testing commit 2a02ca0428cfe68cce600111acb4c6f7d85cf71f with gcc (GCC) 8.1.0 kernel signature: 85ac3294f604fffb95c1fd18757db495c56ce3f71937b1913a45a667605fcd9b all runs: OK # git bisect bad 2a02ca0428cfe68cce600111acb4c6f7d85cf71f Bisecting: 534 revisions left to test after this (roughly 9 steps) [5d438e071f09845f0abd1464b52cddee880c2364] Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm testing commit 5d438e071f09845f0abd1464b52cddee880c2364 with gcc (GCC) 8.1.0 kernel signature: d9010e9f132b0b8ac310b29cb560d89369125286817471c6707f5b51c563aadb all runs: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get # git bisect good 5d438e071f09845f0abd1464b52cddee880c2364 Bisecting: 239 revisions left to test after this (roughly 8 steps) [caffb99b6929f41a69edbb5aef3a359bf45f3315] Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit caffb99b6929f41a69edbb5aef3a359bf45f3315 with gcc (GCC) 8.1.0 kernel signature: 631395b828e1386a0915a42e718f7e042ae58e5f3e07be0464d5da0463210f70 all runs: OK # git bisect bad caffb99b6929f41a69edbb5aef3a359bf45f3315 Bisecting: 143 revisions left to test after this (roughly 7 steps) [444565650a5fe9c63ddf153e6198e31705dedeb2] Merge tag 'io_uring-5.7-2020-05-22' of git://git.kernel.dk/linux-block testing commit 444565650a5fe9c63ddf153e6198e31705dedeb2 with gcc (GCC) 8.1.0 kernel signature: c5b4196e8961255625d7d33a9864d3641c3b306084f099922e3b56ba2cb25fa1 all runs: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get # git bisect good 444565650a5fe9c63ddf153e6198e31705dedeb2 Bisecting: 72 revisions left to test after this (roughly 6 steps) [4f7400d5cbaef676e00cdffb0565bf731c6bb09e] net/mlx5: Fix error flow in case of function_setup failure testing commit 4f7400d5cbaef676e00cdffb0565bf731c6bb09e with gcc (GCC) 8.1.0 kernel signature: 84b519083ab8644360cffb73cf9ca7454b22be0410263708a7e2c824540f4ccd all runs: OK # git bisect bad 4f7400d5cbaef676e00cdffb0565bf731c6bb09e Bisecting: 35 revisions left to test after this (roughly 5 steps) [bd6972226f50910a5b97e6b9d443c5d0433bf054] mptcp: use untruncated hash in ADD_ADDR HMAC testing commit bd6972226f50910a5b97e6b9d443c5d0433bf054 with gcc (GCC) 8.1.0 kernel signature: 939f219618d72ac56e10feaca062b471dfdf4ad272da6cd4c4c7cb4f1a8b6c75 all runs: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get # git bisect good bd6972226f50910a5b97e6b9d443c5d0433bf054 Bisecting: 17 revisions left to test after this (roughly 4 steps) [4340f42f207eacb81e7a6b6bb1e3b6afad9a2e26] mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case reload fails testing commit 4340f42f207eacb81e7a6b6bb1e3b6afad9a2e26 with gcc (GCC) 8.1.0 kernel signature: 081ece349e5f4beb5e4d73602b9b32cdcef0b8673144e88db8954a3fa4f47636 all runs: OK # git bisect bad 4340f42f207eacb81e7a6b6bb1e3b6afad9a2e26 Bisecting: 8 revisions left to test after this (roughly 3 steps) [79dde73cf9bcf1dd317a2667f78b758e9fe139ed] net/ethernet/freescale: rework quiesce/activate for ucc_geth testing commit 79dde73cf9bcf1dd317a2667f78b758e9fe139ed with gcc (GCC) 8.1.0 kernel signature: 3719b467b81c09639049cd2fff4cd1c77eec31f61ef9a973a15d00000afad1a2 all runs: OK # git bisect bad 79dde73cf9bcf1dd317a2667f78b758e9fe139ed Bisecting: 3 revisions left to test after this (roughly 2 steps) [d3b968bc2dee06a88682d035a0fde8bf77af39b9] Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf testing commit d3b968bc2dee06a88682d035a0fde8bf77af39b9 with gcc (GCC) 8.1.0 kernel signature: f02c5e09a20b3aeb64fb0fff7b255e5181a6f18f1b1114451759af3076f41cc0 all runs: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get # git bisect good d3b968bc2dee06a88682d035a0fde8bf77af39b9 Bisecting: 1 revision left to test after this (roughly 1 step) [1378817486d6860f6a927f573491afe65287abf1] tipc: block BH before using dst_cache testing commit 1378817486d6860f6a927f573491afe65287abf1 with gcc (GCC) 8.1.0 kernel signature: 8db7b46756a2efedc8a66cee0cc9a9a1791ff08f59b4c4c5370b62f0490a2b5c run #0: OK run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: boot failed: can't ssh into the instance # git bisect bad 1378817486d6860f6a927f573491afe65287abf1 Bisecting: 0 revisions left to test after this (roughly 0 steps) [3138a07ce219acde4c0d7ea0b6d54ba64153328b] net: mvpp2: fix RX hashing for non-10G ports testing commit 3138a07ce219acde4c0d7ea0b6d54ba64153328b with gcc (GCC) 8.1.0 kernel signature: 85c52d6bda1639cc0c6f9e2abba4c3170030f1f98d955c6aa798368367727c26 all runs: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get # git bisect good 3138a07ce219acde4c0d7ea0b6d54ba64153328b 1378817486d6860f6a927f573491afe65287abf1 is the first bad commit commit 1378817486d6860f6a927f573491afe65287abf1 Author: Eric Dumazet Date: Thu May 21 11:29:58 2020 -0700 tipc: block BH before using dst_cache dst_cache_get() documents it must be used with BH disabled. sysbot reported : BUG: using smp_processor_id() in preemptible [00000000] code: /21697 caller is dst_cache_get+0x3a/0xb0 net/core/dst_cache.c:68 CPU: 0 PID: 21697 Comm: Not tainted 5.7.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x188/0x20d lib/dump_stack.c:118 check_preemption_disabled lib/smp_processor_id.c:47 [inline] debug_smp_processor_id.cold+0x88/0x9b lib/smp_processor_id.c:57 dst_cache_get+0x3a/0xb0 net/core/dst_cache.c:68 tipc_udp_xmit.isra.0+0xb9/0xad0 net/tipc/udp_media.c:164 tipc_udp_send_msg+0x3e6/0x490 net/tipc/udp_media.c:244 tipc_bearer_xmit_skb+0x1de/0x3f0 net/tipc/bearer.c:526 tipc_enable_bearer+0xb2f/0xd60 net/tipc/bearer.c:331 __tipc_nl_bearer_enable+0x2bf/0x390 net/tipc/bearer.c:995 tipc_nl_bearer_enable+0x1e/0x30 net/tipc/bearer.c:1003 genl_family_rcv_msg_doit net/netlink/genetlink.c:673 [inline] genl_family_rcv_msg net/netlink/genetlink.c:718 [inline] genl_rcv_msg+0x627/0xdf0 net/netlink/genetlink.c:735 netlink_rcv_skb+0x15a/0x410 net/netlink/af_netlink.c:2469 genl_rcv+0x24/0x40 net/netlink/genetlink.c:746 netlink_unicast_kernel net/netlink/af_netlink.c:1303 [inline] netlink_unicast+0x537/0x740 net/netlink/af_netlink.c:1329 netlink_sendmsg+0x882/0xe10 net/netlink/af_netlink.c:1918 sock_sendmsg_nosec net/socket.c:652 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:672 ____sys_sendmsg+0x6bf/0x7e0 net/socket.c:2362 ___sys_sendmsg+0x100/0x170 net/socket.c:2416 __sys_sendmsg+0xec/0x1b0 net/socket.c:2449 do_syscall_64+0xf6/0x7d0 arch/x86/entry/common.c:295 entry_SYSCALL_64_after_hwframe+0x49/0xb3 RIP: 0033:0x45ca29 Fixes: e9c1a793210f ("tipc: add dst_cache support for udp media") Cc: Xin Long Cc: Jon Maloy Signed-off-by: Eric Dumazet Reported-by: syzbot Signed-off-by: David S. Miller net/tipc/udp_media.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) culprit signature: 8db7b46756a2efedc8a66cee0cc9a9a1791ff08f59b4c4c5370b62f0490a2b5c parent signature: 85c52d6bda1639cc0c6f9e2abba4c3170030f1f98d955c6aa798368367727c26 revisions tested: 19, total time: 4h8m41.702310832s (build: 1h46m0.221718415s, test: 2h20m5.966860676s) first good commit: 1378817486d6860f6a927f573491afe65287abf1 tipc: block BH before using dst_cache recipients (to): ["davem@davemloft.net" "davem@davemloft.net" "edumazet@google.com" "jmaloy@redhat.com" "kuba@kernel.org" "netdev@vger.kernel.org" "tipc-discussion@lists.sourceforge.net" "ying.xue@windriver.com"] recipients (cc): ["linux-kernel@vger.kernel.org"]