bisecting fixing commit since 6663cf821c133b36dee65fb9eb2d976abc706512 building syzkaller on 6ecc6d0f7a55902fe3efbb519ce9ef5e13f15a92 testing commit 6663cf821c133b36dee65fb9eb2d976abc706512 with gcc (GCC) 8.1.0 kernel signature: d0c1aa49ace729803787f1c9abbea5352fcec5adf05ae1e8d4a5c9c81d86f0f8 run #0: crashed: kernel BUG at arch/x86/mm/physaddr.c:LINE! run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK testing current HEAD a1d21081a60dfb7fddf4a38b66d9cef603b317a9 testing commit a1d21081a60dfb7fddf4a38b66d9cef603b317a9 with gcc (GCC) 8.1.0 kernel signature: d3774084bf569e5eb27030c600deb468733e3252c6468745577485023e35b97b all runs: OK # git bisect start a1d21081a60dfb7fddf4a38b66d9cef603b317a9 6663cf821c133b36dee65fb9eb2d976abc706512 Bisecting: 68199 revisions left to test after this (roughly 16 steps) [8c39f71ee2019e77ee14f88b1321b2348db51820] Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit 8c39f71ee2019e77ee14f88b1321b2348db51820 with gcc (GCC) 8.1.0 kernel signature: d6917ecaefbd0060a5f358f3313ffadec56f69b1e663e7673f26a55792623c14 all runs: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get # git bisect good 8c39f71ee2019e77ee14f88b1321b2348db51820 Bisecting: 34168 revisions left to test after this (roughly 15 steps) [04de788e61a576820baf03ff8accc246ca146cb3] Merge tag 'nfs-for-5.7-1' of git://git.linux-nfs.org/projects/trondmy/linux-nfs testing commit 04de788e61a576820baf03ff8accc246ca146cb3 with gcc (GCC) 8.1.0 kernel signature: f5073e28297846071b5a0a9afa9b41144b5c3d93da2cb801cea77692354c5bcd all runs: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get # git bisect good 04de788e61a576820baf03ff8accc246ca146cb3 Bisecting: 17175 revisions left to test after this (roughly 14 steps) [37c54f9bd48663f7657a9178fe08c47e4f5b537b] kernel: set USER_DS in kthread_use_mm testing commit 37c54f9bd48663f7657a9178fe08c47e4f5b537b with gcc (GCC) 8.1.0 kernel signature: f01ec0b63f7b8c205b2abacb04724551d96655db7eefe6b558ba8b7f65bdf0db run #0: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in corrupted run #1: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in corrupted run #2: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in corrupted run #3: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in corrupted run #4: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in corrupted run #5: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in ext4_mb_new_blocks run #6: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in ext4_mb_new_blocks run #7: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in corrupted run #8: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in corrupted run #9: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in corrupted # git bisect skip 37c54f9bd48663f7657a9178fe08c47e4f5b537b Bisecting: 17175 revisions left to test after this (roughly 14 steps) [18f0dddf1fe1d16405bb845da96c03cb4b340ad0] staging: wfx: change the field chip_frozen into a boolean testing commit 18f0dddf1fe1d16405bb845da96c03cb4b340ad0 with gcc (GCC) 8.1.0 kernel signature: ee56ace5750caa2269b360a531764fecf29ccd262b52e1e0d5139416fda8d928 all runs: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get # git bisect good 18f0dddf1fe1d16405bb845da96c03cb4b340ad0 Bisecting: 16009 revisions left to test after this (roughly 14 steps) [ac911b316336ad3d22b09e82698f0463347a5507] Merge tag 'media/v5.8-2' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media testing commit ac911b316336ad3d22b09e82698f0463347a5507 with gcc (GCC) 8.1.0 kernel signature: 50b27db0ac63dc675bff31946e25e95585a3a6f5c2d3cb6362099030549b515c run #0: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in corrupted run #1: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in corrupted run #2: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in ext4_mb_new_blocks run #3: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in ext4_mb_new_blocks run #4: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in corrupted run #5: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in ext4_mb_new_blocks run #6: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in corrupted run #7: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in corrupted run #8: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in corrupted run #9: basic kernel testing failed: BUG: using smp_processor_id() in preemptible code in corrupted # git bisect skip ac911b316336ad3d22b09e82698f0463347a5507 Bisecting: 16009 revisions left to test after this (roughly 14 steps) [970a4a3418e626d0d4220edd4e981ecbf9d87758] perf pmu: Add flex debug build flag testing commit 970a4a3418e626d0d4220edd4e981ecbf9d87758 with gcc (GCC) 8.1.0 kernel signature: 82080911d4b0fa9d5326f1bd59ca4ebece89b6a9693bc82702475aafdf74c7f7 all runs: OK # git bisect bad 970a4a3418e626d0d4220edd4e981ecbf9d87758 Bisecting: 7979 revisions left to test after this (roughly 13 steps) [cb8e59cc87201af93dfbb6c3dccc8fcad72a09c2] Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next testing commit cb8e59cc87201af93dfbb6c3dccc8fcad72a09c2 with gcc (GCC) 8.1.0 kernel signature: 5d52711f093042f4b64f67bb095793a2836315550c7900769fb2106faee3facd all runs: OK # git bisect bad cb8e59cc87201af93dfbb6c3dccc8fcad72a09c2 Bisecting: 4420 revisions left to test after this (roughly 12 steps) [065fcfd49763ec71ae345bb5c5a74f961031e70e] selftests: net: ip_defrag: ignore EPERM testing commit 065fcfd49763ec71ae345bb5c5a74f961031e70e with gcc (GCC) 8.1.0 kernel signature: 126024194710be8bc0d20aa73b3fdd1303da274360932c4d874180c0918e9da5 all runs: OK # git bisect bad 065fcfd49763ec71ae345bb5c5a74f961031e70e Bisecting: 1891 revisions left to test after this (roughly 11 steps) [da07f52d3caf6c24c6dbffb5500f379d819e04bd] Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit da07f52d3caf6c24c6dbffb5500f379d819e04bd with gcc (GCC) 8.1.0 kernel signature: edd6e42fa7edb5a07c17ac10a792fa7ffb1e6afe6c38fd77f310faa578583985 all runs: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get # git bisect good da07f52d3caf6c24c6dbffb5500f379d819e04bd Bisecting: 874 revisions left to test after this (roughly 10 steps) [3248044ecf9f91900be5678919966715f1fb8834] Merge tag 'wireless-drivers-next-2020-05-25' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next testing commit 3248044ecf9f91900be5678919966715f1fb8834 with gcc (GCC) 8.1.0 kernel signature: 2a1147b3537b7dae6cf72f6d26ebd547fe703dd728442c7c866bf5be1b14d073 all runs: OK # git bisect bad 3248044ecf9f91900be5678919966715f1fb8834 Bisecting: 576 revisions left to test after this (roughly 9 steps) [98790bbac4db1697212ce9462ec35ca09c4a2810] Merge tag 'efi-urgent-2020-05-24' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip testing commit 98790bbac4db1697212ce9462ec35ca09c4a2810 with gcc (GCC) 8.1.0 kernel signature: 0f5d61f0389117872305b22f3085213a57358091665a449c8c8d568651017e79 all runs: OK # git bisect bad 98790bbac4db1697212ce9462ec35ca09c4a2810 Bisecting: 221 revisions left to test after this (roughly 8 steps) [566d136289dc57816ac290de87a9a0f7d9bd3cbb] pipe: Fix pipe_full() test in opipe_prep(). testing commit 566d136289dc57816ac290de87a9a0f7d9bd3cbb with gcc (GCC) 8.1.0 kernel signature: 5c6567535d495e62b42edef99392048c49cba7626d8653afcfdd73b02bfa4dd1 all runs: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get # git bisect good 566d136289dc57816ac290de87a9a0f7d9bd3cbb Bisecting: 110 revisions left to test after this (roughly 7 steps) [23f0dac848412dafd197566b62d831d5a68b5b6b] Merge tag 'driver-core-5.7-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core testing commit 23f0dac848412dafd197566b62d831d5a68b5b6b with gcc (GCC) 8.1.0 kernel signature: dded9af1786c01c163d1806f23a71120e9b0045f1e44faeb64968fb4b12ce5f2 all runs: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get # git bisect good 23f0dac848412dafd197566b62d831d5a68b5b6b Bisecting: 55 revisions left to test after this (roughly 6 steps) [156ee62bbd8d3234aef26c68f4ba022217591149] Merge branch 'mlxsw-Various-fixes' testing commit 156ee62bbd8d3234aef26c68f4ba022217591149 with gcc (GCC) 8.1.0 kernel signature: eda20ac5569b6024819735179fddade546663956beed10f1534afdc8fb943ef8 all runs: OK # git bisect bad 156ee62bbd8d3234aef26c68f4ba022217591149 Bisecting: 26 revisions left to test after this (roughly 5 steps) [04ba6b7dd8cadeb8ffdc4cba144024c3dad6a6ac] Merge branch 'net-ethernet-ti-fix-some-return-value-check' testing commit 04ba6b7dd8cadeb8ffdc4cba144024c3dad6a6ac with gcc (GCC) 8.1.0 kernel signature: 3e9ae01ce500afaab6c1a7037e456017ef2ed8dea72cafda9c9145fdd982702b all runs: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get # git bisect good 04ba6b7dd8cadeb8ffdc4cba144024c3dad6a6ac Bisecting: 12 revisions left to test after this (roughly 4 steps) [1378817486d6860f6a927f573491afe65287abf1] tipc: block BH before using dst_cache testing commit 1378817486d6860f6a927f573491afe65287abf1 with gcc (GCC) 8.1.0 kernel signature: 8ef95bf8c54515c2bf23f87f3a756de220d992266844ba7089ea5352a66173a3 all runs: OK # git bisect bad 1378817486d6860f6a927f573491afe65287abf1 Bisecting: 6 revisions left to test after this (roughly 3 steps) [bd6972226f50910a5b97e6b9d443c5d0433bf054] mptcp: use untruncated hash in ADD_ADDR HMAC testing commit bd6972226f50910a5b97e6b9d443c5d0433bf054 with gcc (GCC) 8.1.0 kernel signature: f081a6113e5cf9fcae3c035b76c2bcb4ac1ac31a893155f23bb92bc1a1e4fc62 run #0: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get run #1: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get run #2: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get run #3: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get run #4: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get run #5: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get run #6: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get run #7: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get run #8: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get run #9: boot failed: can't ssh into the instance # git bisect good bd6972226f50910a5b97e6b9d443c5d0433bf054 Bisecting: 3 revisions left to test after this (roughly 2 steps) [5cf65922bb15279402e1e19b5ee8c51d618fa51f] flow_dissector: Drop BPF flow dissector prog ref on netns cleanup testing commit 5cf65922bb15279402e1e19b5ee8c51d618fa51f with gcc (GCC) 8.1.0 kernel signature: bf471bdd7a8317233ebabfeae5c910e8075f49753c45fb0485c9c476f7bcd234 all runs: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get # git bisect good 5cf65922bb15279402e1e19b5ee8c51d618fa51f Bisecting: 1 revision left to test after this (roughly 1 step) [d3b968bc2dee06a88682d035a0fde8bf77af39b9] Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf testing commit d3b968bc2dee06a88682d035a0fde8bf77af39b9 with gcc (GCC) 8.1.0 kernel signature: 711307cdda41cce15a241863bcb415e7ee166b3c96a1330271363f0312cf903d all runs: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get # git bisect good d3b968bc2dee06a88682d035a0fde8bf77af39b9 Bisecting: 0 revisions left to test after this (roughly 0 steps) [3138a07ce219acde4c0d7ea0b6d54ba64153328b] net: mvpp2: fix RX hashing for non-10G ports testing commit 3138a07ce219acde4c0d7ea0b6d54ba64153328b with gcc (GCC) 8.1.0 kernel signature: 1af9addf776d5f6c788b15de01e18c2014fe459eafff9cce78131fdb6757819c run #0: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get run #1: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get run #2: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get run #3: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get run #4: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get run #5: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get run #6: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get run #7: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get run #8: crashed: BUG: using smp_processor_id() in preemptible code in dst_cache_get run #9: boot failed: can't ssh into the instance # git bisect good 3138a07ce219acde4c0d7ea0b6d54ba64153328b 1378817486d6860f6a927f573491afe65287abf1 is the first bad commit commit 1378817486d6860f6a927f573491afe65287abf1 Author: Eric Dumazet Date: Thu May 21 11:29:58 2020 -0700 tipc: block BH before using dst_cache dst_cache_get() documents it must be used with BH disabled. sysbot reported : BUG: using smp_processor_id() in preemptible [00000000] code: /21697 caller is dst_cache_get+0x3a/0xb0 net/core/dst_cache.c:68 CPU: 0 PID: 21697 Comm: Not tainted 5.7.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x188/0x20d lib/dump_stack.c:118 check_preemption_disabled lib/smp_processor_id.c:47 [inline] debug_smp_processor_id.cold+0x88/0x9b lib/smp_processor_id.c:57 dst_cache_get+0x3a/0xb0 net/core/dst_cache.c:68 tipc_udp_xmit.isra.0+0xb9/0xad0 net/tipc/udp_media.c:164 tipc_udp_send_msg+0x3e6/0x490 net/tipc/udp_media.c:244 tipc_bearer_xmit_skb+0x1de/0x3f0 net/tipc/bearer.c:526 tipc_enable_bearer+0xb2f/0xd60 net/tipc/bearer.c:331 __tipc_nl_bearer_enable+0x2bf/0x390 net/tipc/bearer.c:995 tipc_nl_bearer_enable+0x1e/0x30 net/tipc/bearer.c:1003 genl_family_rcv_msg_doit net/netlink/genetlink.c:673 [inline] genl_family_rcv_msg net/netlink/genetlink.c:718 [inline] genl_rcv_msg+0x627/0xdf0 net/netlink/genetlink.c:735 netlink_rcv_skb+0x15a/0x410 net/netlink/af_netlink.c:2469 genl_rcv+0x24/0x40 net/netlink/genetlink.c:746 netlink_unicast_kernel net/netlink/af_netlink.c:1303 [inline] netlink_unicast+0x537/0x740 net/netlink/af_netlink.c:1329 netlink_sendmsg+0x882/0xe10 net/netlink/af_netlink.c:1918 sock_sendmsg_nosec net/socket.c:652 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:672 ____sys_sendmsg+0x6bf/0x7e0 net/socket.c:2362 ___sys_sendmsg+0x100/0x170 net/socket.c:2416 __sys_sendmsg+0xec/0x1b0 net/socket.c:2449 do_syscall_64+0xf6/0x7d0 arch/x86/entry/common.c:295 entry_SYSCALL_64_after_hwframe+0x49/0xb3 RIP: 0033:0x45ca29 Fixes: e9c1a793210f ("tipc: add dst_cache support for udp media") Cc: Xin Long Cc: Jon Maloy Signed-off-by: Eric Dumazet Reported-by: syzbot Signed-off-by: David S. Miller net/tipc/udp_media.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) culprit signature: 8ef95bf8c54515c2bf23f87f3a756de220d992266844ba7089ea5352a66173a3 parent signature: 1af9addf776d5f6c788b15de01e18c2014fe459eafff9cce78131fdb6757819c revisions tested: 22, total time: 4h24m51.408846889s (build: 1h58m32.278182408s, test: 2h22m50.894659073s) first good commit: 1378817486d6860f6a927f573491afe65287abf1 tipc: block BH before using dst_cache recipients (to): ["davem@davemloft.net" "davem@davemloft.net" "edumazet@google.com" "jmaloy@redhat.com" "kuba@kernel.org" "netdev@vger.kernel.org" "tipc-discussion@lists.sourceforge.net" "ying.xue@windriver.com"] recipients (cc): ["linux-kernel@vger.kernel.org"]