bisecting fixing commit since 559089e0a93d44280ec3ab478830af319c56dbe3
building syzkaller on 7d7bc7384ef404234239532c5c2a9af81b020152
testing commit 559089e0a93d44280ec3ab478830af319c56dbe3
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 603078fa5d6bbc175f2331ce7cec6738ec34757b1ffef4d52c628b8ebb3a74c0
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM
run #1: crashed: INFO: trying to register non-static key in skb_queue_tail
run #2: crashed: INFO: trying to register non-static key in skb_queue_tail
run #3: crashed: INFO: trying to register non-static key in skb_queue_tail
run #4: crashed: INFO: trying to register non-static key in skb_queue_tail
run #5: crashed: INFO: trying to register non-static key in skb_queue_tail
run #6: crashed: INFO: trying to register non-static key in skb_queue_tail
run #7: crashed: INFO: trying to register non-static key in skb_queue_tail
run #8: crashed: INFO: trying to register non-static key in skb_queue_tail
run #9: crashed: INFO: trying to register non-static key in skb_queue_tail
run #10: crashed: INFO: trying to register non-static key in skb_queue_tail
run #11: crashed: INFO: trying to register non-static key in skb_queue_tail
run #12: crashed: INFO: trying to register non-static key in skb_queue_tail
run #13: crashed: INFO: trying to register non-static key in skb_queue_tail
run #14: crashed: INFO: trying to register non-static key in skb_queue_tail
run #15: crashed: INFO: trying to register non-static key in skb_queue_tail
run #16: crashed: INFO: trying to register non-static key in skb_queue_tail
run #17: crashed: INFO: trying to register non-static key in skb_queue_tail
run #18: crashed: INFO: trying to register non-static key in skb_queue_tail
run #19: crashed: INFO: trying to register non-static key in skb_queue_tail
testing current HEAD 78ca55889a549a9a194c6ec666836329b774ab6d
testing commit 78ca55889a549a9a194c6ec666836329b774ab6d
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 3bd827335b8d36467bc4eb8bdc61006071923f444b99d91afa4fe8a238c69db4
all runs: crashed: INFO: trying to register non-static key in skb_queue_tail
revisions tested: 2, total time: 20m31.735716229s (build: 13m2.142229537s, test: 6m54.861160292s)
the crash still happens on HEAD
commit msg: Merge tag 'scsi-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi
crash: INFO: trying to register non-static key in skb_queue_tail
INFO: trying to register non-static key.
The code is fine but needs lockdep annotation, or maybe
you didn't initialize this object before use?
turning off the locking correctness validator.
CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.19.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x57/0x7d lib/dump_stack.c:106
assign_lock_key kernel/locking/lockdep.c:979 [inline]
register_lock_class+0xf30/0x1130 kernel/locking/lockdep.c:1292
__lock_acquire+0x10a/0x55d0 kernel/locking/lockdep.c:4932
lock_acquire kernel/locking/lockdep.c:5665 [inline]
lock_acquire+0x1ab/0x570 kernel/locking/lockdep.c:5630
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0x39/0x50 kernel/locking/spinlock.c:162
skb_queue_tail+0x1c/0x140 net/core/skbuff.c:3368
hif_usb_regout_cb+0xf6/0x1a0 drivers/net/wireless/ath/ath9k/hif_usb.c:90
__usb_hcd_giveback_urb+0x238/0x3f0 drivers/usb/core/hcd.c:1670
dummy_timer+0xeb8/0x2eb0 drivers/usb/gadget/udc/dummy_hcd.c:1988
call_timer_fn+0x163/0x4a0 kernel/time/timer.c:1474
expire_timers kernel/time/timer.c:1519 [inline]
__run_timers.part.0+0x530/0x8e0 kernel/time/timer.c:1790
__run_timers kernel/time/timer.c:1768 [inline]
run_timer_softirq+0x9c/0x190 kernel/time/timer.c:1803
__do_softirq+0x29b/0x9c2 kernel/softirq.c:571
invoke_softirq kernel/softirq.c:445 [inline]
__irq_exit_rcu+0x123/0x180 kernel/softirq.c:650
irq_exit_rcu+0x5/0x20 kernel/softirq.c:662
sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1106
asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:29 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline]
RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:130 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:112 [inline]
RIP: 0010:acpi_idle_do_entry+0x156/0x1b0 drivers/acpi/processor_idle.c:554
Code: 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 61 48 8b 45 00 a8 08 75 c0 e8 85 32 d8 f8 66 90 0f 00 2d 7c e8 b3 00 fb f4 <9c> 58 fa f6 c4 02 74 a8 5d e9 5c 31 d8 f8 e8 67 2f 14 f9 e9 c1 fe
RSP: 0018:ffffc9000039fd38 EFLAGS: 00000246
RAX: 000000000003287b RBX: ffff8881457ec065 RCX: 1ffffffff1990a71
RDX: 0000000000000000 RSI: ffffffff88ebb000 RDI: ffffffff8943cce0
RBP: ffff888010972200 R08: 0000000000000001 R09: 0000000000000001
R10: ffffed100212e440 R11: 0000000000000001 R12: 0000000000000001
R13: ffff8881457ec064 R14: ffffffff8b94a7a0 R15: ffff88801a41c004
acpi_idle_enter+0x2c3/0x4c0 drivers/acpi/processor_idle.c:691
cpuidle_enter_state+0x152/0xb40 drivers/cpuidle/cpuidle.c:237
cpuidle_enter+0x45/0xa0 drivers/cpuidle/cpuidle.c:351
call_cpuidle kernel/sched/idle.c:155 [inline]
cpuidle_idle_call kernel/sched/idle.c:236 [inline]
do_idle+0x3e8/0x590 kernel/sched/idle.c:303
cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:400
start_secondary+0x21d/0x2b0 arch/x86/kernel/smpboot.c:266
secondary_startup_64_no_verify+0xce/0xdb
general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.19.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__skb_insert include/linux/skbuff.h:2312 [inline]
RIP: 0010:__skb_queue_before include/linux/skbuff.h:2418 [inline]
RIP: 0010:__skb_queue_tail include/linux/skbuff.h:2451 [inline]
RIP: 0010:skb_queue_tail+0x99/0x140 net/core/skbuff.c:3369
Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 80 00 00 00 4c 89 e2 4c 89 65 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 48 89 6b 08 <80> 3c 02 00 75 4f 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc
RSP: 0018:ffffc900003f8ab8 EFLAGS: 00010046
RAX: dffffc0000000000 RBX: ffff88806d4837d8 RCX: ffffffff81558200
RDX: 0000000000000000 RSI: 0000000000000096 RDI: ffff888075b0fb48
RBP: ffff888075b0fb40 R08: 0000000000000001 R09: 0000000000000003
R10: fffff5200007f145 R11: 0000000000002000 R12: 0000000000000000
R13: ffff88806d4837f0 R14: ffffffff8bf62640 R15: ffff8880788b1f00
FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f21d0f48990 CR3: 000000007d6ad000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
hif_usb_regout_cb+0xf6/0x1a0 drivers/net/wireless/ath/ath9k/hif_usb.c:90
__usb_hcd_giveback_urb+0x238/0x3f0 drivers/usb/core/hcd.c:1670
dummy_timer+0xeb8/0x2eb0 drivers/usb/gadget/udc/dummy_hcd.c:1988
call_timer_fn+0x163/0x4a0 kernel/time/timer.c:1474
expire_timers kernel/time/timer.c:1519 [inline]
__run_timers.part.0+0x530/0x8e0 kernel/time/timer.c:1790
__run_timers kernel/time/timer.c:1768 [inline]
run_timer_softirq+0x9c/0x190 kernel/time/timer.c:1803
__do_softirq+0x29b/0x9c2 kernel/softirq.c:571
invoke_softirq kernel/softirq.c:445 [inline]
__irq_exit_rcu+0x123/0x180 kernel/softirq.c:650
irq_exit_rcu+0x5/0x20 kernel/softirq.c:662
sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1106
asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:29 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline]
RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:130 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:112 [inline]
RIP: 0010:acpi_idle_do_entry+0x156/0x1b0 drivers/acpi/processor_idle.c:554
Code: 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 61 48 8b 45 00 a8 08 75 c0 e8 85 32 d8 f8 66 90 0f 00 2d 7c e8 b3 00 fb f4 <9c> 58 fa f6 c4 02 74 a8 5d e9 5c 31 d8 f8 e8 67 2f 14 f9 e9 c1 fe
RSP: 0018:ffffc9000039fd38 EFLAGS: 00000246
RAX: 000000000003287b RBX: ffff8881457ec065 RCX: 1ffffffff1990a71
RDX: 0000000000000000 RSI: ffffffff88ebb000 RDI: ffffffff8943cce0
RBP: ffff888010972200 R08: 0000000000000001 R09: 0000000000000001
R10: ffffed100212e440 R11: 0000000000000001 R12: 0000000000000001
R13: ffff8881457ec064 R14: ffffffff8b94a7a0 R15: ffff88801a41c004
acpi_idle_enter+0x2c3/0x4c0 drivers/acpi/processor_idle.c:691
cpuidle_enter_state+0x152/0xb40 drivers/cpuidle/cpuidle.c:237
cpuidle_enter+0x45/0xa0 drivers/cpuidle/cpuidle.c:351
call_cpuidle kernel/sched/idle.c:155 [inline]
cpuidle_idle_call kernel/sched/idle.c:236 [inline]
do_idle+0x3e8/0x590 kernel/sched/idle.c:303
cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:400
start_secondary+0x21d/0x2b0 arch/x86/kernel/smpboot.c:266
secondary_startup_64_no_verify+0xce/0xdb
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__skb_insert include/linux/skbuff.h:2312 [inline]
RIP: 0010:__skb_queue_before include/linux/skbuff.h:2418 [inline]
RIP: 0010:__skb_queue_tail include/linux/skbuff.h:2451 [inline]
RIP: 0010:skb_queue_tail+0x99/0x140 net/core/skbuff.c:3369
Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 80 00 00 00 4c 89 e2 4c 89 65 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 48 89 6b 08 <80> 3c 02 00 75 4f 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc
RSP: 0018:ffffc900003f8ab8 EFLAGS: 00010046
RAX: dffffc0000000000 RBX: ffff88806d4837d8 RCX: ffffffff81558200
RDX: 0000000000000000 RSI: 0000000000000096 RDI: ffff888075b0fb48
RBP: ffff888075b0fb40 R08: 0000000000000001 R09: 0000000000000003
R10: fffff5200007f145 R11: 0000000000002000 R12: 0000000000000000
R13: ffff88806d4837f0 R14: ffffffff8bf62640 R15: ffff8880788b1f00
FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f21d0f48990 CR3: 000000007d6ad000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
0: 00 00 add %al,(%rax)
2: 00 00 add %al,(%rax)
4: 00 fc add %bh,%ah
6: ff (bad)
7: df 48 c1 fisttps -0x3f(%rax)
a: ea (bad)
b: 03 80 3c 02 00 75 add 0x7500023c(%rax),%eax
11: 61 (bad)
12: 48 8b 45 00 mov 0x0(%rbp),%rax
16: a8 08 test $0x8,%al
18: 75 c0 jne 0xffffffda
1a: e8 85 32 d8 f8 callq 0xf8d832a4
1f: 66 90 xchg %ax,%ax
21: 0f 00 2d 7c e8 b3 00 verw 0xb3e87c(%rip) # 0xb3e8a4
28: fb sti
29: f4 hlt
* 2a: 9c pushfq <-- trapping instruction
2b: 58 pop %rax
2c: fa cli
2d: f6 c4 02 test $0x2,%ah
30: 74 a8 je 0xffffffda
32: 5d pop %rbp
33: e9 5c 31 d8 f8 jmpq 0xf8d83194
38: e8 67 2f 14 f9 callq 0xf9142fa4
3d: e9 .byte 0xe9
3e: c1 .byte 0xc1
3f: fe .byte 0xfe