ci starts bisection 2022-11-26 22:14:25.499997727 +0000 UTC m=+149471.616580965
bisecting fixing commit since 98555239e4c3aab1810d84073166eef6d54eeb3d
building syzkaller on 86777b7fb4a452ebbd7430a2c4add0486734922b
ensuring issue is reproducible on original commit 98555239e4c3aab1810d84073166eef6d54eeb3d
testing commit 98555239e4c3aab1810d84073166eef6d54eeb3d gcc
compiler: Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: b5364b30b27f3bf19efe29fb16989a368815701684131d90ed7fd1673187fbda
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM
run #1: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM
run #2: crashed: general protection fault in skb_queue_tail
run #3: crashed: general protection fault in skb_queue_tail
run #4: crashed: general protection fault in skb_queue_tail
run #5: crashed: general protection fault in skb_queue_tail
run #6: crashed: general protection fault in skb_queue_tail
run #7: crashed: general protection fault in skb_queue_tail
run #8: crashed: general protection fault in skb_queue_tail
run #9: crashed: general protection fault in skb_queue_tail
run #10: crashed: general protection fault in skb_queue_tail
run #11: crashed: general protection fault in skb_queue_tail
run #12: crashed: general protection fault in skb_queue_tail
run #13: crashed: general protection fault in skb_queue_tail
run #14: crashed: general protection fault in skb_queue_tail
run #15: crashed: general protection fault in skb_queue_tail
run #16: crashed: general protection fault in skb_queue_tail
run #17: crashed: general protection fault in skb_queue_tail
run #18: crashed: general protection fault in skb_queue_tail
run #19: crashed: general protection fault in skb_queue_tail
testing current HEAD 644e9524388a5dbc6d4f58c492ee9ef7bd4ddf4d
testing commit 644e9524388a5dbc6d4f58c492ee9ef7bd4ddf4d gcc
compiler: Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 0b0f4b8cd8d998ec5d0f6094033ee10e93bbfc5e6725ee0a5320c36bf3772db0
all runs: crashed: INFO: trying to register non-static key in skb_queue_tail
revisions tested: 2, total time: 23m6.219706186s (build: 15m32.398306757s, test: 6m53.949713515s)
the crash still happens on HEAD
commit msg: Merge tag 'for-v6.1-rc' of git://git.kernel.org/pub/scm/linux/kernel/git/sre/linux-power-supply
crash: INFO: trying to register non-static key in skb_queue_tail
INFO: trying to register non-static key.
The code is fine but needs lockdep annotation, or maybe
you didn't initialize this object before use?
turning off the locking correctness validator.
CPU: 0 PID: 4364 Comm: dhcpcd-run-hook Not tainted 6.1.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x163/0x213 lib/dump_stack.c:106
assign_lock_key+0x22a/0x240 kernel/locking/lockdep.c:981
register_lock_class+0x287/0x9b0 kernel/locking/lockdep.c:1294
__lock_acquire+0xe4/0x1f60 kernel/locking/lockdep.c:4934
lock_acquire+0x1a7/0x400 kernel/locking/lockdep.c:5668
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162
skb_queue_tail+0x2c/0x110 net/core/skbuff.c:3503
hif_usb_regout_cb+0xfc/0x130 drivers/net/wireless/ath/ath9k/hif_usb.c:90
__usb_hcd_giveback_urb+0x21c/0x360 drivers/usb/core/hcd.c:1671
dummy_timer+0xa7b/0x2fa0 drivers/usb/gadget/udc/dummy_hcd.c:1988
call_timer_fn+0xe8/0x1c0 kernel/time/timer.c:1474
expire_timers kernel/time/timer.c:1519 [inline]
__run_timers+0x70e/0x830 kernel/time/timer.c:1790
run_timer_softirq+0x46/0xb0 kernel/time/timer.c:1803
__do_softirq+0x277/0x75b kernel/softirq.c:571
__irq_exit_rcu+0xec/0x170 kernel/softirq.c:650
irq_exit_rcu+0x5/0x20 kernel/softirq.c:662
sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1107
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:folio_add_lru+0x0/0x670 mm/swap.c:519
Code: 84 d2 fe ff ff 48 ff c8 4c 39 f0 0f 84 c6 fe ff ff 4c 89 f7 48 c7 c6 80 4b b7 89 e8 2a 6a 09 00 0f 0b 0f 1f 84 00 00 00 00 00 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 18 49 89 ff 48 bd 00 00 00
RSP: 0000:ffffc9000490fa78 EFLAGS: 00000287
RAX: 0000000000000000 RBX: ffff88806ca4ed80 RCX: ffffffff81a5209a
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001ba2680
RBP: ffffc9000490fc10 R08: dffffc0000000000 R09: fffff940003744d1
R10: fffff940003744d1 R11: 1ffffd40003744d0 R12: ffffc9000490fde8
R13: 0000558e1d74c000 R14: ffffea0001ba2680 R15: dffffc0000000000
wp_page_copy+0x949/0x1200 mm/memory.c:3187
handle_pte_fault mm/memory.c:4973 [inline]
__handle_mm_fault mm/memory.c:5097 [inline]
handle_mm_fault+0x1a3b/0x2cf0 mm/memory.c:5218
do_user_addr_fault+0x516/0x840 arch/x86/mm/fault.c:1428
handle_page_fault arch/x86/mm/fault.c:1519 [inline]
exc_page_fault+0x7a/0x120 arch/x86/mm/fault.c:1575
asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0033:0x7fa8971624d3
Code: 08 e8 51 e3 fc ff 48 8b 7d 10 e8 48 e3 fc ff 48 89 ef e8 40 e3 fc ff 4c 89 e0 5a 5d 41 5c c3 48 85 ff 74 0e 8b 07 ff c8 78 03 <89> 07 c3 e9 25 e3 fc ff c3 8a 47 0c 84 c0 74 28 55 53 52 48 8b 6f
RSP: 002b:00007ffe2db25c28 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000558e1d73e910 RCX: 0000000000000000
RDX: 00007fa89716bdf6 RSI: 0000000000000001 RDI: 0000558e1d74c4e0
RBP: 0000558e1d73ee50 R08: 00007ffe2db25c30 R09: 0000558e1d73ee50
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 0 PID: 4364 Comm: dhcpcd-run-hook Not tainted 6.1.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
RIP: 0010:__skb_insert include/linux/skbuff.h:2167 [inline]
RIP: 0010:__skb_queue_before include/linux/skbuff.h:2273 [inline]
RIP: 0010:__skb_queue_tail include/linux/skbuff.h:2306 [inline]
RIP: 0010:skb_queue_tail+0xb2/0x110 net/core/skbuff.c:3504
Code: a9 48 fa 4d 89 2f 49 bf 00 00 00 00 00 fc ff df 42 80 7c 3d 00 00 74 08 4c 89 f7 e8 e8 a8 48 fa 49 89 1e 4c 89 e8 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 ef e8 cf a8 48 fa 49 89 5d 00 49 83 c4
RSP: 0000:ffffc900000077d8 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff88807b3aa8c0 RCX: dffffc0000000000
RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900000076c0
RBP: 1ffff11004a18713 R08: dffffc0000000000 R09: fffff52000000ed8
R10: fffff52000000ed9 R11: 1ffff92000000ed8 R12: ffff8880250c3890
R13: 0000000000000000 R14: ffff8880250c3898 R15: dffffc0000000000
FS: 00007fa896eb9800(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000558e1d74c4e0 CR3: 000000006ca3d000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
hif_usb_regout_cb+0xfc/0x130 drivers/net/wireless/ath/ath9k/hif_usb.c:90
__usb_hcd_giveback_urb+0x21c/0x360 drivers/usb/core/hcd.c:1671
dummy_timer+0xa7b/0x2fa0 drivers/usb/gadget/udc/dummy_hcd.c:1988
call_timer_fn+0xe8/0x1c0 kernel/time/timer.c:1474
expire_timers kernel/time/timer.c:1519 [inline]
__run_timers+0x70e/0x830 kernel/time/timer.c:1790
run_timer_softirq+0x46/0xb0 kernel/time/timer.c:1803
__do_softirq+0x277/0x75b kernel/softirq.c:571
__irq_exit_rcu+0xec/0x170 kernel/softirq.c:650
irq_exit_rcu+0x5/0x20 kernel/softirq.c:662
sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1107
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:folio_add_lru+0x0/0x670 mm/swap.c:519
Code: 84 d2 fe ff ff 48 ff c8 4c 39 f0 0f 84 c6 fe ff ff 4c 89 f7 48 c7 c6 80 4b b7 89 e8 2a 6a 09 00 0f 0b 0f 1f 84 00 00 00 00 00 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 18 49 89 ff 48 bd 00 00 00
RSP: 0000:ffffc9000490fa78 EFLAGS: 00000287
RAX: 0000000000000000 RBX: ffff88806ca4ed80 RCX: ffffffff81a5209a
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001ba2680
RBP: ffffc9000490fc10 R08: dffffc0000000000 R09: fffff940003744d1
R10: fffff940003744d1 R11: 1ffffd40003744d0 R12: ffffc9000490fde8
R13: 0000558e1d74c000 R14: ffffea0001ba2680 R15: dffffc0000000000
wp_page_copy+0x949/0x1200 mm/memory.c:3187
handle_pte_fault mm/memory.c:4973 [inline]
__handle_mm_fault mm/memory.c:5097 [inline]
handle_mm_fault+0x1a3b/0x2cf0 mm/memory.c:5218
do_user_addr_fault+0x516/0x840 arch/x86/mm/fault.c:1428
handle_page_fault arch/x86/mm/fault.c:1519 [inline]
exc_page_fault+0x7a/0x120 arch/x86/mm/fault.c:1575
asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0033:0x7fa8971624d3
Code: 08 e8 51 e3 fc ff 48 8b 7d 10 e8 48 e3 fc ff 48 89 ef e8 40 e3 fc ff 4c 89 e0 5a 5d 41 5c c3 48 85 ff 74 0e 8b 07 ff c8 78 03 <89> 07 c3 e9 25 e3 fc ff c3 8a 47 0c 84 c0 74 28 55 53 52 48 8b 6f
RSP: 002b:00007ffe2db25c28 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000558e1d73e910 RCX: 0000000000000000
RDX: 00007fa89716bdf6 RSI: 0000000000000001 RDI: 0000558e1d74c4e0
RBP: 0000558e1d73ee50 R08: 00007ffe2db25c30 R09: 0000558e1d73ee50
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__skb_insert include/linux/skbuff.h:2167 [inline]
RIP: 0010:__skb_queue_before include/linux/skbuff.h:2273 [inline]
RIP: 0010:__skb_queue_tail include/linux/skbuff.h:2306 [inline]
RIP: 0010:skb_queue_tail+0xb2/0x110 net/core/skbuff.c:3504
Code: a9 48 fa 4d 89 2f 49 bf 00 00 00 00 00 fc ff df 42 80 7c 3d 00 00 74 08 4c 89 f7 e8 e8 a8 48 fa 49 89 1e 4c 89 e8 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 ef e8 cf a8 48 fa 49 89 5d 00 49 83 c4
RSP: 0000:ffffc900000077d8 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff88807b3aa8c0 RCX: dffffc0000000000
RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900000076c0
RBP: 1ffff11004a18713 R08: dffffc0000000000 R09: fffff52000000ed8
R10: fffff52000000ed9 R11: 1ffff92000000ed8 R12: ffff8880250c3890
R13: 0000000000000000 R14: ffff8880250c3898 R15: dffffc0000000000
FS: 00007fa896eb9800(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000558e1d74c4e0 CR3: 000000006ca3d000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess), 4 bytes skipped:
0: ff 48 ff decl -0x1(%rax)
3: c8 4c 39 f0 enterq $0x394c,$0xf0
7: 0f 84 c6 fe ff ff je 0xfffffed3
d: 4c 89 f7 mov %r14,%rdi
10: 48 c7 c6 80 4b b7 89 mov $0xffffffff89b74b80,%rsi
17: e8 2a 6a 09 00 callq 0x96a46
1c: 0f 0b ud2
1e: 0f 1f 84 00 00 00 00 nopl 0x0(%rax,%rax,1)
25: 00
* 26: 55 push %rbp <-- trapping instruction
27: 41 57 push %r15
29: 41 56 push %r14
2b: 41 55 push %r13
2d: 41 54 push %r12
2f: 53 push %rbx
30: 48 83 ec 18 sub $0x18,%rsp
34: 49 89 ff mov %rdi,%r15
37: 48 rex.W
38: bd .byte 0xbd
39: 00 00 add %al,(%rax)