bisecting fixing commit since fa5941f45d7ed070118b7c209b7f2c3a034293bd
building syzkaller on 618456b4f4f74528ac6b9d709b1870d0e1d70eb2
testing commit fa5941f45d7ed070118b7c209b7f2c3a034293bd with gcc (GCC) 8.1.0
kernel signature: 8e58b503eb178a68158993690ebf2da6b3fc6a1fa0f2167f74775976621b55c3
all runs: crashed: WARNING: locking bug in inet_autobind
testing current HEAD ab9dfda232481dcfaf549ce774004d116fc80c13
testing commit ab9dfda232481dcfaf549ce774004d116fc80c13 with gcc (GCC) 8.1.0
kernel signature: 5c19a41c9c106508190d6e39e902a08c9bfdd6072647699997c7ff3f290fcc2e
run #0: crashed: WARNING: locking bug in inet_autobind
run #1: crashed: WARNING: locking bug in inet_autobind
run #2: crashed: WARNING: locking bug in inet_autobind
run #3: crashed: WARNING: locking bug in inet_autobind
run #4: crashed: WARNING: locking bug in inet_autobind
run #5: crashed: WARNING: locking bug in inet_autobind
run #6: crashed: WARNING: locking bug in inet_autobind
run #7: crashed: WARNING: locking bug in inet_autobind
run #8: OK
run #9: OK
revisions tested: 2, total time: 35m56.836968705s (build: 19m16.916676859s, test: 14m57.412437383s)
the crash still happens on HEAD
commit msg: Linux 4.14.180
crash: WARNING: locking bug in inet_autobind
------------[ cut here ]------------
WARNING: CPU: 0 PID: 30975 at kernel/locking/lockdep.c:722 arch_local_save_flags arch/x86/include/asm/paravirt.h:774 [inline]
WARNING: CPU: 0 PID: 30975 at kernel/locking/lockdep.c:722 look_up_lock_class kernel/locking/lockdep.c:713 [inline]
WARNING: CPU: 0 PID: 30975 at kernel/locking/lockdep.c:722 register_lock_class+0xfb6/0x1cd0 kernel/locking/lockdep.c:756
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 30975 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0xf7/0x13b lib/dump_stack.c:58
 panic+0x1b0/0x36a kernel/panic.c:183
 __warn.cold.8+0x25/0x2a kernel/panic.c:547
 report_bug+0x1a4/0x1f3 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:177 [inline]
 do_error_trap+0x1bd/0x310 arch/x86/kernel/traps.c:295
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:963
RIP: 0010:look_up_lock_class kernel/locking/lockdep.c:722 [inline]
RIP: 0010:register_lock_class+0xfb6/0x1cd0 kernel/locking/lockdep.c:756
RSP: 0018:ffff888088937970 EFLAGS: 00010087
RAX: dffffc0000000000 RBX: ffffffff88f0d370 RCX: 1ffff11011126f39
RDX: 1ffff1101219f837 RSI: 0000000000000000 RDI: ffff888090cfc1b8
RBP: ffff888088937a50 R08: ffff888090cfc1a0 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff89384800
R13: 1ffff11011126f39 R14: ffffffff870b3640 R15: ffffffff88f0d370
 __lock_acquire+0x14f/0x4500 kernel/locking/lockdep.c:3378
 lock_acquire+0x173/0x400 kernel/locking/lockdep.c:3998
 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline]
 _raw_spin_lock_bh+0x31/0x40 kernel/locking/spinlock.c:176
 spin_lock_bh include/linux/spinlock.h:322 [inline]
 lock_sock_nested+0x3a/0x100 net/core/sock.c:2765
 lock_sock include/net/sock.h:1467 [inline]
 inet_autobind+0x13/0x160 net/ipv4/af_inet.c:178
 inet_dgram_connect+0x10e/0x230 net/ipv4/af_inet.c:538
 SYSC_connect+0x1e5/0x2a0 net/socket.c:1655
 SyS_connect+0x9/0x10 net/socket.c:1636
 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x458da9
RSP: 002b:00007f3977579c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9
RDX: 000000000000001c RSI: 0000000020000080 RDI: 0000000000000008
RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f397757a6d4
R13: 00000000004bf1f1 R14: 00000000004d02c0 R15: 00000000ffffffff
Kernel Offset: disabled
Rebooting in 86400 seconds..