bisecting fixing commit since 625acffd7ae2c52898d249e6c5c39f348db0d8df
building syzkaller on 9d2ab5dfe7727dfea4b9b279f4edf731acb386ef
testing commit 625acffd7ae2c52898d249e6c5c39f348db0d8df
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1
kernel signature: 38ed87a6ab91987199925d34dded79c8532c148449b7ed305f466549f4768fc5
all runs: crashed: WARNING: locking bug in do_ipv6_setsockopt
testing current HEAD 73f3af7b4611d77bdaea303fb639333eb28e37d7
testing commit 73f3af7b4611d77bdaea303fb639333eb28e37d7
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1
kernel signature: 7fa41bc94ea917f47fb3db987476fb5a3c850bedf59796e3da828319de643933
run #0: crashed: WARNING: locking bug in do_ipv6_setsockopt
run #1: crashed: WARNING: locking bug in do_ipv6_setsockopt
run #2: crashed: WARNING: locking bug in do_ipv6_setsockopt
run #3: crashed: WARNING: locking bug in do_ipv6_setsockopt
run #4: crashed: WARNING: locking bug in do_ipv6_setsockopt
run #5: crashed: WARNING: locking bug in do_ipv6_setsockopt
run #6: OK
run #7: OK
run #8: OK
run #9: OK
revisions tested: 2, total time: 32m0.510162843s (build: 14m12.427564117s, test: 17m4.711141747s)
the crash still happens on HEAD
commit msg: Merge branch 'akpm' (patches from Andrew)
crash: WARNING: locking bug in do_ipv6_setsockopt
------------[ cut here ]------------
WARNING: CPU: 0 PID: 28036 at kernel/locking/lockdep.c:897 look_up_lock_class+0x6a/0xd0 kernel/locking/lockdep.c:897
Modules linked in:
CPU: 0 PID: 28036 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:look_up_lock_class+0x6a/0xd0 kernel/locking/lockdep.c:897
Code: 85 c0 75 0a eb 57 48 8b 00 48 85 c0 74 4f 48 39 70 40 75 f2 48 8b 4f 18 48 39 88 b0 00 00 00 74 0b 48 81 3f 00 54 d9 8d 74 02 <0f> 0b 5d c3 9c 5a 80 e6 02 74 c2 e8 16 f1 21 fb 85 c0 74 1f 8b 05
RSP: 0018:ffffc900023af7f0 EFLAGS: 00010002
RAX: ffffffff8ebdb740 RBX: ffffffff8f0df7a0 RCX: ffffffff89b3c280
RDX: 0000000000000046 RSI: ffffffff8f455500 RDI: ffff88801be63ea0
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801be63ea0
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  00007f5844f46700(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffcbc46de48 CR3: 00000000360b4000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 register_lock_class+0xb7/0x10c0 kernel/locking/lockdep.c:1246
 __lock_acquire+0x105/0x5410 kernel/locking/lockdep.c:4894
 lock_acquire kernel/locking/lockdep.c:5625 [inline]
 lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline]
 _raw_spin_lock_bh+0x2f/0x40 kernel/locking/spinlock.c:175
 spin_lock_bh include/linux/spinlock.h:359 [inline]
 lock_sock_nested+0x39/0xf0 net/core/sock.c:3162
 lock_sock include/net/sock.h:1613 [inline]
 do_ipv6_setsockopt.constprop.0+0x251/0x35d0 net/ipv6/ipv6_sockglue.c:418
 ipv6_setsockopt+0xbb/0x120 net/ipv6/ipv6_sockglue.c:1003
 __sys_setsockopt+0x1fd/0x4e0 net/socket.c:2159
 __do_sys_setsockopt net/socket.c:2170 [inline]
 __se_sys_setsockopt net/socket.c:2167 [inline]
 __x64_sys_setsockopt+0xb5/0x150 net/socket.c:2167
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4665d9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5844f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9
RDX: 000000000000003b RSI: 0000000000000029 RDI: 0000000000000004
RBP: 00000000004bfcb9 R08: 0000000000000008 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038
R13: 00007ffd97c3602f R14: 00007f5844f46300 R15: 0000000000022000