bisecting fixing commit since 0e698dfa282211e414076f9dc7e83c1c288314fd
building syzkaller on 58ae5e18624eaaac79cab00e63d6f32c9bd64ee0
testing commit 0e698dfa282211e414076f9dc7e83c1c288314fd with gcc (GCC) 8.1.0
kernel signature: 03a71eb02020678f7ad0033ca765b0a17f1a50fd330437f7ec93e4ce22bdec47
all runs: crashed: BUG: unable to handle kernel paging request in do_xdp_generic
testing current HEAD d6f9469a03d832dcd17041ed67774ffb5f3e73b3
testing commit d6f9469a03d832dcd17041ed67774ffb5f3e73b3 with gcc (GCC) 8.1.0
kernel signature: ab4af8228cb71fce7fcd5531a7c1ce9e735f089f6a81634597b8165a514dff9c
all runs: crashed: BUG: unable to handle kernel paging request in do_xdp_generic
revisions tested: 2, total time: 18m43.785925589s (build: 11m48.079378349s, test: 6m38.215229731s)
the crash still happens on HEAD
commit msg: Merge tag 'erofs-for-5.8-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/xiang/erofs
crash: BUG: unable to handle kernel paging request in do_xdp_generic
IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
BUG: unable to handle page fault for address: ffff887f8d7e7fff
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 8243 Comm: syz-executor.2 Not tainted 5.7.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:is_multicast_ether_addr_64bits include/linux/etherdevice.h:135 [inline]
RIP: 0010:netif_receive_generic_xdp net/core/dev.c:4555 [inline]
RIP: 0010:do_xdp_generic.part.132+0x3ba/0x1480 net/core/dev.c:4652
Code: 00 48 89 84 24 98 00 00 00 48 89 44 24 30 48 b8 00 00 00 00 00 fc ff df 4c 89 b4 24 a8 00 00 00 80 3c 02 00 0f 85 f0 0d 00 00 <49> 8b 45 00 49 8d 7d 0c 48 ba 00 00 00 00 00 fc ff df 48 89 44 24
RSP: 0018:ffffc90001877640 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: 1ffff9200030eed6 RCX: ffff88809ec3a834
RDX: 1ffff10ff1afcfff RSI: 0000000000000000 RDI: ffffffffffff0101
RBP: ffff88809ec3a7c0 R08: ffffed1011afb7dd R09: ffffed1011afb7dd
R10: ffff88808d7dbee3 R11: ffffed1011afb7dc R12: ffff88809ec3a830
R13: ffff887f8d7e7fff R14: ffff88808d7d8000 R15: 0000000000000100
FS:  00007fda490b2700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff887f8d7e7fff CR3: 00000000a35e2000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 tun_get_user+0x22aa/0x38a0 drivers/net/tun.c:1901
 tun_chr_write_iter+0xb0/0x14a drivers/net/tun.c:1992
 call_write_iter include/linux/fs.h:1917 [inline]
 new_sync_write+0x3a1/0x600 fs/read_write.c:484
 __kernel_write+0xfb/0x340 fs/read_write.c:516
 write_pipe_buf+0x152/0x1f0 fs/splice.c:809
 splice_from_pipe_feed fs/splice.c:512 [inline]
 __splice_from_pipe+0x2b7/0x7a0 fs/splice.c:636
 splice_from_pipe+0xad/0x100 fs/splice.c:671
 default_file_splice_write+0x14/0x50 fs/splice.c:821
 do_splice_from fs/splice.c:863 [inline]
 do_splice+0x94c/0x1550 fs/splice.c:1165
 __do_sys_splice fs/splice.c:1440 [inline]
 __se_sys_splice fs/splice.c:1422 [inline]
 __x64_sys_splice+0x14e/0x200 fs/splice.c:1422
 do_syscall_64+0xc6/0x620 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x49/0xb3
RIP: 0033:0x45c829
Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fda490b1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
RAX: ffffffffffffffda RBX: 0000000000507540 RCX: 000000000045c829
RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 000000000078bfa0 R08: 0000000000010008 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000ba8 R14: 00000000004ce768 R15: 00007fda490b26d4
Modules linked in:
CR2: ffff887f8d7e7fff
---[ end trace 90bbed01a3bc2b37 ]---
RIP: 0010:is_multicast_ether_addr_64bits include/linux/etherdevice.h:135 [inline]
RIP: 0010:netif_receive_generic_xdp net/core/dev.c:4555 [inline]
RIP: 0010:do_xdp_generic.part.132+0x3ba/0x1480 net/core/dev.c:4652
Code: 00 48 89 84 24 98 00 00 00 48 89 44 24 30 48 b8 00 00 00 00 00 fc ff df 4c 89 b4 24 a8 00 00 00 80 3c 02 00 0f 85 f0 0d 00 00 <49> 8b 45 00 49 8d 7d 0c 48 ba 00 00 00 00 00 fc ff df 48 89 44 24
RSP: 0018:ffffc90001877640 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: 1ffff9200030eed6 RCX: ffff88809ec3a834
RDX: 1ffff10ff1afcfff RSI: 0000000000000000 RDI: ffffffffffff0101
RBP: ffff88809ec3a7c0 R08: ffffed1011afb7dd R09: ffffed1011afb7dd
R10: ffff88808d7dbee3 R11: ffffed1011afb7dc R12: ffff88809ec3a830
R13: ffff887f8d7e7fff R14: ffff88808d7d8000 R15: 0000000000000100
FS:  00007fda490b2700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff887f8d7e7fff CR3: 00000000a35e2000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400