bisecting fixing commit since e6986423d28362aafe64d3757bbbc493f2687f8f
building syzkaller on b0e8efcb4b0aac61f4647a76bbe54a5d38a370ba
testing commit e6986423d28362aafe64d3757bbbc493f2687f8f with gcc (GCC) 8.1.0
kernel signature: 5aa80bfff7169fa1a986025a8e29e30733de6e56
run #0: crashed: kernel BUG at arch/x86/mm/physaddr.c:LINE!
run #1: crashed: unregister_netdevice: waiting for DEV to become free
run #2: crashed: BUG: unable to handle kernel paging request in __sock_release
run #3: crashed: unregister_netdevice: waiting for DEV to become free
run #4: crashed: general protection fault in dst_dev_put
run #5: crashed: unregister_netdevice: waiting for DEV to become free
run #6: crashed: general protection fault in dst_dev_put
run #7: crashed: general protection fault in dst_dev_put
run #8: crashed: WARNING: locking bug in icmp6_send
run #9: crashed: unregister_netdevice: waiting for DEV to become free
testing current HEAD ddd9b5e3e765d8ed5a35786a6cb00111713fe161
testing commit ddd9b5e3e765d8ed5a35786a6cb00111713fe161 with gcc (GCC) 8.1.0
kernel signature: f06214351419f9fdf37f5c80d8b72d278f7adc1a
all runs: crashed: BUG: using smp_processor_id() in preemptible [ADDR] code: syz-executor
revisions tested: 2, total time: 22m39.387046764s (build: 10m20.323208785s, test: 11m29.534103784s)
the crash still happens on HEAD
commit msg: net-sysfs: Call dev_hold always in rx_queue_add_kobject
crash: BUG: using smp_processor_id() in preemptible [ADDR] code: syz-executor
tipc: Own node identity ac1414aa, cluster identity 4711
tipc: New replicast peer: 172.20.20.187
check_preemption_disabled: 8 callbacks suppressed
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.4/7227
caller is dst_cache_get+0x33/0xa0 net/core/dst_cache.c:68
CPU: 0 PID: 7227 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x12d/0x187 lib/dump_stack.c:118
 check_preemption_disabled lib/smp_processor_id.c:47 [inline]
 debug_smp_processor_id.cold.1+0x84/0x9e lib/smp_processor_id.c:57
 dst_cache_get+0x33/0xa0 net/core/dst_cache.c:68
 tipc_udp_xmit.isra.15+0xab/0xcd0 net/tipc/udp_media.c:164
 tipc_udp_send_msg+0x229/0x3d0 net/tipc/udp_media.c:257
 tipc_bearer_xmit_skb+0x1a5/0x370 net/tipc/bearer.c:525
 tipc_enable_bearer+0x7ef/0xb00 net/tipc/bearer.c:330
 __tipc_nl_bearer_enable+0x265/0x390 net/tipc/bearer.c:994
 tipc_nl_bearer_enable+0x1d/0x30 net/tipc/bearer.c:1002
 genl_family_rcv_msg_doit net/netlink/genetlink.c:672 [inline]
 genl_family_rcv_msg net/netlink/genetlink.c:717 [inline]
 genl_rcv_msg+0x5e1/0x10f0 net/netlink/genetlink.c:734
 netlink_rcv_skb+0x13f/0x380 net/netlink/af_netlink.c:2477
 genl_rcv+0x23/0x40 net/netlink/genetlink.c:745
 netlink_unicast_kernel net/netlink/af_netlink.c:1302 [inline]
 netlink_unicast+0x463/0x6b0 net/netlink/af_netlink.c:1328
 netlink_sendmsg+0x7b0/0xcb0 net/netlink/af_netlink.c:1917
 sock_sendmsg_nosec net/socket.c:639 [inline]
 sock_sendmsg+0xe6/0x110 net/socket.c:659
 ____sys_sendmsg+0x603/0x980 net/socket.c:2330
 ___sys_sendmsg+0xe4/0x160 net/socket.c:2384
 __sys_sendmsg+0xd9/0x180 net/socket.c:2417
 __do_sys_sendmsg net/socket.c:2426 [inline]
 __se_sys_sendmsg net/socket.c:2424 [inline]
 __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2424
 do_syscall_64+0xd0/0x600 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x458c29
Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f1706070c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29
RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 000000000000000a
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17060716d4
R13: 00000000004c62bc R14: 00000000004dab98 R15: 00000000ffffffff
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.4/7227
caller is dst_cache_set_ip4+0x97/0x2e0 net/core/dst_cache.c:98
CPU: 1 PID: 7227 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x12d/0x187 lib/dump_stack.c:118
 check_preemption_disabled lib/smp_processor_id.c:47 [inline]
 debug_smp_processor_id.cold.1+0x84/0x9e lib/smp_processor_id.c:57
 dst_cache_set_ip4+0x97/0x2e0 net/core/dst_cache.c:98
 tipc_udp_xmit.isra.15+0x7aa/0xcd0 net/tipc/udp_media.c:182
 tipc_udp_send_msg+0x229/0x3d0 net/tipc/udp_media.c:257
 tipc_bearer_xmit_skb+0x1a5/0x370 net/tipc/bearer.c:525
 tipc_enable_bearer+0x7ef/0xb00 net/tipc/bearer.c:330
 __tipc_nl_bearer_enable+0x265/0x390 net/tipc/bearer.c:994
 tipc_nl_bearer_enable+0x1d/0x30 net/tipc/bearer.c:1002
 genl_family_rcv_msg_doit net/netlink/genetlink.c:672 [inline]
 genl_family_rcv_msg net/netlink/genetlink.c:717 [inline]
 genl_rcv_msg+0x5e1/0x10f0 net/netlink/genetlink.c:734
 netlink_rcv_skb+0x13f/0x380 net/netlink/af_netlink.c:2477
 genl_rcv+0x23/0x40 net/netlink/genetlink.c:745
 netlink_unicast_kernel net/netlink/af_netlink.c:1302 [inline]
 netlink_unicast+0x463/0x6b0 net/netlink/af_netlink.c:1328
 netlink_sendmsg+0x7b0/0xcb0 net/netlink/af_netlink.c:1917
 sock_sendmsg_nosec net/socket.c:639 [inline]
 sock_sendmsg+0xe6/0x110 net/socket.c:659
 ____sys_sendmsg+0x603/0x980 net/socket.c:2330
 ___sys_sendmsg+0xe4/0x160 net/socket.c:2384
 __sys_sendmsg+0xd9/0x180 net/socket.c:2417
 __do_sys_sendmsg net/socket.c:2426 [inline]
 __se_sys_sendmsg net/socket.c:2424 [inline]
 __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2424
 do_syscall_64+0xd0/0x600 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x458c29
Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f1706070c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29
RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 000000000000000a
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17060716d4
R13: 00000000004c62bc R14: 00000000004dab98 R15: 00000000ffffffff
tipc: Enabled bearer <udp:
yz1>, priority 10