bisecting fixing commit since 92ed301919932f777713b9172e525674157e983d
building syzkaller on cb93dc6ac64225e09f44bac6c6cce1dae1b248b0
testing commit 92ed301919932f777713b9172e525674157e983d
compiler: gcc (GCC) 8.4.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 0af5ca834473a76182e204449089a1a8b29b2b61b6c7772874cc76730c50b806
run #0: crashed: BUG: unable to handle kernel paging request in __alloc_skb
run #1: crashed: BUG: unable to handle kernel paging request in __alloc_skb
run #2: crashed: BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet
run #3: crashed: BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet
run #4: crashed: BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet
run #5: crashed: BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet
run #6: crashed: BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet
run #7: crashed: BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet
run #8: crashed: BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet
run #9: crashed: BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet
run #10: crashed: BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet
run #11: crashed: BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet
run #12: crashed: BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet
run #13: crashed: BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet
run #14: crashed: BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet
run #15: crashed: BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet
run #16: crashed: INFO: rcu detected stall in rtnl_newlink
run #17: crashed: INFO: rcu detected stall in rtnl_newlink
run #18: crashed: INFO: rcu detected stall in rtnl_newlink
run #19: crashed: INFO: rcu detected stall in rtnl_newlink
testing current HEAD 60a9483534ed0d99090a2ee1d4bb0b8179195f51
testing commit 60a9483534ed0d99090a2ee1d4bb0b8179195f51
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 74ba30d20f36cc9bfa45b702da350202ce2fa3df576e8f0ccc2b0a24b6157117
run #0: crashed: BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet
run #1: crashed: BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet
run #2: crashed: BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet
run #3: crashed: BUG: soft lockup in batadv_iv_send_outstanding_bat_ogm_packet
run #4: crashed: INFO: rcu detected stall in rtnl_newlink
run #5: crashed: INFO: rcu detected stall in rtnl_newlink
run #6: crashed: INFO: rcu detected stall in rtnl_newlink
run #7: crashed: INFO: rcu detected stall in rtnl_newlink
run #8: crashed: INFO: rcu detected stall in rtnl_newlink
run #9: crashed: INFO: rcu detected stall in rtnl_newlink
revisions tested: 2, total time: 23m29.549137156s (build: 12m43.577926879s, test: 9m51.010529164s)
the crash still happens on HEAD
commit msg: Merge tag 'warning-fixes-20211005' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs
crash: INFO: rcu detected stall in rtnl_newlink
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 1-....: (10487 ticks this GP) idle=0ef/1/0x4000000000000000 softirq=7142/7142 fqs=5205
(t=10500 jiffies g=5097 q=864)
NMI backtrace for cpu 1
CPU: 1 PID: 6623 Comm: syz-executor.3 Not tainted 5.15.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xbd/0xe2 lib/dump_stack.c:106
nmi_cpu_backtrace.cold+0x96/0xec lib/nmi_backtrace.c:105
nmi_trigger_cpumask_backtrace+0x11a/0x160 lib/nmi_backtrace.c:62
trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
rcu_dump_cpu_stacks+0x232/0x360 kernel/rcu/tree_stall.h:343
print_cpu_stall kernel/rcu/tree_stall.h:627 [inline]
check_cpu_stall kernel/rcu/tree_stall.h:711 [inline]
rcu_pending kernel/rcu/tree.c:3880 [inline]
rcu_sched_clock_irq.cold+0x5c/0x681 kernel/rcu/tree.c:2599
update_process_times+0x131/0x1a0 kernel/time/timer.c:1785
tick_sched_handle+0x6f/0x130 kernel/time/tick-sched.c:226
tick_sched_timer+0x132/0x210 kernel/time/tick-sched.c:1421
__run_hrtimer kernel/time/hrtimer.c:1685 [inline]
__hrtimer_run_queues+0x19e/0xba0 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x2eb/0x770 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
__sysvec_apic_timer_interrupt+0x13e/0x520 arch/x86/kernel/apic/apic.c:1103
sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:arch_local_irq_enable arch/x86/include/asm/paravirt.h:695 [inline]
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/irqflags.h:140 [inline]
RIP: 0010:lock_acquire kernel/locking/lockdep.c:5628 [inline]
RIP: 0010:lock_acquire+0x4ec/0x5d0 kernel/locking/lockdep.c:5590
Code: 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 ab 00 00 00 48 83 3d dd 38 02 08 00 74 64 fb 66 0f 1f 44 00 00 53 fd ff ff e8 ea 55 3d 06 85 c0 74 ab 80 3d f7 2c 0c 09 00 75
RSP: 0018:ffffc9000793ecb8 EFLAGS: 00000286
RAX: 1ffffffff12af268 RBX: 1ffff92000f27d99 RCX: ffffffff8bca4fa0
RDX: dffffc0000000000 RSI: ffffffff87eb8680 RDI: ffffffff88347b40
RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8c26dd17
R10: fffffbfff184dba2 R11: 615f6e616d746162 R12: 0000000000000000
R13: 0000000000000000 R14: ffff88816f4a8a98 R15: 0000000000000000
__raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline]
_raw_spin_lock_bh+0x2f/0x40 kernel/locking/spinlock.c:178
spin_lock_bh include/linux/spinlock.h:368 [inline]
batadv_tt_local_purge_pending_clients+0xed/0x3e0 net/batman-adv/translation-table.c:3655
batadv_tt_local_resize_to_mtu+0x80/0xe0 net/batman-adv/translation-table.c:3958
batadv_hardif_activate_interface.part.0.cold+0x141/0x1b4 net/batman-adv/hard-interface.c:651
batadv_hardif_activate_interface net/batman-adv/hard-interface.c:742 [inline]
batadv_hardif_enable_interface+0x969/0x970 net/batman-adv/hard-interface.c:734
batadv_softif_slave_add+0x48/0xc0 net/batman-adv/soft-interface.c:836
do_setlink+0x88e/0x2d60 net/core/rtnetlink.c:2726
__rtnl_newlink+0xaf5/0x13e0 net/core/rtnetlink.c:3391
rtnl_newlink+0x5a/0x90 net/core/rtnetlink.c:3506
rtnetlink_rcv_msg+0x31d/0x8d0 net/core/rtnetlink.c:5572
netlink_rcv_skb+0x118/0x370 net/netlink/af_netlink.c:2504
netlink_unicast_kernel net/netlink/af_netlink.c:1314 [inline]
netlink_unicast+0x42e/0x700 net/netlink/af_netlink.c:1340
netlink_sendmsg+0x704/0xbf0 net/netlink/af_netlink.c:1929
sock_sendmsg_nosec net/socket.c:704 [inline]
sock_sendmsg+0xab/0xe0 net/socket.c:724
____sys_sendmsg+0x5bf/0x7a0 net/socket.c:2409
___sys_sendmsg+0xd3/0x150 net/socket.c:2463
__sys_sendmsg+0xb2/0x140 net/socket.c:2492
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x463ca9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2c59605188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 000000000055bf00 RCX: 0000000000463ca9
RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004
RBP: 00000000004ae538 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bf00
R13: 00007ffc2326a69f R14: 00007f2c59605300 R15: 0000000000022000
----------------
Code disassembly (best guess), 1 bytes skipped:
0: 48 ba 00 00 00 00 00 movabs $0xdffffc0000000000,%rdx
7: fc ff df
a: 48 c1 e8 03 shr $0x3,%rax
e: 80 3c 10 00 cmpb $0x0,(%rax,%rdx,1)
12: 0f 85 ab 00 00 00 jne 0xc3
18: 48 83 3d dd 38 02 08 cmpq $0x0,0x80238dd(%rip) # 0x80238fd
1f: 00
20: 74 64 je 0x86
22: fb sti
23: 66 0f 1f 44 00 00 nopw 0x0(%rax,%rax,1)
* 29: e9 53 fd ff ff jmpq 0xfffffd81 <-- trapping instruction
2e: e8 ea 55 3d 06 callq 0x63d561d
33: 85 c0 test %eax,%eax
35: 74 ab je 0xffffffe2
37: 80 3d f7 2c 0c 09 00 cmpb $0x0,0x90c2cf7(%rip) # 0x90c2d35
3e: 75 .byte 0x75