syzbot


BUG: using smp_processor_id() in preemptible code in ip_vs_sched_persist

Status: auto-obsoleted due to no activity on 2022/09/17 07:46
Reported-by: syzbot+096344af0ab9a573c89a@syzkaller.appspotmail.com
First crash: 918d, last: 918d

Sample crash report:
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21543
caller is ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:182 [inline]
caller is ip_vs_sched_persist+0x8e7/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
CPU: 1 PID: 21543 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
 ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:182 [inline]
 ip_vs_sched_persist+0x8e7/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
 ip_vs_schedule+0xa08/0xd30 net/netfilter/ipvs/ip_vs_core.c:485
 tcp_conn_schedule+0x464/0x810 net/netfilter/ipvs/ip_vs_proto_tcp.c:90
 ip_vs_try_to_schedule net/netfilter/ipvs/ip_vs_core.c:1519 [inline]
 ip_vs_in+0x16a7/0x2140 net/netfilter/ipvs/ip_vs_core.c:1953
 nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
 nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
 nf_hook include/linux/netfilter.h:205 [inline]
 __ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
 ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
 ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
 __tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
 tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
 tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
 tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
 tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
 __inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
 tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
 tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
 tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
 inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xb5/0x100 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21543
caller is ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:187 [inline]
caller is ip_vs_sched_persist+0x962/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
CPU: 1 PID: 21543 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
 ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:187 [inline]
 ip_vs_sched_persist+0x962/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
 ip_vs_schedule+0xa08/0xd30 net/netfilter/ipvs/ip_vs_core.c:485
 tcp_conn_schedule+0x464/0x810 net/netfilter/ipvs/ip_vs_proto_tcp.c:90
 ip_vs_try_to_schedule net/netfilter/ipvs/ip_vs_core.c:1519 [inline]
 ip_vs_in+0x16a7/0x2140 net/netfilter/ipvs/ip_vs_core.c:1953
 nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
 nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
 nf_hook include/linux/netfilter.h:205 [inline]
 __ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
 ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
 ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
 __tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
 tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
 tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
 tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
 tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
 __inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
 tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
 tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
 tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
 inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xb5/0x100 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21543
caller is ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:192 [inline]
caller is ip_vs_sched_persist+0x9dc/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
CPU: 1 PID: 21543 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
 ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:192 [inline]
 ip_vs_sched_persist+0x9dc/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
 ip_vs_schedule+0xa08/0xd30 net/netfilter/ipvs/ip_vs_core.c:485
 tcp_conn_schedule+0x464/0x810 net/netfilter/ipvs/ip_vs_proto_tcp.c:90
 ip_vs_try_to_schedule net/netfilter/ipvs/ip_vs_core.c:1519 [inline]
 ip_vs_in+0x16a7/0x2140 net/netfilter/ipvs/ip_vs_core.c:1953
 nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
 nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
 nf_hook include/linux/netfilter.h:205 [inline]
 __ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
 ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
 ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
 __tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
 tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
 tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
 tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
 tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
 __inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
 tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
 tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
 tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
 inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xb5/0x100 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21543
caller is ip_vs_in_stats net/netfilter/ipvs/ip_vs_core.c:122 [inline]
caller is ip_vs_in+0xfbe/0x2140 net/netfilter/ipvs/ip_vs_core.c:1980
CPU: 1 PID: 21543 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
 ip_vs_in_stats net/netfilter/ipvs/ip_vs_core.c:122 [inline]
 ip_vs_in+0xfbe/0x2140 net/netfilter/ipvs/ip_vs_core.c:1980
 nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
 nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
 nf_hook include/linux/netfilter.h:205 [inline]
 __ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
 ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
 ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
 __tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
 tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
 tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
 tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
 tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
 __inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
 tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
 tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
 tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
 inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xb5/0x100 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21543
caller is ip_vs_in_stats net/netfilter/ipvs/ip_vs_core.c:129 [inline]
caller is ip_vs_in+0x10e6/0x2140 net/netfilter/ipvs/ip_vs_core.c:1980
CPU: 1 PID: 21543 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
 ip_vs_in_stats net/netfilter/ipvs/ip_vs_core.c:129 [inline]
 ip_vs_in+0x10e6/0x2140 net/netfilter/ipvs/ip_vs_core.c:1980
 nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
 nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
 nf_hook include/linux/netfilter.h:205 [inline]
 __ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
 ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
 ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
 __tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
 tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
 tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
 tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
 tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
 __inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
 tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
 tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
 tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
 inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xb5/0x100 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21543
caller is ip_vs_in_stats net/netfilter/ipvs/ip_vs_core.c:135 [inline]
caller is ip_vs_in+0x11d3/0x2140 net/netfilter/ipvs/ip_vs_core.c:1980
CPU: 1 PID: 21543 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
 ip_vs_in_stats net/netfilter/ipvs/ip_vs_core.c:135 [inline]
 ip_vs_in+0x11d3/0x2140 net/netfilter/ipvs/ip_vs_core.c:1980
 nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
 nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
 nf_hook include/linux/netfilter.h:205 [inline]
 __ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
 ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
 ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
 __tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
 tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
 tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
 tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
 tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
 __inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
 tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
 tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
 tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
 inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xb5/0x100 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21591
caller is ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:182 [inline]
caller is ip_vs_sched_persist+0x8e7/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
CPU: 0 PID: 21591 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
IPVS: fo: TCP 172.20.20.187:0 - no destination available
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
 ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:182 [inline]
 ip_vs_sched_persist+0x8e7/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
 ip_vs_schedule+0xa08/0xd30 net/netfilter/ipvs/ip_vs_core.c:485
 tcp_conn_schedule+0x464/0x810 net/netfilter/ipvs/ip_vs_proto_tcp.c:90
 ip_vs_try_to_schedule net/netfilter/ipvs/ip_vs_core.c:1519 [inline]
 ip_vs_in+0x16a7/0x2140 net/netfilter/ipvs/ip_vs_core.c:1953
 nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
 nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
 nf_hook include/linux/netfilter.h:205 [inline]
 __ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
 ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
 ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
 __tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
 tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
 tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
 tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
 tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
 __inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
 tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
 tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
 tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
 inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xb5/0x100 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21591
caller is ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:187 [inline]
caller is ip_vs_sched_persist+0x962/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
CPU: 0 PID: 21591 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
 ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:187 [inline]
 ip_vs_sched_persist+0x962/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
 ip_vs_schedule+0xa08/0xd30 net/netfilter/ipvs/ip_vs_core.c:485
 tcp_conn_schedule+0x464/0x810 net/netfilter/ipvs/ip_vs_proto_tcp.c:90
 ip_vs_try_to_schedule net/netfilter/ipvs/ip_vs_core.c:1519 [inline]
 ip_vs_in+0x16a7/0x2140 net/netfilter/ipvs/ip_vs_core.c:1953
 nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
 nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
 nf_hook include/linux/netfilter.h:205 [inline]
 __ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
 ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
 ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
 __tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
 tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
 tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
 tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
 tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
 __inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
 tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
 tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
 tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
 inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xb5/0x100 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21591
caller is ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:192 [inline]
caller is ip_vs_sched_persist+0x9dc/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
CPU: 0 PID: 21591 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
 ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:192 [inline]
 ip_vs_sched_persist+0x9dc/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
 ip_vs_schedule+0xa08/0xd30 net/netfilter/ipvs/ip_vs_core.c:485
 tcp_conn_schedule+0x464/0x810 net/netfilter/ipvs/ip_vs_proto_tcp.c:90
 ip_vs_try_to_schedule net/netfilter/ipvs/ip_vs_core.c:1519 [inline]
 ip_vs_in+0x16a7/0x2140 net/netfilter/ipvs/ip_vs_core.c:1953
 nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
 nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
 nf_hook include/linux/netfilter.h:205 [inline]
 __ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
 ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
 ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
 __tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
 tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
 tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
 tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
 tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
 __inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
 tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
 tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
 tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
 inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xb5/0x100 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21591
caller is ip_vs_in_stats net/netfilter/ipvs/ip_vs_core.c:122 [inline]
caller is ip_vs_in+0xfbe/0x2140 net/netfilter/ipvs/ip_vs_core.c:1980
CPU: 0 PID: 21591 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
 ip_vs_in_stats net/netfilter/ipvs/ip_vs_core.c:122 [inline]
 ip_vs_in+0xfbe/0x2140 net/netfilter/ipvs/ip_vs_core.c:1980
 nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
 nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
 nf_hook include/linux/netfilter.h:205 [inline]
 __ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
 ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
 ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
 __tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
 tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
 tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
 tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
 tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
 __inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
 tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
 tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
 tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
 inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xb5/0x100 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
IPVS: fo: TCP 172.20.20.187:0 - no destination available
IPVS: fo: TCP 172.20.20.187:0 - no destination available
IPVS: set_ctl: invalid protocol: 0 172.20.20.66:20002
IPVS: fo: TCP 172.20.20.187:0 - no destination available
IPVS: set_ctl: invalid protocol: 0 172.20.20.66:20002
IPVS: set_ctl: invalid protocol: 0 172.20.20.66:20002
IPVS: fo: TCP 172.20.20.187:0 - no destination available
IPVS: fo: TCP 172.20.20.187:0 - no destination available
IPVS: fo: TCP 172.20.20.187:0 - no destination available
IPVS: ip_vs_send_async error -22
IPVS: set_ctl: invalid protocol: 135 172.30.0.2:0
IPVS: set_ctl: invalid protocol: 135 172.30.0.2:0
IPVS: set_ctl: invalid protocol: 135 172.30.0.2:0
IPVS: set_ctl: invalid protocol: 135 172.30.0.2:0
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 0 172.30.0.3:0
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 0 172.30.0.3:0
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 0 172.30.0.3:0
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: ip_vs_send_async error -22
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20002
xt_TPROXY: Can be used only in combination with either -p tcp or -p udp
xt_TPROXY: Can be used only in combination with either -p tcp or -p udp
xt_TPROXY: Can be used only in combination with either -p tcp or -p udp
xt_TPROXY: Can be used only in combination with either -p tcp or -p udp

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/05/20 07:45 linux-4.14.y dffb5c6ff09c cb1ac2e7 .config console log report info ci2-linux-4-14 BUG: using smp_processor_id() in preemptible code in ip_vs_sched_persist
* Struck through repros no longer work on HEAD.