bisecting fixing commit since 4d41ead6ead97c3730bbd186a601a64828668f01 building syzkaller on d5a3ae1f760e7cb2cd5a721d9645ae22eae114fe testing commit 4d41ead6ead97c3730bbd186a601a64828668f01 with gcc (GCC) 8.4.1 20210217 kernel signature: 6a96e2f04d2e277414979154fdf61f4d9d7cfefcac4517d02470e7eeeeb8630f all runs: crashed: WARNING in idr_get_next testing current HEAD 231bc539066760aaa44d46818c85b14ca2f56d9f testing commit 231bc539066760aaa44d46818c85b14ca2f56d9f with gcc (GCC) 10.2.1 20210217 kernel signature: 61242b1e088f20732203b0848eca950a9d25708377a8233541d2e8df360597dc all runs: OK # git bisect start 231bc539066760aaa44d46818c85b14ca2f56d9f 4d41ead6ead97c3730bbd186a601a64828668f01 Bisecting: 32560 revisions left to test after this (roughly 15 steps) [a8df5af695a1ecd5077df18bd00375e24947b468] media: ov5647: Add SGGBR10_1X10 modes testing commit a8df5af695a1ecd5077df18bd00375e24947b468 with gcc (GCC) 10.2.1 20210217 kernel signature: d6a2b2db03378771c6adeb5c1e6d9d336a3b13a4d24b3f2b2a93a37947c6b75d all runs: crashed: WARNING in idr_get_next # git bisect good a8df5af695a1ecd5077df18bd00375e24947b468 Bisecting: 16279 revisions left to test after this (roughly 14 steps) [32bc7a2cca4d748e434702378ec1c728a2387e04] Merge branch 'mld-sleepable' testing commit 32bc7a2cca4d748e434702378ec1c728a2387e04 with gcc (GCC) 10.2.1 20210217 kernel signature: d223d810498f16f13300a7b857e8dac8be90ce7d771613ef26569f7413c69eff all runs: crashed: WARNING in idr_get_next # git bisect good 32bc7a2cca4d748e434702378ec1c728a2387e04 Bisecting: 8216 revisions left to test after this (roughly 13 steps) [c05a182bf45681c5529a58c71ce5647535b3ae7a] Merge tag 'for-5.13/libata-2021-04-27' of git://git.kernel.dk/linux-block testing commit c05a182bf45681c5529a58c71ce5647535b3ae7a with gcc (GCC) 10.2.1 20210217 kernel signature: 11f4cf2466bb2b126dd42712322cc5a397df2a7d84ec947b537d7e0bcae3628e all runs: crashed: WARNING in idr_get_next # git bisect good c05a182bf45681c5529a58c71ce5647535b3ae7a Bisecting: 4008 revisions left to test after this (roughly 12 steps) [b71428d7ab333a157216a1d73c8c82a178efada9] Merge tag 'sound-5.13-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound testing commit b71428d7ab333a157216a1d73c8c82a178efada9 with gcc (GCC) 10.2.1 20210217 kernel signature: 1fbdb090f1dcb1958bb334f7314224e8d0b31fac2e1cf6209a439cda419cf829 all runs: crashed: WARNING in __nf_unregister_net_hook # git bisect good b71428d7ab333a157216a1d73c8c82a178efada9 Bisecting: 2010 revisions left to test after this (roughly 11 steps) [a79cdfba68a13b731004f0aafe1155a83830d472] Merge tag 'nfsd-5.13-1' of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux testing commit a79cdfba68a13b731004f0aafe1155a83830d472 with gcc (GCC) 10.2.1 20210217 kernel signature: c06b5b0615ce70e8083f902b8854743d57ba13531a7a97880a78a71c0ed10089 run #0: crashed: WARNING in __nf_unregister_net_hook run #1: crashed: WARNING in __nf_unregister_net_hook run #2: crashed: WARNING in __nf_unregister_net_hook run #3: crashed: WARNING in __nf_unregister_net_hook run #4: crashed: WARNING in __nf_unregister_net_hook run #5: crashed: WARNING in __nf_unregister_net_hook run #6: crashed: WARNING in __nf_unregister_net_hook run #7: crashed: WARNING in __nf_unregister_net_hook run #8: crashed: KASAN: use-after-free Read in hooks_validate run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect good a79cdfba68a13b731004f0aafe1155a83830d472 Bisecting: 1004 revisions left to test after this (roughly 10 steps) [a5ce4296b0416b3001c69abef7b5fa751c0f7578] Merge tag 'libnvdimm-fixes-5.13-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm testing commit a5ce4296b0416b3001c69abef7b5fa751c0f7578 with gcc (GCC) 10.2.1 20210217 kernel signature: 78edc4d26f902ae78da50c0514bab7b22573684010a0b929350950adbb1cf72f all runs: OK # git bisect bad a5ce4296b0416b3001c69abef7b5fa751c0f7578 Bisecting: 526 revisions left to test after this (roughly 9 steps) [e22e9832798df81393d09d40fa34b01aea53cf39] Merge tag '9p-for-5.13-rc1' of git://github.com/martinetd/linux testing commit e22e9832798df81393d09d40fa34b01aea53cf39 with gcc (GCC) 10.2.1 20210217 kernel signature: 9d2e6339a713db5c3ffdf81750ce693b7b926d3afbc15295dac97cb176fe7f8a all runs: crashed: WARNING in __nf_unregister_net_hook # git bisect good e22e9832798df81393d09d40fa34b01aea53cf39 Bisecting: 253 revisions left to test after this (roughly 8 steps) [0f979d815cd52084b99e9f6b367e79488850df2e] Merge tag 'kbuild-v5.13-2' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild testing commit 0f979d815cd52084b99e9f6b367e79488850df2e with gcc (GCC) 10.2.1 20210217 kernel signature: cd45e1642a78b759369ce4e2ef44098a59a34e8e81c7afe7d353f90f9a7d8a17 all runs: OK # git bisect bad 0f979d815cd52084b99e9f6b367e79488850df2e Bisecting: 132 revisions left to test after this (roughly 7 steps) [51595e3b4943b0079638b2657f603cf5c8ea3a66] Merge tag 'arm64-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux testing commit 51595e3b4943b0079638b2657f603cf5c8ea3a66 with gcc (GCC) 10.2.1 20210217 kernel signature: 507525d10008984c8dd689f7c484f0a73057e36228cc9010b53990e615fa99d8 all runs: crashed: WARNING in __nf_unregister_net_hook # git bisect good 51595e3b4943b0079638b2657f603cf5c8ea3a66 Bisecting: 66 revisions left to test after this (roughly 6 steps) [ae4393dfd472b194c90d75d2123105fb5ed59b04] i40e: fix broken XDP support testing commit ae4393dfd472b194c90d75d2123105fb5ed59b04 with gcc (GCC) 10.2.1 20210217 kernel signature: eaf341d0ad8a1359348e05493b0b69b2d2fecdab41c4af346c5715cb10c92875 all runs: crashed: WARNING in __nf_unregister_net_hook # git bisect good ae4393dfd472b194c90d75d2123105fb5ed59b04 Bisecting: 34 revisions left to test after this (roughly 5 steps) [fc858a5231089b972076642a86cf62481d95d82e] Merge tag 'net-5.13-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit fc858a5231089b972076642a86cf62481d95d82e with gcc (GCC) 10.2.1 20210217 kernel signature: cd45e1642a78b759369ce4e2ef44098a59a34e8e81c7afe7d353f90f9a7d8a17 all runs: OK # git bisect bad fc858a5231089b972076642a86cf62481d95d82e Bisecting: 14 revisions left to test after this (roughly 4 steps) [55bc1af3d9115d669570aa633e5428d6e2302e8f] Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf testing commit 55bc1af3d9115d669570aa633e5428d6e2302e8f with gcc (GCC) 10.2.1 20210217 kernel signature: bf0fd983e793dbc695b1848f93003ef399168398571b50a33f01db567b044311 all runs: OK # git bisect bad 55bc1af3d9115d669570aa633e5428d6e2302e8f Bisecting: 8 revisions left to test after this (roughly 3 steps) [e4d4a27220a3afdfacf7fbcdc895b08d754f0de1] Merge branch '40GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/net-queue testing commit e4d4a27220a3afdfacf7fbcdc895b08d754f0de1 with gcc (GCC) 10.2.1 20210217 kernel signature: b09ec1746ebfd4d0800bcd61ff0ad709a38285d509ebbf34f0ac639d94f8098d all runs: crashed: WARNING in __nf_unregister_net_hook # git bisect good e4d4a27220a3afdfacf7fbcdc895b08d754f0de1 Bisecting: 4 revisions left to test after this (roughly 2 steps) [5e024c325406470d1165a09c6feaf8ec897936be] netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL check testing commit 5e024c325406470d1165a09c6feaf8ec897936be with gcc (GCC) 10.2.1 20210217 kernel signature: a79620dd6f3a64f0cfc331a7cde9ee3d0a95956864e832ae85d665cf4508a6f7 all runs: OK # git bisect bad 5e024c325406470d1165a09c6feaf8ec897936be Bisecting: 1 revision left to test after this (roughly 1 step) [43016d02cf6e46edfc4696452251d34bba0c0435] netfilter: arptables: use pernet ops struct during unregister testing commit 43016d02cf6e46edfc4696452251d34bba0c0435 with gcc (GCC) 10.2.1 20210217 kernel signature: be1905db69f72bafd1ab6ad9f71c8d21c4160e5c069bc55b248b8cd11fef6402 all runs: OK # git bisect bad 43016d02cf6e46edfc4696452251d34bba0c0435 Bisecting: 0 revisions left to test after this (roughly 0 steps) [c7d13358b6a2f49f81a34aa323a2d0878a0532a2] netfilter: xt_SECMARK: add new revision to fix structure layout testing commit c7d13358b6a2f49f81a34aa323a2d0878a0532a2 with gcc (GCC) 10.2.1 20210217 kernel signature: 60f20afa2c580a1e4f3e3c70aea3053b6fb936b5b29d336f078502c0bc3b373c all runs: crashed: WARNING in __nf_unregister_net_hook # git bisect good c7d13358b6a2f49f81a34aa323a2d0878a0532a2 43016d02cf6e46edfc4696452251d34bba0c0435 is the first bad commit commit 43016d02cf6e46edfc4696452251d34bba0c0435 Author: Florian Westphal Date: Mon May 3 13:51:15 2021 +0200 netfilter: arptables: use pernet ops struct during unregister Like with iptables and ebtables, hook unregistration has to use the pernet ops struct, not the template. This triggered following splat: hook not found, pf 3 num 0 WARNING: CPU: 0 PID: 224 at net/netfilter/core.c:480 __nf_unregister_net_hook+0x1eb/0x610 net/netfilter/core.c:480 [..] nf_unregister_net_hook net/netfilter/core.c:502 [inline] nf_unregister_net_hooks+0x117/0x160 net/netfilter/core.c:576 arpt_unregister_table_pre_exit+0x67/0x80 net/ipv4/netfilter/arp_tables.c:1565 Fixes: f9006acc8dfe5 ("netfilter: arp_tables: pass table pointer via nf_hook_ops") Reported-by: syzbot+dcccba8a1e41a38cb9df@syzkaller.appspotmail.com Signed-off-by: Florian Westphal Signed-off-by: Pablo Neira Ayuso include/linux/netfilter_arp/arp_tables.h | 3 +-- net/ipv4/netfilter/arp_tables.c | 5 ++--- net/ipv4/netfilter/arptable_filter.c | 2 +- 3 files changed, 4 insertions(+), 6 deletions(-) culprit signature: be1905db69f72bafd1ab6ad9f71c8d21c4160e5c069bc55b248b8cd11fef6402 parent signature: 60f20afa2c580a1e4f3e3c70aea3053b6fb936b5b29d336f078502c0bc3b373c revisions tested: 18, total time: 4h44m3.117181751s (build: 2h5m17.574548127s, test: 2h35m50.94413591s) first good commit: 43016d02cf6e46edfc4696452251d34bba0c0435 netfilter: arptables: use pernet ops struct during unregister recipients (to): ["coreteam@netfilter.org" "davem@davemloft.net" "dsahern@kernel.org" "fw@strlen.de" "fw@strlen.de" "kadlec@netfilter.org" "kuba@kernel.org" "netdev@vger.kernel.org" "netfilter-devel@vger.kernel.org" "pablo@netfilter.org" "pablo@netfilter.org" "yoshfuji@linux-ipv6.org"] recipients (cc): ["linux-kernel@vger.kernel.org"]