bisecting fixing commit since acf25aa66371359f542d14e8d993b530fe25d7ac building syzkaller on 6720fdefa085931a94cd81c6e097a59af54d362d testing commit acf25aa66371359f542d14e8d993b530fe25d7ac with gcc (GCC) 8.4.1 20210217 kernel signature: d0cc685f90b8e8c4dc6dfaddb9d97313f79a0e439f716133a176d19b39b12dc2 all runs: crashed: BUG: using smp_processor_id() in preemptible code in radix_tree_node_alloc testing current HEAD 614124bea77e452aa6df7a8714e8bc820b489922 testing commit 614124bea77e452aa6df7a8714e8bc820b489922 with gcc (GCC) 10.2.1 20210217 kernel signature: b9de49f570b3b9e163af0116e2e685dbf1cec0f0bf5852241240e1c7c1e2820e all runs: OK # git bisect start 614124bea77e452aa6df7a8714e8bc820b489922 acf25aa66371359f542d14e8d993b530fe25d7ac Bisecting: 44810 revisions left to test after this (roughly 16 steps) [c534e093d865d926d042e0a3f228d1152627ccab] mac80211: add ieee80211_set_sar_specs testing commit c534e093d865d926d042e0a3f228d1152627ccab with gcc (GCC) 10.2.1 20210217 kernel signature: 65028e0babd36608b5493438cd7d5247993d37d374ce78367bb5868adeacf29b all runs: crashed: BUG: using smp_processor_id() in preemptible code in radix_tree_node_alloc # git bisect good c534e093d865d926d042e0a3f228d1152627ccab Bisecting: 22387 revisions left to test after this (roughly 15 steps) [28b9aaac4cc5a11485b6f70656e4e9ead590cf5b] Merge tag 'clk-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux testing commit 28b9aaac4cc5a11485b6f70656e4e9ead590cf5b with gcc (GCC) 10.2.1 20210217 kernel signature: 46387b8ac38a57fd238c8cab6a116ee01722cf4630f746e0180452df3be69bb5 all runs: crashed: BUG: using smp_processor_id() in preemptible code in radix_tree_node_alloc # git bisect good 28b9aaac4cc5a11485b6f70656e4e9ead590cf5b Bisecting: 11402 revisions left to test after this (roughly 14 steps) [3aa139aa9fdc138a84243dc49dc18d9b40e1c6e4] Merge tag 'media/v5.13-1' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media testing commit 3aa139aa9fdc138a84243dc49dc18d9b40e1c6e4 with gcc (GCC) 10.2.1 20210217 kernel signature: 1c3d98d3b308258a5f5f824171ff21d210f48c39c976af302a7f4b3208005239 all runs: crashed: BUG: using smp_processor_id() in preemptible code in radix_tree_node_alloc # git bisect good 3aa139aa9fdc138a84243dc49dc18d9b40e1c6e4 Bisecting: 5460 revisions left to test after this (roughly 13 steps) [9d31d2338950293ec19d9b095fbaa9030899dcb4] Merge tag 'net-next-5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next testing commit 9d31d2338950293ec19d9b095fbaa9030899dcb4 with gcc (GCC) 10.2.1 20210217 kernel signature: 1dab9cd5f913db79b983ed7c333a95f1d5048d5eeb9184089a889e89ddfd039d run #0: crashed: WARNING in __nf_unregister_net_hook run #1: crashed: WARNING in __nf_unregister_net_hook run #2: crashed: WARNING in __nf_unregister_net_hook run #3: OK run #4: crashed: WARNING in __nf_unregister_net_hook run #5: OK run #6: crashed: WARNING in __nf_unregister_net_hook run #7: OK run #8: OK run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect good 9d31d2338950293ec19d9b095fbaa9030899dcb4 Bisecting: 2718 revisions left to test after this (roughly 11 steps) [e4adffb8daf476a01e7b4a55f586dc8c26e81392] Merge tag 'dmaengine-5.13-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/vkoul/dmaengine testing commit e4adffb8daf476a01e7b4a55f586dc8c26e81392 with gcc (GCC) 10.2.1 20210217 kernel signature: 9e895a856ece2f05788abcf21ba4d6f2ab0b9e032f346780d0e54c3fc685669a run #0: crashed: WARNING in __nf_unregister_net_hook run #1: OK run #2: crashed: WARNING in __nf_unregister_net_hook run #3: OK run #4: crashed: WARNING in __nf_unregister_net_hook run #5: OK run #6: crashed: WARNING in __nf_unregister_net_hook run #7: OK run #8: crashed: WARNING in __nf_unregister_net_hook run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect good e4adffb8daf476a01e7b4a55f586dc8c26e81392 Bisecting: 1359 revisions left to test after this (roughly 10 steps) [c1cf1afd8b0f2f1b077df84e90497c07094406fc] net: hns: Fix kernel-doc testing commit c1cf1afd8b0f2f1b077df84e90497c07094406fc with gcc (GCC) 10.2.1 20210217 kernel signature: 26589ce81391ba7134a16813d4f0d7e657b58039a91a8814ff64743693e07ab8 all runs: OK # git bisect bad c1cf1afd8b0f2f1b077df84e90497c07094406fc Bisecting: 672 revisions left to test after this (roughly 9 steps) [682a8e2b41effcaf2e80697e395d47f77c91273f] Merge tag 'ecryptfs-5.13-rc1-updates' of git://git.kernel.org/pub/scm/linux/kernel/git/tyhicks/ecryptfs testing commit 682a8e2b41effcaf2e80697e395d47f77c91273f with gcc (GCC) 10.2.1 20210217 kernel signature: 21664ca3cd4ee461ca5fe75627529f3ce386b2be2949f2b2fe8a0a7ee02279ca run #0: OK run #1: crashed: WARNING in __nf_unregister_net_hook run #2: crashed: WARNING in __nf_unregister_net_hook run #3: crashed: WARNING in __nf_unregister_net_hook run #4: OK run #5: crashed: WARNING in __nf_unregister_net_hook run #6: crashed: WARNING in __nf_unregister_net_hook run #7: crashed: WARNING in __nf_unregister_net_hook run #8: OK run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect good 682a8e2b41effcaf2e80697e395d47f77c91273f Bisecting: 334 revisions left to test after this (roughly 8 steps) [2059c40aded724b3af139abb55cabeab5e0f5878] Merge tag 'sound-fix-5.13-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound testing commit 2059c40aded724b3af139abb55cabeab5e0f5878 with gcc (GCC) 10.2.1 20210217 kernel signature: 8d01ad8a97e51b42d59f5a0ba1c500f874d277e00a9598deacaffacc846d4f04 run #0: OK run #1: OK run #2: crashed: WARNING in __nf_unregister_net_hook run #3: crashed: WARNING in __nf_unregister_net_hook run #4: crashed: WARNING in __nf_unregister_net_hook run #5: crashed: WARNING in __nf_unregister_net_hook run #6: crashed: WARNING in __nf_unregister_net_hook run #7: crashed: WARNING in __nf_unregister_net_hook run #8: crashed: WARNING in __nf_unregister_net_hook run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect good 2059c40aded724b3af139abb55cabeab5e0f5878 Bisecting: 167 revisions left to test after this (roughly 7 steps) [07db05638aa25ed66e6fc89b45f6773ef3e69396] Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi testing commit 07db05638aa25ed66e6fc89b45f6773ef3e69396 with gcc (GCC) 10.2.1 20210217 kernel signature: 23016779eb55f98f1285b161115097feb2e979a12de24e17a599a76c0d2a63e3 all runs: OK # git bisect bad 07db05638aa25ed66e6fc89b45f6773ef3e69396 Bisecting: 83 revisions left to test after this (roughly 6 steps) [55bc1af3d9115d669570aa633e5428d6e2302e8f] Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf testing commit 55bc1af3d9115d669570aa633e5428d6e2302e8f with gcc (GCC) 10.2.1 20210217 kernel signature: db2995c12419bd7d3bfe9ada46c65ff0ec010e4b142360bda30f3443745dd428 all runs: OK # git bisect bad 55bc1af3d9115d669570aa633e5428d6e2302e8f Bisecting: 41 revisions left to test after this (roughly 5 steps) [d89ecd154c23dbee3461efaceaa60263cc9e8fee] Merge branch 'sctp-race-fix' testing commit d89ecd154c23dbee3461efaceaa60263cc9e8fee with gcc (GCC) 10.2.1 20210217 kernel signature: e9b7a216fd5afbf923fef7aa918241dded13261cea3692e665cf0266f062f9ef run #0: OK run #1: crashed: WARNING in __nf_unregister_net_hook run #2: crashed: WARNING in __nf_unregister_net_hook run #3: crashed: WARNING in __nf_unregister_net_hook run #4: crashed: WARNING in __nf_unregister_net_hook run #5: crashed: WARNING in __nf_unregister_net_hook run #6: OK run #7: crashed: WARNING in __nf_unregister_net_hook run #8: OK run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect good d89ecd154c23dbee3461efaceaa60263cc9e8fee Bisecting: 20 revisions left to test after this (roughly 4 steps) [9f3c3b423567f09ab73d6e89eaccd7fe8a8741f5] Merge tag 'linux-can-fixes-for-5.13-20210506' of git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can testing commit 9f3c3b423567f09ab73d6e89eaccd7fe8a8741f5 with gcc (GCC) 10.2.1 20210217 kernel signature: bdc040c66e1105064412d8e2bbfeb15539ba6f7d1be1f77219a7b5d3829b1501 run #0: OK run #1: OK run #2: crashed: WARNING in __nf_unregister_net_hook run #3: crashed: WARNING in __nf_unregister_net_hook run #4: crashed: WARNING in __nf_unregister_net_hook run #5: OK run #6: OK run #7: crashed: WARNING in __nf_unregister_net_hook run #8: crashed: WARNING in __nf_unregister_net_hook run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect good 9f3c3b423567f09ab73d6e89eaccd7fe8a8741f5 Bisecting: 8 revisions left to test after this (roughly 3 steps) [e4d4a27220a3afdfacf7fbcdc895b08d754f0de1] Merge branch '40GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/net-queue testing commit e4d4a27220a3afdfacf7fbcdc895b08d754f0de1 with gcc (GCC) 10.2.1 20210217 kernel signature: 91117195bcea984b15099288569f41bb6c04920c480a1e736bb47b70a14ed304 run #0: OK run #1: crashed: WARNING in __nf_unregister_net_hook run #2: crashed: WARNING in __nf_unregister_net_hook run #3: OK run #4: crashed: WARNING in __nf_unregister_net_hook run #5: crashed: WARNING in __nf_unregister_net_hook run #6: crashed: WARNING in __nf_unregister_net_hook run #7: crashed: WARNING in __nf_unregister_net_hook run #8: OK run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect good e4d4a27220a3afdfacf7fbcdc895b08d754f0de1 Bisecting: 4 revisions left to test after this (roughly 2 steps) [5e024c325406470d1165a09c6feaf8ec897936be] netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL check testing commit 5e024c325406470d1165a09c6feaf8ec897936be with gcc (GCC) 10.2.1 20210217 kernel signature: 73da9cd986b66759118801085cfe4a6b4455b41045ca46f3d7be6ef12a5c82b4 all runs: OK # git bisect bad 5e024c325406470d1165a09c6feaf8ec897936be Bisecting: 1 revision left to test after this (roughly 1 step) [43016d02cf6e46edfc4696452251d34bba0c0435] netfilter: arptables: use pernet ops struct during unregister testing commit 43016d02cf6e46edfc4696452251d34bba0c0435 with gcc (GCC) 10.2.1 20210217 kernel signature: 02c7c21816768f2b2eba232bbce44edebbbe6ca18065f5f1646febd3200e9bcd all runs: OK # git bisect bad 43016d02cf6e46edfc4696452251d34bba0c0435 Bisecting: 0 revisions left to test after this (roughly 0 steps) [c7d13358b6a2f49f81a34aa323a2d0878a0532a2] netfilter: xt_SECMARK: add new revision to fix structure layout testing commit c7d13358b6a2f49f81a34aa323a2d0878a0532a2 with gcc (GCC) 10.2.1 20210217 kernel signature: f114f31b74883680442b70650a8108bbbed233d6807b02456a023eda12385e0e run #0: crashed: WARNING in __nf_unregister_net_hook run #1: crashed: WARNING in __nf_unregister_net_hook run #2: crashed: WARNING in __nf_unregister_net_hook run #3: crashed: WARNING in __nf_unregister_net_hook run #4: crashed: WARNING in __nf_unregister_net_hook run #5: OK run #6: crashed: WARNING in __nf_unregister_net_hook run #7: crashed: WARNING in __nf_unregister_net_hook run #8: crashed: WARNING in __nf_unregister_net_hook run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect good c7d13358b6a2f49f81a34aa323a2d0878a0532a2 43016d02cf6e46edfc4696452251d34bba0c0435 is the first bad commit commit 43016d02cf6e46edfc4696452251d34bba0c0435 Author: Florian Westphal Date: Mon May 3 13:51:15 2021 +0200 netfilter: arptables: use pernet ops struct during unregister Like with iptables and ebtables, hook unregistration has to use the pernet ops struct, not the template. This triggered following splat: hook not found, pf 3 num 0 WARNING: CPU: 0 PID: 224 at net/netfilter/core.c:480 __nf_unregister_net_hook+0x1eb/0x610 net/netfilter/core.c:480 [..] nf_unregister_net_hook net/netfilter/core.c:502 [inline] nf_unregister_net_hooks+0x117/0x160 net/netfilter/core.c:576 arpt_unregister_table_pre_exit+0x67/0x80 net/ipv4/netfilter/arp_tables.c:1565 Fixes: f9006acc8dfe5 ("netfilter: arp_tables: pass table pointer via nf_hook_ops") Reported-by: syzbot+dcccba8a1e41a38cb9df@syzkaller.appspotmail.com Signed-off-by: Florian Westphal Signed-off-by: Pablo Neira Ayuso include/linux/netfilter_arp/arp_tables.h | 3 +-- net/ipv4/netfilter/arp_tables.c | 5 ++--- net/ipv4/netfilter/arptable_filter.c | 2 +- 3 files changed, 4 insertions(+), 6 deletions(-) culprit signature: 02c7c21816768f2b2eba232bbce44edebbbe6ca18065f5f1646febd3200e9bcd parent signature: f114f31b74883680442b70650a8108bbbed233d6807b02456a023eda12385e0e revisions tested: 18, total time: 4h26m29.667923626s (build: 2h5m58.724402923s, test: 2h17m23.700777135s) first good commit: 43016d02cf6e46edfc4696452251d34bba0c0435 netfilter: arptables: use pernet ops struct during unregister recipients (to): ["coreteam@netfilter.org" "davem@davemloft.net" "dsahern@kernel.org" "fw@strlen.de" "fw@strlen.de" "kadlec@netfilter.org" "kuba@kernel.org" "netdev@vger.kernel.org" "netfilter-devel@vger.kernel.org" "pablo@netfilter.org" "pablo@netfilter.org" "yoshfuji@linux-ipv6.org"] recipients (cc): ["linux-kernel@vger.kernel.org"]