bisecting cause commit starting from 4039146777a91e1576da2bf38e0d8a1061a1ae47 building syzkaller on 6c236867ce33c0c16b102e02a08226d7eb9b2046 testing commit 4039146777a91e1576da2bf38e0d8a1061a1ae47 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 2c05827b3fd09d91279c6215948afa103e5e936ca6bbe72d19a400d005dab714 run #0: crashed: BUG: sleeping function called from invalid context in lock_sock_nested run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: crashed: WARNING: proc registration bug in clusterip_tg_check run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK reproducer seems to be flaky testing release v5.13 testing commit 62fb9874f5da54fdb243003b386128037319b219 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 909f5b513362d755e99068620c19525cb2afd91ca8725228219fd46574a48866 run #0: crashed: BUG: sleeping function called from invalid context in lock_sock_nested run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: crashed: WARNING: proc registration bug in clusterip_tg_check run #4: crashed: WARNING: proc registration bug in clusterip_tg_check run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: crashed: WARNING: proc registration bug in clusterip_tg_check run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing release v5.12 testing commit 9f4ad9e425a1d3b6a34617b8ea226d56a119a717 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: bb4e26dd8f4a005b0fd76547575ef29621d4d502b5251ddaf0a5696974104629 run #0: crashed: WARNING: proc registration bug in clusterip_tg_check run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: crashed: WARNING: proc registration bug in clusterip_tg_check run #4: crashed: WARNING: proc registration bug in clusterip_tg_check run #5: crashed: WARNING: proc registration bug in clusterip_tg_check run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing release v5.11 testing commit f40ddce88593482919761f74910f42f4b84c004b compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 3222e6ed80513dd888ba5df1ed0bb0fed90b38311471a07f8ebfef14f678fd42 run #0: crashed: WARNING: proc registration bug in clusterip_tg_check run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing release v5.10 testing commit 2c85ebc57b3e1817b6ce1a6b703928e113a90442 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 35c88fb67e0626f0232c5254d6e9f188ff33bdc5ecf75a2e20b39b0354577e82 run #0: crashed: WARNING: proc registration bug in clusterip_tg_check run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: crashed: WARNING: proc registration bug in clusterip_tg_check run #4: crashed: WARNING: proc registration bug in clusterip_tg_check run #5: crashed: WARNING: proc registration bug in clusterip_tg_check run #6: crashed: WARNING: proc registration bug in clusterip_tg_check run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing release v5.9 testing commit bbf5c979011a099af5dc76498918ed7df445635b compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 4753fc6113ccf19b73886623e431f1d42203e5df7900561c23ce4babeaf8f756 run #0: crashed: WARNING: proc registration bug in clusterip_tg_check run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: crashed: WARNING: proc registration bug in clusterip_tg_check run #4: crashed: WARNING: proc registration bug in clusterip_tg_check run #5: crashed: WARNING: proc registration bug in clusterip_tg_check run #6: crashed: WARNING: proc registration bug in clusterip_tg_check run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing release v5.8 testing commit bcf876870b95592b52519ed4aafcf9d95999bc9c compiler: gcc (GCC) 8.4.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 64bef9c619e4f9660afe7c971d6b25d7fe2654ae1e3be1137534ef774e1b1619 run #0: crashed: WARNING: proc registration bug in clusterip_tg_check run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing release v5.7 testing commit 3d77e6a8804abcc0504c904bd6e5cdf3a5cf8162 compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: f76fe31c01316385978519b5b4e89add706a0c3d5fe63afc28097ce825bd70af run #0: crashed: WARNING: proc registration bug in clusterip_tg_check run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: crashed: WARNING: proc registration bug in clusterip_tg_check run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing release v5.6 testing commit 7111951b8d4973bda27ff663f2cf18b663d15b48 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: ce1c40f29ea7dac1ab1efcb8a4c28e91d707e6db2dd3c7ba2f4d3ff05339b929 run #0: crashed: WARNING: proc registration bug in clusterip_tg_check run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: crashed: WARNING: proc registration bug in clusterip_tg_check run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing release v5.5 testing commit d5226fa6dbae0569ee43ecfc08bdcd6770fc4755 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 52e3d19b3dd1254ec0fc70d5e850d8b373790b6a1ce2b4832bb7a2a2d3945561 run #0: crashed: WARNING: proc registration bug in clusterip_tg_check run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: crashed: WARNING: proc registration bug in clusterip_tg_check run #4: crashed: WARNING: proc registration bug in clusterip_tg_check run #5: crashed: WARNING: proc registration bug in clusterip_tg_check run #6: crashed: WARNING: proc registration bug in clusterip_tg_check run #7: crashed: WARNING: proc registration bug in clusterip_tg_check run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing release v5.4 testing commit 219d54332a09e8d8741c1e1982f5eae56099de85 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: aaf25273084462a2ad615141adb1da70de0e843313526173854dc50400e6d06c run #0: crashed: WARNING: proc registration bug in clusterip_tg_check run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: crashed: WARNING: proc registration bug in clusterip_tg_check run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: crashed: WARNING: proc registration bug in clusterip_tg_check run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing release v5.3 testing commit 4d856f72c10ecb060868ed10ff1b1453943fc6c8 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 6a118b86ece6a00ec309dfe958551a7e37b62c5a38c74bfffbdf71d5ff2118cf run #0: crashed: WARNING: proc registration bug in clusterip_tg_check run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: crashed: WARNING: proc registration bug in clusterip_tg_check run #4: crashed: WARNING: proc registration bug in clusterip_tg_check run #5: crashed: WARNING: proc registration bug in clusterip_tg_check run #6: crashed: WARNING: proc registration bug in clusterip_tg_check run #7: crashed: WARNING: proc registration bug in clusterip_tg_check run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: crashed: WARNING: proc registration bug in clusterip_tg_check run #16: OK run #17: OK run #18: OK run #19: crashed: WARNING: proc registration bug in clusterip_tg_check testing release v5.2 testing commit 0ecfebd2b52404ae0c54a878c872bb93363ada36 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: dc0a4e06aabc5a71b7bb3c51a117c73e328564b4a4f21cfd43ea9747d8ce137d run #0: crashed: WARNING: proc registration bug in clusterip_tg_check run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: crashed: WARNING: proc registration bug in clusterip_tg_check run #4: crashed: WARNING: proc registration bug in clusterip_tg_check run #5: crashed: WARNING: proc registration bug in clusterip_tg_check run #6: crashed: WARNING: proc registration bug in clusterip_tg_check run #7: crashed: WARNING: proc registration bug in clusterip_tg_check run #8: crashed: WARNING: proc registration bug in clusterip_tg_check run #9: crashed: WARNING: proc registration bug in clusterip_tg_check run #10: crashed: WARNING: proc registration bug in clusterip_tg_check run #11: crashed: WARNING: proc registration bug in clusterip_tg_check run #12: crashed: WARNING: proc registration bug in clusterip_tg_check run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing release v5.1 testing commit e93c9c99a629c61837d5a7fc2120cd2b6c70dbdd compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 6f28a54ae9631f7a38ae82812fc557e8efc8855fdd74a27360b3ac8c36083bee run #0: crashed: WARNING: proc registration bug in clusterip_tg_check run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: crashed: WARNING: proc registration bug in clusterip_tg_check run #4: crashed: WARNING: proc registration bug in clusterip_tg_check run #5: crashed: WARNING: proc registration bug in clusterip_tg_check run #6: crashed: WARNING: proc registration bug in clusterip_tg_check run #7: crashed: WARNING: proc registration bug in clusterip_tg_check run #8: crashed: WARNING: proc registration bug in clusterip_tg_check run #9: crashed: WARNING: proc registration bug in clusterip_tg_check run #10: crashed: WARNING: proc registration bug in clusterip_tg_check run #11: crashed: WARNING: proc registration bug in clusterip_tg_check run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing release v5.0 testing commit 1c163f4c7b3f621efff9b28a47abb36f7378d783 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: cc4af3f53694d3fa6e61b52de0e00edfb6449f3b5e2c0a6ea7e7eb72c3e13ece run #0: crashed: WARNING: proc registration bug in clusterip_tg_check run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: crashed: WARNING: proc registration bug in clusterip_tg_check run #4: crashed: WARNING: proc registration bug in clusterip_tg_check run #5: crashed: WARNING: proc registration bug in clusterip_tg_check run #6: crashed: WARNING: proc registration bug in clusterip_tg_check run #7: crashed: WARNING: proc registration bug in clusterip_tg_check run #8: crashed: WARNING: proc registration bug in clusterip_tg_check run #9: crashed: WARNING: proc registration bug in clusterip_tg_check run #10: crashed: WARNING: proc registration bug in clusterip_tg_check run #11: crashed: WARNING: proc registration bug in clusterip_tg_check run #12: crashed: WARNING: proc registration bug in clusterip_tg_check run #13: crashed: WARNING: proc registration bug in clusterip_tg_check run #14: OK run #15: crashed: WARNING: proc registration bug in clusterip_tg_check run #16: OK run #17: OK run #18: OK run #19: OK testing release v4.20 testing commit 8fe28cb58bcb235034b64cbbb7550a8a43fd88be compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 012bd5c858e7d8e8010309911770d1b4f5bfbee76604283f7a1cc2acde7a8e2d all runs: OK # git bisect start 1c163f4c7b3f621efff9b28a47abb36f7378d783 8fe28cb58bcb235034b64cbbb7550a8a43fd88be Bisecting: 7011 revisions left to test after this (roughly 13 steps) [af7ddd8a627c62a835524b3f5b471edbbbcce025] Merge tag 'dma-mapping-4.21' of git://git.infradead.org/users/hch/dma-mapping testing commit af7ddd8a627c62a835524b3f5b471edbbbcce025 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: b35c06904604129a6657283fd675684c4d6fe7856cff12d914b00726e1b76f52 run #0: basic kernel testing failed: KASAN: use-after-free Read in batadv_iv_ogm_queue_add run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: crashed: WARNING: proc registration bug in clusterip_tg_check run #4: crashed: WARNING: proc registration bug in clusterip_tg_check run #5: crashed: WARNING: proc registration bug in clusterip_tg_check run #6: crashed: WARNING: proc registration bug in clusterip_tg_check run #7: crashed: WARNING: proc registration bug in clusterip_tg_check run #8: crashed: WARNING: proc registration bug in clusterip_tg_check run #9: crashed: WARNING: proc registration bug in clusterip_tg_check run #10: crashed: WARNING: proc registration bug in clusterip_tg_check run #11: crashed: WARNING: proc registration bug in clusterip_tg_check run #12: crashed: WARNING: proc registration bug in clusterip_tg_check run #13: crashed: WARNING: proc registration bug in clusterip_tg_check run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad af7ddd8a627c62a835524b3f5b471edbbbcce025 Bisecting: 3448 revisions left to test after this (roughly 12 steps) [792bf4d871dea8b69be2aaabdd320d7c6ed15985] Merge branch 'core-rcu-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip testing commit 792bf4d871dea8b69be2aaabdd320d7c6ed15985 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 3f554c0c840fe44da760aaab92c5697e2019ad795c64aae1c55527a5f052a6ed run #0: basic kernel testing failed: general protection fault in batadv_iv_ogm_queue_add run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect good 792bf4d871dea8b69be2aaabdd320d7c6ed15985 Bisecting: 1729 revisions left to test after this (roughly 11 steps) [aa9d6e0f33aea8a1879e7e53fe0e436943f9ce0c] linux/netlink.h: drop unnecessary extern prefix testing commit aa9d6e0f33aea8a1879e7e53fe0e436943f9ce0c compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 313bd64b25cf0b231a0463ab05f95009bdb5f7b0281b5c36439f08872bbaa12e all runs: OK # git bisect good aa9d6e0f33aea8a1879e7e53fe0e436943f9ce0c Bisecting: 835 revisions left to test after this (roughly 10 steps) [e0c38a4d1f196a4b17d2eba36afff8f656a4f1de] Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next testing commit e0c38a4d1f196a4b17d2eba36afff8f656a4f1de compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: b1d719ec8e9767df4ca0248db42c3505613af9b3bade16c8cb8d81be88098cf7 run #0: crashed: WARNING: proc registration bug in clusterip_tg_check run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: crashed: WARNING: proc registration bug in clusterip_tg_check run #4: crashed: WARNING: proc registration bug in clusterip_tg_check run #5: crashed: WARNING: proc registration bug in clusterip_tg_check run #6: crashed: WARNING: proc registration bug in clusterip_tg_check run #7: crashed: WARNING: proc registration bug in clusterip_tg_check run #8: crashed: WARNING: proc registration bug in clusterip_tg_check run #9: crashed: WARNING: proc registration bug in clusterip_tg_check run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad e0c38a4d1f196a4b17d2eba36afff8f656a4f1de Bisecting: 384 revisions left to test after this (roughly 9 steps) [8d6973327ee84c2f40dd9efd8928d4a1186c96e2] Merge tag 'powerpc-4.21-1' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux testing commit 8d6973327ee84c2f40dd9efd8928d4a1186c96e2 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 0c82cd21f74cf4c67546547dcf802ff5b7b7018d9b121ff35b8a2c73b2419676 all runs: OK # git bisect good 8d6973327ee84c2f40dd9efd8928d4a1186c96e2 Bisecting: 222 revisions left to test after this (roughly 8 steps) [e770454fabde2e0f8fb3e5039a2b6df8f128bc9b] Merge branch 'expand-txtimestamp-selftest' testing commit e770454fabde2e0f8fb3e5039a2b6df8f128bc9b compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 76b2cd1530704f314280958b698c063e4f675f4e7a3f332f0cdfed35f79bdf65 run #0: basic kernel testing failed: general protection fault in batadv_iv_ogm_queue_add run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect good e770454fabde2e0f8fb3e5039a2b6df8f128bc9b Bisecting: 106 revisions left to test after this (roughly 7 steps) [c3e533692527046fb55020e7fac8c4272644ba45] Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next testing commit c3e533692527046fb55020e7fac8c4272644ba45 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 44d587ef6da50965cb5036cfb3e3480944c35342999597126cfe4baaa8c4da35 run #0: crashed: WARNING: proc registration bug in clusterip_tg_check run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: crashed: WARNING: proc registration bug in clusterip_tg_check run #4: crashed: WARNING: proc registration bug in clusterip_tg_check run #5: crashed: WARNING: proc registration bug in clusterip_tg_check run #6: crashed: WARNING: proc registration bug in clusterip_tg_check run #7: crashed: WARNING: proc registration bug in clusterip_tg_check run #8: crashed: WARNING: proc registration bug in clusterip_tg_check run #9: crashed: WARNING: proc registration bug in clusterip_tg_check run #10: crashed: WARNING: proc registration bug in clusterip_tg_check run #11: crashed: WARNING: proc registration bug in clusterip_tg_check run #12: crashed: WARNING: proc registration bug in clusterip_tg_check run #13: crashed: WARNING: proc registration bug in clusterip_tg_check run #14: crashed: WARNING: proc registration bug in clusterip_tg_check run #15: crashed: WARNING: proc registration bug in clusterip_tg_check run #16: OK run #17: crashed: WARNING: proc registration bug in clusterip_tg_check run #18: OK run #19: OK # git bisect bad c3e533692527046fb55020e7fac8c4272644ba45 Bisecting: 57 revisions left to test after this (roughly 6 steps) [9df95e8ec568f98d89fe2c72342714296ac6ce27] bpf: sparc64: Enable sparc64 jit to provide bpf_line_info testing commit 9df95e8ec568f98d89fe2c72342714296ac6ce27 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 4ecac9485c382c36063efd61e30e9479c12eaec0b8d9dd04ab74ed7f9faf7145 all runs: OK # git bisect good 9df95e8ec568f98d89fe2c72342714296ac6ce27 Bisecting: 28 revisions left to test after this (roughly 5 steps) [06aa151ad1fc74a49b45336672515774a678d78d] netfilter: ipt_CLUSTERIP: check MAC address when duplicate config is set testing commit 06aa151ad1fc74a49b45336672515774a678d78d compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 5ef197ff8201ea07c60e336e8db294568a7a19413c92541338ace2352413c29f run #0: crashed: WARNING: proc registration bug in clusterip_tg_check run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: crashed: WARNING: proc registration bug in clusterip_tg_check run #4: crashed: WARNING: proc registration bug in clusterip_tg_check run #5: crashed: WARNING: proc registration bug in clusterip_tg_check run #6: crashed: WARNING: proc registration bug in clusterip_tg_check run #7: crashed: WARNING: proc registration bug in clusterip_tg_check run #8: crashed: WARNING: proc registration bug in clusterip_tg_check run #9: crashed: WARNING: proc registration bug in clusterip_tg_check run #10: crashed: WARNING: proc registration bug in clusterip_tg_check run #11: crashed: WARNING: proc registration bug in clusterip_tg_check run #12: crashed: WARNING: proc registration bug in clusterip_tg_check run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 06aa151ad1fc74a49b45336672515774a678d78d Bisecting: 14 revisions left to test after this (roughly 4 steps) [a504b703bb1da526a01593da0e4be2af9d9f5fa8] netfilter: nat: limit port clash resolution attempts testing commit a504b703bb1da526a01593da0e4be2af9d9f5fa8 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 85eb006fa82a18d934cca28c33e6c99b9534b93448823041b345f7eeaf19f0cd all runs: OK # git bisect good a504b703bb1da526a01593da0e4be2af9d9f5fa8 Bisecting: 7 revisions left to test after this (roughly 3 steps) [76b90019e03d866eab85cb57c2a6416ab94284dc] netfilter: nat: remove l4proto->nlattr_to_range testing commit 76b90019e03d866eab85cb57c2a6416ab94284dc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 58a687891646da1d0dcb0af89bca23c92a535c1391ef38483a093c162eeffccf all runs: OK # git bisect good 76b90019e03d866eab85cb57c2a6416ab94284dc Bisecting: 3 revisions left to test after this (roughly 2 steps) [241faeceb849cb02c6439ecb2a08f14bf409dd30] netfilter: nf_tables: Speed up selective rule dumps testing commit 241faeceb849cb02c6439ecb2a08f14bf409dd30 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 0cbc4ed433aeac2df6b47f0566b0836ee4b3348a45b0bc8382714b5b841215cd all runs: OK # git bisect good 241faeceb849cb02c6439ecb2a08f14bf409dd30 Bisecting: 1 revision left to test after this (roughly 1 step) [b12f7bad5ad3724d19754390a3e80928525c0769] netfilter: ipt_CLUSTERIP: remove wrong WARN_ON_ONCE in netns exit routine testing commit b12f7bad5ad3724d19754390a3e80928525c0769 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 13393c7f846b91a43ccc160f6a1c940f1ecb387f0c7f7f4ea748bc79f521444b all runs: OK # git bisect good b12f7bad5ad3724d19754390a3e80928525c0769 Bisecting: 0 revisions left to test after this (roughly 0 steps) [2a61d8b883bbad26b06d2e6cc3777a697e78830d] netfilter: ipt_CLUSTERIP: fix sleep-in-atomic bug in clusterip_config_entry_put() testing commit 2a61d8b883bbad26b06d2e6cc3777a697e78830d compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 7b7d7a334b2b37bee36e2e74eedcbccff4e8ef71f893b6cd6abc10520e1c0dff run #0: basic kernel testing failed: KASAN: use-after-free Read in batadv_iv_ogm_queue_add run #1: crashed: WARNING: proc registration bug in clusterip_tg_check run #2: crashed: WARNING: proc registration bug in clusterip_tg_check run #3: crashed: WARNING: proc registration bug in clusterip_tg_check run #4: crashed: WARNING: proc registration bug in clusterip_tg_check run #5: crashed: WARNING: proc registration bug in clusterip_tg_check run #6: crashed: WARNING: proc registration bug in clusterip_tg_check run #7: crashed: WARNING: proc registration bug in clusterip_tg_check run #8: crashed: WARNING: proc registration bug in clusterip_tg_check run #9: crashed: WARNING: proc registration bug in clusterip_tg_check run #10: crashed: WARNING: proc registration bug in clusterip_tg_check run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 2a61d8b883bbad26b06d2e6cc3777a697e78830d 2a61d8b883bbad26b06d2e6cc3777a697e78830d is the first bad commit commit 2a61d8b883bbad26b06d2e6cc3777a697e78830d Author: Taehee Yoo Date: Mon Nov 5 18:23:13 2018 +0900 netfilter: ipt_CLUSTERIP: fix sleep-in-atomic bug in clusterip_config_entry_put() A proc_remove() can sleep. so that it can't be inside of spin_lock. Hence proc_remove() is moved to outside of spin_lock. and it also adds mutex to sync create and remove of proc entry(config->pde). test commands: SHELL#1 %while :; do iptables -A INPUT -p udp -i enp2s0 -d 192.168.1.100 \ --dport 9000 -j CLUSTERIP --new --hashmode sourceip \ --clustermac 01:00:5e:00:00:21 --total-nodes 3 --local-node 3; \ iptables -F; done SHELL#2 %while :; do echo +1 > /proc/net/ipt_CLUSTERIP/192.168.1.100; \ echo -1 > /proc/net/ipt_CLUSTERIP/192.168.1.100; done [ 2949.569864] BUG: sleeping function called from invalid context at kernel/sched/completion.c:99 [ 2949.579944] in_atomic(): 1, irqs_disabled(): 0, pid: 5472, name: iptables [ 2949.587920] 1 lock held by iptables/5472: [ 2949.592711] #0: 000000008f0ebcf2 (&(&cn->lock)->rlock){+...}, at: refcount_dec_and_lock+0x24/0x50 [ 2949.603307] CPU: 1 PID: 5472 Comm: iptables Tainted: G W 4.19.0-rc5+ #16 [ 2949.604212] Hardware name: To be filled by O.E.M. To be filled by O.E.M./Aptio CRB, BIOS 5.6.5 07/08/2015 [ 2949.604212] Call Trace: [ 2949.604212] dump_stack+0xc9/0x16b [ 2949.604212] ? show_regs_print_info+0x5/0x5 [ 2949.604212] ___might_sleep+0x2eb/0x420 [ 2949.604212] ? set_rq_offline.part.87+0x140/0x140 [ 2949.604212] ? _rcu_barrier_trace+0x400/0x400 [ 2949.604212] wait_for_completion+0x94/0x710 [ 2949.604212] ? wait_for_completion_interruptible+0x780/0x780 [ 2949.604212] ? __kernel_text_address+0xe/0x30 [ 2949.604212] ? __lockdep_init_map+0x10e/0x5c0 [ 2949.604212] ? __lockdep_init_map+0x10e/0x5c0 [ 2949.604212] ? __init_waitqueue_head+0x86/0x130 [ 2949.604212] ? init_wait_entry+0x1a0/0x1a0 [ 2949.604212] proc_entry_rundown+0x208/0x270 [ 2949.604212] ? proc_reg_get_unmapped_area+0x370/0x370 [ 2949.604212] ? __lock_acquire+0x4500/0x4500 [ 2949.604212] ? complete+0x18/0x70 [ 2949.604212] remove_proc_subtree+0x143/0x2a0 [ 2949.708655] ? remove_proc_entry+0x390/0x390 [ 2949.708655] clusterip_tg_destroy+0x27a/0x630 [ipt_CLUSTERIP] [ ... ] Fixes: b3e456fce9f5 ("netfilter: ipt_CLUSTERIP: fix a race condition of proc file creation") Signed-off-by: Taehee Yoo Signed-off-by: Pablo Neira Ayuso net/ipv4/netfilter/ipt_CLUSTERIP.c | 19 ++++++++++++++----- 1 file changed, 14 insertions(+), 5 deletions(-) culprit signature: 7b7d7a334b2b37bee36e2e74eedcbccff4e8ef71f893b6cd6abc10520e1c0dff parent signature: 13393c7f846b91a43ccc160f6a1c940f1ecb387f0c7f7f4ea748bc79f521444b Reproducer flagged being flaky revisions tested: 30, total time: 7h49m6.001552457s (build: 3h8m16.990305133s, test: 4h36m27.20017895s) first bad commit: 2a61d8b883bbad26b06d2e6cc3777a697e78830d netfilter: ipt_CLUSTERIP: fix sleep-in-atomic bug in clusterip_config_entry_put() recipients (to): ["ap420073@gmail.com" "coreteam@netfilter.org" "davem@davemloft.net" "fw@strlen.de" "kadlec@blackhole.kfki.hu" "kuznet@ms2.inr.ac.ru" "netdev@vger.kernel.org" "netfilter-devel@vger.kernel.org" "pablo@netfilter.org" "pablo@netfilter.org" "yoshfuji@linux-ipv6.org"] recipients (cc): ["linux-kernel@vger.kernel.org"] crash: WARNING: proc registration bug in clusterip_tg_check x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT ------------[ cut here ]------------ proc_dir_entry 'ipt_CLUSTERIP/172.30.0.2' already registered WARNING: CPU: 1 PID: 13861 at fs/proc/generic.c:360 proc_register+0x2c3/0x490 fs/proc/generic.c:359 Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 13861 Comm: syz-executor.1 Not tainted 4.20.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x86/0xca lib/dump_stack.c:113 panic+0x1e7/0x358 kernel/panic.c:188 __warn.cold.7+0x1b/0x3b kernel/panic.c:540 report_bug+0x1a1/0x200 lib/bug.c:186 fixup_bug arch/x86/kernel/traps.c:178 [inline] fixup_bug arch/x86/kernel/traps.c:173 [inline] do_error_trap+0x11b/0x1c0 arch/x86/kernel/traps.c:271 do_invalid_op+0x36/0x40 arch/x86/kernel/traps.c:290 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:969 RIP: 0010:proc_register+0x2c3/0x490 fs/proc/generic.c:359 Code: 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 c1 01 00 00 49 8b b4 24 c8 00 00 00 48 c7 c7 60 13 f5 87 e8 00 ca 84 ff <0f> 0b 48 c7 c7 20 15 85 89 e8 ef cf d5 05 4c 89 ea 48 b8 00 00 00 RSP: 0018:ffff8880a9c5f638 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffffed101446806a RCX: 0000000000000000 RDX: 0000000000000004 RSI: ffffffff88308160 RDI: ffffffff8b7b9960 RBP: ffff8880a9c5f688 R08: ffffed1017468639 R09: ffffed1017468638 R10: ffffed1017468638 R11: ffff8880ba3431c7 R12: ffff8880addaba00 R13: ffff8880a2340304 R14: ffff8880a2340348 R15: ffff8880a2340280 proc_create_data+0x9f/0xf0 fs/proc/generic.c:546 clusterip_config_init net/ipv4/netfilter/ipt_CLUSTERIP.c:285 [inline] clusterip_tg_check+0xee5/0x13e0 net/ipv4/netfilter/ipt_CLUSTERIP.c:506 xt_check_target+0x200/0x640 net/netfilter/x_tables.c:1024 check_target net/ipv4/netfilter/ip_tables.c:514 [inline] find_check_entry.isra.2+0x630/0x8b0 net/ipv4/netfilter/ip_tables.c:556 translate_table+0xc83/0x1af0 net/ipv4/netfilter/ip_tables.c:720 do_replace net/ipv4/netfilter/ip_tables.c:1139 [inline] do_ipt_set_ctl+0x259/0x3e5 net/ipv4/netfilter/ip_tables.c:1675 nf_sockopt net/netfilter/nf_sockopt.c:106 [inline] nf_setsockopt+0x5c/0xb0 net/netfilter/nf_sockopt.c:115 ip_setsockopt net/ipv4/ip_sockglue.c:1260 [inline] ip_setsockopt+0x59/0x70 net/ipv4/ip_sockglue.c:1240 udp_setsockopt+0x16/0x30 net/ipv4/udp.c:2649 sock_common_setsockopt+0x73/0xf0 net/core/sock.c:2982 __sys_setsockopt+0x13e/0x210 net/socket.c:1902 __do_sys_setsockopt net/socket.c:1913 [inline] __se_sys_setsockopt net/socket.c:1910 [inline] __x64_sys_setsockopt+0xb9/0x150 net/socket.c:1910 do_syscall_64+0xa3/0x440 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa90e2a7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000000000040 RSI: 8001000000000000 RDI: 0000000000000003 RBP: 00000000004bfcc4 R08: 00000000000002a8 R09: 0000000000000000 R10: 00000000200004c0 R11: 0000000000000246 R12: 000000000056bf80 R13: 00007ffd224e70bf R14: 00007fa90e2a7300 R15: 0000000000022000 Kernel Offset: disabled Rebooting in 86400 seconds..