bisecting fixing commit since af5043c89a8ef6b6949a245fff355a552eaed240 building syzkaller on 16fca0c8ebd6f95e249caa4fbebe9b3b63b508b4 testing commit af5043c89a8ef6b6949a245fff355a552eaed240 with gcc (GCC) 10.2.1 20210217 kernel signature: 89b1e0f4c9d26455c608e5dc08b8d10877fa0a62eb83e115a6dc56ef60c527d5 run #0: basic kernel testing failed: BUG: sleeping function called from invalid context in sta_info_move_state run #1: basic kernel testing failed: BUG: sleeping function called from invalid context in sta_info_move_state run #2: crashed: BUG: sleeping function called from invalid context in sta_info_move_state run #3: crashed: BUG: sleeping function called from invalid context in sta_info_move_state run #4: crashed: BUG: sleeping function called from invalid context in sta_info_move_state run #5: crashed: BUG: sleeping function called from invalid context in sta_info_move_state run #6: crashed: BUG: sleeping function called from invalid context in sta_info_move_state run #7: crashed: BUG: sleeping function called from invalid context in sta_info_move_state run #8: crashed: KASAN: slab-out-of-bounds Write in hci_chan_del run #9: crashed: KASAN: use-after-free Read in hci_chan_del run #10: crashed: KASAN: slab-out-of-bounds Write in hci_chan_del run #11: crashed: KASAN: slab-out-of-bounds Write in hci_chan_del run #12: crashed: KASAN: slab-out-of-bounds Write in hci_chan_del run #13: crashed: KASAN: use-after-free Read in hci_chan_del run #14: crashed: KASAN: use-after-free Read in hci_chan_del run #15: crashed: KASAN: slab-out-of-bounds Write in hci_chan_del run #16: crashed: KASAN: slab-out-of-bounds Write in hci_chan_del run #17: crashed: KASAN: use-after-free Read in hci_chan_del run #18: crashed: KASAN: use-after-free Read in hci_chan_del run #19: crashed: KASAN: slab-out-of-bounds Write in hci_chan_del testing current HEAD 614124bea77e452aa6df7a8714e8bc820b489922 testing commit 614124bea77e452aa6df7a8714e8bc820b489922 with gcc (GCC) 10.2.1 20210217 kernel signature: cd53071815ba17b64051ef235e67b524d4814415756d55678ff65b716ed3dcf8 all runs: OK # git bisect start 614124bea77e452aa6df7a8714e8bc820b489922 af5043c89a8ef6b6949a245fff355a552eaed240 Bisecting: 23327 revisions left to test after this (roughly 15 steps) [d99676af540c2dc829999928fb81c58c80a1dce4] Merge tag 'drm-next-2021-02-19' of git://anongit.freedesktop.org/drm/drm testing commit d99676af540c2dc829999928fb81c58c80a1dce4 with gcc (GCC) 10.2.1 20210217 kernel signature: 0f30b96ff6a99d51a970e4327af889bc73a95d850039882ebd0741b81a44c91d run #0: crashed: UBSAN: array-index-out-of-bounds in skb_dequeue run #1: crashed: KASAN: slab-out-of-bounds Write in hci_chan_del run #2: crashed: KASAN: use-after-free Read in hci_chan_del run #3: crashed: kernel panic: Fatal exception run #4: crashed: KASAN: slab-out-of-bounds Write in hci_chan_del run #5: crashed: UBSAN: array-index-out-of-bounds in skb_dequeue run #6: crashed: UBSAN: array-index-out-of-bounds in skb_dequeue run #7: crashed: KASAN: use-after-free Read in hci_chan_del run #8: crashed: KASAN: use-after-free Read in hci_chan_del run #9: crashed: KASAN: use-after-free Read in hci_chan_del # git bisect good d99676af540c2dc829999928fb81c58c80a1dce4 Bisecting: 11889 revisions left to test after this (roughly 14 steps) [211f9f2e0503efa4023a46920e7ad07377b4ec58] orangefs: leave files in the page cache for a few micro seconds at least testing commit 211f9f2e0503efa4023a46920e7ad07377b4ec58 with gcc (GCC) 10.2.1 20210217 kernel signature: d85ce05a8c31e08386a23cff17862796f925a0a0682c8659382afb43520d0c93 run #0: crashed: kernel panic: Fatal exception run #1: crashed: KASAN: slab-out-of-bounds Write in hci_chan_del run #2: crashed: general protection fault in hci_chan_del run #3: crashed: KASAN: slab-out-of-bounds Write in hci_chan_del run #4: crashed: KASAN: use-after-free Read in hci_chan_del run #5: crashed: KASAN: slab-out-of-bounds Write in hci_chan_del run #6: crashed: KASAN: slab-out-of-bounds Write in hci_chan_del run #7: crashed: KASAN: use-after-free Read in hci_chan_del run #8: crashed: KASAN: slab-out-of-bounds Write in hci_chan_del run #9: crashed: KASAN: slab-out-of-bounds Write in hci_chan_del # git bisect good 211f9f2e0503efa4023a46920e7ad07377b4ec58 Bisecting: 5458 revisions left to test after this (roughly 13 steps) [9d31d2338950293ec19d9b095fbaa9030899dcb4] Merge tag 'net-next-5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next testing commit 9d31d2338950293ec19d9b095fbaa9030899dcb4 with gcc (GCC) 10.2.1 20210217 kernel signature: e965a9447c0e8c6ec563970f11f6d6cba2451c8820777b6b89c2c38de32b4c38 run #0: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #1: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #2: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #3: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #4: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #5: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #6: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #7: crashed: WARNING in __nf_unregister_net_hook run #8: crashed: WARNING in __nf_unregister_net_hook run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect good 9d31d2338950293ec19d9b095fbaa9030899dcb4 Bisecting: 2718 revisions left to test after this (roughly 11 steps) [e4adffb8daf476a01e7b4a55f586dc8c26e81392] Merge tag 'dmaengine-5.13-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/vkoul/dmaengine testing commit e4adffb8daf476a01e7b4a55f586dc8c26e81392 with gcc (GCC) 10.2.1 20210217 kernel signature: 77ad84d5835f5174b1b87020a0f1756c001c0dded6b3a323891ba71a8725a9fc run #0: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #1: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #2: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #3: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #4: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #5: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #6: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #7: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #8: crashed: WARNING in __nf_unregister_net_hook run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect good e4adffb8daf476a01e7b4a55f586dc8c26e81392 Bisecting: 1359 revisions left to test after this (roughly 10 steps) [c1cf1afd8b0f2f1b077df84e90497c07094406fc] net: hns: Fix kernel-doc testing commit c1cf1afd8b0f2f1b077df84e90497c07094406fc with gcc (GCC) 10.2.1 20210217 kernel signature: 6833753641665222bb0f943c2ff5b7319d0de3e65d0aa688858bec0ffc3caf12 all runs: OK # git bisect bad c1cf1afd8b0f2f1b077df84e90497c07094406fc Bisecting: 672 revisions left to test after this (roughly 9 steps) [682a8e2b41effcaf2e80697e395d47f77c91273f] Merge tag 'ecryptfs-5.13-rc1-updates' of git://git.kernel.org/pub/scm/linux/kernel/git/tyhicks/ecryptfs testing commit 682a8e2b41effcaf2e80697e395d47f77c91273f with gcc (GCC) 10.2.1 20210217 kernel signature: 048a755600ed1232fc9c0bb476879e662e5076774157dc01651a5c236c317d00 run #0: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #1: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #2: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #3: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #4: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #5: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #6: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #7: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #8: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect good 682a8e2b41effcaf2e80697e395d47f77c91273f Bisecting: 334 revisions left to test after this (roughly 8 steps) [2059c40aded724b3af139abb55cabeab5e0f5878] Merge tag 'sound-fix-5.13-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound testing commit 2059c40aded724b3af139abb55cabeab5e0f5878 with gcc (GCC) 10.2.1 20210217 kernel signature: 99befe692cbe21c66fab93b03c5d29adb32bb700441708ba1c1add763b93f58e run #0: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #1: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #2: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #3: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #4: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #5: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #6: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #7: crashed: WARNING in __nf_unregister_net_hook run #8: crashed: WARNING in __nf_unregister_net_hook run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect good 2059c40aded724b3af139abb55cabeab5e0f5878 Bisecting: 167 revisions left to test after this (roughly 7 steps) [07db05638aa25ed66e6fc89b45f6773ef3e69396] Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi testing commit 07db05638aa25ed66e6fc89b45f6773ef3e69396 with gcc (GCC) 10.2.1 20210217 kernel signature: bd4bc8bfa60352ac375f2543045f6afcb359775d040bd234aa5b919f3ec56fb6 all runs: OK # git bisect bad 07db05638aa25ed66e6fc89b45f6773ef3e69396 Bisecting: 83 revisions left to test after this (roughly 6 steps) [55bc1af3d9115d669570aa633e5428d6e2302e8f] Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf testing commit 55bc1af3d9115d669570aa633e5428d6e2302e8f with gcc (GCC) 10.2.1 20210217 kernel signature: 1451170b2ffbeb70eed69428e511a53628fcdd048d3d32650fef63e6fa65bd34 all runs: OK # git bisect bad 55bc1af3d9115d669570aa633e5428d6e2302e8f Bisecting: 41 revisions left to test after this (roughly 5 steps) [d89ecd154c23dbee3461efaceaa60263cc9e8fee] Merge branch 'sctp-race-fix' testing commit d89ecd154c23dbee3461efaceaa60263cc9e8fee with gcc (GCC) 10.2.1 20210217 kernel signature: 22248d6d072285a33038696c6a679e3fafb8ade7aaef5f52ef5513be9d2c8a3c run #0: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #1: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #2: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #3: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #4: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #5: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #6: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #7: crashed: WARNING in __nf_unregister_net_hook run #8: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect good d89ecd154c23dbee3461efaceaa60263cc9e8fee Bisecting: 20 revisions left to test after this (roughly 4 steps) [9f3c3b423567f09ab73d6e89eaccd7fe8a8741f5] Merge tag 'linux-can-fixes-for-5.13-20210506' of git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can testing commit 9f3c3b423567f09ab73d6e89eaccd7fe8a8741f5 with gcc (GCC) 10.2.1 20210217 kernel signature: 601d23f596f892eb5ec28e10b324ab9d367d6f6cca0a3e6bb297b761455ad5c1 all runs: basic kernel testing failed: WARNING in __nf_unregister_net_hook # git bisect skip 9f3c3b423567f09ab73d6e89eaccd7fe8a8741f5 Bisecting: 20 revisions left to test after this (roughly 4 steps) [6a780f51f87b430cc69ebf4e859e7e9be720b283] net: ipa: fix inter-EE IRQ register definitions testing commit 6a780f51f87b430cc69ebf4e859e7e9be720b283 with gcc (GCC) 10.2.1 20210217 kernel signature: 601d23f596f892eb5ec28e10b324ab9d367d6f6cca0a3e6bb297b761455ad5c1 run #0: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #1: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #2: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #3: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #4: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #5: crashed: WARNING in __nf_unregister_net_hook run #6: crashed: WARNING in __nf_unregister_net_hook run #7: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #8: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect good 6a780f51f87b430cc69ebf4e859e7e9be720b283 Bisecting: 8 revisions left to test after this (roughly 3 steps) [e4d4a27220a3afdfacf7fbcdc895b08d754f0de1] Merge branch '40GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/net-queue testing commit e4d4a27220a3afdfacf7fbcdc895b08d754f0de1 with gcc (GCC) 10.2.1 20210217 kernel signature: 5e1e92dc2a5e14dfea14d79bbc231b23fdce90e54ca4da757dd4ff6773fd84ef run #0: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #1: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #2: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #3: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #4: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #5: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #6: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #7: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #8: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect good e4d4a27220a3afdfacf7fbcdc895b08d754f0de1 Bisecting: 3 revisions left to test after this (roughly 2 steps) [198ad973839ca4686f3575155ba9ff178289905f] netfilter: remove BUG_ON() after skb_header_pointer() testing commit 198ad973839ca4686f3575155ba9ff178289905f with gcc (GCC) 10.2.1 20210217 kernel signature: d9529ce6483bfa6e883b4ad015393db2f2c1f2e93dbe543f4da54f7704a9554b all runs: OK # git bisect bad 198ad973839ca4686f3575155ba9ff178289905f Bisecting: 2 revisions left to test after this (roughly 1 step) [43016d02cf6e46edfc4696452251d34bba0c0435] netfilter: arptables: use pernet ops struct during unregister testing commit 43016d02cf6e46edfc4696452251d34bba0c0435 with gcc (GCC) 10.2.1 20210217 kernel signature: 0fdb2effe99e19226fbcaedcaa96cc979eab3bf5f58df307ec33318c5012d3d1 all runs: OK # git bisect bad 43016d02cf6e46edfc4696452251d34bba0c0435 Bisecting: 0 revisions left to test after this (roughly 0 steps) [c7d13358b6a2f49f81a34aa323a2d0878a0532a2] netfilter: xt_SECMARK: add new revision to fix structure layout testing commit c7d13358b6a2f49f81a34aa323a2d0878a0532a2 with gcc (GCC) 10.2.1 20210217 kernel signature: fab296bc633d1303d7f172e8ea8a3470e417fca1a53e686ee3220e0cad3dedb0 run #0: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #1: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #2: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #3: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #4: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #5: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #6: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #7: crashed: WARNING in __nf_unregister_net_hook run #8: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect good c7d13358b6a2f49f81a34aa323a2d0878a0532a2 43016d02cf6e46edfc4696452251d34bba0c0435 is the first bad commit commit 43016d02cf6e46edfc4696452251d34bba0c0435 Author: Florian Westphal Date: Mon May 3 13:51:15 2021 +0200 netfilter: arptables: use pernet ops struct during unregister Like with iptables and ebtables, hook unregistration has to use the pernet ops struct, not the template. This triggered following splat: hook not found, pf 3 num 0 WARNING: CPU: 0 PID: 224 at net/netfilter/core.c:480 __nf_unregister_net_hook+0x1eb/0x610 net/netfilter/core.c:480 [..] nf_unregister_net_hook net/netfilter/core.c:502 [inline] nf_unregister_net_hooks+0x117/0x160 net/netfilter/core.c:576 arpt_unregister_table_pre_exit+0x67/0x80 net/ipv4/netfilter/arp_tables.c:1565 Fixes: f9006acc8dfe5 ("netfilter: arp_tables: pass table pointer via nf_hook_ops") Reported-by: syzbot+dcccba8a1e41a38cb9df@syzkaller.appspotmail.com Signed-off-by: Florian Westphal Signed-off-by: Pablo Neira Ayuso include/linux/netfilter_arp/arp_tables.h | 3 +-- net/ipv4/netfilter/arp_tables.c | 5 ++--- net/ipv4/netfilter/arptable_filter.c | 2 +- 3 files changed, 4 insertions(+), 6 deletions(-) culprit signature: 0fdb2effe99e19226fbcaedcaa96cc979eab3bf5f58df307ec33318c5012d3d1 parent signature: fab296bc633d1303d7f172e8ea8a3470e417fca1a53e686ee3220e0cad3dedb0 revisions tested: 18, total time: 3h46m49.902160073s (build: 1h59m10.223797235s, test: 1h45m11.89897316s) first good commit: 43016d02cf6e46edfc4696452251d34bba0c0435 netfilter: arptables: use pernet ops struct during unregister recipients (to): ["coreteam@netfilter.org" "davem@davemloft.net" "dsahern@kernel.org" "fw@strlen.de" "fw@strlen.de" "kadlec@netfilter.org" "kuba@kernel.org" "netdev@vger.kernel.org" "netfilter-devel@vger.kernel.org" "pablo@netfilter.org" "pablo@netfilter.org" "yoshfuji@linux-ipv6.org"] recipients (cc): ["linux-kernel@vger.kernel.org"]