BUG: using smp_processor_id() in preemptible code in ip_vs_sched_persist

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: dffb5c6ff09c Linux 4.14.280
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=12a5db8ef00000
kernel config: https://syzkaller.appspot.com/x/.config?x=9bde605ce69ece2e
dashboard link: https://syzkaller.appspot.com/bug?extid=096344af0ab9a573c89a
compiler: gcc version 10.2.1 20210110 (Debian 10.2.1-6)

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+096344...@syzkaller.appspotmail.com

BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21543
caller is ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:182 [inline]
caller is ip_vs_sched_persist+0x8e7/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
CPU: 1 PID: 21543 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x1b2/0x281 lib/dump_stack.c:58
check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:182 [inline]
ip_vs_sched_persist+0x8e7/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
ip_vs_schedule+0xa08/0xd30 net/netfilter/ipvs/ip_vs_core.c:485
tcp_conn_schedule+0x464/0x810 net/netfilter/ipvs/ip_vs_proto_tcp.c:90
ip_vs_try_to_schedule net/netfilter/ipvs/ip_vs_core.c:1519 [inline]
ip_vs_in+0x16a7/0x2140 net/netfilter/ipvs/ip_vs_core.c:1953
nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
nf_hook include/linux/netfilter.h:205 [inline]
__ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
__tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
__inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
sock_sendmsg_nosec net/socket.c:646 [inline]
sock_sendmsg+0xb5/0x100 net/socket.c:656
SYSC_sendto net/socket.c:1763 [inline]
SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21543
caller is ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:187 [inline]
caller is ip_vs_sched_persist+0x962/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
CPU: 1 PID: 21543 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x1b2/0x281 lib/dump_stack.c:58
check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:187 [inline]
ip_vs_sched_persist+0x962/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
ip_vs_schedule+0xa08/0xd30 net/netfilter/ipvs/ip_vs_core.c:485
tcp_conn_schedule+0x464/0x810 net/netfilter/ipvs/ip_vs_proto_tcp.c:90
ip_vs_try_to_schedule net/netfilter/ipvs/ip_vs_core.c:1519 [inline]
ip_vs_in+0x16a7/0x2140 net/netfilter/ipvs/ip_vs_core.c:1953
nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
nf_hook include/linux/netfilter.h:205 [inline]
__ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
__tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
__inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
sock_sendmsg_nosec net/socket.c:646 [inline]
sock_sendmsg+0xb5/0x100 net/socket.c:656
SYSC_sendto net/socket.c:1763 [inline]
SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21543
caller is ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:192 [inline]
caller is ip_vs_sched_persist+0x9dc/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
CPU: 1 PID: 21543 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x1b2/0x281 lib/dump_stack.c:58
check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:192 [inline]
ip_vs_sched_persist+0x9dc/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
ip_vs_schedule+0xa08/0xd30 net/netfilter/ipvs/ip_vs_core.c:485
tcp_conn_schedule+0x464/0x810 net/netfilter/ipvs/ip_vs_proto_tcp.c:90
ip_vs_try_to_schedule net/netfilter/ipvs/ip_vs_core.c:1519 [inline]
ip_vs_in+0x16a7/0x2140 net/netfilter/ipvs/ip_vs_core.c:1953
nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
nf_hook include/linux/netfilter.h:205 [inline]
__ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
__tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
__inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
sock_sendmsg_nosec net/socket.c:646 [inline]
sock_sendmsg+0xb5/0x100 net/socket.c:656
SYSC_sendto net/socket.c:1763 [inline]
SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21543
caller is ip_vs_in_stats net/netfilter/ipvs/ip_vs_core.c:122 [inline]
caller is ip_vs_in+0xfbe/0x2140 net/netfilter/ipvs/ip_vs_core.c:1980
CPU: 1 PID: 21543 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x1b2/0x281 lib/dump_stack.c:58
check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
ip_vs_in_stats net/netfilter/ipvs/ip_vs_core.c:122 [inline]
ip_vs_in+0xfbe/0x2140 net/netfilter/ipvs/ip_vs_core.c:1980
nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
nf_hook include/linux/netfilter.h:205 [inline]
__ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
__tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
__inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
sock_sendmsg_nosec net/socket.c:646 [inline]
sock_sendmsg+0xb5/0x100 net/socket.c:656
SYSC_sendto net/socket.c:1763 [inline]
SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21543
caller is ip_vs_in_stats net/netfilter/ipvs/ip_vs_core.c:129 [inline]
caller is ip_vs_in+0x10e6/0x2140 net/netfilter/ipvs/ip_vs_core.c:1980
CPU: 1 PID: 21543 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x1b2/0x281 lib/dump_stack.c:58
check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
ip_vs_in_stats net/netfilter/ipvs/ip_vs_core.c:129 [inline]
ip_vs_in+0x10e6/0x2140 net/netfilter/ipvs/ip_vs_core.c:1980
nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
nf_hook include/linux/netfilter.h:205 [inline]
__ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
__tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
__inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
sock_sendmsg_nosec net/socket.c:646 [inline]
sock_sendmsg+0xb5/0x100 net/socket.c:656
SYSC_sendto net/socket.c:1763 [inline]
SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21543
caller is ip_vs_in_stats net/netfilter/ipvs/ip_vs_core.c:135 [inline]
caller is ip_vs_in+0x11d3/0x2140 net/netfilter/ipvs/ip_vs_core.c:1980
CPU: 1 PID: 21543 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x1b2/0x281 lib/dump_stack.c:58
check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
ip_vs_in_stats net/netfilter/ipvs/ip_vs_core.c:135 [inline]
ip_vs_in+0x11d3/0x2140 net/netfilter/ipvs/ip_vs_core.c:1980
nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
nf_hook include/linux/netfilter.h:205 [inline]
__ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
__tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
__inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
sock_sendmsg_nosec net/socket.c:646 [inline]
sock_sendmsg+0xb5/0x100 net/socket.c:656
SYSC_sendto net/socket.c:1763 [inline]
SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21591
caller is ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:182 [inline]
caller is ip_vs_sched_persist+0x8e7/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
CPU: 0 PID: 21591 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
IPVS: fo: TCP 172.20.20.187:0 - no destination available
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x1b2/0x281 lib/dump_stack.c:58
check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:182 [inline]
ip_vs_sched_persist+0x8e7/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
ip_vs_schedule+0xa08/0xd30 net/netfilter/ipvs/ip_vs_core.c:485
tcp_conn_schedule+0x464/0x810 net/netfilter/ipvs/ip_vs_proto_tcp.c:90
ip_vs_try_to_schedule net/netfilter/ipvs/ip_vs_core.c:1519 [inline]
ip_vs_in+0x16a7/0x2140 net/netfilter/ipvs/ip_vs_core.c:1953
nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
nf_hook include/linux/netfilter.h:205 [inline]
__ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
__tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
__inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
sock_sendmsg_nosec net/socket.c:646 [inline]
sock_sendmsg+0xb5/0x100 net/socket.c:656
SYSC_sendto net/socket.c:1763 [inline]
SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21591
caller is ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:187 [inline]
caller is ip_vs_sched_persist+0x962/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
CPU: 0 PID: 21591 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x1b2/0x281 lib/dump_stack.c:58
check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:187 [inline]
ip_vs_sched_persist+0x962/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
ip_vs_schedule+0xa08/0xd30 net/netfilter/ipvs/ip_vs_core.c:485
tcp_conn_schedule+0x464/0x810 net/netfilter/ipvs/ip_vs_proto_tcp.c:90
ip_vs_try_to_schedule net/netfilter/ipvs/ip_vs_core.c:1519 [inline]
ip_vs_in+0x16a7/0x2140 net/netfilter/ipvs/ip_vs_core.c:1953
nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
nf_hook include/linux/netfilter.h:205 [inline]
__ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
__tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
__inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
sock_sendmsg_nosec net/socket.c:646 [inline]
sock_sendmsg+0xb5/0x100 net/socket.c:656
SYSC_sendto net/socket.c:1763 [inline]
SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21591
caller is ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:192 [inline]
caller is ip_vs_sched_persist+0x9dc/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
CPU: 0 PID: 21591 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x1b2/0x281 lib/dump_stack.c:58
check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
ip_vs_conn_stats net/netfilter/ipvs/ip_vs_core.c:192 [inline]
ip_vs_sched_persist+0x9dc/0x1140 net/netfilter/ipvs/ip_vs_core.c:393
ip_vs_schedule+0xa08/0xd30 net/netfilter/ipvs/ip_vs_core.c:485
tcp_conn_schedule+0x464/0x810 net/netfilter/ipvs/ip_vs_proto_tcp.c:90
ip_vs_try_to_schedule net/netfilter/ipvs/ip_vs_core.c:1519 [inline]
ip_vs_in+0x16a7/0x2140 net/netfilter/ipvs/ip_vs_core.c:1953
nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
nf_hook include/linux/netfilter.h:205 [inline]
__ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
__tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
__inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
sock_sendmsg_nosec net/socket.c:646 [inline]
sock_sendmsg+0xb5/0x100 net/socket.c:656
SYSC_sendto net/socket.c:1763 [inline]
SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/21591
caller is ip_vs_in_stats net/netfilter/ipvs/ip_vs_core.c:122 [inline]
caller is ip_vs_in+0xfbe/0x2140 net/netfilter/ipvs/ip_vs_core.c:1980
CPU: 0 PID: 21591 Comm: syz-executor.0 Not tainted 4.14.280-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x1b2/0x281 lib/dump_stack.c:58
check_preemption_disabled+0x214/0x240 lib/smp_processor_id.c:47
ip_vs_in_stats net/netfilter/ipvs/ip_vs_core.c:122 [inline]
ip_vs_in+0xfbe/0x2140 net/netfilter/ipvs/ip_vs_core.c:1980
nf_hook_entry_hookfn include/linux/netfilter.h:108 [inline]
nf_hook_slow+0xb0/0x1a0 net/netfilter/core.c:468
nf_hook include/linux/netfilter.h:205 [inline]
__ip_local_out+0x398/0x730 net/ipv4/ip_output.c:114
ip_local_out+0x25/0x170 net/ipv4/ip_output.c:123
ip_queue_xmit+0x82b/0x1b40 net/ipv4/ip_output.c:513
__tcp_transmit_skb+0x17da/0x2ca0 net/ipv4/tcp_output.c:1134
tcp_transmit_skb net/ipv4/tcp_output.c:1150 [inline]
tcp_send_syn_data net/ipv4/tcp_output.c:3500 [inline]
tcp_connect+0x1e79/0x3f20 net/ipv4/tcp_output.c:3538
tcp_v4_connect+0x129d/0x1a70 net/ipv4/tcp_ipv4.c:255
__inet_stream_connect+0x6ad/0xb90 net/ipv4/af_inet.c:618
tcp_sendmsg_fastopen net/ipv4/tcp.c:1170 [inline]
tcp_sendmsg_locked+0x1fac/0x2ef0 net/ipv4/tcp.c:1216
tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457
inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
sock_sendmsg_nosec net/socket.c:646 [inline]
sock_sendmsg+0xb5/0x100 net/socket.c:656
SYSC_sendto net/socket.c:1763 [inline]
SyS_sendto+0x1c7/0x2c0 net/socket.c:1731
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe6338430e9
RSP: 002b:00007fe6321b8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe633955f60 RCX: 00007fe6338430e9
RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe63389d08d R08: 0000000020000000 R09: 0000000000000010
R10: 2804a43668bc23c5 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdba67795f R14: 00007fe6321b8300 R15: 0000000000022000
IPVS: fo: TCP 172.20.20.187:0 - no destination available
IPVS: fo: TCP 172.20.20.187:0 - no destination available
IPVS: set_ctl: invalid protocol: 0 172.20.20.66:20002
IPVS: fo: TCP 172.20.20.187:0 - no destination available
IPVS: set_ctl: invalid protocol: 0 172.20.20.66:20002
IPVS: set_ctl: invalid protocol: 0 172.20.20.66:20002
IPVS: fo: TCP 172.20.20.187:0 - no destination available
IPVS: fo: TCP 172.20.20.187:0 - no destination available
IPVS: fo: TCP 172.20.20.187:0 - no destination available
IPVS: ip_vs_send_async error -22
IPVS: set_ctl: invalid protocol: 135 172.30.0.2:0
IPVS: set_ctl: invalid protocol: 135 172.30.0.2:0
IPVS: set_ctl: invalid protocol: 135 172.30.0.2:0
IPVS: set_ctl: invalid protocol: 135 172.30.0.2:0
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 0 172.30.0.3:0
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 0 172.30.0.3:0
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 0 172.30.0.3:0
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: ip_vs_send_async error -22
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 14994 255.255.255.255:20003
IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20002
xt_TPROXY: Can be used only in combination with either -p tcp or -p udp
xt_TPROXY: Can be used only in combination with either -p tcp or -p udp
xt_TPROXY: Can be used only in combination with either -p tcp or -p udp
xt_TPROXY: Can be used only in combination with either -p tcp or -p udp


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[syzbot]

Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.