* [PATCH 5.10 000/156] 5.10.26-rc2 review
@ 2021-03-22 15:19 Greg Kroah-Hartman
2021-03-22 18:50 ` Florian Fainelli
` (7 more replies)
0 siblings, 8 replies; 11+ messages in thread
From: Greg Kroah-Hartman @ 2021-03-22 15:19 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.10.26 release.
There are 156 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 24 Mar 2021 15:18:19 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.26-rc2.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.10.26-rc2
Vincent Whitchurch <vincent.whitchurch@axis.com>
cifs: Fix preauth hash corruption
Johan Hovold <johan@kernel.org>
x86/apic/of: Fix CPU devicetree-node lookups
Thomas Gleixner <tglx@linutronix.de>
genirq: Disable interrupts for force threaded handlers
Lv Yunlong <lyl2019@mail.ustc.edu.cn>
firmware/efi: Fix a use after bug in efi_mem_reserve_persistent
Ard Biesheuvel <ardb@kernel.org>
efi: use 32-bit alignment for efi_guid_t literals
Peter Zijlstra <peterz@infradead.org>
static_call: Fix static_call_update() sanity check
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
MAINTAINERS: move the staging subsystem to lists.linux.dev
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
MAINTAINERS: move some real subsystems off of the staging mailing list
Harshad Shirwadkar <harshadshirwadkar@gmail.com>
ext4: fix rename whiteout with fast commit
Shijie Luo <luoshijie1@huawei.com>
ext4: fix potential error in ext4_do_update_inode
zhangyi (F) <yi.zhang@huawei.com>
ext4: do not try to set xattr into ea_inode if value is empty
Pan Bian <bianpan2016@163.com>
ext4: stop inode update before return
zhangyi (F) <yi.zhang@huawei.com>
ext4: find old entry again if failed to rename whiteout
Eric Biggers <ebiggers@google.com>
ext4: fix error handling in ext4_end_enable_verity()
Shawn Guo <shawn.guo@linaro.org>
efivars: respect EFI_UNSUPPORTED return from firmware
Oleg Nesterov <oleg@redhat.com>
x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
Oleg Nesterov <oleg@redhat.com>
x86: Move TS_COMPAT back to asm/thread_info.h
Oleg Nesterov <oleg@redhat.com>
kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data()
Thomas Gleixner <tglx@linutronix.de>
x86/ioapic: Ignore IRQ2 again
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel: Fix unchecked MSR access error caused by VLBR_EVENT
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel: Fix a crash caused by zero PEBS status
Tyrel Datwyler <tyreld@linux.ibm.com>
PCI: rpadlpar: Fix potential drc_name corruption in store functions
Fabrice Gasnier <fabrice.gasnier@foss.st.com>
counter: stm32-timer-cnt: fix ceiling miss-alignment with reload register
Fabrice Gasnier <fabrice.gasnier@foss.st.com>
counter: stm32-timer-cnt: fix ceiling write max value
Ye Xiang <xiang.ye@intel.com>
iio: hid-sensor-temperature: Fix issues of timestamp channel
Ye Xiang <xiang.ye@intel.com>
iio: hid-sensor-prox: Fix scale not correct issue
Ye Xiang <xiang.ye@intel.com>
iio: hid-sensor-humidity: Fix alignment issue of timestamp channel
Alexandru Ardelean <alexandru.ardelean@analog.com>
iio: adc: adi-axi-adc: add proper Kconfig dependencies
Wilfried Wessner <wilfried.wessner@gmail.com>
iio: adc: ad7949: fix wrong ADC result due to incorrect bit mask
Linus Walleij <linus.walleij@linaro.org>
iio: adc: ab8500-gpadc: Fix off by 10 to 3
Dinghao Liu <dinghao.liu@zju.edu.cn>
iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler
Dan Carpenter <dan.carpenter@oracle.com>
iio: adis16400: Fix an error code in adis16400_initial_setup()
Jonathan Albrieux <jonathan.albrieux@gmail.com>
iio:adc:qcom-spmi-vadc: add default scale to LR_MUX2_BAT_ID channel
Jonathan Cameron <Jonathan.Cameron@huawei.com>
iio:adc:stm32-adc: Add HAS_IOMEM dependency
Mika Westerberg <mika.westerberg@linux.intel.com>
thunderbolt: Increase runtime PM reference count on DP tunnel discovery
Mika Westerberg <mika.westerberg@linux.intel.com>
thunderbolt: Initialize HopID IDAs in tb_switch_alloc()
Wesley Cheng <wcheng@codeaurora.org>
usb: dwc3: gadget: Prevent EP queuing while stopping transfers
Wesley Cheng <wcheng@codeaurora.org>
usb: dwc3: gadget: Allow runtime suspend if UDC unbinded
Badhri Jagan Sridharan <badhri@google.com>
usb: typec: tcpm: Invoke power_supply_changed for tcpm-source-psy-
Elias Rudberg <mail@eliasrudberg.se>
usb: typec: Remove vdo[3] part of tps6598x_rx_identity_reg struct
Jim Lin <jilin@nvidia.com>
usb: gadget: configfs: Fix KASAN use-after-free
Colin Ian King <colin.king@canonical.com>
usbip: Fix incorrect double assignment to udc->ud.tcp_rx
Alan Stern <stern@rowland.harvard.edu>
usb-storage: Add quirk to defeat Kindle's automatic unload
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc: Force inlining of cpu_has_feature() to avoid build failure
Bob Peterson <rpeterso@redhat.com>
gfs2: bypass signal_our_withdraw if no journal
Bob Peterson <rpeterso@redhat.com>
gfs2: move freeze glock outside the make_fs_rw and _ro functions
Bob Peterson <rpeterso@redhat.com>
gfs2: Add common helper for holding and releasing the freeze glock
Frieder Schrempf <frieder.schrempf@kontron.de>
regulator: pca9450: Clear PRESET_EN bit to fix BUCK1/2/3 voltage setting
Frieder Schrempf <frieder.schrempf@kontron.de>
regulator: pca9450: Enable system reset on WDOG_B assertion
Frieder Schrempf <frieder.schrempf@kontron.de>
regulator: pca9450: Add SD_VSEL GPIO for LDO5
Jia-Ju Bai <baijiaju1990@gmail.com>
net: bonding: fix error return code of bond_neigh_init()
Jens Axboe <axboe@kernel.dk>
io_uring: clear IOCB_WAITQ for non -EIOCBQUEUED return
Jens Axboe <axboe@kernel.dk>
io_uring: don't attempt IO reissue from the ring exit path
Florian Westphal <fw@strlen.de>
mptcp: put subflow sock on connect error
Evan Quan <evan.quan@amd.com>
drm/amd/pm: fulfill the Polaris implementation for get_clock_by_type_with_latency()
Julian Wiedmann <jwi@linux.ibm.com>
s390/qeth: schedule TX NAPI on QAOB completion
Junlin Yang <yangjunlin@yulong.com>
ibmvnic: remove excessive irqsave
Ezequiel Garcia <ezequiel@collabora.com>
media: cedrus: h264: Support profile controls
Pavel Begunkov <asml.silence@gmail.com>
io_uring: fix inconsistent lock state
Paolo Abeni <pabeni@redhat.com>
mptcp: reduce the arguments of mptcp_sendmsg_frag
Florian Westphal <fw@strlen.de>
mptcp: split mptcp_clean_una function
Matti Gottlieb <matti.gottlieb@intel.com>
iwlwifi: Add a new card for MA family
Frederic Weisbecker <frederic@kernel.org>
entry/kvm: Explicitly flush pending rcuog wakeup before last rescheduling point
Frederic Weisbecker <frederic@kernel.org>
entry: Explicitly flush pending rcuog wakeup before last rescheduling point
Frederic Weisbecker <frederic@kernel.org>
rcu/nocb: Trigger self-IPI on late deferred wake up before user resume
Aurabindo Pillai <aurabindo.pillai@amd.com>
drm/amd/display: turn DPMS off on connector unplug
Alexander Lobakin <alobakin@pm.me>
MIPS: compressed: fix build with enabled UBSAN
Christian Melki <christian.melki@t2data.com>
net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8081
Norbert Ciosek <norbertx.ciosek@intel.com>
i40e: Fix endianness conversions
Sandipan Das <sandipan@linux.ibm.com>
powerpc/sstep: Fix darn emulation
Sandipan Das <sandipan@linux.ibm.com>
powerpc/sstep: Fix load-store and update emulation
Mark Bloch <mbloch@nvidia.com>
RDMA/mlx5: Allow creating all QPs even when non RDMA profile is used
Ahmed S. Darwish <a.darwish@linutronix.de>
scsi: isci: Pass gfp_t flags in isci_port_bc_change_received()
Ahmed S. Darwish <a.darwish@linutronix.de>
scsi: isci: Pass gfp_t flags in isci_port_link_up()
Ahmed S. Darwish <a.darwish@linutronix.de>
scsi: isci: Pass gfp_t flags in isci_port_link_down()
Ahmed S. Darwish <a.darwish@linutronix.de>
scsi: mvsas: Pass gfp_t flags to libsas event notifiers
Ahmed S. Darwish <a.darwish@linutronix.de>
scsi: libsas: Introduce a _gfp() variant of event notifiers
John Garry <john.garry@huawei.com>
scsi: libsas: Remove notifier indirection
Joe Perches <joe@perches.com>
scsi: pm8001: Neaten debug logging macros and uses
yuuzheng <yuuzheng@google.com>
scsi: pm80xx: Fix pm8001_mpi_get_nvmd_resp() race condition
Viswas G <Viswas.G@microchip.com>
scsi: pm80xx: Make running_req atomic
peter chang <dpf@google.com>
scsi: pm80xx: Make mpi_build_cmd locking consistent
Frank van der Linden <fllinden@amazon.com>
module: harden ELF info handling
Sergey Shtylyov <s.shtylyov@omprussia.ru>
module: avoid *goto*s in module_sig_check()
Sergey Shtylyov <s.shtylyov@omprussia.ru>
module: merge repetitive strings in module_sig_check()
Jack Wang <jinpu.wang@cloud.ionos.com>
RDMA/rtrs: Fix KASAN: stack-out-of-bounds bug
Guoqing Jiang <guoqing.jiang@cloud.ionos.com>
RDMA/rtrs: Introduce rtrs_post_send
Guoqing Jiang <guoqing.jiang@cloud.ionos.com>
RDMA/rtrs-srv: Jump to dereg_mr label if allocate iu fails
Gioh Kim <gi-oh.kim@cloud.ionos.com>
RDMA/rtrs: Remove unnecessary argument dir of rtrs_iu_free
Andrii Nakryiko <andrii@kernel.org>
bpf: Declare __bpf_free_used_maps() unconditionally
Erwan Le Ray <erwan.leray@foss.st.com>
serial: stm32: fix DMA initialization error handling
Lee Jones <lee.jones@linaro.org>
tty: serial: stm32-usart: Remove set but unused 'cookie' variables
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: serialize access to work queue on remove
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: add some debugs
Sagi Grimberg <sagi@grimberg.me>
nvme-rdma: fix possible hang when failing to set io queues
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
gpiolib: Assign fwnode to parent's if no primary one provided
William Breathitt Gray <vilhelm.gray@gmail.com>
counter: stm32-timer-cnt: Report count function when SLAVE_MODE_DISABLED
Heinrich Schuchardt <xypron.glpk@gmx.de>
RISC-V: correct enum sbi_ext_rfence_fid
dongjian <dongjian@yulong.com>
scsi: ufs: ufs-mediatek: Correct operator & -> &&
Lv Yunlong <lyl2019@mail.ustc.edu.cn>
scsi: myrs: Fix a double free in myrs_cleanup()
Dan Carpenter <dan.carpenter@oracle.com>
scsi: lpfc: Fix some error codes in debugfs
Kefeng Wang <wangkefeng.wang@huawei.com>
riscv: Correct SPARSEMEM configuration
Steve French <stfrench@microsoft.com>
cifs: fix allocation size on newly created files
Masahiro Yamada <masahiroy@kernel.org>
kbuild: Fix <linux/version.h> for empty SUBLEVEL or PATCHLEVEL again
Pavel Skripkin <paskripkin@gmail.com>
net/qrtr: fix __netdev_alloc_skb call
Jens Axboe <axboe@kernel.dk>
io_uring: ensure that SQPOLL thread is started for exit
Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
pstore: Fix warning in pstore_kill_sb()
Umesh Nerlige Ramappa <umesh.nerlige.ramappa@intel.com>
i915/perf: Start hrtimer only if sampling the OA buffer
Daniel Kobras <kobras@puzzle-itc.de>
sunrpc: fix refcount leak for rpc auth modules
Gautam Dawar <gdawar.xilinx@gmail.com>
vhost_vdpa: fix the missing irq_bypass_unregister_producer() invocation
Jason Gunthorpe <jgg@ziepe.ca>
vfio: IOMMU_API should be selected
Timo Rothenpieler <timo@rothenpieler.org>
svcrdma: disable timeouts on rdma backchannel
Olga Kornievskaia <kolga@netapp.com>
NFSD: fix dest to src mount in inter-server COPY
Joe Korty <joe.korty@concurrent-rt.com>
NFSD: Repair misuse of sv_lock in 5.10.16-rt30.
J. Bruce Fields <bfields@redhat.com>
nfsd: don't abort copies early
Trond Myklebust <trond.myklebust@hammerspace.com>
nfsd: Don't keep looking up unhashed files in the nfsd file cache
Sagi Grimberg <sagi@grimberg.me>
nvmet: don't check iosqes,iocqes for discovery controllers
Sagi Grimberg <sagi@grimberg.me>
nvme-tcp: fix a NULL deref when receiving a 0-length r2t PDU
Sagi Grimberg <sagi@grimberg.me>
nvme-tcp: fix possible hang when failing to set io queues
Sagi Grimberg <sagi@grimberg.me>
nvme-tcp: fix misuse of __smp_processor_id with preemption enabled
Christoph Hellwig <hch@lst.de>
nvme: fix Write Zeroes limitations
Colin Ian King <colin.king@canonical.com>
ALSA: usb-audio: Fix unintentional sign extension issue
David Howells <dhowells@redhat.com>
afs: Stop listxattr() from listing "afs.*" attributes
David Howells <dhowells@redhat.com>
afs: Fix accessing YFS xattrs on a non-YFS server
Sameer Pujar <spujar@nvidia.com>
ASoC: simple-card-utils: Do not handle device clock
Srinivasa Rao Mandadapu <srivasam@codeaurora.org>
ASoC: qcom: lpass-cpu: Fix lpass dai ids parse
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
ASoC: codecs: wcd934x: add a sanity check in set channel map
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
ASoC: qcom: sdm845: Fix array out of range on rx slim channels
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
ASoC: qcom: sdm845: Fix array out of bounds access
Pan Xiuli <xiuli.pan@linux.intel.com>
ASoC: SOF: intel: fix wrong poll bits in dsp power down
Pierre-Louis Bossart <pierre-louis.bossart@linux.intel.com>
ASoC: SOF: Intel: unregister DMIC device on probe error
Hans de Goede <hdegoede@redhat.com>
ASoC: Intel: bytcr_rt5640: Fix HP Pavilion x2 10-p0XX OVCD current threshold
Alexander Shiyan <shc_work@mail.ru>
ASoC: fsl_ssi: Fix TDM slot setup for I2S mode
Calvin Hou <Calvin.Hou@amd.com>
drm/amd/display: Correct algorithm for reversed gamma
Stefano Garzarella <sgarzare@redhat.com>
vhost-vdpa: set v->config_ctx to NULL if eventfd_ctx_fdget() fails
Stefano Garzarella <sgarzare@redhat.com>
vhost-vdpa: fix use-after-free of v->config_ctx
David Sterba <dsterba@suse.com>
btrfs: fix slab cache flags for free space tree bitmap
Filipe Manana <fdmanana@suse.com>
btrfs: fix race when cloning extent buffer during rewind of an old root
Chao Yu <chao@kernel.org>
zonefs: fix to update .i_wr_refcnt correctly in zonefs_open_zone()
Damien Le Moal <damien.lemoal@wdc.com>
zonefs: prevent use of seq files as swap file
Damien Le Moal <damien.lemoal@wdc.com>
zonefs: Fix O_APPEND async write handling
Niklas Schnelle <schnelle@linux.ibm.com>
s390/pci: fix leak of PCI device structure
Niklas Schnelle <schnelle@linux.ibm.com>
s390/pci: remove superfluous zdev->zbus check
Niklas Schnelle <schnelle@linux.ibm.com>
s390/pci: refactor zpci_create_device()
Gerald Schaefer <gerald.schaefer@linux.ibm.com>
s390/vtime: fix increased steal time accounting
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
Revert "PM: runtime: Update device status before letting suppliers suspend"
Jeremy Szu <jeremy.szu@canonical.com>
ALSA: hda/realtek: fix mute/micmute LEDs for HP 850 G8
Jeremy Szu <jeremy.szu@canonical.com>
ALSA: hda/realtek: fix mute/micmute LEDs for HP 440 G8
Jeremy Szu <jeremy.szu@canonical.com>
ALSA: hda/realtek: fix mute/micmute LEDs for HP 840 G8
Xiaoliang Yu <yxl_22@outlook.com>
ALSA: hda/realtek: Apply headset-mic quirks for Xiaomi Redmibook Air
Hui Wang <hui.wang@canonical.com>
ALSA: hda: generic: Fix the micmute led init state
Xiaoliang Yu <yxl_22@outlook.com>
ALSA: hda/realtek: apply pin quirk for XiaomiNotebook Pro
Takashi Sakamoto <o-takashi@sakamocchi.jp>
ALSA: dice: fix null pointer dereference when node is disconnected
Meng Li <Meng.Li@windriver.com>
spi: cadence: set cqspi to the driver_data field of struct device
Shengjiu Wang <shengjiu.wang@nxp.com>
ASoC: ak5558: Add MODULE_DEVICE_TABLE
Shengjiu Wang <shengjiu.wang@nxp.com>
ASoC: ak4458: Add MODULE_DEVICE_TABLE
-------------
Diffstat:
Documentation/scsi/libsas.rst | 10 +-
MAINTAINERS | 7 +-
Makefile | 10 +-
arch/mips/boot/compressed/Makefile | 1 +
arch/powerpc/include/asm/cpu_has_feature.h | 4 +-
arch/powerpc/lib/sstep.c | 16 +-
arch/riscv/Kconfig | 4 +-
arch/riscv/include/asm/sbi.h | 4 +-
arch/s390/include/asm/pci.h | 6 +-
arch/s390/kernel/vtime.c | 2 +-
arch/s390/pci/pci.c | 85 +-
arch/s390/pci/pci_clp.c | 40 +-
arch/s390/pci/pci_event.c | 22 +-
arch/x86/events/intel/core.c | 3 +
arch/x86/events/intel/ds.c | 2 +-
arch/x86/include/asm/processor.h | 9 -
arch/x86/include/asm/thread_info.h | 23 +-
arch/x86/kernel/apic/apic.c | 5 +
arch/x86/kernel/apic/io_apic.c | 10 +
arch/x86/kernel/signal.c | 24 +-
arch/x86/kvm/x86.c | 1 +
drivers/base/power/runtime.c | 62 +-
drivers/counter/stm32-timer-cnt.c | 55 +-
drivers/firmware/efi/efi.c | 3 +-
drivers/firmware/efi/vars.c | 4 +
drivers/gpio/gpiolib.c | 7 +
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 32 +-
drivers/gpu/drm/amd/display/dc/core/dc.c | 13 +
drivers/gpu/drm/amd/display/dc/dc_stream.h | 1 +
.../gpu/drm/amd/display/dc/dcn30/dcn30_cm_common.c | 26 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.c | 67 +
drivers/gpu/drm/i915/i915_perf.c | 13 +-
drivers/iio/adc/Kconfig | 3 +
drivers/iio/adc/ab8500-gpadc.c | 2 +-
drivers/iio/adc/ad7949.c | 2 +-
drivers/iio/adc/qcom-spmi-vadc.c | 2 +-
drivers/iio/gyro/mpu3050-core.c | 2 +
drivers/iio/humidity/hid-sensor-humidity.c | 12 +-
drivers/iio/imu/adis16400.c | 3 +-
drivers/iio/light/hid-sensor-prox.c | 13 +-
drivers/iio/temperature/hid-sensor-temperature.c | 14 +-
drivers/infiniband/hw/mlx5/qp.c | 26 +-
drivers/infiniband/ulp/rtrs/rtrs-clt.c | 14 +-
drivers/infiniband/ulp/rtrs/rtrs-pri.h | 3 +-
drivers/infiniband/ulp/rtrs/rtrs-srv.c | 17 +-
drivers/infiniband/ulp/rtrs/rtrs.c | 73 +-
drivers/net/bonding/bond_main.c | 8 +-
drivers/net/ethernet/ibm/ibmvnic.c | 52 +-
drivers/net/ethernet/ibm/ibmvnic.h | 5 +-
drivers/net/ethernet/intel/i40e/i40e_main.c | 12 +-
drivers/net/ethernet/intel/i40e/i40e_txrx.c | 2 +-
drivers/net/phy/micrel.c | 1 +
drivers/net/wireless/intel/iwlwifi/cfg/22000.c | 11 +
drivers/net/wireless/intel/iwlwifi/iwl-config.h | 2 +
drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 6 +
drivers/nvme/host/core.c | 36 +-
drivers/nvme/host/rdma.c | 7 +-
drivers/nvme/host/tcp.c | 16 +-
drivers/nvme/target/core.c | 17 +-
drivers/pci/hotplug/rpadlpar_sysfs.c | 14 +-
drivers/pci/hotplug/s390_pci_hpc.c | 3 +-
drivers/regulator/pca9450-regulator.c | 30 +
drivers/s390/net/qeth_core_main.c | 18 +-
drivers/scsi/aic94xx/aic94xx_scb.c | 20 +-
drivers/scsi/hisi_sas/hisi_sas_main.c | 12 +-
drivers/scsi/hisi_sas/hisi_sas_v1_hw.c | 3 +-
drivers/scsi/hisi_sas/hisi_sas_v2_hw.c | 3 +-
drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 3 +-
drivers/scsi/isci/port.c | 11 +-
drivers/scsi/libsas/sas_event.c | 66 +-
drivers/scsi/libsas/sas_init.c | 27 +-
drivers/scsi/libsas/sas_internal.h | 5 +-
drivers/scsi/lpfc/lpfc_debugfs.c | 4 +-
drivers/scsi/mvsas/mv_sas.c | 25 +-
drivers/scsi/myrs.c | 2 +-
drivers/scsi/pm8001/pm8001_ctl.c | 7 +-
drivers/scsi/pm8001/pm8001_hwi.c | 1492 ++++++++---------
drivers/scsi/pm8001/pm8001_init.c | 93 +-
drivers/scsi/pm8001/pm8001_sas.c | 150 +-
drivers/scsi/pm8001/pm8001_sas.h | 47 +-
drivers/scsi/pm8001/pm80xx_hwi.c | 1740 +++++++++-----------
drivers/scsi/ufs/ufs-mediatek.c | 2 +-
drivers/spi/spi-cadence-quadspi.c | 1 +
drivers/staging/media/sunxi/cedrus/cedrus.c | 19 +
drivers/thunderbolt/switch.c | 18 +-
drivers/thunderbolt/tb.c | 4 +
drivers/tty/serial/stm32-usart.c | 26 +-
drivers/usb/dwc3/gadget.c | 22 +-
drivers/usb/gadget/configfs.c | 14 +-
drivers/usb/storage/transport.c | 7 +
drivers/usb/storage/unusual_devs.h | 12 +
drivers/usb/typec/tcpm/tcpm.c | 9 +-
drivers/usb/typec/tps6598x.c | 1 -
drivers/usb/usbip/vudc_sysfs.c | 2 +-
drivers/vfio/Kconfig | 2 +-
drivers/vhost/vdpa.c | 20 +-
fs/afs/dir.c | 1 -
fs/afs/file.c | 1 -
fs/afs/fs_operation.c | 7 +-
fs/afs/inode.c | 1 -
fs/afs/internal.h | 1 -
fs/afs/mntpt.c | 1 -
fs/afs/xattr.c | 31 +-
fs/btrfs/ctree.c | 2 +
fs/btrfs/inode.c | 2 +-
fs/cifs/inode.c | 10 +-
fs/cifs/transport.c | 7 +-
fs/ext4/ext4.h | 2 +
fs/ext4/fast_commit.c | 9 +-
fs/ext4/inode.c | 12 +-
fs/ext4/namei.c | 32 +-
fs/ext4/verity.c | 89 +-
fs/ext4/xattr.c | 2 +-
fs/gfs2/ops_fstype.c | 33 +-
fs/gfs2/recovery.c | 8 +-
fs/gfs2/super.c | 45 +-
fs/gfs2/util.c | 58 +-
fs/gfs2/util.h | 3 +
fs/io_uring.c | 19 +-
fs/nfsd/filecache.c | 2 +
fs/nfsd/nfs4proc.c | 2 +-
fs/nfsd/nfs4state.c | 2 +-
fs/pstore/inode.c | 2 +-
fs/select.c | 10 +-
fs/zonefs/super.c | 101 +-
include/linux/bpf.h | 5 +-
include/linux/efi.h | 6 +-
include/linux/entry-kvm.h | 14 +
include/linux/regulator/pca9450.h | 10 +
include/linux/thread_info.h | 13 +
include/linux/usb_usual.h | 2 +
include/scsi/libsas.h | 11 +-
kernel/entry/common.c | 7 +
kernel/futex.c | 3 +-
kernel/irq/manage.c | 4 +
kernel/jump_label.c | 8 +
kernel/module.c | 166 +-
kernel/module_signature.c | 2 +-
kernel/module_signing.c | 2 +-
kernel/rcu/tree.c | 57 +-
kernel/rcu/tree.h | 2 +-
kernel/rcu/tree_plugin.h | 26 +-
kernel/static_call.c | 11 +-
kernel/time/alarmtimer.c | 2 +-
kernel/time/hrtimer.c | 2 +-
kernel/time/posix-cpu-timers.c | 2 +-
net/mptcp/protocol.c | 81 +-
net/mptcp/subflow.c | 1 +
net/qrtr/qrtr.c | 2 +-
net/sunrpc/svc.c | 6 +-
net/sunrpc/svc_xprt.c | 4 +-
net/sunrpc/xprtrdma/svc_rdma_backchannel.c | 6 +-
sound/firewire/dice/dice-stream.c | 5 +-
sound/pci/hda/hda_generic.c | 2 +-
sound/pci/hda/patch_realtek.c | 16 +
sound/soc/codecs/ak4458.c | 1 +
sound/soc/codecs/ak5558.c | 1 +
sound/soc/codecs/wcd934x.c | 6 +
sound/soc/fsl/fsl_ssi.c | 6 +-
sound/soc/generic/simple-card-utils.c | 13 +-
sound/soc/intel/boards/bytcr_rt5640.c | 2 +-
sound/soc/qcom/lpass-cpu.c | 2 +-
sound/soc/qcom/sdm845.c | 6 +-
sound/soc/sof/intel/hda-dsp.c | 2 +-
sound/soc/sof/intel/hda.c | 1 +
sound/usb/mixer_quirks.c | 4 +-
166 files changed, 3132 insertions(+), 2751 deletions(-)
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: [PATCH 5.10 000/156] 5.10.26-rc2 review
2021-03-22 15:19 [PATCH 5.10 000/156] 5.10.26-rc2 review Greg Kroah-Hartman
@ 2021-03-22 18:50 ` Florian Fainelli
2021-03-22 20:13 ` Pavel Machek
` (6 subsequent siblings)
7 siblings, 0 replies; 11+ messages in thread
From: Florian Fainelli @ 2021-03-22 18:50 UTC (permalink / raw)
To: Greg Kroah-Hartman, linux-kernel
Cc: torvalds, akpm, linux, shuah, patches, lkft-triage, pavel,
jonathanh, stable
On 3/22/2021 8:19 AM, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 5.10.26 release.
> There are 156 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Wed, 24 Mar 2021 15:18:19 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.26-rc2.gz
> or in the git tree and branch at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h
On ARCH_BRCMSTB using 32-bit and 64-bit ARM kernels:
Tested-by: Florian Fainelli <f.fainelli@gmail.com>
--
Florian
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: [PATCH 5.10 000/156] 5.10.26-rc2 review
2021-03-22 15:19 [PATCH 5.10 000/156] 5.10.26-rc2 review Greg Kroah-Hartman
2021-03-22 18:50 ` Florian Fainelli
@ 2021-03-22 20:13 ` Pavel Machek
2021-03-22 21:05 ` Guenter Roeck
` (5 subsequent siblings)
7 siblings, 0 replies; 11+ messages in thread
From: Pavel Machek @ 2021-03-22 20:13 UTC (permalink / raw)
To: Greg Kroah-Hartman
Cc: linux-kernel, torvalds, akpm, linux, shuah, patches, lkft-triage,
pavel, jonathanh, f.fainelli, stable
[-- Attachment #1: Type: text/plain, Size: 663 bytes --]
Hi!
> This is the start of the stable review cycle for the 5.10.26 release.
> There are 156 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
CIP testing did not find any problems here:
https://gitlab.com/cip-project/cip-testing/linux-stable-rc-ci/-/tree/linux-5.10.y
Tested-by: Pavel Machek (CIP) <pavel@denx.de>
Best regards,
Pavel
--
DENX Software Engineering GmbH, Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 181 bytes --]
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: [PATCH 5.10 000/156] 5.10.26-rc2 review
2021-03-22 15:19 [PATCH 5.10 000/156] 5.10.26-rc2 review Greg Kroah-Hartman
2021-03-22 18:50 ` Florian Fainelli
2021-03-22 20:13 ` Pavel Machek
@ 2021-03-22 21:05 ` Guenter Roeck
2021-03-22 21:52 ` Guenter Roeck
` (4 subsequent siblings)
7 siblings, 0 replies; 11+ messages in thread
From: Guenter Roeck @ 2021-03-22 21:05 UTC (permalink / raw)
To: Greg Kroah-Hartman
Cc: linux-kernel, torvalds, akpm, shuah, patches, lkft-triage, pavel,
jonathanh, f.fainelli, stable
On Mon, Mar 22, 2021 at 04:19:10PM +0100, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 5.10.26 release.
> There are 156 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Wed, 24 Mar 2021 15:18:19 +0000.
> Anything received after that time might be too late.
>
Building arm:realview-pb-a8:realview_defconfig:realview_pb:mem512:arm-realview-pba8:initrd ... failed
------------
Error log:
kernel/rcu/tree.c:683:2: error: implicit declaration of function 'IRQ_WORK_INIT' [-Werror=implicit-function-declaration]
683 | IRQ_WORK_INIT(late_wakeup_func);
| ^~~~~~~~~~~~~
kernel/rcu/tree.c:683:2: error: invalid initializer
$ git reset --hard local-stable/linux-5.10.y.queue
HEAD is now at deabac90f919 Linux 5.10.26-rc2
$ git grep IRQ_WORK_INIT
kernel/rcu/tree.c: IRQ_WORK_INIT(late_wakeup_func);
$ git describe
v5.10.25-157-gdeabac90f919
Guenter
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: [PATCH 5.10 000/156] 5.10.26-rc2 review
2021-03-22 15:19 [PATCH 5.10 000/156] 5.10.26-rc2 review Greg Kroah-Hartman
` (2 preceding siblings ...)
2021-03-22 21:05 ` Guenter Roeck
@ 2021-03-22 21:52 ` Guenter Roeck
2021-03-23 7:19 ` Greg Kroah-Hartman
2021-03-23 0:47 ` Samuel Zou
` (3 subsequent siblings)
7 siblings, 1 reply; 11+ messages in thread
From: Guenter Roeck @ 2021-03-22 21:52 UTC (permalink / raw)
To: Greg Kroah-Hartman
Cc: linux-kernel, torvalds, akpm, shuah, patches, lkft-triage, pavel,
jonathanh, f.fainelli, stable
On Mon, Mar 22, 2021 at 04:19:10PM +0100, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 5.10.26 release.
> There are 156 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Wed, 24 Mar 2021 15:18:19 +0000.
> Anything received after that time might be too late.
>
Build results:
total: 156 pass: 156 fail: 0
Qemu test results:
total: 432 pass: 428 fail: 4
Failed tests:
arm:realview-pb-a8:realview_defconfig:realview_pb:mem512:arm-realview-pba8:initrd
arm:realview-pbx-a9:realview_defconfig:realview_pb:arm-realview-pbx-a9:initrd
arm:realview-eb:realview_defconfig:realview_eb:mem512:arm-realview-eb:initrd
arm:realview-eb-mpcore:realview_defconfig:realview_eb:mem512:arm-realview-eb-11mp-ctrevb:initrd
Build failure:
kernel/rcu/tree.c:683:2: error: implicit declaration of function 'IRQ_WORK_INIT'
The patch introducing IRQ_WORK_INIT is not in v5.10.y.
Guenter
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: [PATCH 5.10 000/156] 5.10.26-rc2 review
2021-03-22 15:19 [PATCH 5.10 000/156] 5.10.26-rc2 review Greg Kroah-Hartman
` (3 preceding siblings ...)
2021-03-22 21:52 ` Guenter Roeck
@ 2021-03-23 0:47 ` Samuel Zou
2021-03-23 0:57 ` Samuel Zou
` (2 subsequent siblings)
7 siblings, 0 replies; 11+ messages in thread
From: Samuel Zou @ 2021-03-23 0:47 UTC (permalink / raw)
To: Greg Kroah-Hartman, linux-kernel
Cc: torvalds, akpm, linux, shuah, patches, lkft-triage, pavel,
jonathanh, f.fainelli, stable
On 2021/3/22 23:19, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 5.10.26 release.
> There are 156 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Wed, 24 Mar 2021 15:18:19 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.26-rc2.gz
> or in the git tree and branch at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h
>
Kernel repo:
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git
Branch: linux-5.10.y
Arch: arm64
Version: 5.10.26-rc2
Commit: deabac90f919203307e6eee2606366bdb19bbe93
Compiler: gcc version 7.3.0 (GCC)
--------------------------------------------------------------------
Kernel build failed, error log:
kernel/rcu/tree.c:683:2: error: implicit declaration of function
‘IRQ_WORK_INIT’; did you mean ‘QSTR_INIT’?
[-Werror=implicit-function-declaration]
IRQ_WORK_INIT(late_wakeup_func);
^~~~~~~~~~~~~
QSTR_INIT
kernel/rcu/tree.c:683:2: error: invalid initializer
--------------------------------------------------------------------
Tested-by: Hulk Robot <hulkrobot@huawei.com>
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: [PATCH 5.10 000/156] 5.10.26-rc2 review
2021-03-22 15:19 [PATCH 5.10 000/156] 5.10.26-rc2 review Greg Kroah-Hartman
` (4 preceding siblings ...)
2021-03-23 0:47 ` Samuel Zou
@ 2021-03-23 0:57 ` Samuel Zou
2021-03-23 8:49 ` Naresh Kamboju
2021-03-23 17:21 ` Andrei Rabusov
7 siblings, 0 replies; 11+ messages in thread
From: Samuel Zou @ 2021-03-23 0:57 UTC (permalink / raw)
To: Greg Kroah-Hartman, linux-kernel
Cc: torvalds, akpm, linux, shuah, patches, lkft-triage, pavel,
jonathanh, f.fainelli, stable
On 2021/3/22 23:19, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 5.10.26 release.
> There are 156 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Wed, 24 Mar 2021 15:18:19 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.26-rc2.gz
> or in the git tree and branch at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h
>
Tested on x86 for 5.10.26-rc2,
Kernel repo:
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git
Branch: linux-5.10.y
Version: 5.10.26-rc2
Commit: deabac90f919203307e6eee2606366bdb19bbe93
Compiler: gcc version 7.3.0 (GCC)
x86:
--------------------------------------------------------------------
Testcase Result Summary:
total: 4721
passed: 4721
failed: 0
timeout: 0
--------------------------------------------------------------------
Tested-by: Hulk Robot <hulkrobot@huawei.com>
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: [PATCH 5.10 000/156] 5.10.26-rc2 review
2021-03-22 21:52 ` Guenter Roeck
@ 2021-03-23 7:19 ` Greg Kroah-Hartman
0 siblings, 0 replies; 11+ messages in thread
From: Greg Kroah-Hartman @ 2021-03-23 7:19 UTC (permalink / raw)
To: Guenter Roeck
Cc: linux-kernel, torvalds, akpm, shuah, patches, lkft-triage, pavel,
jonathanh, f.fainelli, stable
On Mon, Mar 22, 2021 at 02:52:31PM -0700, Guenter Roeck wrote:
> On Mon, Mar 22, 2021 at 04:19:10PM +0100, Greg Kroah-Hartman wrote:
> > This is the start of the stable review cycle for the 5.10.26 release.
> > There are 156 patches in this series, all will be posted as a response
> > to this one. If anyone has any issues with these being applied, please
> > let me know.
> >
> > Responses should be made by Wed, 24 Mar 2021 15:18:19 +0000.
> > Anything received after that time might be too late.
> >
>
> Build results:
> total: 156 pass: 156 fail: 0
> Qemu test results:
> total: 432 pass: 428 fail: 4
> Failed tests:
> arm:realview-pb-a8:realview_defconfig:realview_pb:mem512:arm-realview-pba8:initrd
> arm:realview-pbx-a9:realview_defconfig:realview_pb:arm-realview-pbx-a9:initrd
> arm:realview-eb:realview_defconfig:realview_eb:mem512:arm-realview-eb:initrd
> arm:realview-eb-mpcore:realview_defconfig:realview_eb:mem512:arm-realview-eb-11mp-ctrevb:initrd
>
> Build failure:
>
> kernel/rcu/tree.c:683:2: error: implicit declaration of function 'IRQ_WORK_INIT'
>
> The patch introducing IRQ_WORK_INIT is not in v5.10.y.
That patch keeps coming back, Sasha and I have both added it multiple
times now... I'll go drop it, thanks.
greg k-h
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: [PATCH 5.10 000/156] 5.10.26-rc2 review
2021-03-22 15:19 [PATCH 5.10 000/156] 5.10.26-rc2 review Greg Kroah-Hartman
` (5 preceding siblings ...)
2021-03-23 0:57 ` Samuel Zou
@ 2021-03-23 8:49 ` Naresh Kamboju
2021-03-24 8:52 ` Naresh Kamboju
2021-03-23 17:21 ` Andrei Rabusov
7 siblings, 1 reply; 11+ messages in thread
From: Naresh Kamboju @ 2021-03-23 8:49 UTC (permalink / raw)
To: Greg Kroah-Hartman, Stefano Garzarella, Gautam Dawar
Cc: open list, Shuah Khan, Florian Fainelli, patches, lkft-triage,
Jon Hunter, linux-stable, Pavel Machek, Andrew Morton,
Linus Torvalds, Guenter Roeck, lingshan.zhu, Michael S. Tsirkin,
Jason Wang, Arnd Bergmann
On Mon, 22 Mar 2021 at 20:49, Greg Kroah-Hartman
<gregkh@linuxfoundation.org> wrote:
>
> This is the start of the stable review cycle for the 5.10.26 release.
> There are 156 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Wed, 24 Mar 2021 15:18:19 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.26-rc2.gz
> or in the git tree and branch at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h
> Gautam Dawar <gdawar.xilinx@gmail.com>
> vhost_vdpa: fix the missing irq_bypass_unregister_producer() invocation
>
> Stefano Garzarella <sgarzare@redhat.com>
> vhost-vdpa: set v->config_ctx to NULL if eventfd_ctx_fdget() fails
>
> Stefano Garzarella <sgarzare@redhat.com>
> vhost-vdpa: fix use-after-free of v->config_ctx
While runnning Kselftest net mptcp_join.sh tests the following warnings and
kernel panic triggered on arm64, x86 and i386.
- arm64 juno-r2
- arm64 hikey
- x86
- i386
easy to reproduce:
Please find more details in this email.
Warning:
--------
[ 1040.114695] refcount_t: addition on 0; use-after-free.
[ 1040.119857] WARNING: CPU: 3 PID: 31925 at
/usr/src/kernel/lib/refcount.c:25 refcount_warn_saturate+0xd7/0x100
[ 1040.129769] Modules linked in: act_mirred cls_u32 sch_netem sch_etf
ip6table_nat xt_nat iptable_nat nf_nat ip6table_filter xt_conntrack
nf_conntrack nf_defrag_ipv4 libcrc32c ip6_tables nf_defrag_ipv6 sch_fq
iptable_filter xt_mark ip_tables cls_bpf sch_ingress algif_hash
x86_pkg_temp_thermal fuse [last unloaded: test_blackhole_dev]
[ 1040.159030] CPU: 3 PID: 31925 Comm: mptcp_connect Tainted: G
W K 5.10.26-rc2 #1
[ 1040.167459] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS
2.2 05/23/2018
[ 1040.174851] RIP: 0010:refcount_warn_saturate+0xd7/0x100
And
Kernel Panic:
-------------
[ 1069.557485] BUG: kernel NULL pointer dereference, address: 0000000000000010
[ 1069.564446] #PF: supervisor read access in kernel mode
[ 1069.569583] #PF: error_code(0x0000) - not-present page
[ 1069.574714] PGD 0 P4D 0
[ 1069.577246] Oops: 0000 [#1] SMP PTI
[ 1069.580730] CPU: 1 PID: 17 Comm: ksoftirqd/1 Tainted: G W
K 5.10.26-rc2 #1
[ 1069.588719] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS
2.2 05/23/2018
[ 1069.596106] RIP: 0010:selinux_socket_sock_rcv_skb+0x3f/0x290
...
[ 1069.961697] Kernel panic - not syncing: Fatal exception in interrupt
[ 1069.968083] Kernel Offset: 0x18600000 from 0xffffffff81000000
(relocation range: 0xffffffff80000000-0xffffffffbfffffff)
steps to reproduce:
--------------------------
- cd /opt/kselftests/mainline/net/mptcp
- ./mptcp_join.sh || true
Summary
------------------------------------------------------------------------
kernel: 5.10.26-rc2
git repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git
git branch: linux-5.10.y
git commit: deabac90f919203307e6eee2606366bdb19bbe93
git describe: v5.10.25-157-gdeabac90f919
Test details: https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-5.10.y/build/v5.10.25-157-gdeabac90f919
Test config: http://snapshots.linaro.org/openembedded/lkft/lkft/sumo/juno/lkft/linux-stable-rc-5.10/113/config
# selftests: net/mptcp: mptcp_join.sh
[ 1032.910970] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
[ 1032.946716] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
[ 1033.003858] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
[ 1033.072944] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
# Created /tmp/tmp.YJ5EeX04Tc (size 1 KB) containing data sent by client
# Created /tmp/tmp.TzVm9gRu34 (size 1 KB) containing data sent by server
[ 1033.918127] IPv6: ADDRCONF(NETDEV_CHANGE): ns2eth1: link becomes ready
# 01 no JOIN syn[ ok ] - synack[ ok ] - ack[ ok ]
[ 1035.374798] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
[ 1035.440014] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
[ 1035.493485] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
[ 1035.548411] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
[ 1036.350125] IPv6: ADDRCONF(NETDEV_CHANGE): ns2eth1: link becomes ready
# 02 single subflow, limited by client syn[ ok ] - synack[ ok ] - ack[ ok ]
[ 1037.842366] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
[ 1037.910581] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
[ 1037.977716] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
[ 1038.047941] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
[ 1039.106156] IPv4: Attempt to release alive inet socket 00000000e87684f6
[ 1040.110048] ------------[ cut here ]------------
[ 1040.114695] refcount_t: addition on 0; use-after-free.
[ 1040.119857] WARNING: CPU: 3 PID: 31925 at
/usr/src/kernel/lib/refcount.c:25 refcount_warn_saturate+0xd7/0x100
[ 1040.129769] Modules linked in: act_mirred cls_u32 sch_netem sch_etf
ip6table_nat xt_nat iptable_nat nf_nat ip6table_filter xt_conntrack
nf_conntrack nf_defrag_ipv4 libcrc32c ip6_tables nf_defrag_ipv6 sch_fq
iptable_filter xt_mark ip_tables cls_bpf sch_ingress algif_hash
x86_pkg_temp_thermal fuse [last unloaded: test_blackhole_dev]
[ 1040.159030] CPU: 3 PID: 31925 Comm: mptcp_connect Tainted: G
W K 5.10.26-rc2 #1
[ 1040.167459] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS
2.2 05/23/2018
[ 1040.174851] RIP: 0010:refcount_warn_saturate+0xd7/0x100
[ 1040.180076] Code: 01 e8 ed 52 ad ff 0f 0b 5d c3 80 3d 7e b1 a2 01
00 0f 85 67 ff ff ff 48 c7 c7 b0 b0 0a 9b c6 05 6a b1 a2 01 01 e8 c9
52 ad ff <0f> 0b 5d c3 48 c7 c7 68 b0 0a 9b c6 05 54 b1 a2 01 01 e8 b2
52 ad
[ 1040.198822] RSP: 0018:ffffa57ec5733d30 EFLAGS: 00010282
[ 1040.204049] RAX: 0000000000000000 RBX: ffff90cfc7d6b840 RCX: 0000000000000000
[ 1040.211181] RDX: 0000000000000001 RSI: ffff90d12fb97f30 RDI: ffff90d12fb97f30
[ 1040.218313] RBP: ffffa57ec5733d30 R08: 0000000000000000 R09: 0000000000000000
[ 1040.225445] R10: 0000000000000000 R11: ffffa57ec5733ae8 R12: 0000000000000000
[ 1040.232578] R13: ffff90cfc7d6b8c0 R14: 0000000000000007 R15: ffff90cffe32d8f0
[ 1040.239712] FS: 00007f3b5fbb14c0(0000) GS:ffff90d12fb80000(0000)
knlGS:0000000000000000
[ 1040.247798] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1040.253542] CR2: 00007ffec6cbecb0 CR3: 00000001041ec001 CR4: 00000000003706e0
[ 1040.260677] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1040.267809] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1040.274940] Call Trace:
[ 1040.277397] tcp_close+0x45b/0x4f0
[ 1040.280808] inet_release+0x47/0x80
[ 1040.284302] __sock_release+0x8b/0xc0
[ 1040.287977] sock_release+0x10/0x20
[ 1040.291478] __mptcp_close_ssk+0x59/0x60
[ 1040.295412] mptcp_close+0x173/0x2f0
[ 1040.298992] inet_release+0x47/0x80
[ 1040.302493] __sock_release+0x42/0xc0
[ 1040.306167] sock_close+0x18/0x20
[ 1040.309486] __fput+0xb6/0x270
[ 1040.312546] ____fput+0xe/0x10
[ 1040.315612] task_work_run+0x6f/0xc0
[ 1040.319192] exit_to_user_mode_prepare+0x1a0/0x1b0
[ 1040.323985] syscall_exit_to_user_mode+0x3e/0x240
[ 1040.328692] do_syscall_64+0x43/0x50
[ 1040.332278] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1040.337331] RIP: 0033:0x7f3b5f6c47c4
[ 1040.340910] Code: ff eb 98 b8 ff ff ff ff eb 91 66 2e 0f 1f 84 00
00 00 00 00 66 90 48 8d 05 41 e1 2c 00 8b 00 85 c0 75 13 b8 03 00 00
00 0f 05 <48> 3d 00 f0 ff ff 77 3c c3 0f 1f 00 53 89 fb 48 83 ec 10 e8
e4 a6
[ 1040.359656] RSP: 002b:00007ffec6cbcc98 EFLAGS: 00000246 ORIG_RAX:
0000000000000003
[ 1040.367222] RAX: 0000000000000000 RBX: 00000000000003b8 RCX: 00007f3b5f6c47c4
[ 1040.374354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[ 1040.381484] RBP: 0000000000000005 R08: 00007f3b5f98d1e0 R09: 00007f3b5f98d240
[ 1040.388629] R10: 0000000000000403 R11: 0000000000000246 R12: 0000000000000000
[ 1040.395770] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1040.402904] irq event stamp: 0
[ 1040.405969] hardirqs last enabled at (0): [<0000000000000000>] 0x0
[ 1040.412236] hardirqs last disabled at (0): [<ffffffff997bbde3>]
copy_process+0x753/0x1d40
[ 1040.420408] softirqs last enabled at (0): [<ffffffff997bbde3>]
copy_process+0x753/0x1d40
[ 1040.428581] softirqs last disabled at (0): [<0000000000000000>] 0x0
[ 1040.434846] ---[ end trace 8a7765e77d8e79e5 ]---
[ 1040.439466] ------------[ cut here ]------------
[ 1040.444085] refcount_t: underflow; use-after-free.
[ 1040.448882] WARNING: CPU: 3 PID: 31925 at
/usr/src/kernel/lib/refcount.c:28 refcount_warn_saturate+0x93/0x100
[ 1040.458799] Modules linked in: act_mirred cls_u32 sch_netem sch_etf
ip6table_nat xt_nat iptable_nat nf_nat ip6table_filter xt_conntrack
nf_conntrack nf_defrag_ipv4 libcrc32c ip6_tables nf_defrag_ipv6 sch_fq
iptable_filter xt_mark ip_tables cls_bpf sch_ingress algif_hash
x86_pkg_temp_thermal fuse [last unloaded: test_blackhole_dev]
[ 1040.488060] CPU: 3 PID: 31925 Comm: mptcp_connect Tainted: G
W K 5.10.26-rc2 #1
[ 1040.496497] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS
2.2 05/23/2018
[ 1040.503891] RIP: 0010:refcount_warn_saturate+0x93/0x100
[ 1040.509118] Code: cb b1 a2 01 01 e8 2d 53 ad ff 0f 0b 5d c3 80 3d
bd b1 a2 01 00 75 ab 48 c7 c7 e0 b0 0a 9b c6 05 ad b1 a2 01 01 e8 0d
53 ad ff <0f> 0b 5d c3 80 3d a0 b1 a2 01 00 75 8b 48 c7 c7 68 b0 0a 9b
c6 05
[ 1040.527863] RSP: 0018:ffffa57ec5733d18 EFLAGS: 00010286
[ 1040.533087] RAX: 0000000000000000 RBX: ffff90cfc7d6b840 RCX: 0000000000000000
[ 1040.540220] RDX: 0000000000000001 RSI: ffff90d12fb97f30 RDI: ffff90d12fb97f30
[ 1040.547353] RBP: ffffa57ec5733d18 R08: 0000000000000000 R09: 0000000000000000
[ 1040.554486] R10: 0000000000000000 R11: ffffa57ec5733ad0 R12: ffff90cfc7d6b8c8
[ 1040.561618] R13: ffff90cfc7d6b8c0 R14: 0000000000000007 R15: ffff90cffe32d8f0
[ 1040.568751] FS: 00007f3b5fbb14c0(0000) GS:ffff90d12fb80000(0000)
knlGS:0000000000000000
[ 1040.576836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1040.582584] CR2: 00007ffec6cbecb0 CR3: 00000001041ec001 CR4: 00000000003706e0
[ 1040.589717] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1040.596851] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1040.603987] Call Trace:
[ 1040.606444] inet_csk_destroy_sock+0xd8/0x130
[ 1040.610811] tcp_close+0x426/0x4f0
[ 1040.614217] inet_release+0x47/0x80
[ 1040.617710] __sock_release+0x8b/0xc0
[ 1040.621375] sock_release+0x10/0x20
[ 1040.624867] __mptcp_close_ssk+0x59/0x60
[ 1040.628795] mptcp_close+0x173/0x2f0
[ 1040.632383] inet_release+0x47/0x80
[ 1040.635884] __sock_release+0x42/0xc0
[ 1040.639557] sock_close+0x18/0x20
[ 1040.642877] __fput+0xb6/0x270
[ 1040.645935] ____fput+0xe/0x10
[ 1040.648994] task_work_run+0x6f/0xc0
[ 1040.652574] exit_to_user_mode_prepare+0x1a0/0x1b0
[ 1040.657367] syscall_exit_to_user_mode+0x3e/0x240
[ 1040.662072] do_syscall_64+0x43/0x50
[ 1040.665653] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1040.670713] RIP: 0033:0x7f3b5f6c47c4
[ 1040.674293] Code: ff eb 98 b8 ff ff ff ff eb 91 66 2e 0f 1f 84 00
00 00 00 00 66 90 48 8d 05 41 e1 2c 00 8b 00 85 c0 75 13 b8 03 00 00
00 0f 05 <48> 3d 00 f0 ff ff 77 3c c3 0f 1f 00 53 89 fb 48 83 ec 10 e8
e4 a6
[ 1040.693038] RSP: 002b:00007ffec6cbcc98 EFLAGS: 00000246 ORIG_RAX:
0000000000000003
[ 1040.700604] RAX: 0000000000000000 RBX: 00000000000003b8 RCX: 00007f3b5f6c47c4
[ 1040.707735] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[ 1040.714869] RBP: 0000000000000005 R08: 00007f3b5f98d1e0 R09: 00007f3b5f98d240
[ 1040.722002] R10: 0000000000000403 R11: 0000000000000246 R12: 0000000000000000
[ 1040.729134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1040.736267] irq event stamp: 0
[ 1040.739325] hardirqs last enabled at (0): [<0000000000000000>] 0x0
[ 1040.745592] hardirqs last disabled at (0): [<ffffffff997bbde3>]
copy_process+0x753/0x1d40
[ 1040.753764] softirqs last enabled at (0): [<ffffffff997bbde3>]
copy_process+0x753/0x1d40
[ 1040.761935] softirqs last disabled at (0): [<0000000000000000>] 0x0
[ 1040.768202] ---[ end trace 8a7765e77d8e79e6 ]---
# 03 single subflow, limited by server syn[ ok ] - synack[ ok ] - ack[ ok ]
[ 1040.917139] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
[ 1040.989376] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
[ 1041.057848] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
[ 1041.128414] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
[ 1041.918135] IPv6: ADDRCONF(NETDEV_CHANGE): ns2eth1: link becomes ready
# 04 single subflow syn[ ok ] - synack[ ok ] - ack[ ok ]
[ 1043.451283] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
[ 1043.519437] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
[ 1043.591193] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
[ 1043.662269] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
[ 1045.735845] ------------[ cut here ]------------
[ 1045.740483] refcount_t: decrement hit 0; leaking memory.
[ 1045.745809] WARNING: CPU: 1 PID: 32066 at
/usr/src/kernel/lib/refcount.c:31 refcount_warn_saturate+0x53/0x100
[ 1045.755724] Modules linked in: act_mirred cls_u32 sch_netem sch_etf
ip6table_nat xt_nat iptable_nat nf_nat ip6table_filter xt_conntrack
nf_conntrack nf_defrag_ipv4 libcrc32c ip6_tables nf_defrag_ipv6 sch_fq
iptable_filter xt_mark ip_tables cls_bpf sch_ingress algif_hash
x86_pkg_temp_thermal fuse [last unloaded: test_blackhole_dev]
[ 1045.784988] CPU: 1 PID: 32066 Comm: mptcp_connect Tainted: G
W K 5.10.26-rc2 #1
[ 1045.793427] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS
2.2 05/23/2018
[ 1045.800821] RIP: 0010:refcount_warn_saturate+0x53/0x100
[ 1045.806053] Code: 00 00 5d c3 83 fe 03 74 45 83 fe 04 75 20 80 3d
fc b1 a2 01 00 75 eb 48 c7 c7 08 b1 0a 9b c6 05 ec b1 a2 01 01 e8 4d
53 ad ff <0f> 0b 5d c3 80 3d db b1 a2 01 00 75 cb 48 c7 c7 38 b1 0a 9b
c6 05
[ 1045.824798] RSP: 0018:ffffa57ec59f3cf0 EFLAGS: 00010282
[ 1045.830025] RAX: 0000000000000000 RBX: 0000000000000010 RCX: 0000000000000000
[ 1045.837158] RDX: 0000000000000001 RSI: ffff90d12fa97f30 RDI: ffff90d12fa97f30
[ 1045.844290] RBP: ffffa57ec59f3cf0 R08: 0000000000000000 R09: 0000000000000000
[ 1045.851424] R10: 0000000000000000 R11: ffffa57ec59f3aa8 R12: ffff90d007a02d00
[ 1045.858555] R13: ffff90d007a02d80 R14: 0000000000000009 R15: ffff90d00be4c4f0
[ 1045.865689] FS: 00007f55368c24c0(0000) GS:ffff90d12fa80000(0000)
knlGS:0000000000000000
[ 1045.873783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1045.879527] CR2: 00007ffe2b569540 CR3: 000000013dd62002 CR4: 00000000003706e0
[ 1045.886659] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1045.893791] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1045.900924] Call Trace:
[ 1045.903380] tcp_release_cb+0x10f/0x180
[ 1045.907220] release_sock+0x48/0xb0
[ 1045.910719] tcp_close+0x25e/0x4f0
[ 1045.914125] inet_release+0x47/0x80
[ 1045.917620] __sock_release+0x8b/0xc0
[ 1045.921291] sock_release+0x10/0x20
[ 1045.924784] __mptcp_close_ssk+0x59/0x60
[ 1045.928712] mptcp_close+0x173/0x2f0
[ 1045.932291] inet_release+0x47/0x80
[ 1045.935782] __sock_release+0x42/0xc0
[ 1045.939450] sock_close+0x18/0x20
[ 1045.942769] __fput+0xb6/0x270
[ 1045.945837] ____fput+0xe/0x10
[ 1045.948905] task_work_run+0x6f/0xc0
[ 1045.952492] exit_to_user_mode_prepare+0x1a0/0x1b0
[ 1045.957283] syscall_exit_to_user_mode+0x3e/0x240
[ 1045.961990] do_syscall_64+0x43/0x50
[ 1045.965569] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1045.970623] RIP: 0033:0x7f55363d57c4
[ 1045.974201] Code: ff eb 98 b8 ff ff ff ff eb 91 66 2e 0f 1f 84 00
00 00 00 00 66 90 48 8d 05 41 e1 2c 00 8b 00 85 c0 75 13 b8 03 00 00
00 0f 05 <48> 3d 00 f0 ff ff 77 3c c3 0f 1f 00 53 89 fb 48 83 ec 10 e8
e4 a6
[ 1045.992944] RSP: 002b:00007ffe2b567528 EFLAGS: 00000246 ORIG_RAX:
0000000000000003
[ 1046.000513] RAX: 0000000000000000 RBX: 000000000000011c RCX: 00007f55363d57c4
[ 1046.007652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[ 1046.014784] RBP: 0000000000000005 R08: 00007f553669e1e4 R09: 00007f553669e240
[ 1046.021918] R10: 0000000000000403 R11: 0000000000000246 R12: 0000000000000000
[ 1046.029052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1046.036185] irq event stamp: 0
[ 1046.039251] hardirqs last enabled at (0): [<0000000000000000>] 0x0
[ 1046.045517] hardirqs last disabled at (0): [<ffffffff997bbde3>]
copy_process+0x753/0x1d40
[ 1046.053690] softirqs last enabled at (0): [<ffffffff997bbde3>]
copy_process+0x753/0x1d40
[ 1046.061862] softirqs last disabled at (0): [<0000000000000000>] 0x0
[ 1046.068129] ---[ end trace 8a7765e77d8e79e7 ]---
# 05 multiple subflows syn[ ok ] - synack[ ok ] - ack[ ok ]
[ 1046.222612] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
[ 1046.292278] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
[ 1046.366140] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
[ 1046.436225] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
[ 1047.230122] IPv6: ADDRCONF(NETDEV_CHANGE): ns2eth1: link becomes ready
[ 1047.510886] IPv4: Attempt to release alive inet socket 000000003578f3a2
# 06 multiple subflows, limited by server syn[ ok ] - synack[ ok ] - ack[ ok ]
[ 1048.769959] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
[ 1048.845133] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
[ 1048.916783] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
[ 1048.985439] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
[ 1049.726207] IPv6: ADDRCONF(NETDEV_CHANGE): ns2eth1: link becomes ready
# 07 unused signal address syn[ ok ] - synack[ ok ] - ack[ ok ]
# add[ ok ] - echo [ ok ]
[ 1051.315169] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
[ 1051.384917] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
[ 1051.452335] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
[ 1051.519687] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
# 08 signal address syn[ ok ] - synack[ ok ] - ack[ ok ]
# add[ ok ] - echo [ ok ]
[ 1053.866917] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
[ 1053.934026] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
[ 1054.003350] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
[ 1054.071502] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
# 09 subflow and signal syn[ ok ] - synack[ ok ] - ack[ ok ]
# add[ ok ] - echo [ ok ]
[ 1056.407692] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
[ 1056.461570] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
[ 1056.516522] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
[ 1056.573242] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
[ 1057.406178] IPv6: ADDRCONF(NETDEV_CHANGE): ns2eth1: link becomes ready
# 10 multiple subflows and signal syn[ ok ] - synack[ ok ] - ack[ ok ]
# add[ ok ] - echo [ ok ]
[ 1058.944588] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
[ 1058.998517] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
[ 1059.051399] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
[ 1059.114126] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
[ 1059.902128] IPv6: ADDRCONF(NETDEV_CHANGE): ns2eth1: link becomes ready
# 11 remove single subflow syn[ ok ] - synack[ ok ] - ack[ ok ]
# rm [ ok ] - sf [ ok ]
[ 1065.672583] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
[ 1065.712249] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
[ 1065.751709] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
[ 1065.792078] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
[ 1066.686117] IPv6: ADDRCONF(NETDEV_CHANGE): ns2eth1: link becomes ready
[ 1067.902073] IPv4: Attempt to release TCP socket in state 1 0000000079de8dcd
[ 1068.875113] ------------[ cut here ]------------
[ 1068.879758] refcount_t: saturated; leaking memory.
[ 1068.884577] WARNING: CPU: 1 PID: 32609 at
/usr/src/kernel/lib/refcount.c:22 refcount_warn_saturate+0xee/0x100
[ 1068.894497] Modules linked in: act_mirred cls_u32 sch_netem sch_etf
ip6table_nat xt_nat iptable_nat nf_nat ip6table_filter xt_conntrack
nf_conntrack nf_defrag_ipv4 libcrc32c ip6_tables nf_defrag_ipv6 sch_fq
iptable_filter xt_mark ip_tables cls_bpf sch_ingress algif_hash
x86_pkg_temp_thermal fuse [last unloaded: test_blackhole_dev]
[ 1068.923755] CPU: 1 PID: 32609 Comm: pm_nl_ctl Tainted: G W
K 5.10.26-rc2 #1
[ 1068.931842] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS
2.2 05/23/2018
[ 1068.939240] RIP: 0010:refcount_warn_saturate+0xee/0x100
[ 1068.944468] Code: 48 c7 c7 b0 b0 0a 9b c6 05 6a b1 a2 01 01 e8 c9
52 ad ff 0f 0b 5d c3 48 c7 c7 68 b0 0a 9b c6 05 54 b1 a2 01 01 e8 b2
52 ad ff <0f> 0b 5d c3 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 8b 07
3d 00
[ 1068.963224] RSP: 0018:ffffa57ec64af7f0 EFLAGS: 00010282
[ 1068.968456] RAX: 0000000000000000 RBX: 000000000000002c RCX: 0000000000000000
[ 1068.975587] RDX: 0000000000000001 RSI: ffff90d12fa97f30 RDI: ffff90d12fa97f30
[ 1068.982719] RBP: ffffa57ec64af7f0 R08: 0000000000000000 R09: 0000000000000000
[ 1068.989854] R10: 000000000000058c R11: ffffa57ec64af5a8 R12: ffffa57ec64af830
[ 1068.996993] R13: ffff90cfc08eaee0 R14: 000000000000058c R15: ffff90d007a04380
[ 1069.004131] FS: 00007f018dc0d4c0(0000) GS:ffff90d12fa80000(0000)
knlGS:0000000000000000
[ 1069.012220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1069.017966] CR2: 00007f018d79c285 CR3: 000000013d894001 CR4: 00000000003706e0
[ 1069.025098] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1069.032231] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1069.039362] Call Trace:
[ 1069.041820] __tcp_transmit_skb+0x851/0xcf0
[ 1069.046017] tcp_write_xmit+0x251/0x11a0
[ 1069.049946] __tcp_push_pending_frames+0x37/0x100
[ 1069.054651] tcp_send_fin+0x4f/0x240
[ 1069.058230] tcp_close+0x36f/0x4f0
[ 1069.061640] inet_release+0x47/0x80
[ 1069.065141] __sock_release+0x8b/0xc0
[ 1069.068814] sock_release+0x10/0x20
[ 1069.072306] __mptcp_close_ssk+0x59/0x60
[ 1069.076232] mptcp_pm_nl_rm_subflow_received+0xcb/0x110
[ 1069.081461] mptcp_pm_remove_subflow+0x34/0x70
[ 1069.085913] mptcp_nl_cmd_del_addr+0x3eb/0x440
[ 1069.090361] genl_family_rcv_msg_doit.isra.16+0x117/0x150
[ 1069.095767] ? genl_family_rcv_msg_doit.isra.16+0x117/0x150
[ 1069.101341] genl_rcv_msg+0xe8/0x1e0
[ 1069.104926] ? remove_anno_list_by_saddr+0x50/0x50
[ 1069.109722] ? genl_family_rcv_msg_doit.isra.16+0x150/0x150
[ 1069.115301] netlink_rcv_skb+0x56/0x100
[ 1069.119141] genl_rcv+0x28/0x40
[ 1069.122285] netlink_unicast+0x1b8/0x270
[ 1069.126213] netlink_sendmsg+0x339/0x460
[ 1069.130148] sock_sendmsg+0x63/0x70
[ 1069.133649] __sys_sendto+0x142/0x180
[ 1069.137323] ? __audit_syscall_entry+0xdd/0x130
[ 1069.141855] ? syscall_trace_enter.isra.16+0x179/0x230
[ 1069.147000] __x64_sys_sendto+0x28/0x30
[ 1069.150852] do_syscall_64+0x37/0x50
[ 1069.154438] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1069.159490] RIP: 0033:0x7f018d72f577
[ 1069.163070] Code: 64 89 02 48 c7 c0 ff ff ff ff eb b6 0f 1f 80 00
00 00 00 48 8d 05 91 f3 2b 00 41 89 ca 8b 00 85 c0 75 10 b8 2c 00 00
00 0f 05 <48> 3d 00 f0 ff ff 77 71 c3 41 57 4d 89 c7 41 56 41 89 ce 41
55 49
[ 1069.181815] RSP: 002b:00007ffd65cf3ae8 EFLAGS: 00000246 ORIG_RAX:
000000000000002c
[ 1069.189382] RAX: ffffffffffffffda RBX: 00007ffd65cf3b30 RCX: 00007f018d72f577
[ 1069.196512] RDX: 0000000000000020 RSI: 00007ffd65cf3b30 RDI: 0000000000000005
[ 1069.203647] RBP: 0000000000000020 R08: 00007ffd65cf3af4 R09: 000000000000000c
[ 1069.210777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1069.217910] R13: 0000000000000005 R14: 0000000000000000 R15: 0000000000000000
[ 1069.225047] irq event stamp: 0
[ 1069.228112] hardirqs last enabled at (0): [<0000000000000000>] 0x0
[ 1069.234378] hardirqs last disabled at (0): [<ffffffff997bbde3>]
copy_process+0x753/0x1d40
[ 1069.242548] softirqs last enabled at (0): [<ffffffff997bbde3>]
copy_process+0x753/0x1d40
[ 1069.250722] softirqs last disabled at (0): [<0000000000000000>] 0x0
[ 1069.256987] ---[ end trace 8a7765e77d8e79e8 ]---
[ 1069.261660] ------------[ cut here ]------------
[ 1069.266292] refcount_t: saturated; leaking memory.
[ 1069.271104] WARNING: CPU: 1 PID: 17 at
/usr/src/kernel/lib/refcount.c:19 refcount_warn_saturate+0xb3/0x100
[ 1069.280759] Modules linked in: act_mirred cls_u32 sch_netem sch_etf
ip6table_nat xt_nat iptable_nat nf_nat ip6table_filter xt_conntrack
nf_conntrack nf_defrag_ipv4 libcrc32c ip6_tables nf_defrag_ipv6 sch_fq
iptable_filter xt_mark ip_tables cls_bpf sch_ingress algif_hash
x86_pkg_temp_thermal fuse [last unloaded: test_blackhole_dev]
[ 1069.310010] CPU: 1 PID: 17 Comm: ksoftirqd/1 Tainted: G W
K 5.10.26-rc2 #1
[ 1069.318007] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS
2.2 05/23/2018
[ 1069.325401] RIP: 0010:refcount_warn_saturate+0xb3/0x100
[ 1069.330627] Code: ad b1 a2 01 01 e8 0d 53 ad ff 0f 0b 5d c3 80 3d
a0 b1 a2 01 00 75 8b 48 c7 c7 68 b0 0a 9b c6 05 90 b1 a2 01 01 e8 ed
52 ad ff <0f> 0b 5d c3 80 3d 7e b1 a2 01 00 0f 85 67 ff ff ff 48 c7 c7
b0 b0
[ 1069.349374] RSP: 0018:ffffa57ec00e7bd8 EFLAGS: 00010282
[ 1069.354599] RAX: 0000000000000000 RBX: ffff90d007a043e8 RCX: 0000000000000000
[ 1069.361731] RDX: 0000000000000001 RSI: ffff90d12fa97f30 RDI: ffff90d12fa97f30
[ 1069.368862] RBP: ffffa57ec00e7bd8 R08: 0000000000000000 R09: 0000000000000000
[ 1069.375997] R10: 0000000000000000 R11: ffffa57ec00e7990 R12: 0000000096271b27
[ 1069.383128] R13: 0203000a0101000a R14: ffff90cfffa66500 R15: 00000000bbb40c37
[ 1069.390260] FS: 0000000000000000(0000) GS:ffff90d12fa80000(0000)
knlGS:0000000000000000
[ 1069.398346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1069.404092] CR2: 00007f018d79c285 CR3: 00000001ed026002 CR4: 00000000003706e0
[ 1069.411223] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1069.418357] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1069.425488] Call Trace:
[ 1069.427943] __inet_lookup_established+0x141/0x170
[ 1069.432735] tcp_v4_early_demux+0xab/0x180
[ 1069.436836] ? rcu_read_lock_held+0x25/0x60
[ 1069.441022] ip_rcv_finish_core.isra.23+0x483/0x570
[ 1069.445900] ip_rcv_finish+0x6d/0xc0
[ 1069.449478] ip_rcv+0x142/0x200
[ 1069.452625] ? lock_acquire+0x1d4/0x3a0
[ 1069.456466] ? kfree+0x3e4/0x720
[ 1069.459697] ? process_backlog+0x73/0x250
[ 1069.463709] __netif_receive_skb_one_core+0x86/0xa0
[ 1069.468591] __netif_receive_skb+0x18/0x60
[ 1069.472697] process_backlog+0xe2/0x250
[ 1069.476537] net_rx_action+0x144/0x460
[ 1069.480288] __do_softirq+0xc3/0x42a
[ 1069.483869] ? smpboot_thread_fn+0x2b/0x1f0
[ 1069.488053] ? smpboot_thread_fn+0x70/0x1f0
[ 1069.492242] run_ksoftirqd+0x2b/0x60
[ 1069.495818] smpboot_thread_fn+0x149/0x1f0
[ 1069.499920] ? sort_range+0x30/0x30
[ 1069.503411] kthread+0x142/0x160
[ 1069.506642] ? kthread_insert_work_sanity_check+0x60/0x60
[ 1069.512045] ret_from_fork+0x22/0x30
[ 1069.515632] irq event stamp: 195412
[ 1069.519131] hardirqs last enabled at (195411):
[<ffffffff997c6db0>] run_ksoftirqd+0x30/0x60
[ 1069.527564] hardirqs last disabled at (195412):
[<ffffffff9a739c94>] __schedule+0x624/0x950
[ 1069.535910] softirqs last enabled at (195410):
[<ffffffff9aa00308>] __do_softirq+0x308/0x42a
[ 1069.544428] softirqs last disabled at (195383):
[<ffffffff997c6dab>] run_ksoftirqd+0x2b/0x60
[ 1069.552860] ---[ end trace 8a7765e77d8e79e9 ]---
[ 1069.557485] BUG: kernel NULL pointer dereference, address: 0000000000000010
[ 1069.564446] #PF: supervisor read access in kernel mode
[ 1069.569583] #PF: error_code(0x0000) - not-present page
[ 1069.574714] PGD 0 P4D 0
[ 1069.577246] Oops: 0000 [#1] SMP PTI
[ 1069.580730] CPU: 1 PID: 17 Comm: ksoftirqd/1 Tainted: G W
K 5.10.26-rc2 #1
[ 1069.588719] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS
2.2 05/23/2018
[ 1069.596106] RIP: 0010:selinux_socket_sock_rcv_skb+0x3f/0x290
[ 1069.601762] Code: 54 4c 8d 75 98 53 49 89 fd 48 83 ec 78 0f b7 5f
10 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 48 8b 87 48 04 00 00
4c 89 f7 <44> 8b 78 10 31 c0 f3 48 ab 89 d8 83 e0 f7 66 83 f8 02 0f 85
4a 01
[ 1069.620498] RSP: 0018:ffffa57ec00e7a20 EFLAGS: 00010246
[ 1069.625715] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000007
[ 1069.632841] RDX: ffffffff9995c813 RSI: ffff90cffe966b00 RDI: ffffa57ec00e7a58
[ 1069.639965] RBP: ffffa57ec00e7ac0 R08: 0000000000000000 R09: 0000000000000000
[ 1069.647090] R10: 0000000000000000 R11: ffff90cfffa66500 R12: ffff90cffe966b00
[ 1069.654221] R13: ffff90d007a04380 R14: ffffa57ec00e7a58 R15: ffff90d007a04380
[ 1069.661344] FS: 0000000000000000(0000) GS:ffff90d12fa80000(0000)
knlGS:0000000000000000
[ 1069.669421] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1069.675159] CR2: 0000000000000010 CR3: 00000001ed026002 CR4: 00000000003706e0
[ 1069.682284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1069.689407] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1069.696530] Call Trace:
[ 1069.698976] ? __cgroup_bpf_run_filter_skb+0x20c/0x670
[ 1069.704115] ? lock_release+0xcf/0x270
[ 1069.707868] ? rcu_read_lock_held_common+0x12/0x50
[ 1069.712659] ? rcu_read_lock_held+0x25/0x60
[ 1069.716837] security_sock_rcv_skb+0x2f/0x50
[ 1069.721112] sk_filter_trim_cap+0x48/0x350
[ 1069.725208] ? tcp_v4_inbound_md5_hash+0x60/0x1e0
[ 1069.729906] tcp_v4_rcv+0xb59/0xd70
[ 1069.733390] ? lock_acquire+0x1d4/0x3a0
[ 1069.737229] ip_protocol_deliver_rcu+0x3c/0x270
[ 1069.741754] ip_local_deliver_finish+0x92/0x130
[ 1069.746286] ip_local_deliver+0x1a1/0x200
[ 1069.750289] ? rcu_read_lock_held+0x25/0x60
[ 1069.754468] ip_rcv_finish+0x8a/0xc0
[ 1069.758046] ip_rcv+0x142/0x200
[ 1069.761183] ? lock_acquire+0x1d4/0x3a0
[ 1069.765014] ? kfree+0x3e4/0x720
[ 1069.768248] ? process_backlog+0x73/0x250
[ 1069.772261] __netif_receive_skb_one_core+0x86/0xa0
[ 1069.777138] __netif_receive_skb+0x18/0x60
[ 1069.781228] process_backlog+0xe2/0x250
[ 1069.785061] net_rx_action+0x144/0x460
[ 1069.788812] __do_softirq+0xc3/0x42a
[ 1069.792382] ? smpboot_thread_fn+0x2b/0x1f0
[ 1069.796561] ? smpboot_thread_fn+0x70/0x1f0
[ 1069.800746] run_ksoftirqd+0x2b/0x60
[ 1069.804326] smpboot_thread_fn+0x149/0x1f0
[ 1069.808423] ? sort_range+0x30/0x30
[ 1069.811908] kthread+0x142/0x160
[ 1069.815132] ? kthread_insert_work_sanity_check+0x60/0x60
[ 1069.820524] ret_from_fork+0x22/0x30
[ 1069.824104] Modules linked in: act_mirred cls_u32 sch_netem sch_etf
ip6table_nat xt_nat iptable_nat nf_nat ip6table_filter xt_conntrack
nf_conntrack nf_defrag_ipv4 libcrc32c ip6_tables nf_defrag_ipv6 sch_fq
iptable_filter xt_mark ip_tables cls_bpf sch_ingress algif_hash
x86_pkg_temp_thermal fuse [last unloaded: test_blackhole_dev]
[ 1069.853359] CR2: 0000000000000010
[ 1069.856671] ---[ end trace 8a7765e77d8e79ea ]---
[ 1069.861290] RIP: 0010:selinux_socket_sock_rcv_skb+0x3f/0x290
[ 1069.866940] Code: 54 4c 8d 75 98 53 49 89 fd 48 83 ec 78 0f b7 5f
10 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 48 8b 87 48 04 00 00
4c 89 f7 <44> 8b 78 10 31 c0 f3 48 ab 89 d8 83 e0 f7 66 83 f8 02 0f 85
4a 01
[ 1069.885676] RSP: 0018:ffffa57ec00e7a20 EFLAGS: 00010246
[ 1069.890893] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000007
[ 1069.898018] RDX: ffffffff9995c813 RSI: ffff90cffe966b00 RDI: ffffa57ec00e7a58
[ 1069.905141] RBP: ffffa57ec00e7ac0 R08: 0000000000000000 R09: 0000000000000000
[ 1069.912264] R10: 0000000000000000 R11: ffff90cfffa66500 R12: ffff90cffe966b00
[ 1069.919389] R13: ffff90d007a04380 R14: ffffa57ec00e7a58 R15: ffff90d007a04380
[ 1069.926514] FS: 0000000000000000(0000) GS:ffff90d12fa80000(0000)
knlGS:0000000000000000
[ 1069.934589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1069.940328] CR2: 0000000000000010 CR3: 00000001ed026002 CR4: 00000000003706e0
[ 1069.947449] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1069.954575] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1069.961697] Kernel panic - not syncing: Fatal exception in interrupt
[ 1069.968083] Kernel Offset: 0x18600000 from 0xffffffff81000000
(relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[ 1069.978859] ---[ end Kernel panic - not syncing: Fatal exception in
interrupt ]---
https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-5.10.y/build/v5.10.25-157-gdeabac90f919/testrun/4220685/suite/linux-log-parser/test/check-kernel-bug-2434782/log
https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-5.10.y/build/v5.10.25-157-gdeabac90f919/testrun/4221759/suite/linux-log-parser/test/check-kernel-warning-2434838/log
https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-5.10.y/build/v5.10.25-157-gdeabac90f919/testrun/4221747/suite/linux-log-parser/test/check-kernel-bug-2434809/log
LAVA jobs link,
https://lkft.validation.linaro.org/scheduler/job/2436164
Reported-by: Naresh Kamboju <naresh.kamboju@linaro.org>
--
Linaro LKFT
https://lkft.linaro.org
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: [PATCH 5.10 000/156] 5.10.26-rc2 review
2021-03-22 15:19 [PATCH 5.10 000/156] 5.10.26-rc2 review Greg Kroah-Hartman
` (6 preceding siblings ...)
2021-03-23 8:49 ` Naresh Kamboju
@ 2021-03-23 17:21 ` Andrei Rabusov
7 siblings, 0 replies; 11+ messages in thread
From: Andrei Rabusov @ 2021-03-23 17:21 UTC (permalink / raw)
To: Greg Kroah-Hartman
Cc: linux-kernel, torvalds, akpm, linux, shuah, patches, lkft-triage,
pavel, jonathanh, f.fainelli, stable
On Mon, 22 Mar 2021 16:19:10 +0100
Greg Kroah-Hartman <gregkh@linuxfoundation.org> wrote:
> This is the start of the stable review cycle for the 5.10.26 release.
> There are 156 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied,
> please let me know.
>
> Responses should be made by Wed, 24 Mar 2021 15:18:19 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.26-rc2.gz
> or in the git tree and branch at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git
> linux-5.10.y and the diffstat can be found below.
>
> thanks,
>
> greg k-h
Tested on i686 (ThinkPad R50p) with gcc 10.2 (slackware-current)
I spotted no problems with this rc.
Tested-by: Andrei Rabusov <a.rabusov@tum.de>
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: [PATCH 5.10 000/156] 5.10.26-rc2 review
2021-03-23 8:49 ` Naresh Kamboju
@ 2021-03-24 8:52 ` Naresh Kamboju
0 siblings, 0 replies; 11+ messages in thread
From: Naresh Kamboju @ 2021-03-24 8:52 UTC (permalink / raw)
To: Greg Kroah-Hartman, Stefano Garzarella, Gautam Dawar, Florian Westphal
Cc: open list, Shuah Khan, Florian Fainelli, patches, lkft-triage,
Jon Hunter, linux-stable, Pavel Machek, Andrew Morton,
Linus Torvalds, Guenter Roeck, lingshan.zhu, Michael S. Tsirkin,
Jason Wang, Arnd Bergmann, David S. Miller, Netdev
On Tue, 23 Mar 2021 at 14:19, Naresh Kamboju <naresh.kamboju@linaro.org> wrote:
>
> On Mon, 22 Mar 2021 at 20:49, Greg Kroah-Hartman
> <gregkh@linuxfoundation.org> wrote:
> >
> > This is the start of the stable review cycle for the 5.10.26 release.
> > There are 156 patches in this series, all will be posted as a response
> > to this one. If anyone has any issues with these being applied, please
> > let me know.
> >
> > Responses should be made by Wed, 24 Mar 2021 15:18:19 +0000.
> > Anything received after that time might be too late.
> >
> > The whole patch series can be found in one patch at:
> > https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.26-rc2.gz
> > or in the git tree and branch at:
> > git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
> > and the diffstat can be found below.
> >
> > thanks,
> >
> > greg k-h
> While runnning Kselftest net mptcp_join.sh tests the following warnings and
> kernel panic triggered on arm64, x86 and i386.
> - arm64 juno-r2
> - arm64 hikey
> - x86
> - i386
>
> easy to reproduce:
> Please find more details in this email.
>
> Warning:
> --------
> [ 1040.114695] refcount_t: addition on 0; use-after-free.
> [ 1040.119857] WARNING: CPU: 3 PID: 31925 at
> /usr/src/kernel/lib/refcount.c:25 refcount_warn_saturate+0xd7/0x100
> [ 1040.129769] Modules linked in: act_mirred cls_u32 sch_netem sch_etf
> ip6table_nat xt_nat iptable_nat nf_nat ip6table_filter xt_conntrack
> nf_conntrack nf_defrag_ipv4 libcrc32c ip6_tables nf_defrag_ipv6 sch_fq
> iptable_filter xt_mark ip_tables cls_bpf sch_ingress algif_hash
> x86_pkg_temp_thermal fuse [last unloaded: test_blackhole_dev]
> [ 1040.159030] CPU: 3 PID: 31925 Comm: mptcp_connect Tainted: G
> W K 5.10.26-rc2 #1
> [ 1040.167459] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS
> 2.2 05/23/2018
> [ 1040.174851] RIP: 0010:refcount_warn_saturate+0xd7/0x100
>
> And
>
> Kernel Panic:
> -------------
> [ 1069.557485] BUG: kernel NULL pointer dereference, address: 0000000000000010
> [ 1069.564446] #PF: supervisor read access in kernel mode
> [ 1069.569583] #PF: error_code(0x0000) - not-present page
> [ 1069.574714] PGD 0 P4D 0
> [ 1069.577246] Oops: 0000 [#1] SMP PTI
> [ 1069.580730] CPU: 1 PID: 17 Comm: ksoftirqd/1 Tainted: G W
> K 5.10.26-rc2 #1
> [ 1069.588719] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS
> 2.2 05/23/2018
> [ 1069.596106] RIP: 0010:selinux_socket_sock_rcv_skb+0x3f/0x290
> ...
> [ 1069.961697] Kernel panic - not syncing: Fatal exception in interrupt
> [ 1069.968083] Kernel Offset: 0x18600000 from 0xffffffff81000000
> (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
>
> steps to reproduce:
> --------------------------
> - cd /opt/kselftests/mainline/net/mptcp
> - ./mptcp_join.sh || true
>
The reported warning and kernel crash is bisected and found this commit is
cause.
> Florian Westphal <fw@strlen.de>
> mptcp: put subflow sock on connect error
We have reverted this patch and re-tested and confirmed that after reverting
the reported issue got disappeared.
>
> Summary
> ------------------------------------------------------------------------
>
> kernel: 5.10.26-rc2
> git repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git
> git branch: linux-5.10.y
> git commit: deabac90f919203307e6eee2606366bdb19bbe93
> git describe: v5.10.25-157-gdeabac90f919
> Test details: https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-5.10.y/build/v5.10.25-157-gdeabac90f919
> Test config: http://snapshots.linaro.org/openembedded/lkft/lkft/sumo/juno/lkft/linux-stable-rc-5.10/113/config
>
>
> # selftests: net/mptcp: mptcp_join.sh
> [ 1032.910970] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
> [ 1032.946716] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
> [ 1033.003858] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
> [ 1033.072944] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
> # Created /tmp/tmp.YJ5EeX04Tc (size 1 KB) containing data sent by client
> # Created /tmp/tmp.TzVm9gRu34 (size 1 KB) containing data sent by server
> [ 1033.918127] IPv6: ADDRCONF(NETDEV_CHANGE): ns2eth1: link becomes ready
> # 01 no JOIN syn[ ok ] - synack[ ok ] - ack[ ok ]
> [ 1035.374798] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
> [ 1035.440014] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
> [ 1035.493485] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
> [ 1035.548411] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
> [ 1036.350125] IPv6: ADDRCONF(NETDEV_CHANGE): ns2eth1: link becomes ready
> # 02 single subflow, limited by client syn[ ok ] - synack[ ok ] - ack[ ok ]
> [ 1037.842366] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
> [ 1037.910581] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
> [ 1037.977716] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
> [ 1038.047941] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
> [ 1039.106156] IPv4: Attempt to release alive inet socket 00000000e87684f6
> [ 1040.110048] ------------[ cut here ]------------
> [ 1040.114695] refcount_t: addition on 0; use-after-free.
> [ 1040.119857] WARNING: CPU: 3 PID: 31925 at
> /usr/src/kernel/lib/refcount.c:25 refcount_warn_saturate+0xd7/0x100
> [ 1040.129769] Modules linked in: act_mirred cls_u32 sch_netem sch_etf
> ip6table_nat xt_nat iptable_nat nf_nat ip6table_filter xt_conntrack
> nf_conntrack nf_defrag_ipv4 libcrc32c ip6_tables nf_defrag_ipv6 sch_fq
> iptable_filter xt_mark ip_tables cls_bpf sch_ingress algif_hash
> x86_pkg_temp_thermal fuse [last unloaded: test_blackhole_dev]
> [ 1040.159030] CPU: 3 PID: 31925 Comm: mptcp_connect Tainted: G
> W K 5.10.26-rc2 #1
> [ 1040.167459] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS
> 2.2 05/23/2018
> [ 1040.174851] RIP: 0010:refcount_warn_saturate+0xd7/0x100
> [ 1040.180076] Code: 01 e8 ed 52 ad ff 0f 0b 5d c3 80 3d 7e b1 a2 01
> 00 0f 85 67 ff ff ff 48 c7 c7 b0 b0 0a 9b c6 05 6a b1 a2 01 01 e8 c9
> 52 ad ff <0f> 0b 5d c3 48 c7 c7 68 b0 0a 9b c6 05 54 b1 a2 01 01 e8 b2
> 52 ad
> [ 1040.198822] RSP: 0018:ffffa57ec5733d30 EFLAGS: 00010282
> [ 1040.204049] RAX: 0000000000000000 RBX: ffff90cfc7d6b840 RCX: 0000000000000000
> [ 1040.211181] RDX: 0000000000000001 RSI: ffff90d12fb97f30 RDI: ffff90d12fb97f30
> [ 1040.218313] RBP: ffffa57ec5733d30 R08: 0000000000000000 R09: 0000000000000000
> [ 1040.225445] R10: 0000000000000000 R11: ffffa57ec5733ae8 R12: 0000000000000000
> [ 1040.232578] R13: ffff90cfc7d6b8c0 R14: 0000000000000007 R15: ffff90cffe32d8f0
> [ 1040.239712] FS: 00007f3b5fbb14c0(0000) GS:ffff90d12fb80000(0000)
> knlGS:0000000000000000
> [ 1040.247798] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [ 1040.253542] CR2: 00007ffec6cbecb0 CR3: 00000001041ec001 CR4: 00000000003706e0
> [ 1040.260677] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> [ 1040.267809] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
> [ 1040.274940] Call Trace:
> [ 1040.277397] tcp_close+0x45b/0x4f0
> [ 1040.280808] inet_release+0x47/0x80
> [ 1040.284302] __sock_release+0x8b/0xc0
> [ 1040.287977] sock_release+0x10/0x20
> [ 1040.291478] __mptcp_close_ssk+0x59/0x60
> [ 1040.295412] mptcp_close+0x173/0x2f0
> [ 1040.298992] inet_release+0x47/0x80
> [ 1040.302493] __sock_release+0x42/0xc0
> [ 1040.306167] sock_close+0x18/0x20
> [ 1040.309486] __fput+0xb6/0x270
> [ 1040.312546] ____fput+0xe/0x10
> [ 1040.315612] task_work_run+0x6f/0xc0
> [ 1040.319192] exit_to_user_mode_prepare+0x1a0/0x1b0
> [ 1040.323985] syscall_exit_to_user_mode+0x3e/0x240
> [ 1040.328692] do_syscall_64+0x43/0x50
> [ 1040.332278] entry_SYSCALL_64_after_hwframe+0x44/0xa9
> [ 1040.337331] RIP: 0033:0x7f3b5f6c47c4
> [ 1040.340910] Code: ff eb 98 b8 ff ff ff ff eb 91 66 2e 0f 1f 84 00
> 00 00 00 00 66 90 48 8d 05 41 e1 2c 00 8b 00 85 c0 75 13 b8 03 00 00
> 00 0f 05 <48> 3d 00 f0 ff ff 77 3c c3 0f 1f 00 53 89 fb 48 83 ec 10 e8
> e4 a6
> [ 1040.359656] RSP: 002b:00007ffec6cbcc98 EFLAGS: 00000246 ORIG_RAX:
> 0000000000000003
> [ 1040.367222] RAX: 0000000000000000 RBX: 00000000000003b8 RCX: 00007f3b5f6c47c4
> [ 1040.374354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
> [ 1040.381484] RBP: 0000000000000005 R08: 00007f3b5f98d1e0 R09: 00007f3b5f98d240
> [ 1040.388629] R10: 0000000000000403 R11: 0000000000000246 R12: 0000000000000000
> [ 1040.395770] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
> [ 1040.402904] irq event stamp: 0
> [ 1040.405969] hardirqs last enabled at (0): [<0000000000000000>] 0x0
> [ 1040.412236] hardirqs last disabled at (0): [<ffffffff997bbde3>]
> copy_process+0x753/0x1d40
> [ 1040.420408] softirqs last enabled at (0): [<ffffffff997bbde3>]
> copy_process+0x753/0x1d40
> [ 1040.428581] softirqs last disabled at (0): [<0000000000000000>] 0x0
> [ 1040.434846] ---[ end trace 8a7765e77d8e79e5 ]---
> [ 1040.439466] ------------[ cut here ]------------
> [ 1040.444085] refcount_t: underflow; use-after-free.
> [ 1040.448882] WARNING: CPU: 3 PID: 31925 at
> /usr/src/kernel/lib/refcount.c:28 refcount_warn_saturate+0x93/0x100
> [ 1040.458799] Modules linked in: act_mirred cls_u32 sch_netem sch_etf
> ip6table_nat xt_nat iptable_nat nf_nat ip6table_filter xt_conntrack
> nf_conntrack nf_defrag_ipv4 libcrc32c ip6_tables nf_defrag_ipv6 sch_fq
> iptable_filter xt_mark ip_tables cls_bpf sch_ingress algif_hash
> x86_pkg_temp_thermal fuse [last unloaded: test_blackhole_dev]
> [ 1040.488060] CPU: 3 PID: 31925 Comm: mptcp_connect Tainted: G
> W K 5.10.26-rc2 #1
> [ 1040.496497] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS
> 2.2 05/23/2018
> [ 1040.503891] RIP: 0010:refcount_warn_saturate+0x93/0x100
> [ 1040.509118] Code: cb b1 a2 01 01 e8 2d 53 ad ff 0f 0b 5d c3 80 3d
> bd b1 a2 01 00 75 ab 48 c7 c7 e0 b0 0a 9b c6 05 ad b1 a2 01 01 e8 0d
> 53 ad ff <0f> 0b 5d c3 80 3d a0 b1 a2 01 00 75 8b 48 c7 c7 68 b0 0a 9b
> c6 05
> [ 1040.527863] RSP: 0018:ffffa57ec5733d18 EFLAGS: 00010286
> [ 1040.533087] RAX: 0000000000000000 RBX: ffff90cfc7d6b840 RCX: 0000000000000000
> [ 1040.540220] RDX: 0000000000000001 RSI: ffff90d12fb97f30 RDI: ffff90d12fb97f30
> [ 1040.547353] RBP: ffffa57ec5733d18 R08: 0000000000000000 R09: 0000000000000000
> [ 1040.554486] R10: 0000000000000000 R11: ffffa57ec5733ad0 R12: ffff90cfc7d6b8c8
> [ 1040.561618] R13: ffff90cfc7d6b8c0 R14: 0000000000000007 R15: ffff90cffe32d8f0
> [ 1040.568751] FS: 00007f3b5fbb14c0(0000) GS:ffff90d12fb80000(0000)
> knlGS:0000000000000000
> [ 1040.576836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [ 1040.582584] CR2: 00007ffec6cbecb0 CR3: 00000001041ec001 CR4: 00000000003706e0
> [ 1040.589717] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> [ 1040.596851] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
> [ 1040.603987] Call Trace:
> [ 1040.606444] inet_csk_destroy_sock+0xd8/0x130
> [ 1040.610811] tcp_close+0x426/0x4f0
> [ 1040.614217] inet_release+0x47/0x80
> [ 1040.617710] __sock_release+0x8b/0xc0
> [ 1040.621375] sock_release+0x10/0x20
> [ 1040.624867] __mptcp_close_ssk+0x59/0x60
> [ 1040.628795] mptcp_close+0x173/0x2f0
> [ 1040.632383] inet_release+0x47/0x80
> [ 1040.635884] __sock_release+0x42/0xc0
> [ 1040.639557] sock_close+0x18/0x20
> [ 1040.642877] __fput+0xb6/0x270
> [ 1040.645935] ____fput+0xe/0x10
> [ 1040.648994] task_work_run+0x6f/0xc0
> [ 1040.652574] exit_to_user_mode_prepare+0x1a0/0x1b0
> [ 1040.657367] syscall_exit_to_user_mode+0x3e/0x240
> [ 1040.662072] do_syscall_64+0x43/0x50
> [ 1040.665653] entry_SYSCALL_64_after_hwframe+0x44/0xa9
> [ 1040.670713] RIP: 0033:0x7f3b5f6c47c4
> [ 1040.674293] Code: ff eb 98 b8 ff ff ff ff eb 91 66 2e 0f 1f 84 00
> 00 00 00 00 66 90 48 8d 05 41 e1 2c 00 8b 00 85 c0 75 13 b8 03 00 00
> 00 0f 05 <48> 3d 00 f0 ff ff 77 3c c3 0f 1f 00 53 89 fb 48 83 ec 10 e8
> e4 a6
> [ 1040.693038] RSP: 002b:00007ffec6cbcc98 EFLAGS: 00000246 ORIG_RAX:
> 0000000000000003
> [ 1040.700604] RAX: 0000000000000000 RBX: 00000000000003b8 RCX: 00007f3b5f6c47c4
> [ 1040.707735] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
> [ 1040.714869] RBP: 0000000000000005 R08: 00007f3b5f98d1e0 R09: 00007f3b5f98d240
> [ 1040.722002] R10: 0000000000000403 R11: 0000000000000246 R12: 0000000000000000
> [ 1040.729134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
> [ 1040.736267] irq event stamp: 0
> [ 1040.739325] hardirqs last enabled at (0): [<0000000000000000>] 0x0
> [ 1040.745592] hardirqs last disabled at (0): [<ffffffff997bbde3>]
> copy_process+0x753/0x1d40
> [ 1040.753764] softirqs last enabled at (0): [<ffffffff997bbde3>]
> copy_process+0x753/0x1d40
> [ 1040.761935] softirqs last disabled at (0): [<0000000000000000>] 0x0
> [ 1040.768202] ---[ end trace 8a7765e77d8e79e6 ]---
> # 03 single subflow, limited by server syn[ ok ] - synack[ ok ] - ack[ ok ]
> [ 1040.917139] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
> [ 1040.989376] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
> [ 1041.057848] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
> [ 1041.128414] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
> [ 1041.918135] IPv6: ADDRCONF(NETDEV_CHANGE): ns2eth1: link becomes ready
> # 04 single subflow syn[ ok ] - synack[ ok ] - ack[ ok ]
> [ 1043.451283] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
> [ 1043.519437] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
> [ 1043.591193] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
> [ 1043.662269] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
> [ 1045.735845] ------------[ cut here ]------------
> [ 1045.740483] refcount_t: decrement hit 0; leaking memory.
> [ 1045.745809] WARNING: CPU: 1 PID: 32066 at
> /usr/src/kernel/lib/refcount.c:31 refcount_warn_saturate+0x53/0x100
> [ 1045.755724] Modules linked in: act_mirred cls_u32 sch_netem sch_etf
> ip6table_nat xt_nat iptable_nat nf_nat ip6table_filter xt_conntrack
> nf_conntrack nf_defrag_ipv4 libcrc32c ip6_tables nf_defrag_ipv6 sch_fq
> iptable_filter xt_mark ip_tables cls_bpf sch_ingress algif_hash
> x86_pkg_temp_thermal fuse [last unloaded: test_blackhole_dev]
> [ 1045.784988] CPU: 1 PID: 32066 Comm: mptcp_connect Tainted: G
> W K 5.10.26-rc2 #1
> [ 1045.793427] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS
> 2.2 05/23/2018
> [ 1045.800821] RIP: 0010:refcount_warn_saturate+0x53/0x100
> [ 1045.806053] Code: 00 00 5d c3 83 fe 03 74 45 83 fe 04 75 20 80 3d
> fc b1 a2 01 00 75 eb 48 c7 c7 08 b1 0a 9b c6 05 ec b1 a2 01 01 e8 4d
> 53 ad ff <0f> 0b 5d c3 80 3d db b1 a2 01 00 75 cb 48 c7 c7 38 b1 0a 9b
> c6 05
> [ 1045.824798] RSP: 0018:ffffa57ec59f3cf0 EFLAGS: 00010282
> [ 1045.830025] RAX: 0000000000000000 RBX: 0000000000000010 RCX: 0000000000000000
> [ 1045.837158] RDX: 0000000000000001 RSI: ffff90d12fa97f30 RDI: ffff90d12fa97f30
> [ 1045.844290] RBP: ffffa57ec59f3cf0 R08: 0000000000000000 R09: 0000000000000000
> [ 1045.851424] R10: 0000000000000000 R11: ffffa57ec59f3aa8 R12: ffff90d007a02d00
> [ 1045.858555] R13: ffff90d007a02d80 R14: 0000000000000009 R15: ffff90d00be4c4f0
> [ 1045.865689] FS: 00007f55368c24c0(0000) GS:ffff90d12fa80000(0000)
> knlGS:0000000000000000
> [ 1045.873783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [ 1045.879527] CR2: 00007ffe2b569540 CR3: 000000013dd62002 CR4: 00000000003706e0
> [ 1045.886659] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> [ 1045.893791] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
> [ 1045.900924] Call Trace:
> [ 1045.903380] tcp_release_cb+0x10f/0x180
> [ 1045.907220] release_sock+0x48/0xb0
> [ 1045.910719] tcp_close+0x25e/0x4f0
> [ 1045.914125] inet_release+0x47/0x80
> [ 1045.917620] __sock_release+0x8b/0xc0
> [ 1045.921291] sock_release+0x10/0x20
> [ 1045.924784] __mptcp_close_ssk+0x59/0x60
> [ 1045.928712] mptcp_close+0x173/0x2f0
> [ 1045.932291] inet_release+0x47/0x80
> [ 1045.935782] __sock_release+0x42/0xc0
> [ 1045.939450] sock_close+0x18/0x20
> [ 1045.942769] __fput+0xb6/0x270
> [ 1045.945837] ____fput+0xe/0x10
> [ 1045.948905] task_work_run+0x6f/0xc0
> [ 1045.952492] exit_to_user_mode_prepare+0x1a0/0x1b0
> [ 1045.957283] syscall_exit_to_user_mode+0x3e/0x240
> [ 1045.961990] do_syscall_64+0x43/0x50
> [ 1045.965569] entry_SYSCALL_64_after_hwframe+0x44/0xa9
> [ 1045.970623] RIP: 0033:0x7f55363d57c4
> [ 1045.974201] Code: ff eb 98 b8 ff ff ff ff eb 91 66 2e 0f 1f 84 00
> 00 00 00 00 66 90 48 8d 05 41 e1 2c 00 8b 00 85 c0 75 13 b8 03 00 00
> 00 0f 05 <48> 3d 00 f0 ff ff 77 3c c3 0f 1f 00 53 89 fb 48 83 ec 10 e8
> e4 a6
> [ 1045.992944] RSP: 002b:00007ffe2b567528 EFLAGS: 00000246 ORIG_RAX:
> 0000000000000003
> [ 1046.000513] RAX: 0000000000000000 RBX: 000000000000011c RCX: 00007f55363d57c4
> [ 1046.007652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
> [ 1046.014784] RBP: 0000000000000005 R08: 00007f553669e1e4 R09: 00007f553669e240
> [ 1046.021918] R10: 0000000000000403 R11: 0000000000000246 R12: 0000000000000000
> [ 1046.029052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
> [ 1046.036185] irq event stamp: 0
> [ 1046.039251] hardirqs last enabled at (0): [<0000000000000000>] 0x0
> [ 1046.045517] hardirqs last disabled at (0): [<ffffffff997bbde3>]
> copy_process+0x753/0x1d40
> [ 1046.053690] softirqs last enabled at (0): [<ffffffff997bbde3>]
> copy_process+0x753/0x1d40
> [ 1046.061862] softirqs last disabled at (0): [<0000000000000000>] 0x0
> [ 1046.068129] ---[ end trace 8a7765e77d8e79e7 ]---
> # 05 multiple subflows syn[ ok ] - synack[ ok ] - ack[ ok ]
> [ 1046.222612] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
> [ 1046.292278] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
> [ 1046.366140] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
> [ 1046.436225] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
> [ 1047.230122] IPv6: ADDRCONF(NETDEV_CHANGE): ns2eth1: link becomes ready
> [ 1047.510886] IPv4: Attempt to release alive inet socket 000000003578f3a2
> # 06 multiple subflows, limited by server syn[ ok ] - synack[ ok ] - ack[ ok ]
> [ 1048.769959] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
> [ 1048.845133] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
> [ 1048.916783] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
> [ 1048.985439] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
> [ 1049.726207] IPv6: ADDRCONF(NETDEV_CHANGE): ns2eth1: link becomes ready
> # 07 unused signal address syn[ ok ] - synack[ ok ] - ack[ ok ]
> # add[ ok ] - echo [ ok ]
> [ 1051.315169] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
> [ 1051.384917] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
> [ 1051.452335] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
> [ 1051.519687] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
> # 08 signal address syn[ ok ] - synack[ ok ] - ack[ ok ]
> # add[ ok ] - echo [ ok ]
> [ 1053.866917] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
> [ 1053.934026] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
> [ 1054.003350] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
> [ 1054.071502] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
> # 09 subflow and signal syn[ ok ] - synack[ ok ] - ack[ ok ]
> # add[ ok ] - echo [ ok ]
> [ 1056.407692] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
> [ 1056.461570] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
> [ 1056.516522] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
> [ 1056.573242] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
> [ 1057.406178] IPv6: ADDRCONF(NETDEV_CHANGE): ns2eth1: link becomes ready
> # 10 multiple subflows and signal syn[ ok ] - synack[ ok ] - ack[ ok ]
> # add[ ok ] - echo [ ok ]
> [ 1058.944588] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
> [ 1058.998517] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
> [ 1059.051399] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
> [ 1059.114126] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
> [ 1059.902128] IPv6: ADDRCONF(NETDEV_CHANGE): ns2eth1: link becomes ready
> # 11 remove single subflow syn[ ok ] - synack[ ok ] - ack[ ok ]
> # rm [ ok ] - sf [ ok ]
> [ 1065.672583] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth1: link becomes ready
> [ 1065.712249] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth2: link becomes ready
> [ 1065.751709] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth3: link becomes ready
> [ 1065.792078] IPv6: ADDRCONF(NETDEV_CHANGE): ns1eth4: link becomes ready
> [ 1066.686117] IPv6: ADDRCONF(NETDEV_CHANGE): ns2eth1: link becomes ready
> [ 1067.902073] IPv4: Attempt to release TCP socket in state 1 0000000079de8dcd
> [ 1068.875113] ------------[ cut here ]------------
> [ 1068.879758] refcount_t: saturated; leaking memory.
> [ 1068.884577] WARNING: CPU: 1 PID: 32609 at
> /usr/src/kernel/lib/refcount.c:22 refcount_warn_saturate+0xee/0x100
> [ 1068.894497] Modules linked in: act_mirred cls_u32 sch_netem sch_etf
> ip6table_nat xt_nat iptable_nat nf_nat ip6table_filter xt_conntrack
> nf_conntrack nf_defrag_ipv4 libcrc32c ip6_tables nf_defrag_ipv6 sch_fq
> iptable_filter xt_mark ip_tables cls_bpf sch_ingress algif_hash
> x86_pkg_temp_thermal fuse [last unloaded: test_blackhole_dev]
> [ 1068.923755] CPU: 1 PID: 32609 Comm: pm_nl_ctl Tainted: G W
> K 5.10.26-rc2 #1
> [ 1068.931842] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS
> 2.2 05/23/2018
> [ 1068.939240] RIP: 0010:refcount_warn_saturate+0xee/0x100
> [ 1068.944468] Code: 48 c7 c7 b0 b0 0a 9b c6 05 6a b1 a2 01 01 e8 c9
> 52 ad ff 0f 0b 5d c3 48 c7 c7 68 b0 0a 9b c6 05 54 b1 a2 01 01 e8 b2
> 52 ad ff <0f> 0b 5d c3 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 8b 07
> 3d 00
> [ 1068.963224] RSP: 0018:ffffa57ec64af7f0 EFLAGS: 00010282
> [ 1068.968456] RAX: 0000000000000000 RBX: 000000000000002c RCX: 0000000000000000
> [ 1068.975587] RDX: 0000000000000001 RSI: ffff90d12fa97f30 RDI: ffff90d12fa97f30
> [ 1068.982719] RBP: ffffa57ec64af7f0 R08: 0000000000000000 R09: 0000000000000000
> [ 1068.989854] R10: 000000000000058c R11: ffffa57ec64af5a8 R12: ffffa57ec64af830
> [ 1068.996993] R13: ffff90cfc08eaee0 R14: 000000000000058c R15: ffff90d007a04380
> [ 1069.004131] FS: 00007f018dc0d4c0(0000) GS:ffff90d12fa80000(0000)
> knlGS:0000000000000000
> [ 1069.012220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [ 1069.017966] CR2: 00007f018d79c285 CR3: 000000013d894001 CR4: 00000000003706e0
> [ 1069.025098] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> [ 1069.032231] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
> [ 1069.039362] Call Trace:
> [ 1069.041820] __tcp_transmit_skb+0x851/0xcf0
> [ 1069.046017] tcp_write_xmit+0x251/0x11a0
> [ 1069.049946] __tcp_push_pending_frames+0x37/0x100
> [ 1069.054651] tcp_send_fin+0x4f/0x240
> [ 1069.058230] tcp_close+0x36f/0x4f0
> [ 1069.061640] inet_release+0x47/0x80
> [ 1069.065141] __sock_release+0x8b/0xc0
> [ 1069.068814] sock_release+0x10/0x20
> [ 1069.072306] __mptcp_close_ssk+0x59/0x60
> [ 1069.076232] mptcp_pm_nl_rm_subflow_received+0xcb/0x110
> [ 1069.081461] mptcp_pm_remove_subflow+0x34/0x70
> [ 1069.085913] mptcp_nl_cmd_del_addr+0x3eb/0x440
> [ 1069.090361] genl_family_rcv_msg_doit.isra.16+0x117/0x150
> [ 1069.095767] ? genl_family_rcv_msg_doit.isra.16+0x117/0x150
> [ 1069.101341] genl_rcv_msg+0xe8/0x1e0
> [ 1069.104926] ? remove_anno_list_by_saddr+0x50/0x50
> [ 1069.109722] ? genl_family_rcv_msg_doit.isra.16+0x150/0x150
> [ 1069.115301] netlink_rcv_skb+0x56/0x100
> [ 1069.119141] genl_rcv+0x28/0x40
> [ 1069.122285] netlink_unicast+0x1b8/0x270
> [ 1069.126213] netlink_sendmsg+0x339/0x460
> [ 1069.130148] sock_sendmsg+0x63/0x70
> [ 1069.133649] __sys_sendto+0x142/0x180
> [ 1069.137323] ? __audit_syscall_entry+0xdd/0x130
> [ 1069.141855] ? syscall_trace_enter.isra.16+0x179/0x230
> [ 1069.147000] __x64_sys_sendto+0x28/0x30
> [ 1069.150852] do_syscall_64+0x37/0x50
> [ 1069.154438] entry_SYSCALL_64_after_hwframe+0x44/0xa9
> [ 1069.159490] RIP: 0033:0x7f018d72f577
> [ 1069.163070] Code: 64 89 02 48 c7 c0 ff ff ff ff eb b6 0f 1f 80 00
> 00 00 00 48 8d 05 91 f3 2b 00 41 89 ca 8b 00 85 c0 75 10 b8 2c 00 00
> 00 0f 05 <48> 3d 00 f0 ff ff 77 71 c3 41 57 4d 89 c7 41 56 41 89 ce 41
> 55 49
> [ 1069.181815] RSP: 002b:00007ffd65cf3ae8 EFLAGS: 00000246 ORIG_RAX:
> 000000000000002c
> [ 1069.189382] RAX: ffffffffffffffda RBX: 00007ffd65cf3b30 RCX: 00007f018d72f577
> [ 1069.196512] RDX: 0000000000000020 RSI: 00007ffd65cf3b30 RDI: 0000000000000005
> [ 1069.203647] RBP: 0000000000000020 R08: 00007ffd65cf3af4 R09: 000000000000000c
> [ 1069.210777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
> [ 1069.217910] R13: 0000000000000005 R14: 0000000000000000 R15: 0000000000000000
> [ 1069.225047] irq event stamp: 0
> [ 1069.228112] hardirqs last enabled at (0): [<0000000000000000>] 0x0
> [ 1069.234378] hardirqs last disabled at (0): [<ffffffff997bbde3>]
> copy_process+0x753/0x1d40
> [ 1069.242548] softirqs last enabled at (0): [<ffffffff997bbde3>]
> copy_process+0x753/0x1d40
> [ 1069.250722] softirqs last disabled at (0): [<0000000000000000>] 0x0
> [ 1069.256987] ---[ end trace 8a7765e77d8e79e8 ]---
> [ 1069.261660] ------------[ cut here ]------------
> [ 1069.266292] refcount_t: saturated; leaking memory.
> [ 1069.271104] WARNING: CPU: 1 PID: 17 at
> /usr/src/kernel/lib/refcount.c:19 refcount_warn_saturate+0xb3/0x100
> [ 1069.280759] Modules linked in: act_mirred cls_u32 sch_netem sch_etf
> ip6table_nat xt_nat iptable_nat nf_nat ip6table_filter xt_conntrack
> nf_conntrack nf_defrag_ipv4 libcrc32c ip6_tables nf_defrag_ipv6 sch_fq
> iptable_filter xt_mark ip_tables cls_bpf sch_ingress algif_hash
> x86_pkg_temp_thermal fuse [last unloaded: test_blackhole_dev]
> [ 1069.310010] CPU: 1 PID: 17 Comm: ksoftirqd/1 Tainted: G W
> K 5.10.26-rc2 #1
> [ 1069.318007] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS
> 2.2 05/23/2018
> [ 1069.325401] RIP: 0010:refcount_warn_saturate+0xb3/0x100
> [ 1069.330627] Code: ad b1 a2 01 01 e8 0d 53 ad ff 0f 0b 5d c3 80 3d
> a0 b1 a2 01 00 75 8b 48 c7 c7 68 b0 0a 9b c6 05 90 b1 a2 01 01 e8 ed
> 52 ad ff <0f> 0b 5d c3 80 3d 7e b1 a2 01 00 0f 85 67 ff ff ff 48 c7 c7
> b0 b0
> [ 1069.349374] RSP: 0018:ffffa57ec00e7bd8 EFLAGS: 00010282
> [ 1069.354599] RAX: 0000000000000000 RBX: ffff90d007a043e8 RCX: 0000000000000000
> [ 1069.361731] RDX: 0000000000000001 RSI: ffff90d12fa97f30 RDI: ffff90d12fa97f30
> [ 1069.368862] RBP: ffffa57ec00e7bd8 R08: 0000000000000000 R09: 0000000000000000
> [ 1069.375997] R10: 0000000000000000 R11: ffffa57ec00e7990 R12: 0000000096271b27
> [ 1069.383128] R13: 0203000a0101000a R14: ffff90cfffa66500 R15: 00000000bbb40c37
> [ 1069.390260] FS: 0000000000000000(0000) GS:ffff90d12fa80000(0000)
> knlGS:0000000000000000
> [ 1069.398346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [ 1069.404092] CR2: 00007f018d79c285 CR3: 00000001ed026002 CR4: 00000000003706e0
> [ 1069.411223] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> [ 1069.418357] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
> [ 1069.425488] Call Trace:
> [ 1069.427943] __inet_lookup_established+0x141/0x170
> [ 1069.432735] tcp_v4_early_demux+0xab/0x180
> [ 1069.436836] ? rcu_read_lock_held+0x25/0x60
> [ 1069.441022] ip_rcv_finish_core.isra.23+0x483/0x570
> [ 1069.445900] ip_rcv_finish+0x6d/0xc0
> [ 1069.449478] ip_rcv+0x142/0x200
> [ 1069.452625] ? lock_acquire+0x1d4/0x3a0
> [ 1069.456466] ? kfree+0x3e4/0x720
> [ 1069.459697] ? process_backlog+0x73/0x250
> [ 1069.463709] __netif_receive_skb_one_core+0x86/0xa0
> [ 1069.468591] __netif_receive_skb+0x18/0x60
> [ 1069.472697] process_backlog+0xe2/0x250
> [ 1069.476537] net_rx_action+0x144/0x460
> [ 1069.480288] __do_softirq+0xc3/0x42a
> [ 1069.483869] ? smpboot_thread_fn+0x2b/0x1f0
> [ 1069.488053] ? smpboot_thread_fn+0x70/0x1f0
> [ 1069.492242] run_ksoftirqd+0x2b/0x60
> [ 1069.495818] smpboot_thread_fn+0x149/0x1f0
> [ 1069.499920] ? sort_range+0x30/0x30
> [ 1069.503411] kthread+0x142/0x160
> [ 1069.506642] ? kthread_insert_work_sanity_check+0x60/0x60
> [ 1069.512045] ret_from_fork+0x22/0x30
> [ 1069.515632] irq event stamp: 195412
> [ 1069.519131] hardirqs last enabled at (195411):
> [<ffffffff997c6db0>] run_ksoftirqd+0x30/0x60
> [ 1069.527564] hardirqs last disabled at (195412):
> [<ffffffff9a739c94>] __schedule+0x624/0x950
> [ 1069.535910] softirqs last enabled at (195410):
> [<ffffffff9aa00308>] __do_softirq+0x308/0x42a
> [ 1069.544428] softirqs last disabled at (195383):
> [<ffffffff997c6dab>] run_ksoftirqd+0x2b/0x60
> [ 1069.552860] ---[ end trace 8a7765e77d8e79e9 ]---
> [ 1069.557485] BUG: kernel NULL pointer dereference, address: 0000000000000010
> [ 1069.564446] #PF: supervisor read access in kernel mode
> [ 1069.569583] #PF: error_code(0x0000) - not-present page
> [ 1069.574714] PGD 0 P4D 0
> [ 1069.577246] Oops: 0000 [#1] SMP PTI
> [ 1069.580730] CPU: 1 PID: 17 Comm: ksoftirqd/1 Tainted: G W
> K 5.10.26-rc2 #1
> [ 1069.588719] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS
> 2.2 05/23/2018
> [ 1069.596106] RIP: 0010:selinux_socket_sock_rcv_skb+0x3f/0x290
> [ 1069.601762] Code: 54 4c 8d 75 98 53 49 89 fd 48 83 ec 78 0f b7 5f
> 10 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 48 8b 87 48 04 00 00
> 4c 89 f7 <44> 8b 78 10 31 c0 f3 48 ab 89 d8 83 e0 f7 66 83 f8 02 0f 85
> 4a 01
> [ 1069.620498] RSP: 0018:ffffa57ec00e7a20 EFLAGS: 00010246
> [ 1069.625715] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000007
> [ 1069.632841] RDX: ffffffff9995c813 RSI: ffff90cffe966b00 RDI: ffffa57ec00e7a58
> [ 1069.639965] RBP: ffffa57ec00e7ac0 R08: 0000000000000000 R09: 0000000000000000
> [ 1069.647090] R10: 0000000000000000 R11: ffff90cfffa66500 R12: ffff90cffe966b00
> [ 1069.654221] R13: ffff90d007a04380 R14: ffffa57ec00e7a58 R15: ffff90d007a04380
> [ 1069.661344] FS: 0000000000000000(0000) GS:ffff90d12fa80000(0000)
> knlGS:0000000000000000
> [ 1069.669421] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [ 1069.675159] CR2: 0000000000000010 CR3: 00000001ed026002 CR4: 00000000003706e0
> [ 1069.682284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> [ 1069.689407] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
> [ 1069.696530] Call Trace:
> [ 1069.698976] ? __cgroup_bpf_run_filter_skb+0x20c/0x670
> [ 1069.704115] ? lock_release+0xcf/0x270
> [ 1069.707868] ? rcu_read_lock_held_common+0x12/0x50
> [ 1069.712659] ? rcu_read_lock_held+0x25/0x60
> [ 1069.716837] security_sock_rcv_skb+0x2f/0x50
> [ 1069.721112] sk_filter_trim_cap+0x48/0x350
> [ 1069.725208] ? tcp_v4_inbound_md5_hash+0x60/0x1e0
> [ 1069.729906] tcp_v4_rcv+0xb59/0xd70
> [ 1069.733390] ? lock_acquire+0x1d4/0x3a0
> [ 1069.737229] ip_protocol_deliver_rcu+0x3c/0x270
> [ 1069.741754] ip_local_deliver_finish+0x92/0x130
> [ 1069.746286] ip_local_deliver+0x1a1/0x200
> [ 1069.750289] ? rcu_read_lock_held+0x25/0x60
> [ 1069.754468] ip_rcv_finish+0x8a/0xc0
> [ 1069.758046] ip_rcv+0x142/0x200
> [ 1069.761183] ? lock_acquire+0x1d4/0x3a0
> [ 1069.765014] ? kfree+0x3e4/0x720
> [ 1069.768248] ? process_backlog+0x73/0x250
> [ 1069.772261] __netif_receive_skb_one_core+0x86/0xa0
> [ 1069.777138] __netif_receive_skb+0x18/0x60
> [ 1069.781228] process_backlog+0xe2/0x250
> [ 1069.785061] net_rx_action+0x144/0x460
> [ 1069.788812] __do_softirq+0xc3/0x42a
> [ 1069.792382] ? smpboot_thread_fn+0x2b/0x1f0
> [ 1069.796561] ? smpboot_thread_fn+0x70/0x1f0
> [ 1069.800746] run_ksoftirqd+0x2b/0x60
> [ 1069.804326] smpboot_thread_fn+0x149/0x1f0
> [ 1069.808423] ? sort_range+0x30/0x30
> [ 1069.811908] kthread+0x142/0x160
> [ 1069.815132] ? kthread_insert_work_sanity_check+0x60/0x60
> [ 1069.820524] ret_from_fork+0x22/0x30
> [ 1069.824104] Modules linked in: act_mirred cls_u32 sch_netem sch_etf
> ip6table_nat xt_nat iptable_nat nf_nat ip6table_filter xt_conntrack
> nf_conntrack nf_defrag_ipv4 libcrc32c ip6_tables nf_defrag_ipv6 sch_fq
> iptable_filter xt_mark ip_tables cls_bpf sch_ingress algif_hash
> x86_pkg_temp_thermal fuse [last unloaded: test_blackhole_dev]
> [ 1069.853359] CR2: 0000000000000010
> [ 1069.856671] ---[ end trace 8a7765e77d8e79ea ]---
> [ 1069.861290] RIP: 0010:selinux_socket_sock_rcv_skb+0x3f/0x290
> [ 1069.866940] Code: 54 4c 8d 75 98 53 49 89 fd 48 83 ec 78 0f b7 5f
> 10 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 48 8b 87 48 04 00 00
> 4c 89 f7 <44> 8b 78 10 31 c0 f3 48 ab 89 d8 83 e0 f7 66 83 f8 02 0f 85
> 4a 01
> [ 1069.885676] RSP: 0018:ffffa57ec00e7a20 EFLAGS: 00010246
> [ 1069.890893] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000007
> [ 1069.898018] RDX: ffffffff9995c813 RSI: ffff90cffe966b00 RDI: ffffa57ec00e7a58
> [ 1069.905141] RBP: ffffa57ec00e7ac0 R08: 0000000000000000 R09: 0000000000000000
> [ 1069.912264] R10: 0000000000000000 R11: ffff90cfffa66500 R12: ffff90cffe966b00
> [ 1069.919389] R13: ffff90d007a04380 R14: ffffa57ec00e7a58 R15: ffff90d007a04380
> [ 1069.926514] FS: 0000000000000000(0000) GS:ffff90d12fa80000(0000)
> knlGS:0000000000000000
> [ 1069.934589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [ 1069.940328] CR2: 0000000000000010 CR3: 00000001ed026002 CR4: 00000000003706e0
> [ 1069.947449] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> [ 1069.954575] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
> [ 1069.961697] Kernel panic - not syncing: Fatal exception in interrupt
> [ 1069.968083] Kernel Offset: 0x18600000 from 0xffffffff81000000
> (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
> [ 1069.978859] ---[ end Kernel panic - not syncing: Fatal exception in
> interrupt ]---
>
>
> https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-5.10.y/build/v5.10.25-157-gdeabac90f919/testrun/4220685/suite/linux-log-parser/test/check-kernel-bug-2434782/log
> https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-5.10.y/build/v5.10.25-157-gdeabac90f919/testrun/4221759/suite/linux-log-parser/test/check-kernel-warning-2434838/log
> https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-5.10.y/build/v5.10.25-157-gdeabac90f919/testrun/4221747/suite/linux-log-parser/test/check-kernel-bug-2434809/log
>
> LAVA jobs link,
> https://lkft.validation.linaro.org/scheduler/job/2436164
> Reported-by: Naresh Kamboju <naresh.kamboju@linaro.org>
>
> --
> Linaro LKFT
> https://lkft.linaro.org
^ permalink raw reply [flat|nested] 11+ messages in thread
end of thread, other threads:[~2021-03-24 8:53 UTC | newest]
Thread overview: 11+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-03-22 15:19 [PATCH 5.10 000/156] 5.10.26-rc2 review Greg Kroah-Hartman
2021-03-22 18:50 ` Florian Fainelli
2021-03-22 20:13 ` Pavel Machek
2021-03-22 21:05 ` Guenter Roeck
2021-03-22 21:52 ` Guenter Roeck
2021-03-23 7:19 ` Greg Kroah-Hartman
2021-03-23 0:47 ` Samuel Zou
2021-03-23 0:57 ` Samuel Zou
2021-03-23 8:49 ` Naresh Kamboju
2021-03-24 8:52 ` Naresh Kamboju
2021-03-23 17:21 ` Andrei Rabusov
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).