bisecting fixing commit since 6f0d349d922ba44e4348a17a78ea51b7135965b1 building syzkaller on 2064fc5c9114c170841328aaa4b124a4062becf6 testing commit 6f0d349d922ba44e4348a17a78ea51b7135965b1 with gcc (GCC) 8.1.0 all runs: crashed: unregister_netdevice: waiting for DEV to become free testing current HEAD 0eb0ce0a78e1f57082bca6cbdea6fd04feedb876 testing commit 0eb0ce0a78e1f57082bca6cbdea6fd04feedb876 with gcc (GCC) 8.1.0 all runs: OK # git bisect start 0eb0ce0a78e1f57082bca6cbdea6fd04feedb876 6f0d349d922ba44e4348a17a78ea51b7135965b1 Bisecting: 44591 revisions left to test after this (roughly 16 steps) [5f6efe31636a0f68ab418b8a6da0cc58b9859121] Merge tag 'mvebu-arm64-5.1-1' of git://git.infradead.org/linux-mvebu into arm/fixes testing commit 5f6efe31636a0f68ab418b8a6da0cc58b9859121 with gcc (GCC) 8.1.0 all runs: OK # git bisect bad 5f6efe31636a0f68ab418b8a6da0cc58b9859121 Bisecting: 22378 revisions left to test after this (roughly 15 steps) [d49f8a52b15bf35db778035340d8a673149f9f93] Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi testing commit d49f8a52b15bf35db778035340d8a673149f9f93 with gcc (GCC) 8.1.0 all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect good d49f8a52b15bf35db778035340d8a673149f9f93 Bisecting: 11228 revisions left to test after this (roughly 14 steps) [b3cc2bfe7244e848f5e8caa77bbdc72c04abd17c] Merge tag 'i3c/for-4.21' of git://git.kernel.org/pub/scm/linux/kernel/git/i3c/linux testing commit b3cc2bfe7244e848f5e8caa77bbdc72c04abd17c with gcc (GCC) 8.1.0 all runs: OK # git bisect bad b3cc2bfe7244e848f5e8caa77bbdc72c04abd17c Bisecting: 5881 revisions left to test after this (roughly 13 steps) [c38239b4be1ac7e4bcf5bbd971353bae51525b8f] Merge branch 'parisc-4.20-2' of git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux testing commit c38239b4be1ac7e4bcf5bbd971353bae51525b8f with gcc (GCC) 8.1.0 all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect good c38239b4be1ac7e4bcf5bbd971353bae51525b8f Bisecting: 2940 revisions left to test after this (roughly 12 steps) [e59ff2c49ae16e1d179de679aca81405829aee6c] virtio-net: disable guest csum during XDP set testing commit e59ff2c49ae16e1d179de679aca81405829aee6c with gcc (GCC) 8.1.0 all runs: OK # git bisect bad e59ff2c49ae16e1d179de679aca81405829aee6c Bisecting: 1373 revisions left to test after this (roughly 11 steps) [519f64bf15dccb4f64af34b74ed186c32363ab59] Merge tag 'clk-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux testing commit 519f64bf15dccb4f64af34b74ed186c32363ab59 with gcc (GCC) 8.1.0 all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect good 519f64bf15dccb4f64af34b74ed186c32363ab59 Bisecting: 685 revisions left to test after this (roughly 10 steps) [4710e78940d8d957f24b8f085f961f1279f8fbff] Merge tag 'nfs-for-4.20-2' of git://git.linux-nfs.org/projects/trondmy/linux-nfs testing commit 4710e78940d8d957f24b8f085f961f1279f8fbff with gcc (GCC) 8.1.0 run #0: crashed: unregister_netdevice: waiting for DEV to become free run #1: crashed: unregister_netdevice: waiting for DEV to become free run #2: crashed: unregister_netdevice: waiting for DEV to become free run #3: crashed: unregister_netdevice: waiting for DEV to become free run #4: crashed: unregister_netdevice: waiting for DEV to become free run #5: crashed: unregister_netdevice: waiting for DEV to become free run #6: crashed: unregister_netdevice: waiting for DEV to become free run #7: crashed: unregister_netdevice: waiting for DEV to become free run #8: crashed: unregister_netdevice: waiting for DEV to become free run #9: boot failed: KASAN: use-after-free Read in dd_has_work # git bisect good 4710e78940d8d957f24b8f085f961f1279f8fbff Bisecting: 350 revisions left to test after this (roughly 9 steps) [e12e00e388dee1d2a86e9b90f79a69f9acd2c9b0] Merge tag 'kbuild-fixes-v4.20' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild testing commit e12e00e388dee1d2a86e9b90f79a69f9acd2c9b0 with gcc (GCC) 8.1.0 all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect good e12e00e388dee1d2a86e9b90f79a69f9acd2c9b0 Bisecting: 176 revisions left to test after this (roughly 8 steps) [32e2524a529c1fd8e377738d6cdc2268ffd171ce] Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 testing commit 32e2524a529c1fd8e377738d6cdc2268ffd171ce with gcc (GCC) 8.1.0 all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect good 32e2524a529c1fd8e377738d6cdc2268ffd171ce Bisecting: 109 revisions left to test after this (roughly 7 steps) [8ebebcba559a1bfbaec7bbda64feb9870b9c58da] tuntap: fix multiqueue rx testing commit 8ebebcba559a1bfbaec7bbda64feb9870b9c58da with gcc (GCC) 8.1.0 all runs: OK # git bisect bad 8ebebcba559a1bfbaec7bbda64feb9870b9c58da Bisecting: 33 revisions left to test after this (roughly 5 steps) [ffd77621700ec3adcf859681e24910c38e0931f5] bnxt_en: Workaround occasional TX timeout on 57500 A0. testing commit ffd77621700ec3adcf859681e24910c38e0931f5 with gcc (GCC) 8.1.0 all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect good ffd77621700ec3adcf859681e24910c38e0931f5 Bisecting: 16 revisions left to test after this (roughly 4 steps) [dfa0d55ff6be64e7b6881212a291cb95f8da3b08] net: phy: mdio-gpio: Fix working over slow can_sleep GPIOs testing commit dfa0d55ff6be64e7b6881212a291cb95f8da3b08 with gcc (GCC) 8.1.0 all runs: OK # git bisect bad dfa0d55ff6be64e7b6881212a291cb95f8da3b08 Bisecting: 8 revisions left to test after this (roughly 3 steps) [bd85fbc2038a1bbe84990b23ff69b6fc81a32b2c] net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command testing commit bd85fbc2038a1bbe84990b23ff69b6fc81a32b2c with gcc (GCC) 8.1.0 all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect good bd85fbc2038a1bbe84990b23ff69b6fc81a32b2c Bisecting: 4 revisions left to test after this (roughly 2 steps) [a97b9565338350d70d8d971c4ee6f0d4fa967418] drivers/net/ethernet/qlogic/qed/qed_rdma.h: fix typo testing commit a97b9565338350d70d8d971c4ee6f0d4fa967418 with gcc (GCC) 8.1.0 all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect good a97b9565338350d70d8d971c4ee6f0d4fa967418 Bisecting: 2 revisions left to test after this (roughly 1 step) [761f60261b4401aa368d71d431b4c218af0efcee] ipv6: fix a dst leak when removing its exception testing commit 761f60261b4401aa368d71d431b4c218af0efcee with gcc (GCC) 8.1.0 all runs: OK # git bisect bad 761f60261b4401aa368d71d431b4c218af0efcee Bisecting: 0 revisions left to test after this (roughly 0 steps) [83e65df6dfece9eb588735459428f221eb930c0c] net: mvneta: Don't advertise 2.5G modes testing commit 83e65df6dfece9eb588735459428f221eb930c0c with gcc (GCC) 8.1.0 all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect good 83e65df6dfece9eb588735459428f221eb930c0c 761f60261b4401aa368d71d431b4c218af0efcee is the first bad commit commit 761f60261b4401aa368d71d431b4c218af0efcee Author: Xin Long Date: Wed Nov 14 00:48:28 2018 +0800 ipv6: fix a dst leak when removing its exception These is no need to hold dst before calling rt6_remove_exception_rt(). The call to dst_hold_safe() in ip6_link_failure() was for ip6_del_rt(), which has been removed in Commit 93531c674315 ("net/ipv6: separate handling of FIB entries from dst based routes"). Otherwise, it will cause a dst leak. This patch is to simply remove the dst_hold_safe() call before calling rt6_remove_exception_rt() and also do the same in ip6_del_cached_rt(). It's safe, because the removal of the exception that holds its dst's refcnt is protected by rt6_exception_lock. Fixes: 93531c674315 ("net/ipv6: separate handling of FIB entries from dst based routes") Fixes: 23fb93a4d3f1 ("net/ipv6: Cleanup exception and cache route handling") Reported-by: Li Shuang Signed-off-by: Xin Long Reviewed-by: David Ahern Signed-off-by: David S. Miller :040000 040000 b8be11b76220829fa50423e0dba5a0e4198727b5 ef6793b1f3c27e03c6c4231924e932dee3b3784b M net revisions tested: 18, total time: 4h34m2.999107007s (build: 1h35m52.884559021s, test: 2h51m44.420611548s) first good commit: 761f60261b4401aa368d71d431b4c218af0efcee ipv6: fix a dst leak when removing its exception cc: ["davem@davemloft.net" "dsahern@gmail.com" "kuznet@ms2.inr.ac.ru" "linux-kernel@vger.kernel.org" "lucien.xin@gmail.com" "netdev@vger.kernel.org" "yoshfuji@linux-ipv6.org"]