bisecting cause commit starting from 6f0d349d922ba44e4348a17a78ea51b7135965b1 building syzkaller on 2064fc5c9114c170841328aaa4b124a4062becf6 testing commit 6f0d349d922ba44e4348a17a78ea51b7135965b1 with gcc (GCC) 8.1.0 all runs: crashed: unregister_netdevice: waiting for DEV to become free testing release v4.17 testing commit 29dcea88779c856c7dc92040a0c01233263101d4 with gcc (GCC) 8.1.0 all runs: OK # git bisect start 6f0d349d922ba44e4348a17a78ea51b7135965b1 29dcea88779c856c7dc92040a0c01233263101d4 Bisecting: 6130 revisions left to test after this (roughly 13 steps) [1c8c5a9d38f607c0b6fd12c91cbe1a4418762a21] Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next testing commit 1c8c5a9d38f607c0b6fd12c91cbe1a4418762a21 with gcc (GCC) 8.1.0 run #0: crashed: unregister_netdevice: waiting for DEV to become free run #1: crashed: unregister_netdevice: waiting for DEV to become free run #2: crashed: unregister_netdevice: waiting for DEV to become free run #3: crashed: unregister_netdevice: waiting for DEV to become free run #4: crashed: unregister_netdevice: waiting for DEV to become free run #5: crashed: unregister_netdevice: waiting for DEV to become free run #6: crashed: unregister_netdevice: waiting for DEV to become free run #7: crashed: unregister_netdevice: waiting for DEV to become free run #8: crashed: unregister_netdevice: waiting for DEV to become free run #9: boot failed: KASAN: use-after-free Write in call_usermodehelper_exec_work # git bisect bad 1c8c5a9d38f607c0b6fd12c91cbe1a4418762a21 Bisecting: 2870 revisions left to test after this (roughly 12 steps) [135c5504a600ff9b06e321694fbcac78a9530cd4] Merge tag 'drm-next-2018-06-06-1' of git://anongit.freedesktop.org/drm/drm testing commit 135c5504a600ff9b06e321694fbcac78a9530cd4 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 135c5504a600ff9b06e321694fbcac78a9530cd4 Bisecting: 1435 revisions left to test after this (roughly 11 steps) [ffbc9197b4721634dc6c0fefa9b31e565fa89cee] wcn36xx: improve debug and error messages for SMD testing commit ffbc9197b4721634dc6c0fefa9b31e565fa89cee with gcc (GCC) 8.1.0 all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect bad ffbc9197b4721634dc6c0fefa9b31e565fa89cee Bisecting: 717 revisions left to test after this (roughly 10 steps) [3a443bd6dd7c43bf5763779309514bf3e7c1c3eb] net/9p: correct the variable name in v9fs_get_trans_by_name() comment testing commit 3a443bd6dd7c43bf5763779309514bf3e7c1c3eb with gcc (GCC) 8.1.0 all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect bad 3a443bd6dd7c43bf5763779309514bf3e7c1c3eb Bisecting: 358 revisions left to test after this (roughly 9 steps) [c7d28c9df292a49904446dca15b2037ee8f874af] net: dsa: b53: Add support for reading PHY statistics testing commit c7d28c9df292a49904446dca15b2037ee8f874af with gcc (GCC) 8.1.0 all runs: crashed: inconsistent lock state in fs_reclaim_acquire # git bisect bad c7d28c9df292a49904446dca15b2037ee8f874af Bisecting: 185 revisions left to test after this (roughly 8 steps) [cf1a1e07fc8bb29947ad3c9568d73aee3f851431] tun: do not compute the rxhash, if not needed testing commit cf1a1e07fc8bb29947ad3c9568d73aee3f851431 with gcc (GCC) 8.1.0 all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect bad cf1a1e07fc8bb29947ad3c9568d73aee3f851431 Bisecting: 85 revisions left to test after this (roughly 7 steps) [1cbbf01cfe251447d232ccd6b031252bc5fa4b80] r8169: remove member align from struct rtl_cfg_info testing commit 1cbbf01cfe251447d232ccd6b031252bc5fa4b80 with gcc (GCC) 8.1.0 all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect bad 1cbbf01cfe251447d232ccd6b031252bc5fa4b80 Bisecting: 42 revisions left to test after this (roughly 6 steps) [e3c1917e45d030411888285f56c9d42e7472cb1f] selftest: tc_flower: add testcase for 'ip_flags' testing commit e3c1917e45d030411888285f56c9d42e7472cb1f with gcc (GCC) 8.1.0 all runs: OK # git bisect good e3c1917e45d030411888285f56c9d42e7472cb1f Bisecting: 21 revisions left to test after this (roughly 5 steps) [acb54e3cba404c20f07733f3222c0418a7724a5b] net/ipv6: Add gfp_flags to route add functions testing commit acb54e3cba404c20f07733f3222c0418a7724a5b with gcc (GCC) 8.1.0 run #0: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/tmp/syz-executor874009361" "root@10.128.0.200:./syz-executor874009361"]: exit status 1 ssh: connect to host 10.128.0.200 port 22: Connection timed out lost connection run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect good acb54e3cba404c20f07733f3222c0418a7724a5b Bisecting: 10 revisions left to test after this (roughly 4 steps) [478e9a5fcf3fda621f3d660979c42d24f3435d73] net: netcp: ethss: add support for handling rgmii link interface testing commit 478e9a5fcf3fda621f3d660979c42d24f3435d73 with gcc (GCC) 8.1.0 all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect bad 478e9a5fcf3fda621f3d660979c42d24f3435d73 Bisecting: 5 revisions left to test after this (roughly 3 steps) [77634cc67dc1ffc8ae6d869af6dee4b2ea6025ee] net/ipv6: Remove unused code and variables for rt6_info testing commit 77634cc67dc1ffc8ae6d869af6dee4b2ea6025ee with gcc (GCC) 8.1.0 all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect bad 77634cc67dc1ffc8ae6d869af6dee4b2ea6025ee Bisecting: 2 revisions left to test after this (roughly 1 step) [a64efe142f5e70b7e39276a414bbb3b96691c608] net/ipv6: introduce fib6_info struct and helpers testing commit a64efe142f5e70b7e39276a414bbb3b96691c608 with gcc (GCC) 8.1.0 all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect bad a64efe142f5e70b7e39276a414bbb3b96691c608 Bisecting: 0 revisions left to test after this (roughly 0 steps) [23fb93a4d3f118a900790066d03368a296dce0d6] net/ipv6: Cleanup exception and cache route handling testing commit 23fb93a4d3f118a900790066d03368a296dce0d6 with gcc (GCC) 8.1.0 all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect bad 23fb93a4d3f118a900790066d03368a296dce0d6 23fb93a4d3f118a900790066d03368a296dce0d6 is the first bad commit commit 23fb93a4d3f118a900790066d03368a296dce0d6 Author: David Ahern Date: Tue Apr 17 17:33:23 2018 -0700 net/ipv6: Cleanup exception and cache route handling IPv6 FIB will only contain FIB entries with exception routes added to the FIB entry. Once this transformation is complete, FIB lookups will return a fib6_info with the lookup functions still returning a dst based rt6_info. The current code uses rt6_info for both paths and overloads the rt6_info variable usually called 'rt'. This patch introduces a new 'f6i' variable name for the result of the FIB lookup and keeps 'rt' as the dst based return variable. 'f6i' becomes a fib6_info in a later patch which is why it is introduced as f6i now; avoids the additional churn in the later patch. In addition, remove RTF_CACHE and dst checks from fib6 add and delete since they can not happen now and will never happen after the data type flip. Signed-off-by: David Ahern Signed-off-by: David S. Miller :040000 040000 906c7fe5522117a3cb46544cd4f3bf87431b6fcb 1607729e63296b8a4e0f94296a44d1e4ea8f7f84 M include :040000 040000 2afa697b28dc3ea5aa58375d0def59530c1ebd0c bc53fa21783cd502123277ef434c7c77baeefd38 M net revisions tested: 15, total time: 3h54m12.108607394s (build: 1h16m25.124366819s, test: 2h33m43.311747384s) first bad commit: 23fb93a4d3f118a900790066d03368a296dce0d6 net/ipv6: Cleanup exception and cache route handling cc: ["davem@davemloft.net" "dsahern@gmail.com" "kuznet@ms2.inr.ac.ru" "linux-kernel@vger.kernel.org" "netdev@vger.kernel.org" "yoshfuji@linux-ipv6.org"] crash: unregister_netdevice: waiting for DEV to become free bond0 (unregistering): Releasing backup interface bond_slave_1 bond0 (unregistering): Releasing backup interface bond_slave_0 bond0 (unregistering): Released all slaves unregister_netdevice: waiting for lo to become free. Usage count = 2