bisecting cause commit starting from 36c2e31ad25bd087756b8db9584994d1d80c236b building syzkaller on 5ff41e943946a9e71b55566a02c8b1371fc9b8de testing commit 36c2e31ad25bd087756b8db9584994d1d80c236b compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 23dd96f9d9b6d99788bfe01c21668f129167ab7f1a88703b199541c33a897458 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #2: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #7: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #8: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #9: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #10: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #11: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #12: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #13: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #14: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #15: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #16: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #17: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #18: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #19: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb testing release v5.16 testing commit df0cc57e057f18e44dac8e6c18aba47ab53202f9 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 1fd9ab6ec52dc5d6eec160897ae3403fe7938723519a9996a423afd6588ef1fc all runs: OK # git bisect start 36c2e31ad25bd087756b8db9584994d1d80c236b df0cc57e057f18e44dac8e6c18aba47ab53202f9 Bisecting: 8494 revisions left to test after this (roughly 13 steps) [e1a7aa25ff45636a6c1930bf2430c8b802e93d9c] Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi testing commit e1a7aa25ff45636a6c1930bf2430c8b802e93d9c compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 99d9bf3331f0214b688f12d4b11bc6dacebab0bceb35d47ab41f6ef9884bff2b run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect good e1a7aa25ff45636a6c1930bf2430c8b802e93d9c Bisecting: 4244 revisions left to test after this (roughly 12 steps) [486343d3728be741db13854dc7e983c20cdd7c07] Merge tag 'omap-for-v5.17/fixes-for-merge-window-signed' of git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap into arm/fixes testing commit 486343d3728be741db13854dc7e983c20cdd7c07 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 01b599b5424c39cb540516b7b58a0ede739ac1b011fd67275c4996a93136c9f5 all runs: OK # git bisect good 486343d3728be741db13854dc7e983c20cdd7c07 Bisecting: 2123 revisions left to test after this (roughly 11 steps) [28a3f0601727d521a1c6cce62ecbcb7402a9e4f5] net: openvswitch: IPv6: Add IPv6 extension header support testing commit 28a3f0601727d521a1c6cce62ecbcb7402a9e4f5 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9f4da57a5b3653da038937da2d571d44a7a544ef86065a5fdadf85d9f238c43e run #0: crashed: KFENCE: use-after-free in __tcp_transmit_skb run #1: crashed: KFENCE: use-after-free in __tcp_transmit_skb run #2: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #7: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #8: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #9: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb # git bisect bad 28a3f0601727d521a1c6cce62ecbcb7402a9e4f5 Bisecting: 1003 revisions left to test after this (roughly 10 steps) [b96a79253fff1cd2c928b379eadd8c7a6f8055e1] Merge tag 'wireless-next-2022-02-11' of git://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless-next testing commit b96a79253fff1cd2c928b379eadd8c7a6f8055e1 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: da44f8f8745b21778d2f3b01b2d2039b58af0ac27378c7a3ea57dc3aaefd9d1f all runs: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect skip b96a79253fff1cd2c928b379eadd8c7a6f8055e1 Bisecting: 1003 revisions left to test after this (roughly 10 steps) [6a606b90153b821915daade0b8f253d01d443d75] net: ipa: allocate transaction in replenish loop testing commit 6a606b90153b821915daade0b8f253d01d443d75 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 0389c73f5e13818484ec80c383b8d1d0b1b31c09c5ddee3f571d347034414aa2 all runs: OK # git bisect good 6a606b90153b821915daade0b8f253d01d443d75 Bisecting: 870 revisions left to test after this (roughly 10 steps) [be6b41c15dc09c067492bd23668763f551747e4e] ipv6/addrconf: ensure addrconf_verify_rtnl() has completed testing commit be6b41c15dc09c067492bd23668763f551747e4e compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 25f77d63894030fe9c267ba86a58c58a515779f4301bd5c9f96ea4c4c2c15de4 all runs: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect skip be6b41c15dc09c067492bd23668763f551747e4e Bisecting: 870 revisions left to test after this (roughly 10 steps) [086d49058cd8471046ae9927524708820f5fd1c7] ipv6: annotate some data-races around sk->sk_prot testing commit 086d49058cd8471046ae9927524708820f5fd1c7 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f4eeba2ab9dea5af1a7e7e0cca779a25a72e443917d8e03aa0c190f571d4afa2 all runs: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect skip 086d49058cd8471046ae9927524708820f5fd1c7 Bisecting: 870 revisions left to test after this (roughly 10 steps) [30811174f0dbe17fd58eba5c22c50292c083c75b] KVM: SVM: set IRR in svm_deliver_interrupt testing commit 30811174f0dbe17fd58eba5c22c50292c083c75b compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 560bca4d9a298304d0e9a8e8144311c5ab3d07263dd477432ccffcf1775a0e40 all runs: OK # git bisect good 30811174f0dbe17fd58eba5c22c50292c083c75b Bisecting: 855 revisions left to test after this (roughly 10 steps) [f8e9ce4a6e85067d7d7cfa89167f5ce5f0ec2a8a] mptcp: mptcp_parse_option is no longer exported testing commit f8e9ce4a6e85067d7d7cfa89167f5ce5f0ec2a8a compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: aff215e1f4e000174be3c1603f13ac320257cc17ffe6ffccfcac550b34588eb3 run #0: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first run #1: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first run #2: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #3: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first run #4: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first run #5: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first run #6: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first run #7: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first run #8: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first run #9: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect skip f8e9ce4a6e85067d7d7cfa89167f5ce5f0ec2a8a Bisecting: 855 revisions left to test after this (roughly 10 steps) [525de9a79349bd83fe5276d7672f91887f9ee721] Merge ra.kernel.org:/pub/scm/linux/kernel/git/netfilter/nf testing commit 525de9a79349bd83fe5276d7672f91887f9ee721 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 153a88326103e640755c565407c469d8475208cbb0bfe4bff3c0d12273da4d25 all runs: OK # git bisect good 525de9a79349bd83fe5276d7672f91887f9ee721 Bisecting: 846 revisions left to test after this (roughly 10 steps) [fa4fad40d5959373e3c6046d30344fc4f586bb20] Merge branch 'tcp-take-care-of-another-syzbot-issue' testing commit fa4fad40d5959373e3c6046d30344fc4f586bb20 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 65c409806d9a6fc58a8384334d6c387c27add63dc49d7901a22169bd2201242a run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #2: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #7: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #8: crashed: KFENCE: use-after-free in __tcp_transmit_skb run #9: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb # git bisect bad fa4fad40d5959373e3c6046d30344fc4f586bb20 Bisecting: 587 revisions left to test after this (roughly 9 steps) [40f3a5c81555880a437dfd3301826074dff18138] net: mscc: ocelot: add ability to perform bulk reads testing commit 40f3a5c81555880a437dfd3301826074dff18138 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: bd2b9cec17ad9a65ccf4a3cb70800019f90681d722a8545a229ff68781ae29d2 all runs: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect skip 40f3a5c81555880a437dfd3301826074dff18138 Bisecting: 587 revisions left to test after this (roughly 9 steps) [d54f16c7fa3bc350b07049e0c0046c59bcbe7c3e] Merge branch 'switchdev-BRENTRY' testing commit d54f16c7fa3bc350b07049e0c0046c59bcbe7c3e compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d03a81d5f500d4c311d086f5b745b3bac22e10a8a8c23ccb07ba7194c85eaf3e all runs: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect skip d54f16c7fa3bc350b07049e0c0046c59bcbe7c3e Bisecting: 587 revisions left to test after this (roughly 9 steps) [b6ec79518ef0c84d1ed0f76b8af9592a75eb29b6] bpf, x86: Remove unnecessary handling of BPF_SUB atomic op testing commit b6ec79518ef0c84d1ed0f76b8af9592a75eb29b6 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 6b0cfba674c331008b350e83d3b86a2a74e2eb094393f2c8ed01752b9d4ca6d7 all runs: OK # git bisect good b6ec79518ef0c84d1ed0f76b8af9592a75eb29b6 Bisecting: 563 revisions left to test after this (roughly 9 steps) [6ce204eac38723d3a24c7bf148221de933bba54d] net/mlx5e: Use a barrier after updating txq2sq testing commit 6ce204eac38723d3a24c7bf148221de933bba54d compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 91aae6366b7b01ed12a409c6616698ae09f2c010d150fe398e7593c7f64a506e all runs: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect skip 6ce204eac38723d3a24c7bf148221de933bba54d Bisecting: 563 revisions left to test after this (roughly 9 steps) [10728cd7967a492e700bf13c32546f791a77cc61] net: dsa: qca8k: move qca8k_phylink_mac_link_state() testing commit 10728cd7967a492e700bf13c32546f791a77cc61 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 6431126eb8dc8b08cfdf7d268e657cbb78542631ffa070834e20d17d7c2feb47 all runs: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect skip 10728cd7967a492e700bf13c32546f791a77cc61 Bisecting: 563 revisions left to test after this (roughly 9 steps) [62f7991feab69ed398ad6a03b911fa0ee0549516] net/mlx5e: Move repeating code that gets TC prio into a function testing commit 62f7991feab69ed398ad6a03b911fa0ee0549516 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b3a8aaa9e649a9becb52a8c665643adf07b6546fd436586598d031d99f01c8c8 all runs: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect skip 62f7991feab69ed398ad6a03b911fa0ee0549516 Bisecting: 563 revisions left to test after this (roughly 9 steps) [e6d557a78b6016eee7b9cd6832343efd32cc0b27] mt76: mt7915: rely on mt76_connac_get_phy utilities testing commit e6d557a78b6016eee7b9cd6832343efd32cc0b27 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 6d8081541ef54f75d2ca381c92e701f942ec1129d159ca1e997797a254822090 all runs: OK # git bisect good e6d557a78b6016eee7b9cd6832343efd32cc0b27 Bisecting: 519 revisions left to test after this (roughly 9 steps) [9625bf39bd4140cebd60cc658846505f4ab6c8ca] net/mlx5e: Fix spelling mistake "supoported" -> "supported" testing commit 9625bf39bd4140cebd60cc658846505f4ab6c8ca compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9b112bfa190b08ae4564d7f128fbbc8db4e9c94e45ca9ddf72d6c93d6229b521 all runs: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect skip 9625bf39bd4140cebd60cc658846505f4ab6c8ca Bisecting: 519 revisions left to test after this (roughly 9 steps) [926eae604403acfa27ba5b072af458e87e634a50] dsa: mv88e6xxx: make serdes SGMII/Fiber tx amplitude configurable testing commit 926eae604403acfa27ba5b072af458e87e634a50 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b9180806525e848b4ca60f94fad5910000ea7181554783bc618e5f6bede85604 all runs: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect skip 926eae604403acfa27ba5b072af458e87e634a50 Bisecting: 519 revisions left to test after this (roughly 9 steps) [621bd393039e81533ad5f5e2a70ba3ce36202f57] selftests: mptcp: set ip_mptcp in command line testing commit 621bd393039e81533ad5f5e2a70ba3ce36202f57 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: cde7ce6e31c5b124e4ea8a1402ab91d299830212aeac99e4bc58ea4b3821f09b all runs: OK # git bisect good 621bd393039e81533ad5f5e2a70ba3ce36202f57 Bisecting: 510 revisions left to test after this (roughly 9 steps) [314e1105831b45a0fe3045411d7fec4997936e86] net/mlx5e: Add post act offload/unoffload API testing commit 314e1105831b45a0fe3045411d7fec4997936e86 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: e9b98bc552d4d2b8bcc1050783da45d1c9bb754122b4c4b4d2136a00262f0fc8 all runs: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect skip 314e1105831b45a0fe3045411d7fec4997936e86 Bisecting: 510 revisions left to test after this (roughly 9 steps) [0f350231b5ac8867d552122b9ec88e8d7da00e8c] bpf: Fix leftover header->pages in sparc and powerpc code. testing commit 0f350231b5ac8867d552122b9ec88e8d7da00e8c compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 787997c1ce3b920cbf421bd531b96e129a76c12ed76407aa86d77234b420d359 all runs: OK # git bisect good 0f350231b5ac8867d552122b9ec88e8d7da00e8c Bisecting: 477 revisions left to test after this (roughly 9 steps) [f64ae40de5efaa33c36f4e2226b33824ba1b42a7] testptp: add option to shift clock by nanoseconds testing commit f64ae40de5efaa33c36f4e2226b33824ba1b42a7 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 2ad9c0c15c5f2cfc80ae4b1f0de1a127d1b2ec3ecc4abfba06f6142243820a80 run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #2: crashed: KFENCE: use-after-free in __tcp_transmit_skb run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #5: crashed: KFENCE: use-after-free in __tcp_transmit_skb run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #7: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #8: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb run #9: crashed: BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit_skb # git bisect bad f64ae40de5efaa33c36f4e2226b33824ba1b42a7 Bisecting: 473 revisions left to test after this (roughly 9 steps) [e2ac75e0619b8db32447bb592f4a5b9e9d990c57] MAINTAINERS: hand over ath9k maintainership to Toke testing commit e2ac75e0619b8db32447bb592f4a5b9e9d990c57 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 1575671674e9d16ca6c2d658ec4d41b031f22cb9a36af06f496b90e71ea05dc5 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect good e2ac75e0619b8db32447bb592f4a5b9e9d990c57 Bisecting: 466 revisions left to test after this (roughly 9 steps) [2dc95a4d30eddac9679f295ba4304a7ab0e4ae02] net: Add dm9051 driver testing commit 2dc95a4d30eddac9679f295ba4304a7ab0e4ae02 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b3d28d482a86476a039790c415b1e5f0fb327409983ed4125f0c4801eeedd0ca all runs: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect skip 2dc95a4d30eddac9679f295ba4304a7ab0e4ae02 Bisecting: 466 revisions left to test after this (roughly 9 steps) [26394fc118d6115390bd5b3a0fb17096271da227] ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() testing commit 26394fc118d6115390bd5b3a0fb17096271da227 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: fa5decedd3c18a08a87c22dacf5532f0a30121da3406655576574325e47d393c all runs: OK # git bisect good 26394fc118d6115390bd5b3a0fb17096271da227 Bisecting: 454 revisions left to test after this (roughly 9 steps) [13651224c00b74a02c731b7840577f14e0311c83] net: ping6: support setting basic SOL_IPV6 options via cmsg testing commit 13651224c00b74a02c731b7840577f14e0311c83 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 14747db7390b490c8d414c9bd461d18749b4706f7673baa828ba419920662343 all runs: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect skip 13651224c00b74a02c731b7840577f14e0311c83 Bisecting: 454 revisions left to test after this (roughly 9 steps) [72fc40931d7a488e1646d04f988f4d5a97b02100] MAINTAINERS: downgrade myself to Reviewer for s390 testing commit 72fc40931d7a488e1646d04f988f4d5a97b02100 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 6003e977dff904f4119e2391f69565f09efe89c7804c5e408b142036be173ce4 all runs: OK # git bisect good 72fc40931d7a488e1646d04f988f4d5a97b02100 Bisecting: 454 revisions left to test after this (roughly 9 steps) [5edb65eac10fdf4279b5e28a6c18d720cdc215e1] net: ti: cpsw: remove guards against !BRIDGE_VLAN_INFO_BRENTRY testing commit 5edb65eac10fdf4279b5e28a6c18d720cdc215e1 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 8d9c022c513b0836f3afd6267a5a85a57073270c43c9fc726d69763d7f1dba4a all runs: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect skip 5edb65eac10fdf4279b5e28a6c18d720cdc215e1 Bisecting: 454 revisions left to test after this (roughly 9 steps) [9bbfbc92c64a9f4d5ac4205071c5fc02a8201039] selftests: net: cmsg_so_mark: test with SO_MARK set by setsockopt testing commit 9bbfbc92c64a9f4d5ac4205071c5fc02a8201039 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 56ac1efcbce596a64ee575df9159c3d8fa382996331c15dc77045fa4e70fc09b all runs: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect skip 9bbfbc92c64a9f4d5ac4205071c5fc02a8201039 Bisecting: 454 revisions left to test after this (roughly 9 steps) [5666ee154f4696c011dfa8544aaf5591b6b87515] cfg80211: don't add non transmitted BSS to 6GHz scanned channels testing commit 5666ee154f4696c011dfa8544aaf5591b6b87515 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: a9220cd524fce2501fe15c56a5876d520553c21f7c5daf5a95c711201ca8fdb7 all runs: OK # git bisect good 5666ee154f4696c011dfa8544aaf5591b6b87515 Bisecting: 452 revisions left to test after this (roughly 9 steps) [46e994717807f4b935c44d81dde9dd8bcd9a4f5d] phy: phy-mtk-tphy: Fix duplicated argument in phy-mtk-tphy testing commit 46e994717807f4b935c44d81dde9dd8bcd9a4f5d compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 911b525a7e5edf4f344494d8046098b8297fdef6abc00e12534e263838aa4eb6 all runs: OK # git bisect good 46e994717807f4b935c44d81dde9dd8bcd9a4f5d Bisecting: 448 revisions left to test after this (roughly 9 steps) [1d21c327281afb19448405dae9ff6b54a9e9bc37] net: ti: am65-cpsw-nuss: remove guards against !BRIDGE_VLAN_INFO_BRENTRY testing commit 1d21c327281afb19448405dae9ff6b54a9e9bc37 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 2c46b1dc481fe0e210ecb3b69053eb11e3fa330c977d13ca436ecdace59c6e3a run #0: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first run #1: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first run #2: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first run #3: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first run #4: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first run #5: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first run #6: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #7: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first run #8: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first run #9: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect skip 1d21c327281afb19448405dae9ff6b54a9e9bc37 Bisecting: 448 revisions left to test after this (roughly 9 steps) [68f831355052706e1f8498653f6c4d36643c0db8] net: mana: Remove unnecessary check of cqe_type in mana_process_rx_cqe() testing commit 68f831355052706e1f8498653f6c4d36643c0db8 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 1fe7aa8d246ffae8069838776cb04f344cbdef1a98a077f3a7f847bb589fe5c8 all runs: crashed: KASAN: use-after-free Read in ip6mr_sk_done # git bisect bad 68f831355052706e1f8498653f6c4d36643c0db8 Bisecting: 10 revisions left to test after this (roughly 4 steps) [0463e320421b313db320bbcf2928ebf49f556b67] net: phylink: remove phylink_set_10g_modes() testing commit 0463e320421b313db320bbcf2928ebf49f556b67 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 24e4cfb85d550223fc489c542286088bd45d50b5fd2fd723894ac0aac30c7edd all runs: OK # git bisect good 0463e320421b313db320bbcf2928ebf49f556b67 Bisecting: 5 revisions left to test after this (roughly 3 steps) [cc3063502e0893c491ff83b61f43d402c144857d] Merge branch 'ipv6-mc_forwarding-changes' testing commit cc3063502e0893c491ff83b61f43d402c144857d compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 51bde330771d330a98c26476abe1e16e9cb305f04a3d0a3266c7617e78e02fad all runs: crashed: KASAN: use-after-free Read in ip6mr_sk_done # git bisect bad cc3063502e0893c491ff83b61f43d402c144857d Bisecting: 1 revision left to test after this (roughly 1 step) [145c7a793838add5e004e7d49a67654dc7eba147] ipv6: make mc_forwarding atomic testing commit 145c7a793838add5e004e7d49a67654dc7eba147 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: fe373f76def8f25b846e0cc2c2a48fca066b0205543faece52f139582dc09eac all runs: OK # git bisect good 145c7a793838add5e004e7d49a67654dc7eba147 Bisecting: 0 revisions left to test after this (roughly 0 steps) [f2f2325ec79970807012dfc9e716cdbb02d9b574] ip6mr: ip6mr_sk_done() can exit early in common cases testing commit f2f2325ec79970807012dfc9e716cdbb02d9b574 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 615821e3d62f23620e6624f74cf5a5ae416885149009d52099339dd2fb3507a6 all runs: crashed: KASAN: use-after-free Read in ip6mr_sk_done # git bisect bad f2f2325ec79970807012dfc9e716cdbb02d9b574 f2f2325ec79970807012dfc9e716cdbb02d9b574 is the first bad commit commit f2f2325ec79970807012dfc9e716cdbb02d9b574 Author: Eric Dumazet Date: Fri Feb 4 12:15:46 2022 -0800 ip6mr: ip6mr_sk_done() can exit early in common cases In many cases, ip6mr_sk_done() is called while no ipmr socket has been registered. This removes 4 rtnl acquisitions per netns dismantle, with following callers: igmp6_net_exit(), tcpv6_net_exit(), ndisc_net_exit() Signed-off-by: Eric Dumazet Signed-off-by: David S. Miller net/ipv6/ip6mr.c | 3 +++ 1 file changed, 3 insertions(+) culprit signature: 615821e3d62f23620e6624f74cf5a5ae416885149009d52099339dd2fb3507a6 parent signature: fe373f76def8f25b846e0cc2c2a48fca066b0205543faece52f139582dc09eac revisions tested: 41, total time: 7h55m46.808427482s (build: 5h23m9.878394388s, test: 2h29m41.986201514s) first bad commit: f2f2325ec79970807012dfc9e716cdbb02d9b574 ip6mr: ip6mr_sk_done() can exit early in common cases recipients (to): ["davem@davemloft.net" "davem@davemloft.net" "dsahern@kernel.org" "edumazet@google.com" "kuba@kernel.org" "netdev@vger.kernel.org" "yoshfuji@linux-ipv6.org"] recipients (cc): ["linux-kernel@vger.kernel.org"] crash: KASAN: use-after-free Read in ip6mr_sk_done bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): Released all slaves ================================================================== BUG: KASAN: use-after-free in instrument_atomic_read include/linux/instrumented.h:71 [inline] BUG: KASAN: use-after-free in atomic_read include/linux/atomic/atomic-instrumented.h:27 [inline] BUG: KASAN: use-after-free in ip6mr_sk_done+0xea/0x360 net/ipv6/ip6mr.c:1578 Read of size 4 at addr ffff8880109fbc88 by task kworker/u4:3/206 CPU: 0 PID: 206 Comm: kworker/u4:3 Not tainted 5.17.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x57/0x7d lib/dump_stack.c:106 print_address_description.constprop.0.cold+0x8d/0x336 mm/kasan/report.c:255 __kasan_report mm/kasan/report.c:442 [inline] kasan_report.cold+0x83/0xdf mm/kasan/report.c:459 check_region_inline mm/kasan/generic.c:183 [inline] kasan_check_range+0x13d/0x180 mm/kasan/generic.c:189 instrument_atomic_read include/linux/instrumented.h:71 [inline] atomic_read include/linux/atomic/atomic-instrumented.h:27 [inline] ip6mr_sk_done+0xea/0x360 net/ipv6/ip6mr.c:1578 rawv6_close+0x3e/0x60 net/ipv6/raw.c:1201 inet_release+0xef/0x210 net/ipv4/af_inet.c:428 __sock_release net/socket.c:650 [inline] sock_release+0x7d/0x190 net/socket.c:678 inet_ctl_sock_destroy include/net/inet_common.h:65 [inline] igmp6_net_exit+0x61/0x160 net/ipv6/mcast.c:3173 ops_exit_list+0x94/0x160 net/core/net_namespace.c:168 cleanup_net+0x423/0x980 net/core/net_namespace.c:600 process_one_work+0x879/0x1410 kernel/workqueue.c:2307 worker_thread+0x5a0/0xf60 kernel/workqueue.c:2454 kthread+0x299/0x340 kernel/kthread.c:377 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 Allocated by task 0: (stack is not available) Freed by task 206: kasan_save_stack+0x1e/0x40 mm/kasan/common.c:38 kasan_set_track+0x21/0x30 mm/kasan/common.c:45 kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:370 ____kasan_slab_free mm/kasan/common.c:366 [inline] ____kasan_slab_free+0x130/0x160 mm/kasan/common.c:328 kasan_slab_free include/linux/kasan.h:236 [inline] slab_free_hook mm/slub.c:1728 [inline] slab_free_freelist_hook+0x8b/0x1c0 mm/slub.c:1754 slab_free mm/slub.c:3509 [inline] kfree+0xcb/0x280 mm/slub.c:4562 ops_exit_list+0x94/0x160 net/core/net_namespace.c:168 cleanup_net+0x423/0x980 net/core/net_namespace.c:600 process_one_work+0x879/0x1410 kernel/workqueue.c:2307 worker_thread+0x5a0/0xf60 kernel/workqueue.c:2454 kthread+0x299/0x340 kernel/kthread.c:377 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 The buggy address belongs to the object at ffff8880109fbc00 which belongs to the cache kmalloc-256 of size 256 The buggy address is located 136 bytes inside of 256-byte region [ffff8880109fbc00, ffff8880109fbd00) The buggy address belongs to the page: page:ffffea0000427e80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109fa head:ffffea0000427e80 order:1 compound_mapcount:0 flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) raw: 00fff00000010200 0000000000000000 dead000000000001 ffff88800fc41b40 raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 2000447826, free_ts 0 prep_new_page mm/page_alloc.c:2434 [inline] get_page_from_freelist+0xa6f/0x2f10 mm/page_alloc.c:4165 __alloc_pages+0x1b2/0x500 mm/page_alloc.c:5389 alloc_page_interleave+0xf/0x1c0 mm/mempolicy.c:2116 alloc_slab_page mm/slub.c:1799 [inline] allocate_slab mm/slub.c:1944 [inline] new_slab+0x28a/0x3b0 mm/slub.c:2004 ___slab_alloc+0x87e/0xe80 mm/slub.c:3018 __slab_alloc.constprop.0+0x4d/0xa0 mm/slub.c:3105 slab_alloc_node mm/slub.c:3196 [inline] slab_alloc mm/slub.c:3238 [inline] __kmalloc_track_caller+0x2e7/0x320 mm/slub.c:4926 __do_krealloc mm/slab_common.c:1184 [inline] krealloc+0x87/0xf0 mm/slab_common.c:1217 add_sysfs_param+0xaf/0x900 kernel/params.c:651 kernel_add_sysfs_param kernel/params.c:812 [inline] param_sysfs_builtin kernel/params.c:851 [inline] param_sysfs_init+0x279/0x351 kernel/params.c:970 do_one_initcall+0xbe/0x440 init/main.c:1300 do_initcall_level init/main.c:1373 [inline] do_initcalls init/main.c:1389 [inline] do_basic_setup init/main.c:1408 [inline] kernel_init_freeable+0x5ab/0x605 init/main.c:1613 kernel_init+0x14/0x130 init/main.c:1502 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 page_owner free stack trace missing Memory state around the buggy address: ffff8880109fbb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff8880109fbc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff8880109fbc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8880109fbd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff8880109fbd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ==================================================================