bisecting cause commit starting from 931294922e65a23e1aad6398b9ae02df74044679 building syzkaller on a8529b82fb3bb45832b08a099e7eb51707da9b37 testing commit 931294922e65a23e1aad6398b9ae02df74044679 with gcc (GCC) 10.2.1 20210217 kernel signature: ec3ab82421b045b41126fadd0410a844a75d86d6520ad2394d4122fa17f0b308 run #0: crashed: WARNING: refcount bug in register_netdevice run #1: crashed: WARNING: refcount bug in register_netdevice run #2: crashed: WARNING: refcount bug in register_netdevice run #3: crashed: WARNING: refcount bug in register_netdevice run #4: crashed: WARNING: refcount bug in register_netdevice run #5: crashed: WARNING: refcount bug in register_netdevice run #6: crashed: WARNING: refcount bug in register_netdevice run #7: crashed: WARNING: refcount bug in register_netdevice run #8: crashed: WARNING: refcount bug in register_netdevice run #9: crashed: WARNING: refcount bug in register_netdevice run #10: crashed: WARNING: refcount bug in register_netdevice run #11: crashed: WARNING: refcount bug in register_netdevice run #12: crashed: WARNING: refcount bug in register_netdevice run #13: crashed: WARNING: refcount bug in register_netdevice run #14: crashed: WARNING: refcount bug in netdevice_event_work_handler run #15: crashed: WARNING: refcount bug in register_netdevice run #16: crashed: WARNING: refcount bug in register_netdevice run #17: crashed: WARNING: refcount bug in register_netdevice run #18: crashed: WARNING: refcount bug in register_netdevice run #19: crashed: WARNING: refcount bug in register_netdevice testing release v5.11 testing commit f40ddce88593482919761f74910f42f4b84c004b with gcc (GCC) 10.2.1 20210217 kernel signature: e99cd9f143ce9d9fcac692e506c1f42fd7bad007e669bcc2d658384620d3ab58 all runs: crashed: unregister_netdevice: waiting for DEV to become free testing release v5.10 testing commit 2c85ebc57b3e1817b6ce1a6b703928e113a90442 with gcc (GCC) 10.2.1 20210217 kernel signature: a85323b0701dba111ac583b145ff31def09d195ee905600b53b701659a53318a run #0: OK run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: crashed: kernel panic: panic_on_warn set reproducer seems to be flaky testing release v5.9 testing commit bbf5c979011a099af5dc76498918ed7df445635b with gcc (GCC) 10.2.1 20210217 kernel signature: 518fb1aeda7a24ee3d4efae5c88e23f29027cd3df6defd6a587437de3d25454c all runs: OK # git bisect start 2c85ebc57b3e1817b6ce1a6b703928e113a90442 bbf5c979011a099af5dc76498918ed7df445635b Bisecting: 9594 revisions left to test after this (roughly 13 steps) [4d0e9df5e43dba52d38b251e3b909df8fa1110be] lib, uaccess: add failure injection to usercopy functions testing commit 4d0e9df5e43dba52d38b251e3b909df8fa1110be with gcc (GCC) 10.2.1 20210217 kernel signature: 44bdea635c9522fe5139048b047fed229025f70da5f037bbe2ba0a946b16525b run #0: crashed: KASAN: use-after-free Read in netdevice_event_work_handler run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 4d0e9df5e43dba52d38b251e3b909df8fa1110be Bisecting: 3935 revisions left to test after this (roughly 12 steps) [f888bdf9823c85fe945c4eb3ba353f749dec3856] Merge tag 'devicetree-for-5.10' of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux testing commit f888bdf9823c85fe945c4eb3ba353f749dec3856 with gcc (GCC) 10.2.1 20210217 kernel signature: 10c15fb4807735fa0c32f5c1fafa6c75cc29d96a09452fd0fa1f976c674dac8b run #0: OK run #1: OK run #2: OK run #3: OK run #4: OK run #5: crashed: KASAN: use-after-free Read in netdevice_event_work_handler run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad f888bdf9823c85fe945c4eb3ba353f749dec3856 Bisecting: 1997 revisions left to test after this (roughly 11 steps) [57218d7f2e87069f73c7a841b6ed6c1cc7acf616] Merge tag 'regmap-v5.10' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap testing commit 57218d7f2e87069f73c7a841b6ed6c1cc7acf616 with gcc (GCC) 10.2.1 20210217 kernel signature: 29bfb898df903a2c91170e508b354d96735dd1c4cb3f241a4332046031288cb3 all runs: OK # git bisect good 57218d7f2e87069f73c7a841b6ed6c1cc7acf616 Bisecting: 979 revisions left to test after this (roughly 10 steps) [d5660df4a555a98154da850fb61f118269d0a283] Merge branch 'akpm' (patches from Andrew) testing commit d5660df4a555a98154da850fb61f118269d0a283 with gcc (GCC) 10.2.1 20210217 kernel signature: da395eff8209d6443d75a5ef7aa27dd820947ae18a9dd2adaeb2de06ca7f3203 all runs: OK # git bisect good d5660df4a555a98154da850fb61f118269d0a283 Bisecting: 506 revisions left to test after this (roughly 9 steps) [4815519ed0af833884ce9c288183bf1ae3cb9caa] Merge tag 'for-5.10/dm-changes' of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm testing commit 4815519ed0af833884ce9c288183bf1ae3cb9caa with gcc (GCC) 10.2.1 20210217 kernel signature: 0d4bca95b5d65c131009bad0efd6e3cbf3dc9ff60e51ce1ea85f7664caaee90a all runs: OK # git bisect good 4815519ed0af833884ce9c288183bf1ae3cb9caa Bisecting: 278 revisions left to test after this (roughly 8 steps) [55e0500eb5c0440a3d43074edbd8db3e95851b66] Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi testing commit 55e0500eb5c0440a3d43074edbd8db3e95851b66 with gcc (GCC) 10.2.1 20210217 kernel signature: 3072c9fa91910e85174c25cdd7f551513141a692d105b66c598a3636f2870795 all runs: OK # git bisect good 55e0500eb5c0440a3d43074edbd8db3e95851b66 Bisecting: 112 revisions left to test after this (roughly 7 steps) [b4e1bce85fd8f43dc814049e2641cc6beaa8146b] Merge tag 'pinctrl-v5.10-1' of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl testing commit b4e1bce85fd8f43dc814049e2641cc6beaa8146b with gcc (GCC) 10.2.1 20210217 kernel signature: 46fc52630f1e1cf38cf8631a0468b9bf8e762554c50921f625eeee87177a7c82 run #0: OK run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: crashed: KASAN: use-after-free Read in netdevice_event_work_handler run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad b4e1bce85fd8f43dc814049e2641cc6beaa8146b Bisecting: 82 revisions left to test after this (roughly 6 steps) [98d278ca00bd8f62c8bc98bd9e65372d16eb6956] leds: lm3697: Fix out-of-bound access testing commit 98d278ca00bd8f62c8bc98bd9e65372d16eb6956 with gcc (GCC) 8.4.1 20210217 kernel signature: 11c3540a5a470df5fc2f8a3d3541e3ce449aa893aafc3421c20ab6c0bc51d6ae all runs: OK # git bisect good 98d278ca00bd8f62c8bc98bd9e65372d16eb6956 Bisecting: 43 revisions left to test after this (roughly 5 steps) [e777f8c8f9f6a3fe4f42f5f101620adc60b78616] Merge tag 'renesas-pinctrl-for-v5.10-tag1' of git://git.kernel.org/pub/scm/linux/kernel/git/geert/renesas-drivers into devel testing commit e777f8c8f9f6a3fe4f42f5f101620adc60b78616 with gcc (GCC) 8.4.1 20210217 kernel signature: 5dd28359845667bc836eccad533b2b4655f429250a56b6b4869430c96a4ab19c all runs: OK # git bisect good e777f8c8f9f6a3fe4f42f5f101620adc60b78616 Bisecting: 21 revisions left to test after this (roughly 5 steps) [f4b5c348d65b7c76931a7f36e8240a85e4cbad29] pinctrl: Ingenic: Add I2S pins support for Ingenic SoCs. testing commit f4b5c348d65b7c76931a7f36e8240a85e4cbad29 with gcc (GCC) 8.4.1 20210217 kernel signature: 5dd28359845667bc836eccad533b2b4655f429250a56b6b4869430c96a4ab19c all runs: OK # git bisect good f4b5c348d65b7c76931a7f36e8240a85e4cbad29 Bisecting: 10 revisions left to test after this (roughly 4 steps) [cb8cc18508fb0cad74929ffd080bebafe91609e2] pinctrl: tigerlake: Fix register offsets for TGL-H variant testing commit cb8cc18508fb0cad74929ffd080bebafe91609e2 with gcc (GCC) 8.4.1 20210217 kernel signature: 5dd28359845667bc836eccad533b2b4655f429250a56b6b4869430c96a4ab19c all runs: OK # git bisect good cb8cc18508fb0cad74929ffd080bebafe91609e2 Bisecting: 5 revisions left to test after this (roughly 3 steps) [db7515783b99f6ae8b21470cab9ee871956b57fb] pinctrl: mediatek: Free eint data on failure testing commit db7515783b99f6ae8b21470cab9ee871956b57fb with gcc (GCC) 8.4.1 20210217 kernel signature: 5dd28359845667bc836eccad533b2b4655f429250a56b6b4869430c96a4ab19c all runs: OK # git bisect good db7515783b99f6ae8b21470cab9ee871956b57fb Bisecting: 2 revisions left to test after this (roughly 2 steps) [55596c5445566cf43b83238198fd038d21172d99] pinctrl: amd: Add missing pins to the pin group list testing commit 55596c5445566cf43b83238198fd038d21172d99 with gcc (GCC) 8.4.1 20210217 kernel signature: 5dd28359845667bc836eccad533b2b4655f429250a56b6b4869430c96a4ab19c all runs: OK # git bisect good 55596c5445566cf43b83238198fd038d21172d99 Bisecting: 0 revisions left to test after this (roughly 1 step) [7fafb54c7d390e9b273a1d7d377e38d9c408046e] Merge tag 'leds-5.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/pavel/linux-leds testing commit 7fafb54c7d390e9b273a1d7d377e38d9c408046e with gcc (GCC) 10.2.1 20210217 kernel signature: 46fc52630f1e1cf38cf8631a0468b9bf8e762554c50921f625eeee87177a7c82 run #0: OK run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: crashed: kernel panic: panic_on_warn set # git bisect bad 7fafb54c7d390e9b273a1d7d377e38d9c408046e Bisecting: 0 revisions left to test after this (roughly 0 steps) [19d2e0cef0b14f8c7210162f58327485f5fa7c51] leds: pwm: Remove platform_data support testing commit 19d2e0cef0b14f8c7210162f58327485f5fa7c51 with gcc (GCC) 8.4.1 20210217 kernel signature: 11c3540a5a470df5fc2f8a3d3541e3ce449aa893aafc3421c20ab6c0bc51d6ae all runs: OK # git bisect good 19d2e0cef0b14f8c7210162f58327485f5fa7c51 7fafb54c7d390e9b273a1d7d377e38d9c408046e is the first bad commit commit 7fafb54c7d390e9b273a1d7d377e38d9c408046e Merge: 55e0500eb5c0 19d2e0cef0b1 Author: Linus Torvalds Date: Wed Oct 14 15:22:07 2020 -0700 Merge tag 'leds-5.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/pavel/linux-leds Pull LED updates from Pavel Machek: "Quite a lot of stuff is going on here. Great cleanups/fixes from Marek and others are biggest part. I limited CPU LED trigger to 8 LEDs, because it was willing to register 1024 'triggers' on machine with 1024 CPUs. I don't believe it will cause any problems, but we can raise the limit if it does" * tag 'leds-5.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/pavel/linux-leds: (84 commits) leds: pwm: Remove platform_data support leds: lm3697: Fix out-of-bound access leds: ns2: do not guard OF match pointer with of_match_ptr leds: ns2: convert to fwnode API leds: tlc591xx: fix leak of device node iterator leds: pca963x: use struct led_init_data when registering leds: pca963x: register LEDs immediately after parsing, get rid of platdata leds: tca6507: remove binding comment leds: tca6507: cosmetic change: use helper variable leds: tca6507: do not set GPIO names dt-bindings: leds: tca6507: convert to YAML ledtrig-cpu: Limit to 8 CPUs leds: TODO: Add documentation about possible subsystem improvements leds: pca9532: read pwm settings from device tree leds: pca9532: correct shift computation in pca9532_getled leds: lm36274: Fix warning for undefined parameters leds: lm3532: Fix warnings for undefined parameters leds: pca963x: use flexible array leds: pca963x: cosmetic: rename variables leds: pca963x: cosmetic: rename variables ... .../devicetree/bindings/leds/leds-is31fl319x.txt | 2 + .../devicetree/bindings/leds/leds-lp50xx.yaml | 130 +++++ .../devicetree/bindings/leds/leds-lp55xx.yaml | 2 +- .../devicetree/bindings/leds/leds-pca955x.txt | 1 + Documentation/devicetree/bindings/leds/tca6507.txt | 49 -- .../devicetree/bindings/leds/ti,tca6507.yaml | 134 +++++ Documentation/leds/ledtrig-transient.rst | 7 - drivers/leds/Kconfig | 31 +- drivers/leds/Makefile | 2 + drivers/leds/TODO | 75 +++ drivers/leds/led-class.c | 5 + drivers/leds/leds-88pm860x.c | 6 +- drivers/leds/leds-aat1290.c | 2 +- drivers/leds/leds-acer-a500.c | 129 +++++ drivers/leds/leds-an30259a.c | 7 +- drivers/leds/leds-aw2013.c | 11 +- drivers/leds/leds-bcm6328.c | 11 +- drivers/leds/leds-bcm6358.c | 11 +- drivers/leds/leds-cpcap.c | 7 +- drivers/leds/leds-cr0014114.c | 3 - drivers/leds/leds-el15203000.c | 3 - drivers/leds/leds-gpio.c | 3 - drivers/leds/leds-ip30.c | 1 + drivers/leds/leds-is31fl319x.c | 32 +- drivers/leds/leds-is31fl32xx.c | 33 +- drivers/leds/leds-ktd2692.c | 4 +- drivers/leds/leds-lm3532.c | 65 +-- drivers/leds/leds-lm36274.c | 133 ++--- drivers/leds/leds-lm3692x.c | 14 +- drivers/leds/leds-lm3697.c | 100 ++-- drivers/leds/leds-lp50xx.c | 631 +++++++++++++++++++++ drivers/leds/leds-lp5521.c | 2 +- drivers/leds/leds-lp5523.c | 2 +- drivers/leds/leds-lp5562.c | 2 +- drivers/leds/leds-lp55xx-common.c | 14 +- drivers/leds/leds-lp8501.c | 2 +- drivers/leds/leds-lp8860.c | 6 +- drivers/leds/leds-lt3593.c | 6 +- drivers/leds/leds-max77650.c | 24 +- drivers/leds/leds-max77693.c | 2 +- drivers/leds/leds-mc13783.c | 8 +- drivers/leds/leds-mt6323.c | 38 +- drivers/leds/leds-netxbig.c | 6 +- drivers/leds/leds-ns2.c | 346 ++++------- drivers/leds/leds-pca9532.c | 24 +- drivers/leds/leds-pca955x.c | 8 + drivers/leds/leds-pca963x.c | 399 ++++++------- drivers/leds/leds-pm8058.c | 33 +- drivers/leds/leds-powernv.c | 2 +- drivers/leds/leds-pwm.c | 49 +- drivers/leds/leds-s3c24xx.c | 2 - drivers/leds/leds-sc27xx-bltc.c | 6 +- drivers/leds/leds-sgm3140.c | 29 +- drivers/leds/leds-spi-byte.c | 11 +- drivers/leds/leds-syscon.c | 13 +- drivers/leds/leds-tca6507.c | 116 ++-- drivers/leds/leds-tlc591xx.c | 24 +- drivers/leds/leds-turris-omnia.c | 8 +- drivers/leds/trigger/ledtrig-cpu.c | 13 +- include/linux/leds-tca6507.h | 21 - include/linux/platform_data/leds-pca963x.h | 35 -- 61 files changed, 1791 insertions(+), 1104 deletions(-) create mode 100644 Documentation/devicetree/bindings/leds/leds-lp50xx.yaml delete mode 100644 Documentation/devicetree/bindings/leds/tca6507.txt create mode 100644 Documentation/devicetree/bindings/leds/ti,tca6507.yaml create mode 100644 drivers/leds/TODO create mode 100644 drivers/leds/leds-acer-a500.c create mode 100644 drivers/leds/leds-lp50xx.c delete mode 100644 include/linux/leds-tca6507.h delete mode 100644 include/linux/platform_data/leds-pca963x.h Reproducer flagged being flaky revisions tested: 19, total time: 4h46m51.041075779s (build: 1h58m55.979021365s, test: 2h45m3.34623808s) first bad commit: 7fafb54c7d390e9b273a1d7d377e38d9c408046e Merge tag 'leds-5.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/pavel/linux-leds recipients (to): ["torvalds@linux-foundation.org"] recipients (cc): [] crash: kernel panic: panic_on_warn set ffff88809b9c0580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff88809b9c0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ================================================================== Disabling lock debugging due to kernel taint Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 21 Comm: kworker/u4:1 Tainted: G B 5.9.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: gid-cache-wq netdevice_event_work_handler Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x9a/0xcc lib/dump_stack.c:118 panic+0x2bb/0x554 kernel/panic.c:231 end_report+0x58/0x5e mm/kasan/report.c:106 __kasan_report mm/kasan/report.c:552 [inline] kasan_report.cold+0xd/0x37 mm/kasan/report.c:562 dev_put include/linux/netdevice.h:3891 [inline] netdevice_event_work_handler+0x139/0x1b0 drivers/infiniband/core/roce_gid_mgmt.c:630 process_one_work+0x75b/0x1230 kernel/workqueue.c:2269 worker_thread+0x598/0xf80 kernel/workqueue.c:2415 kthread+0x373/0x450 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296 Kernel Offset: disabled Rebooting in 86400 seconds..