bisecting cause commit starting from 9455d25f4e3b3d009fa1b810862e5b06229530e4 building syzkaller on 1508f45368a309a3b1196a342b3d64ce7be4cc43 testing commit 9455d25f4e3b3d009fa1b810862e5b06229530e4 with gcc (GCC) 8.1.0 kernel signature: 7017b76818ed73f4f59b7450262315b630d144f0 all runs: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common testing release v5.4 testing commit 219d54332a09e8d8741c1e1982f5eae56099de85 with gcc (GCC) 8.1.0 kernel signature: b9e499b111c3dea26fc6a665c11ba83de552ec53 all runs: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common testing release v5.3 testing commit 4d856f72c10ecb060868ed10ff1b1453943fc6c8 with gcc (GCC) 8.1.0 kernel signature: a546412aea1a85729e9b818fd3896ced21b0cdbd all runs: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common testing release v5.2 testing commit 0ecfebd2b52404ae0c54a878c872bb93363ada36 with gcc (GCC) 8.1.0 kernel signature: 7fd1f519a86f54a50bb5040d7d1d40df56fbcc13 all runs: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common testing release v5.1 testing commit e93c9c99a629c61837d5a7fc2120cd2b6c70dbdd with gcc (GCC) 8.1.0 kernel signature: 1059a31a9f667ed252e9fb2e883382e8ba6d75f4 all runs: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common testing release v5.0 testing commit 1c163f4c7b3f621efff9b28a47abb36f7378d783 with gcc (GCC) 8.1.0 kernel signature: 149fcc2a875d0bb5d47fd758f2a123bd500d8d43 all runs: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common testing release v4.20 testing commit 8fe28cb58bcb235034b64cbbb7550a8a43fd88be with gcc (GCC) 8.1.0 kernel signature: 8fdb70bc938fd0c913266a543d1ef875bc66749a all runs: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common testing release v4.19 testing commit 84df9525b0c27f3ebc2ebb1864fa62a97fdedb7d with gcc (GCC) 8.1.0 kernel signature: c980e2a366e8be9eca2f06b70031e98e2942841e all runs: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common testing release v4.18 testing commit 94710cac0ef4ee177a63b5227664b38c95bbf703 with gcc (GCC) 8.1.0 kernel signature: 46ea7549d95dd41d29783cdfb8205c03e37ebfa7 all runs: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common testing release v4.17 testing commit 29dcea88779c856c7dc92040a0c01233263101d4 with gcc (GCC) 8.1.0 kernel signature: 8c9b550935b5258ecbdaa2a99f1a504379595aea run #0: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #1: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #2: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #3: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #4: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #5: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #6: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #7: crashed: INFO: task hung in tty_ldisc_hangup run #8: crashed: INFO: task hung in tty_ldisc_hangup run #9: crashed: INFO: task hung in tty_ldisc_hangup testing release v4.16 testing commit 0adb32858b0bddf4ada5f364a84ed60b196dbcda with gcc (GCC) 8.1.0 kernel signature: 40197bc4021b1f5888a3a0d22e0e62530b7efe80 run #0: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #1: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #2: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #3: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #4: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #5: crashed: INFO: task hung in tty_ldisc_hangup run #6: crashed: INFO: task hung in tty_ldisc_hangup run #7: crashed: INFO: task hung in tty_ldisc_hangup run #8: crashed: INFO: task hung in tty_ldisc_hangup run #9: crashed: INFO: task hung in tty_ldisc_hangup testing release v4.15 testing commit d8a5b80568a9cb66810e75b182018e9edb68e8ff with gcc (GCC) 8.1.0 kernel signature: fc805bb65868134ae2ca938d39c9819575608131 run #0: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #1: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #2: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #3: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #4: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #5: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #6: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #7: crashed: INFO: task hung in tty_ldisc_hangup run #8: crashed: INFO: task hung in tty_ldisc_hangup run #9: crashed: INFO: task hung in tty_ldisc_hangup testing release v4.14 testing commit bebc6082da0a9f5d47a1ea2edc099bf671058bd4 with gcc (GCC) 8.1.0 kernel signature: b5c5082168219b19ddb65230b8f74698c0a4b0a0 run #0: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #1: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #2: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #3: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #4: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #5: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #6: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #7: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #8: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #9: crashed: INFO: task hung in tty_ldisc_hangup testing release v4.13 testing commit 569dbb88e80deb68974ef6fdd6a13edb9d686261 with gcc (GCC) 8.1.0 kernel signature: c9782b855cacb408f5a9cb0204420155e18d1f42 run #0: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #1: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #2: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #3: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #4: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #5: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #6: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #7: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #8: crashed: INFO: task hung in tty_ldisc_hangup run #9: crashed: INFO: task hung in tty_ldisc_hangup testing release v4.12 testing commit 6f7da290413ba713f0cdd9ff1a2a9bb129ef4f6c with gcc (GCC) 8.1.0 kernel signature: db95b425de5f2a78dfec2b8ec9dcb8bc7660896b run #0: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #1: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #2: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #3: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #4: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #5: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #6: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #7: crashed: INFO: task hung in tty_ldisc_hangup run #8: crashed: INFO: task hung in tty_ldisc_hangup run #9: crashed: INFO: task hung in tty_ldisc_hangup testing release v4.11 testing commit a351e9b9fc24e982ec2f0e76379a49826036da12 with gcc (GCC) 7.3.0 kernel signature: c2b44915237b39c873245284447f7ccf8a1eb574 all runs: basic kernel testing failed: timed out testing release v4.10 testing commit c470abd4fde40ea6a0846a2beab642a578c0b8cd with gcc (GCC) 5.5.0 kernel signature: 783d46d26eab3813d29fafcfc23c2e11aab367b4 run #0: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #1: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #2: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #3: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #4: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #5: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #6: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #7: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #8: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #9: crashed: INFO: task hung in tty_ldisc_hangup testing release v4.9 testing commit 69973b830859bc6529a7a0468ba0d80ee5117826 with gcc (GCC) 5.5.0 kernel signature: 54f9cd046662cde50b46344664fc845f949b86e9 run #0: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #1: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #2: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #3: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #4: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #5: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #6: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #7: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #8: crashed: INFO: task hung in tty_ldisc_hangup run #9: crashed: INFO: task hung in tty_ldisc_hangup testing release v4.8 testing commit c8d2bc9bc39ebea8437fd974fdbc21847bb897a3 with gcc (GCC) 5.5.0 kernel signature: 53a8bff5fee70083760390bd2c6f05795aa9938e all runs: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common testing release v4.7 testing commit 523d939ef98fd712632d93a5a2b588e477a7565e with gcc (GCC) 5.5.0 kernel signature: 1a36e17be38135886e92d69b7a7c9103322005bd all runs: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common testing release v4.6 testing commit 2dcd0af568b0cf583645c8a317dd12e344b1c72a with gcc (GCC) 5.5.0 kernel signature: 2641551832d21b09debe1f30352e0e3d4eb89d0f run #0: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #1: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #2: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #3: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #4: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #5: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #6: crashed: KASAN: slab-out-of-bounds Read in n_tty_receive_buf_common run #7: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common run #8: crashed: KASAN: out-of-bounds Read in n_tty_receive_buf_common run #9: crashed: KASAN: use-after-free Read in n_tty_receive_buf_common testing release v4.5 testing commit b562e44f507e863c6792946e4e1b1449fbbac85d with gcc (GCC) 5.5.0 kernel signature: 8e8dbaf94c5af8af7e5bebac286e19d1f569e516 all runs: crashed: INFO: task hung in tty_ldisc_hangup testing release v4.4 testing commit afd2ff9b7e1b367172f18ba7f693dfb62bdcb2dc with gcc (GCC) 5.5.0 kernel signature: 6384422e4dcc175893c0fdfd180dd24bd7e5636f run #0: crashed: INFO: task hung in tty_ldisc_hangup run #1: crashed: INFO: task hung in tty_ldisc_hangup run #2: crashed: INFO: task hung in tty_ldisc_hangup run #3: crashed: INFO: task hung in tty_ldisc_hangup run #4: crashed: INFO: task hung in tty_ldisc_hangup run #5: crashed: INFO: task hung in flush_to_ldisc run #6: crashed: INFO: task hung in tty_ldisc_hangup run #7: crashed: INFO: task hung in tty_ldisc_hangup run #8: crashed: INFO: task hung in tty_ldisc_hangup run #9: crashed: INFO: task hung in tty_ldisc_hangup testing release v4.3 testing commit 6a13feb9c82803e2b815eca72fa7a9f5561d7861 with gcc (GCC) 5.5.0 kernel signature: 299f6f0bb3adc390c0661760f2f09d5ccf184e84 all runs: crashed: INFO: task hung in tty_ldisc_hangup testing release v4.2 testing commit 64291f7db5bd8150a74ad2036f1037e6a0428df2 with gcc (GCC) 5.5.0 kernel signature: 7e72d92198c93045f871cfc439918207c2711aa8 run #0: crashed: INFO: task hung in tty_ldisc_hangup run #1: crashed: INFO: task hung in corrupted run #2: crashed: INFO: task hung in tty_ldisc_hangup run #3: crashed: INFO: task hung in tty_ldisc_hangup run #4: crashed: INFO: task hung in tty_ldisc_hangup run #5: crashed: INFO: task hung in tty_ldisc_hangup run #6: crashed: INFO: task hung in tty_ldisc_hangup run #7: crashed: INFO: task hung in tty_ldisc_hangup run #8: crashed: INFO: task hung in tty_ldisc_hangup run #9: crashed: INFO: task hung in tty_ldisc_hangup testing release v4.1 testing commit b953c0d234bc72e8489d3bf51a276c5c4ec85345 with gcc (GCC) 5.5.0 kernel signature: f17c4d9e4270b24b602c90b334ad30c535b15cf3 run #0: crashed: WARNING in corrupted run #1: crashed: WARNING in n_tty_receive_buf_common run #2: crashed: WARNING in corrupted run #3: crashed: WARNING in corrupted run #4: crashed: WARNING in n_tty_receive_buf_common run #5: crashed: WARNING in n_tty_receive_buf_common run #6: crashed: WARNING in n_tty_receive_buf_common run #7: crashed: WARNING in corrupted run #8: crashed: no output from test machine run #9: crashed: no output from test machine revisions tested: 26, total time: 4h22m30.296959074s (build: 2h1m4.323311749s, test: 2h18m39.077097871s) the crash already happened on the oldest tested release commit msg: Linux 4.1 crash: no output from test machine