ci starts bisection 2022-12-22 14:31:05.404332207 +0000 UTC m=+18387.301029079
bisecting fixing commit since 6a0a17e6c6d1091ada18d43afd87fb26a82a9823
building syzkaller on a371c43c33b6f901421f93b655442363c072d251
ensuring issue is reproducible on original commit 6a0a17e6c6d1091ada18d43afd87fb26a82a9823

testing commit 6a0a17e6c6d1091ada18d43afd87fb26a82a9823 gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: a6766883c29ea4382153dc39d14d144d51f69c0b74e207758c61364fe0bd80a9
all runs: crashed: INFO: task hung in hci_dev_do_open
testing current HEAD 9d2f6060fe4c3b49d0cdc1dce1c99296f33379c8
testing commit 9d2f6060fe4c3b49d0cdc1dce1c99296f33379c8 gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 0a510e06f88e8b20e843ffb2d2f48011f4d342c532d61aa24a7c8d53655c462c
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
# git bisect start 9d2f6060fe4c3b49d0cdc1dce1c99296f33379c8 6a0a17e6c6d1091ada18d43afd87fb26a82a9823
Bisecting: 23466 revisions left to test after this (roughly 15 steps)
[7171a8da00035e7913c3013ca5fb5beb5b8b22f0] Merge tag 'arm-dt-6.1' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc

testing commit 7171a8da00035e7913c3013ca5fb5beb5b8b22f0 gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: b73c70ca03af663e9d092e5f2bb750b16d9b9c1ec0b1fc55c28b209a8005c34b
run #0: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #1: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #2: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #3: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #4: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
# git bisect good 7171a8da00035e7913c3013ca5fb5beb5b8b22f0
Bisecting: 11710 revisions left to test after this (roughly 14 steps)
[8702f2c611bf124c48b21b5c57bfc156cd11f4ca] Merge tag 'mm-nonmm-stable-2022-12-12' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

testing commit 8702f2c611bf124c48b21b5c57bfc156cd11f4ca gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: e5f3f5cb2799cc907148571a543ae8a301382770fe7907b97039da0f1009ee39
run #0: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #1: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
reproducer seems to be flaky
# git bisect good 8702f2c611bf124c48b21b5c57bfc156cd11f4ca
Bisecting: 6952 revisions left to test after this (roughly 13 steps)
[1ca06f1c1acecbe02124f14a37cce347b8c1a90c] Merge tag 'xtensa-20221213' of https://github.com/jcmvbkbc/linux-xtensa

testing commit 1ca06f1c1acecbe02124f14a37cce347b8c1a90c gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: a693935eb5b1f427fae3ac89f68e323e5a28aff4a2bec42b3e618a762a52f5c8
run #0: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #1: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #2: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #3: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #4: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #5: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #6: OK
run #7: OK
run #8: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect good 1ca06f1c1acecbe02124f14a37cce347b8c1a90c
Bisecting: 3456 revisions left to test after this (roughly 12 steps)
[eb67d239f3aa1711afb0a42eab50459d9f3d672e] Merge tag 'riscv-for-linus-6.2-mw1' of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux

testing commit eb67d239f3aa1711afb0a42eab50459d9f3d672e gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 375e57b50d389a13e4c63f222ed6b4b7a0ac05cb7bf193cbce29c282868a09db
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad eb67d239f3aa1711afb0a42eab50459d9f3d672e
Bisecting: 1747 revisions left to test after this (roughly 11 steps)
[5955a948ac3d4e78857726d5e8d4bffb3fc71d4f] Merge branch 'bridge-mcast-preparations-for-evpn-extensions'

testing commit 5955a948ac3d4e78857726d5e8d4bffb3fc71d4f gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 806e767c91c4829eea990fa50c49a684cd8f6425e989ba11f76815ee03756cff
run #0: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #1: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #2: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #3: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #4: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect good 5955a948ac3d4e78857726d5e8d4bffb3fc71d4f
Bisecting: 826 revisions left to test after this (roughly 10 steps)
[aa5ad10f6cca6d42f3fef6cb862e03b220ea19a6] Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

testing commit aa5ad10f6cca6d42f3fef6cb862e03b220ea19a6 gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 56efb068a3fc0970fb6b833c8b3ede30572883076a838bd4acb96b526ce70301
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad aa5ad10f6cca6d42f3fef6cb862e03b220ea19a6
Bisecting: 456 revisions left to test after this (roughly 9 steps)
[b11919e1bb7f6f6273f5a33947b8496da2769eb8] Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

testing commit b11919e1bb7f6f6273f5a33947b8496da2769eb8 gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 3c35625339d0d73911bfa64b1437705a373c5f3d3cd7ea65ecd0a39b10a65432
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad b11919e1bb7f6f6273f5a33947b8496da2769eb8
Bisecting: 268 revisions left to test after this (roughly 8 steps)
[b2b509fb5a1e6af1e630a755b32c4658099df70b] Merge tag 'linux-can-next-for-6.2-20221212' of git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can-next

testing commit b2b509fb5a1e6af1e630a755b32c4658099df70b gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: ffd1f68fb3c04b03764cdcc93c8ff207c578a1fd3981800e7597375b71cb2c1a
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe
run #1: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM
run #2: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM
run #3: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe
run #4: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe
run #5: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #6: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #7: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #8: OK
run #9: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #10: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #11: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #18: OK
run #19: OK
# git bisect good b2b509fb5a1e6af1e630a755b32c4658099df70b
Bisecting: 134 revisions left to test after this (roughly 7 steps)
[15eb1621762134bd3a0f81020359b0c7745d1080] dt-bindings: net: Convert Socionext NetSec Ethernet to DT schema

testing commit 15eb1621762134bd3a0f81020359b0c7745d1080 gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: d92c8545aef51171971ae72c241407407ec0837bc9a74defb23299cca914d567
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM
run #1: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe
run #2: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #3: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #4: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #5: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect good 15eb1621762134bd3a0f81020359b0c7745d1080
Bisecting: 67 revisions left to test after this (roughly 6 steps)
[4bf24ad09bc0b05e97fb48b962b2c9246fc76727] net: dsa: mv88e6xxx: read FID when handling ATU violations

testing commit 4bf24ad09bc0b05e97fb48b962b2c9246fc76727 gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: ed66976d1fa870cc9db4c1fce11c8fb3551bf2851cefcf37ec919c54f57cf959
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe
run #1: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad 4bf24ad09bc0b05e97fb48b962b2c9246fc76727
Bisecting: 33 revisions left to test after this (roughly 5 steps)
[d4e9b8b802525f12375a858a6d3711f9ef4ce779] dt-bindings: bluetooth: broadcom: add BCM43430A0 & BCM43430A1

testing commit d4e9b8b802525f12375a858a6d3711f9ef4ce779 gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 75a074e196f4707dd74a64b41f5141bab563ec8b6df27cef69333e59fd7c8148
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad d4e9b8b802525f12375a858a6d3711f9ef4ce779
Bisecting: 16 revisions left to test after this (roughly 4 steps)
[bb1afb2955212d30177b122b13ae636a69abf883] Bluetooth: btusb: Add CONFIG_BT_HCIBTUSB_POLL_SYNC

testing commit bb1afb2955212d30177b122b13ae636a69abf883 gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 52b08d4c19d5cbf23022b56f7de64fb84e6bb8de1318c86ab8b2fccbc4c1904b
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad bb1afb2955212d30177b122b13ae636a69abf883
Bisecting: 7 revisions left to test after this (roughly 3 steps)
[5b355944b19011011dd3fd4187444c5ff1d76ad2] Bluetooth: btrtl: Add btrealtek data struct

testing commit 5b355944b19011011dd3fd4187444c5ff1d76ad2 gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 7494f7b72de5ae6c6954c2bb84e2a56cec338812efc47f037f3620355edc9064
all runs: OK
# git bisect bad 5b355944b19011011dd3fd4187444c5ff1d76ad2
Bisecting: 3 revisions left to test after this (roughly 2 steps)
[e411443c32554b4db157eb49f199d9cfebda2817] Bluetooth: hci_sync: Fix not setting static address

testing commit e411443c32554b4db157eb49f199d9cfebda2817 gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 09a94b382507051dc733445746068c11844d3389825099620bff9500691b9fab
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM
run #1: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #2: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #3: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #4: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #5: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #6: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #7: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect good e411443c32554b4db157eb49f199d9cfebda2817
Bisecting: 1 revision left to test after this (roughly 1 step)
[97dfaf073f5881c624856ef293be307b6166115c] Bluetooth: hci_sync: cancel cmd_timer if hci_open failed

testing commit 97dfaf073f5881c624856ef293be307b6166115c gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: fcdfd7ca66e53b63250cdb1ac72eb47db66fa59df8308c7cffacecb678fd4b10
run #0: failed: failed to run binary in VM: broken console: Permission denied (publickey)
run #1: failed: failed to run binary in VM: broken console: Permission denied (publickey)
run #2: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad 97dfaf073f5881c624856ef293be307b6166115c
Bisecting: 0 revisions left to test after this (roughly 0 steps)
[eeb1aafe97fa6da558157d2eb18cce25878b8656] Bluetooth: hci_sync: Fix not able to set force_static_address

testing commit eeb1aafe97fa6da558157d2eb18cce25878b8656 gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: a9eee89aa22b7c17232a7a9059216649d2e30c9f7f52f76d54ccf9011b4dac0e
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM
run #1: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #2: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #3: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #4: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #5: crashed: KASAN: use-after-free Read in hci_cmd_timeout
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect good eeb1aafe97fa6da558157d2eb18cce25878b8656
97dfaf073f5881c624856ef293be307b6166115c is the first bad commit
commit 97dfaf073f5881c624856ef293be307b6166115c
Author: Archie Pusaka <apusaka@chromium.org>
Date:   Wed Oct 5 15:09:47 2022 +0800

    Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
    
    If a command is already sent, we take care of freeing it, but we
    also need to cancel the timeout as well.
    
    Signed-off-by: Archie Pusaka <apusaka@chromium.org>
    Reviewed-by: Abhishek Pandit-Subedi <abhishekpandit@google.com>
    Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>

 net/bluetooth/hci_sync.c | 1 +
 1 file changed, 1 insertion(+)

culprit signature: fcdfd7ca66e53b63250cdb1ac72eb47db66fa59df8308c7cffacecb678fd4b10
parent  signature: a9eee89aa22b7c17232a7a9059216649d2e30c9f7f52f76d54ccf9011b4dac0e
Reproducer flagged being flaky
revisions tested: 18, total time: 5h39m30.999251587s (build: 2h13m43.709828391s, test: 3h23m33.163172884s)
first good commit: 97dfaf073f5881c624856ef293be307b6166115c Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
recipients (to): ["abhishekpandit@google.com" "apusaka@chromium.org" "luiz.von.dentz@intel.com"]
recipients (cc): []