bisecting cause commit starting from d1fdb6d8f6a4109a4263176c84b899076a5f8008
building syzkaller on 0159583c3bcfe4ece6b839712327cd955aabee66
testing commit d1fdb6d8f6a4109a4263176c84b899076a5f8008 with gcc (GCC) 8.1.0
all runs: crashed: KASAN: use-after-free Read in kfree_skb
testing release v5.1
testing commit e93c9c99a629c61837d5a7fc2120cd2b6c70dbdd with gcc (GCC) 8.1.0
all runs: crashed: general protection fault in skb_put
testing release v5.0
testing commit 1c163f4c7b3f621efff9b28a47abb36f7378d783 with gcc (GCC) 8.1.0
run #0: crashed: general protection fault in skb_put
run #1: crashed: general protection fault in skb_put
run #2: crashed: general protection fault in skb_put
run #3: crashed: general protection fault in skb_put
run #4: crashed: general protection fault in skb_put
run #5: crashed: general protection fault in skb_put
run #6: crashed: general protection fault in skb_put
run #7: crashed: general protection fault in skb_put
run #8: crashed: general protection fault in corrupted
run #9: crashed: general protection fault in skb_put
testing release v4.20
testing commit 8fe28cb58bcb235034b64cbbb7550a8a43fd88be with gcc (GCC) 8.1.0
all runs: crashed: general protection fault in skb_put
testing release v4.19
testing commit 84df9525b0c27f3ebc2ebb1864fa62a97fdedb7d with gcc (GCC) 8.1.0
all runs: crashed: general protection fault in skb_put
testing release v4.18
testing commit 94710cac0ef4ee177a63b5227664b38c95bbf703 with gcc (GCC) 8.1.0
run #0: crashed: general protection fault in skb_put
run #1: crashed: WARNING: ODEBUG bug in hci_uart_tty_close
run #2: crashed: general protection fault in skb_put
run #3: crashed: general protection fault in skb_put
run #4: crashed: general protection fault in skb_put
run #5: crashed: general protection fault in skb_put
run #6: crashed: general protection fault in skb_put
run #7: crashed: general protection fault in skb_put
run #8: crashed: general protection fault in skb_put
run #9: crashed: general protection fault in skb_put
testing release v4.17
testing commit 29dcea88779c856c7dc92040a0c01233263101d4 with gcc (GCC) 8.1.0
all runs: crashed: general protection fault in skb_put
testing release v4.16
testing commit 0adb32858b0bddf4ada5f364a84ed60b196dbcda with gcc (GCC) 8.1.0
run #0: crashed: general protection fault in skb_put
run #1: crashed: general protection fault in skb_put
run #2: crashed: WARNING: ODEBUG bug in hci_uart_tty_close
run #3: crashed: general protection fault in skb_put
run #4: crashed: general protection fault in skb_put
run #5: crashed: general protection fault in skb_put
run #6: crashed: general protection fault in skb_put
run #7: crashed: general protection fault in skb_put
run #8: crashed: general protection fault in skb_put
run #9: crashed: general protection fault in skb_put
testing release v4.15
testing commit d8a5b80568a9cb66810e75b182018e9edb68e8ff with gcc (GCC) 8.1.0
all runs: crashed: general protection fault in skb_put
testing release v4.14
testing commit bebc6082da0a9f5d47a1ea2edc099bf671058bd4 with gcc (GCC) 8.1.0
all runs: crashed: general protection fault in skb_put
testing release v4.13
testing commit 569dbb88e80deb68974ef6fdd6a13edb9d686261 with gcc (GCC) 8.1.0
all runs: crashed: general protection fault in skb_put
testing release v4.12
testing commit 6f7da290413ba713f0cdd9ff1a2a9bb129ef4f6c with gcc (GCC) 8.1.0
all runs: OK
# git bisect start v4.13 v4.12
Bisecting: 7028 revisions left to test after this (roughly 13 steps)
[ac7b75966c9c86426b55fe1c50ae148aa4571075] Merge tag 'pinctrl-v4.13-1' of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl
testing commit ac7b75966c9c86426b55fe1c50ae148aa4571075 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good ac7b75966c9c86426b55fe1c50ae148aa4571075
Bisecting: 3520 revisions left to test after this (roughly 12 steps)
[9c284c41c0886f09e75c323a16278b6d353b0b4a] mmc: tmio-mmc: fix bad pointer math
testing commit 9c284c41c0886f09e75c323a16278b6d353b0b4a with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 9c284c41c0886f09e75c323a16278b6d353b0b4a
Bisecting: 1754 revisions left to test after this (roughly 11 steps)
[505d5c11192960a3f0639d1d9e05dffeddd4e874] Merge tag 'nfs-for-4.13-2' of git://git.linux-nfs.org/projects/anna/linux-nfs
testing commit 505d5c11192960a3f0639d1d9e05dffeddd4e874 with gcc (GCC) 8.1.0
all runs: crashed: general protection fault in skb_put
# git bisect bad 505d5c11192960a3f0639d1d9e05dffeddd4e874
Bisecting: 909 revisions left to test after this (roughly 10 steps)
[62403005975c678ba7594a36670ae3bf0273d7c4] Merge tag 'nfsd-4.13' of git://linux-nfs.org/~bfields/linux
testing commit 62403005975c678ba7594a36670ae3bf0273d7c4 with gcc (GCC) 8.1.0
all runs: crashed: general protection fault in skb_put
# git bisect bad 62403005975c678ba7594a36670ae3bf0273d7c4
Bisecting: 430 revisions left to test after this (roughly 9 steps)
[38f7d2da4e39d454f2cb3e7c1ae35afde3d61123] Merge tag 'pwm/for-4.13-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/thierry.reding/linux-pwm
testing commit 38f7d2da4e39d454f2cb3e7c1ae35afde3d61123 with gcc (GCC) 8.1.0
run #0: crashed: WARNING: ODEBUG bug in netdev_freemem
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
# git bisect bad 38f7d2da4e39d454f2cb3e7c1ae35afde3d61123
Bisecting: 228 revisions left to test after this (roughly 8 steps)
[6b1c776d3efbda31085b6a9f3bc7f774511fafd9] Merge branch 'overlayfs-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/vfs
testing commit 6b1c776d3efbda31085b6a9f3bc7f774511fafd9 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 6b1c776d3efbda31085b6a9f3bc7f774511fafd9
Bisecting: 113 revisions left to test after this (roughly 7 steps)
[235b84fc862ae2637dc0dabada18d97f1bfc18e1] Merge branch 'i2c/for-4.13' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux
testing commit 235b84fc862ae2637dc0dabada18d97f1bfc18e1 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 235b84fc862ae2637dc0dabada18d97f1bfc18e1
Bisecting: 62 revisions left to test after this (roughly 6 steps)
[266530b34cb679188d5b2bd6e580b8105f4cb593] drm: Add missing field copy in compat_drm_version
testing commit 266530b34cb679188d5b2bd6e580b8105f4cb593 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 266530b34cb679188d5b2bd6e580b8105f4cb593
Bisecting: 34 revisions left to test after this (roughly 5 steps)
[caa164e37374609056c4d25255a6c7bef7a7f43b] Merge tag 'drm-intel-next-fixes-2017-07-11' of git://anongit.freedesktop.org/git/drm-intel into drm-next
testing commit caa164e37374609056c4d25255a6c7bef7a7f43b with gcc (GCC) 7.3.0
all runs: OK
# git bisect good caa164e37374609056c4d25255a6c7bef7a7f43b
Bisecting: 17 revisions left to test after this (roughly 4 steps)
[5ec8c48a6235175f7ff59ed1acbe91d4d0398026] Merge branch 'for-4.13/drivers' into for-next
testing commit 5ec8c48a6235175f7ff59ed1acbe91d4d0398026 with gcc (GCC) 7.3.0
run #0: crashed: unregister_netdevice: waiting for DEV to become free
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
# git bisect bad 5ec8c48a6235175f7ff59ed1acbe91d4d0398026
Bisecting: 8 revisions left to test after this (roughly 3 steps)
[fd7b2be8cbcf6cd6d9c9e843ffff36fb91388e51] pwm: meson: Improve PWM calculation precision
testing commit fd7b2be8cbcf6cd6d9c9e843ffff36fb91388e51 with gcc (GCC) 7.3.0
all runs: OK
# git bisect good fd7b2be8cbcf6cd6d9c9e843ffff36fb91388e51
Bisecting: 5 revisions left to test after this (roughly 2 steps)
[8517bb1f19679bf2bf6c29a98b7a4f3a78629554] dt-bindings: pwm: meson: Add compatible for gxbb ao PWMs
testing commit 8517bb1f19679bf2bf6c29a98b7a4f3a78629554 with gcc (GCC) 7.3.0
all runs: OK
# git bisect good 8517bb1f19679bf2bf6c29a98b7a4f3a78629554
Bisecting: 2 revisions left to test after this (roughly 2 steps)
[d007a00b566b9062a2a91d5ea391bd13fb44c606] Merge branch 'for-4.13/core' into for-next
testing commit d007a00b566b9062a2a91d5ea391bd13fb44c606 with gcc (GCC) 7.3.0
all runs: OK
# git bisect good d007a00b566b9062a2a91d5ea391bd13fb44c606
Bisecting: 1 revision left to test after this (roughly 1 step)
[e47866a177cf0baba1d714fa93cb762f25bd6cef] pwm: cros-ec: Fix transposed param settings
testing commit e47866a177cf0baba1d714fa93cb762f25bd6cef with gcc (GCC) 7.3.0
all runs: OK
# git bisect good e47866a177cf0baba1d714fa93cb762f25bd6cef
Bisecting: 0 revisions left to test after this (roughly 0 steps)
[72f2ebbdf432fa617e70bc3b3219ce1166a4e09d] Merge branch 'for-4.13/dt' into for-next
testing commit 72f2ebbdf432fa617e70bc3b3219ce1166a4e09d with gcc (GCC) 7.3.0
all runs: OK
# git bisect good 72f2ebbdf432fa617e70bc3b3219ce1166a4e09d
5ec8c48a6235175f7ff59ed1acbe91d4d0398026 is the first bad commit
revisions tested: 27, total time: 6h26m19.598235848s (build: 2h14m52.23690202s, test: 4h4m27.543658613s)
first bad commit: 5ec8c48a6235175f7ff59ed1acbe91d4d0398026 Merge branch 'for-4.13/drivers' into for-next
cc: ["thierry.reding@gmail.com"]
crash: unregister_netdevice: waiting for DEV to become free
Bluetooth: hci3 command 0x1001 tx timeout
Bluetooth: hci1 sending frame failed (-49)
Bluetooth: hci2 command 0x1001 tx timeout
Bluetooth: hci3 sending frame failed (-49)
Bluetooth: hci2 sending frame failed (-49)
unregister_netdevice: waiting for veth0_to_bond to become free. Usage count = 1
Bluetooth: hci2 command 0x1009 tx timeout
Bluetooth: hci3 command 0x1009 tx timeout
Bluetooth: hci1 command 0x1009 tx timeout
Bluetooth: hci0 command 0x1009 tx timeout
Bluetooth: hci4 command 0x1009 tx timeout
Bluetooth: hci5 command 0x1009 tx timeout
Bluetooth: hci1 command 0x1003 tx timeout
Bluetooth: hci3 command 0x1003 tx timeout
Bluetooth: hci3 sending frame failed (-49)
Bluetooth: hci1 sending frame failed (-49)
Bluetooth: hci4 command 0x1003 tx timeout
Bluetooth: hci0 command 0x1003 tx timeout
Bluetooth: hci4 sending frame failed (-49)
Bluetooth: hci5 command 0x1003 tx timeout
Bluetooth: hci0 sending frame failed (-49)
Bluetooth: hci2 command 0x1003 tx timeout
Bluetooth: hci5 sending frame failed (-49)
Bluetooth: hci2 sending frame failed (-49)
Bluetooth: hci1 command 0x1001 tx timeout
Bluetooth: hci2 command 0x1001 tx timeout
Bluetooth: hci5 command 0x1001 tx timeout
Bluetooth: hci0 command 0x1001 tx timeout
Bluetooth: hci4 command 0x1001 tx timeout
Bluetooth: hci2 sending frame failed (-49)
Bluetooth: hci5 sending frame failed (-49)
Bluetooth: hci0 sending frame failed (-49)
Bluetooth: hci4 sending frame failed (-49)
Bluetooth: hci3 command 0x1001 tx timeout
Bluetooth: hci1 sending frame failed (-49)
Bluetooth: hci3 sending frame failed (-49)