bisecting cause commit starting from a6ed68d6468bd5a3da78a103344ded1435fed57a building syzkaller on 46869e3ee2274fbf353cb2c7d6cf36ed19e52b45 testing commit a6ed68d6468bd5a3da78a103344ded1435fed57a with gcc (GCC) 8.1.0 kernel signature: c9b84825e5cb5d60dea7df5010248b2382bcd399 all runs: crashed: WARNING in generic_make_request_checks testing release v5.4 testing commit 219d54332a09e8d8741c1e1982f5eae56099de85 with gcc (GCC) 8.1.0 kernel signature: af2e446998d4cb394944cb137a3b7963dee411e3 all runs: crashed: WARNING in generic_make_request_checks testing release v5.3 testing commit 4d856f72c10ecb060868ed10ff1b1453943fc6c8 with gcc (GCC) 8.1.0 kernel signature: 535081f74b404144e03834da5e107d89a7cbbbd4 all runs: crashed: WARNING in generic_make_request_checks testing release v5.2 testing commit 0ecfebd2b52404ae0c54a878c872bb93363ada36 with gcc (GCC) 8.1.0 kernel signature: 70ad2bac47aeec6720393ec711103f70ae7c4b7d all runs: crashed: WARNING in generic_make_request_checks testing release v5.1 testing commit e93c9c99a629c61837d5a7fc2120cd2b6c70dbdd with gcc (GCC) 8.1.0 kernel signature: 8a650edb8ca3fb014931bb8ba50de4d602d40b1d all runs: crashed: WARNING in generic_make_request_checks testing release v5.0 testing commit 1c163f4c7b3f621efff9b28a47abb36f7378d783 with gcc (GCC) 8.1.0 kernel signature: f63528a4b5bdb35b5407224e3516c800c9245e9b all runs: crashed: WARNING in generic_make_request_checks testing release v4.20 testing commit 8fe28cb58bcb235034b64cbbb7550a8a43fd88be with gcc (GCC) 8.1.0 kernel signature: f717c8a63291d7992ecee3d4c84c42ab6e68c03d all runs: crashed: WARNING in generic_make_request_checks testing release v4.19 testing commit 84df9525b0c27f3ebc2ebb1864fa62a97fdedb7d with gcc (GCC) 8.1.0 kernel signature: 94b16185b79b6c4561a3fabfad5bd70e4f95e021 all runs: crashed: WARNING in generic_make_request_checks testing release v4.18 testing commit 94710cac0ef4ee177a63b5227664b38c95bbf703 with gcc (GCC) 8.1.0 kernel signature: b73aa5eda11c9c9bd6b5c5c3f04b661e6778aa88 all runs: crashed: WARNING in generic_make_request_checks testing release v4.17 testing commit 29dcea88779c856c7dc92040a0c01233263101d4 with gcc (GCC) 8.1.0 kernel signature: 95a26d999689d1a16ebcf966a0620454780053a0 all runs: OK # git bisect start 94710cac0ef4ee177a63b5227664b38c95bbf703 29dcea88779c856c7dc92040a0c01233263101d4 Bisecting: 7032 revisions left to test after this (roughly 13 steps) [3036bc45364f98515a2c446d7fac2c34dcfbeff4] Merge tag 'media/v4.18-2' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media testing commit 3036bc45364f98515a2c446d7fac2c34dcfbeff4 with gcc (GCC) 8.1.0 kernel signature: f9a036f929b2b93b180f2d43a3c383bb4b853ab2 run #0: OK run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: boot failed: KASAN: use-after-free Write in call_usermodehelper_exec_work run #9: boot failed: KASAN: use-after-free Write in call_usermodehelper_exec_work # git bisect good 3036bc45364f98515a2c446d7fac2c34dcfbeff4 Bisecting: 3348 revisions left to test after this (roughly 12 steps) [721afaa2aeb860067decdddadc84ed16f42f2048] Merge tag 'armsoc-dt' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc testing commit 721afaa2aeb860067decdddadc84ed16f42f2048 with gcc (GCC) 8.1.0 kernel signature: c3a9e8250fa628c24a40c22c79e6a6900c2d2b5c all runs: OK # git bisect good 721afaa2aeb860067decdddadc84ed16f42f2048 Bisecting: 1674 revisions left to test after this (roughly 11 steps) [7b72717a20bba8bdd01b14c0460be7d15061cd6b] iw_cxgb4: correctly enforce the max reg_mr depth testing commit 7b72717a20bba8bdd01b14c0460be7d15061cd6b with gcc (GCC) 8.1.0 kernel signature: ef0cb947e05b27789740b1688cc3d8633a0f7a8e all runs: OK # git bisect good 7b72717a20bba8bdd01b14c0460be7d15061cd6b Bisecting: 837 revisions left to test after this (roughly 10 steps) [47f7dc4b845a9fe60c53b84b8c88cf14efd0de7f] Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm testing commit 47f7dc4b845a9fe60c53b84b8c88cf14efd0de7f with gcc (GCC) 8.1.0 kernel signature: f430474b67016042e6fcd38bb8da3a9410ba73a4 all runs: OK # git bisect good 47f7dc4b845a9fe60c53b84b8c88cf14efd0de7f Bisecting: 414 revisions left to test after this (roughly 9 steps) [0723090656a03940c5ea536342f109e34b8d1257] Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net testing commit 0723090656a03940c5ea536342f109e34b8d1257 with gcc (GCC) 8.1.0 kernel signature: c30cab3fbc7f53b990e356f3820a7e8e83f04310 all runs: OK # git bisect good 0723090656a03940c5ea536342f109e34b8d1257 Bisecting: 206 revisions left to test after this (roughly 8 steps) [f67077deb4febf51cc06907fbdfd57a4869f31a2] Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net testing commit f67077deb4febf51cc06907fbdfd57a4869f31a2 with gcc (GCC) 8.1.0 kernel signature: 35ca9773b953ec7d943e65e8a633e9ca6e24d727 all runs: OK # git bisect good f67077deb4febf51cc06907fbdfd57a4869f31a2 Bisecting: 103 revisions left to test after this (roughly 7 steps) [f6229c395874a37ea72137337242055dcaf30112] Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma testing commit f6229c395874a37ea72137337242055dcaf30112 with gcc (GCC) 8.1.0 kernel signature: 7a06e7dae80516dbe545bb3a3ee5642ca44d8bd0 run #0: crashed: WARNING in mark_buffer_dirty run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad f6229c395874a37ea72137337242055dcaf30112 Bisecting: 60 revisions left to test after this (roughly 6 steps) [a3f94cb99a854fa381fe7fadd97c4f61633717a5] Squashfs: Compute expected length from inode size rather than block length testing commit a3f94cb99a854fa381fe7fadd97c4f61633717a5 with gcc (GCC) 8.1.0 kernel signature: 7879557d83edbbd14adb75b79d900fc60e06e51c all runs: OK # git bisect good a3f94cb99a854fa381fe7fadd97c4f61633717a5 Bisecting: 31 revisions left to test after this (roughly 5 steps) [98d7e1009832da359157fb0917569b43550e7da9] Merge branch 'akpm' (patches from Andrew) testing commit 98d7e1009832da359157fb0917569b43550e7da9 with gcc (GCC) 8.1.0 kernel signature: b65a551d24c8d334c0002593bf010dd867d9ce3e all runs: OK # git bisect good 98d7e1009832da359157fb0917569b43550e7da9 Bisecting: 16 revisions left to test after this (roughly 4 steps) [0585df468e8f4481b78256a2bf09449290bfcbf3] Merge tag 'media/v4.18-3' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media testing commit 0585df468e8f4481b78256a2bf09449290bfcbf3 with gcc (GCC) 8.1.0 kernel signature: 8e8d602963860ece23a84503c6718db5ac1aa6c5 all runs: OK # git bisect good 0585df468e8f4481b78256a2bf09449290bfcbf3 Bisecting: 7 revisions left to test after this (roughly 3 steps) [7827fc7d24043522726c58612d2c7f39843721cf] Merge tag 'drm-fixes-2018-08-03' of git://anongit.freedesktop.org/drm/drm testing commit 7827fc7d24043522726c58612d2c7f39843721cf with gcc (GCC) 8.1.0 kernel signature: e3b0a6ba5c73d4f78512a1f52326f5572df69e40 all runs: OK # git bisect good 7827fc7d24043522726c58612d2c7f39843721cf Bisecting: 3 revisions left to test after this (roughly 2 steps) [310810ae19480f9fad76b1260eced29356506bac] Merge tag 'nfs-for-4.18-3' of git://git.linux-nfs.org/projects/trondmy/linux-nfs testing commit 310810ae19480f9fad76b1260eced29356506bac with gcc (GCC) 8.1.0 kernel signature: bcf4d07148120e3b08c972df7cde0cf36837bc9f all runs: OK # git bisect good 310810ae19480f9fad76b1260eced29356506bac Bisecting: 1 revision left to test after this (roughly 1 step) [71abe04269ae0b98928d5905bf2748d3a39c6e93] Merge tag 'for-linus-20180803' of git://git.kernel.dk/linux-block testing commit 71abe04269ae0b98928d5905bf2748d3a39c6e93 with gcc (GCC) 8.1.0 kernel signature: ca031a0ce7b6a25bc11a4633858a1216d9df5faf all runs: OK # git bisect good 71abe04269ae0b98928d5905bf2748d3a39c6e93 Bisecting: 0 revisions left to test after this (roughly 0 steps) [addb8a6559f0f8b5a37582b7ca698358445a55bf] RDMA/uverbs: Expand primary and alt AV port checks testing commit addb8a6559f0f8b5a37582b7ca698358445a55bf with gcc (GCC) 8.1.0 kernel signature: 1af75a66b4c7f37a21a39a6f9ee6b125c61ee94e all runs: OK # git bisect good addb8a6559f0f8b5a37582b7ca698358445a55bf f6229c395874a37ea72137337242055dcaf30112 is the first bad commit commit f6229c395874a37ea72137337242055dcaf30112 Merge: 71abe04269ae addb8a6559f0 Author: Linus Torvalds Date: Fri Aug 3 10:49:47 2018 -0700 Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma Pull rdma fix from Jason Gunthorpe: "One bug for missing user input validation: refuse invalid port numbers in the modify_qp system call" * tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma: RDMA/uverbs: Expand primary and alt AV port checks drivers/infiniband/core/uverbs_cmd.c | 59 +++++++++++++++++++++++++++++++++--- 1 file changed, 54 insertions(+), 5 deletions(-) revisions tested: 24, total time: 5h16m59.042553043s (build: 2h13m35.407281137s, test: 3h0m59.686600568s) first bad commit: f6229c395874a37ea72137337242055dcaf30112 Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma cc: ["torvalds@linux-foundation.org"] crash: WARNING in mark_buffer_dirty print_req_error: I/O error, dev loop0, sector 40 print_req_error: I/O error, dev loop0, sector 48 print_req_error: I/O error, dev loop0, sector 56 print_req_error: I/O error, dev loop0, sector 64 print_req_error: I/O error, dev loop0, sector 72 WARNING: CPU: 1 PID: 14655 at fs/buffer.c:1079 mark_buffer_dirty+0x319/0x470 fs/buffer.c:1109 Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 14655 Comm: syz-executor.1 Not tainted 4.18.0-rc7-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x109/0x15a lib/dump_stack.c:113 panic+0x1c6/0x36b kernel/panic.c:184 __warn.cold.8+0x120/0x168 kernel/panic.c:536 report_bug+0x1a4/0x200 lib/bug.c:186 fixup_bug arch/x86/kernel/traps.c:178 [inline] do_error_trap+0x200/0x350 arch/x86/kernel/traps.c:296 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:316 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:992 RIP: 0010:mark_buffer_dirty+0x319/0x470 fs/buffer.c:1079 Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 07 01 00 00 49 8b 3c 24 be 04 00 00 00 e8 30 f1 fd ff 5b 41 5c 41 5d 41 5e 5d c3 <0f> 0b e9 14 fd ff ff 0f 0b e9 22 fd ff ff 0f 0b e9 f3 fd ff ff e8 RSP: 0018:ffff880083347488 EFLAGS: 00010246 RAX: 000000000000092c RBX: ffff880097bc6348 RCX: 0000000000000001 RDX: 1ffff10012f78c69 RSI: 0000000000000000 RDI: ffff880097bc6348 RBP: ffff8800833474a8 R08: 0000000000001000 R09: ffffea00024ca580 R10: dffffc0000000000 R11: ffff880093297000 R12: dffffc0000000000 R13: 0000000000001000 R14: ffff880097bc6348 R15: 0000000000000000 __block_commit_write.isra.36+0xdf/0x200 fs/buffer.c:2031 block_write_end+0x2e/0xf0 fs/buffer.c:2109 blkdev_write_end+0x14/0xf0 fs/block_dev.c:594 generic_perform_write+0x33d/0x480 mm/filemap.c:3150 __generic_file_write_iter+0x201/0x580 mm/filemap.c:3264 blkdev_write_iter+0x1c7/0x390 fs/block_dev.c:1914 call_write_iter include/linux/fs.h:1793 [inline] do_iter_readv_writev+0x49c/0x940 fs/read_write.c:680 do_iter_write+0x12b/0x520 fs/read_write.c:959 vfs_iter_write+0x5b/0xb0 fs/read_write.c:972 iter_file_splice_write+0x558/0xc30 fs/splice.c:750 do_splice_from fs/splice.c:852 [inline] direct_splice_actor+0x104/0x1c0 fs/splice.c:1019 splice_direct_to_actor+0x288/0x770 fs/splice.c:974 do_splice_direct+0x14c/0x270 fs/splice.c:1062 do_sendfile+0x477/0xd20 fs/read_write.c:1440 __do_compat_sys_sendfile fs/read_write.c:1522 [inline] __se_compat_sys_sendfile fs/read_write.c:1505 [inline] __ia32_compat_sys_sendfile+0x197/0x1e0 fs/read_write.c:1505 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline] do_fast_syscall_32+0x235/0xa5a arch/x86/entry/common.c:397 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 RIP: 0023:0xf7f14cb9 Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 RSP: 002b:00000000f7eef0cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000004 RDX: 0000000000000000 RSI: 0000000024000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 Kernel Offset: disabled Rebooting in 86400 seconds..