bisecting cause commit starting from e02d9c4c68dc0ca08ded9487720bba775c09669b building syzkaller on bc8bc756c272115ed92fad4f716b77f6fb995203 testing commit e02d9c4c68dc0ca08ded9487720bba775c09669b with gcc (GCC) 8.1.0 kernel signature: 88cea816816595a732604e1b8aa59b1c57559c04 all runs: crashed: KASAN: slab-out-of-bounds Read in bitmap_port_ext_cleanup testing release v5.4 testing commit 219d54332a09e8d8741c1e1982f5eae56099de85 with gcc (GCC) 8.1.0 kernel signature: 9fe8e0182ad649e8392053f3b4d6c3304d1960c9 all runs: crashed: KASAN: use-after-free Read in bitmap_port_ext_cleanup testing release v5.3 testing commit 4d856f72c10ecb060868ed10ff1b1453943fc6c8 with gcc (GCC) 8.1.0 kernel signature: 02c205e0701feeaa918e27518b652428443584d3 all runs: crashed: KASAN: use-after-free Read in bitmap_port_ext_cleanup testing release v5.2 testing commit 0ecfebd2b52404ae0c54a878c872bb93363ada36 with gcc (GCC) 8.1.0 kernel signature: adf32f11a72b59d28d3915164a85ec06faf81355 all runs: OK # git bisect start 4d856f72c10ecb060868ed10ff1b1453943fc6c8 0ecfebd2b52404ae0c54a878c872bb93363ada36 Bisecting: 7848 revisions left to test after this (roughly 13 steps) [43c95d3694cc448fdf50bd53b7ff3a5bb4655883] Merge tag 'pinctrl-v5.3-1' of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl testing commit 43c95d3694cc448fdf50bd53b7ff3a5bb4655883 with gcc (GCC) 8.1.0 kernel signature: 108c2dcd10fef538dd58d2fb05719b97501a0192 all runs: crashed: KASAN: use-after-free Read in bitmap_port_ext_cleanup # git bisect bad 43c95d3694cc448fdf50bd53b7ff3a5bb4655883 Bisecting: 4619 revisions left to test after this (roughly 12 steps) [8f6ccf6159aed1f04c6d179f61f6fb2691261e84] Merge tag 'clone3-v5.3' of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux testing commit 8f6ccf6159aed1f04c6d179f61f6fb2691261e84 with gcc (GCC) 8.1.0 kernel signature: 3861cddbecfe367013fc32232608e887168e01b7 all runs: OK # git bisect good 8f6ccf6159aed1f04c6d179f61f6fb2691261e84 Bisecting: 2306 revisions left to test after this (roughly 11 steps) [753c8d9b7d81206bb5d011b28abe829d364b028e] Merge branch 'x86-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip testing commit 753c8d9b7d81206bb5d011b28abe829d364b028e with gcc (GCC) 8.1.0 kernel signature: c88e74694aa9f1dcdbd3926afb526dc730bb160d run #0: crashed: general protection fault in send_hsr_supervision_frame run #1: crashed: general protection fault in send_hsr_supervision_frame run #2: crashed: general protection fault in send_hsr_supervision_frame run #3: crashed: general protection fault in batadv_iv_ogm_queue_add run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad 753c8d9b7d81206bb5d011b28abe829d364b028e Bisecting: 1156 revisions left to test after this (roughly 10 steps) [2f9b0d93a9d3ec64558537ab5d7cff820886afa4] net: ethernet: ti: cpsw: Fix suspend/resume break testing commit 2f9b0d93a9d3ec64558537ab5d7cff820886afa4 with gcc (GCC) 8.1.0 kernel signature: bf00ea45c3de896f98ff8662b664ff18a82fc5e2 run #0: crashed: general protection fault in batadv_iv_ogm_queue_add run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad 2f9b0d93a9d3ec64558537ab5d7cff820886afa4 Bisecting: 577 revisions left to test after this (roughly 9 steps) [d28d66e5a92de81199d21b696df707068361a4e7] net: ethernet: mediatek: fix mtk_eth_soc build errors & warnings testing commit d28d66e5a92de81199d21b696df707068361a4e7 with gcc (GCC) 8.1.0 kernel signature: 4f31bac14c102b5f13fc62a83a00a07aa476439f all runs: OK # git bisect good d28d66e5a92de81199d21b696df707068361a4e7 Bisecting: 288 revisions left to test after this (roughly 8 steps) [9126e75e39e14c357cfb2820abf0733bbc3cd8dc] net: ethernet: ti: cpsw_ethtool: simplify slave loops testing commit 9126e75e39e14c357cfb2820abf0733bbc3cd8dc with gcc (GCC) 8.1.0 kernel signature: cf218951749f49fcecae05a90162301a71ed23d4 all runs: OK # git bisect good 9126e75e39e14c357cfb2820abf0733bbc3cd8dc Bisecting: 144 revisions left to test after this (roughly 7 steps) [c82481f7ea21be8ec960a28aef07bf258f6820b7] netlink: Add field to skip in-kernel notifications testing commit c82481f7ea21be8ec960a28aef07bf258f6820b7 with gcc (GCC) 8.1.0 kernel signature: 87b50075cba9534b06bd4214b64acc0397dc57c6 all runs: OK # git bisect good c82481f7ea21be8ec960a28aef07bf258f6820b7 Bisecting: 76 revisions left to test after this (roughly 6 steps) [497ad9f5b2dc86b733761b9afa44ecfa2f17be65] page_pool: fix compile warning when CONFIG_PAGE_POOL is disabled testing commit 497ad9f5b2dc86b733761b9afa44ecfa2f17be65 with gcc (GCC) 8.1.0 kernel signature: 8a81718bea5acdda3dd47bbd0eaaf9b840b7009c all runs: OK # git bisect good 497ad9f5b2dc86b733761b9afa44ecfa2f17be65 Bisecting: 37 revisions left to test after this (roughly 5 steps) [32b88d3743573222c3ce0165727b6a4c4f7c245b] Merge branch 'bpf-libbpf-btf-defined-maps' testing commit 32b88d3743573222c3ce0165727b6a4c4f7c245b with gcc (GCC) 8.1.0 kernel signature: 8cd44a5b0a33175e2cb02012f4517b82eeed44b4 all runs: OK # git bisect good 32b88d3743573222c3ce0165727b6a4c4f7c245b Bisecting: 18 revisions left to test after this (roughly 4 steps) [438ac88009bcb10f9ced07fbb4b32d5377ee936b] net: fastopen: robustness and endianness fixes for SipHash testing commit 438ac88009bcb10f9ced07fbb4b32d5377ee936b with gcc (GCC) 8.1.0 kernel signature: 6a96a7325dbae9fe574b0c0dbf38506c66159fed all runs: OK # git bisect good 438ac88009bcb10f9ced07fbb4b32d5377ee936b Bisecting: 9 revisions left to test after this (roughly 3 steps) [c9acece064e3f0042c50162d3405759243225dd6] net: dsa: mv88e6xxx: introduce helpers for handling chip->reg_lock testing commit c9acece064e3f0042c50162d3405759243225dd6 with gcc (GCC) 8.1.0 kernel signature: 408745442ce222d055f324998fd8c73c1a5da96b all runs: OK # git bisect good c9acece064e3f0042c50162d3405759243225dd6 Bisecting: 4 revisions left to test after this (roughly 2 steps) [d64a1f574a2957b4bcb06452d36cc1c6bf16e9fc] ipv6: honor RT6_LOOKUP_F_DST_NOREF in rule lookup logic testing commit d64a1f574a2957b4bcb06452d36cc1c6bf16e9fc with gcc (GCC) 8.1.0 kernel signature: c2e34ae7b586fc1629c8db6c318b4180267b2ac3 all runs: OK # git bisect good d64a1f574a2957b4bcb06452d36cc1c6bf16e9fc Bisecting: 2 revisions left to test after this (roughly 1 step) [7d9e5f422150ed00de744e02a80734d74cc9704d] ipv6: convert major tx path to use RT6_LOOKUP_F_DST_NOREF testing commit 7d9e5f422150ed00de744e02a80734d74cc9704d with gcc (GCC) 8.1.0 kernel signature: 2cf454a7191e6fb51d475e3b4e1b16277f2ba1b9 all runs: OK # git bisect good 7d9e5f422150ed00de744e02a80734d74cc9704d Bisecting: 0 revisions left to test after this (roughly 1 step) [e54fbbdf5a2944f084b170cd2b7ffdfa00bf3990] hinic: implement the statistical interface of ethtool testing commit e54fbbdf5a2944f084b170cd2b7ffdfa00bf3990 with gcc (GCC) 8.1.0 kernel signature: 277b55ae355643c39f2dd8425950c120cfb2eadd all runs: OK # git bisect good e54fbbdf5a2944f084b170cd2b7ffdfa00bf3990 2f9b0d93a9d3ec64558537ab5d7cff820886afa4 is the first bad commit commit 2f9b0d93a9d3ec64558537ab5d7cff820886afa4 Author: Keerthy Date: Mon Jun 24 10:46:19 2019 +0530 net: ethernet: ti: cpsw: Fix suspend/resume break Commit bfe59032bd6127ee190edb30be9381a01765b958 ("net: ethernet: ti: cpsw: use cpsw as drv data")changes the driver data to struct cpsw_common *cpsw. This is done only in probe/remove but the suspend/resume functions are still left with struct net_device *ndev. Hence fix both suspend & resume also to fetch the updated driver data. Fixes: bfe59032bd6127ee1 ("net: ethernet: ti: cpsw: use cpsw as drv data") Signed-off-by: Keerthy Signed-off-by: David S. Miller drivers/net/ethernet/ti/cpsw.c | 30 +++++++++--------------------- 1 file changed, 9 insertions(+), 21 deletions(-) culprit signature: bf00ea45c3de896f98ff8662b664ff18a82fc5e2 parent signature: 277b55ae355643c39f2dd8425950c120cfb2eadd revisions tested: 18, total time: 4h51m51.107885048s (build: 1h55m39.658445606s, test: 2h53m2.26618887s) first bad commit: 2f9b0d93a9d3ec64558537ab5d7cff820886afa4 net: ethernet: ti: cpsw: Fix suspend/resume break cc: ["andrew@lunn.ch" "davem@davemloft.net" "grygorii.strashko@ti.com" "j-keerthy@ti.com" "linux-kernel@vger.kernel.org" "linux-omap@vger.kernel.org" "netdev@vger.kernel.org"] crash: general protection fault in batadv_iv_ogm_queue_add kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted 5.2.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet RIP: 0010:batadv_iv_ogm_queue_add+0x9b/0xe50 net/batman-adv/bat_iv_ogm.c:599 Code: 44 89 8d 64 ff ff ff c7 02 f1 f1 f1 f1 c7 42 04 04 f2 f2 f2 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4d d0 31 c9 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 a2 0b 00 00 RSP: 0018:ffff8880a98afab8 EFLAGS: 00010246 RAX: dffffc0000000000 RBX: ffff888094478f40 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: ffff8880a98afbd0 R08: ffff88808d0487c0 R09: 0000000000000001 R10: ffffed1015315f8f R11: 0000000000000003 R12: 0000000000000007 R13: ffff88808d0487e8 R14: ffff88808d0487c0 R15: 000000000000003c FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 0000000096a97000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: batadv_iv_ogm_schedule+0xb60/0xe90 net/batman-adv/bat_iv_ogm.c:807 batadv_iv_send_outstanding_bat_ogm_packet+0x4a2/0x790 net/batman-adv/bat_iv_ogm.c:1669 process_one_work+0x830/0x16a0 kernel/workqueue.c:2269 worker_thread+0x85/0xb60 kernel/workqueue.c:2415 kthread+0x324/0x3e0 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Modules linked in: ---[ end trace 5ff1347b8dee1867 ]--- RIP: 0010:batadv_iv_ogm_queue_add+0x9b/0xe50 net/batman-adv/bat_iv_ogm.c:599 Code: 44 89 8d 64 ff ff ff c7 02 f1 f1 f1 f1 c7 42 04 04 f2 f2 f2 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4d d0 31 c9 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 a2 0b 00 00 RSP: 0018:ffff8880a98afab8 EFLAGS: 00010246 RAX: dffffc0000000000 RBX: ffff888094478f40 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: ffff8880a98afbd0 R08: ffff88808d0487c0 R09: 0000000000000001 R10: ffffed1015315f8f R11: 0000000000000003 R12: 0000000000000007 R13: ffff88808d0487e8 R14: ffff88808d0487c0 R15: 000000000000003c FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 0000000096a97000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400