bisecting cause commit starting from af5136f95045b6c4bb8a53d2f288a905c3bd6f25
building syzkaller on 85c573157db1baae51178263fe3289c8329e6dc2
testing commit af5136f95045b6c4bb8a53d2f288a905c3bd6f25 with gcc (GCC) 8.1.0
run #0: crashed: kernel panic: corrupted stack end in corrupted
run #1: crashed: KASAN: use-after-free Read in class_equal
run #2: crashed: KASAN: use-after-free Read in class_equal
run #3: crashed: KASAN: slab-out-of-bounds Read in class_equal
run #4: crashed: KASAN: use-after-free Read in class_equal
run #5: crashed: KASAN: use-after-free Read in class_equal
run #6: crashed: KASAN: slab-out-of-bounds Read in class_equal
run #7: crashed: KASAN: use-after-free Read in class_equal
run #8: crashed: KASAN: slab-out-of-bounds Read in class_equal
run #9: crashed: no output from test machine
testing release v5.1
testing commit e93c9c99a629c61837d5a7fc2120cd2b6c70dbdd with gcc (GCC) 8.1.0
all runs: crashed: WARNING: ODEBUG bug in del_timer
testing release v5.0
testing commit 1c163f4c7b3f621efff9b28a47abb36f7378d783 with gcc (GCC) 8.1.0
all runs: crashed: WARNING in strp_done
testing release v4.20
testing commit 8fe28cb58bcb235034b64cbbb7550a8a43fd88be with gcc (GCC) 8.1.0
run #0: crashed: KASAN: slab-out-of-bounds Read in class_equal
run #1: crashed: KASAN: slab-out-of-bounds Read in class_equal
run #2: crashed: kernel panic: corrupted stack end in corrupted
run #3: crashed: kernel panic: corrupted stack end in corrupted
run #4: crashed: KASAN: use-after-free Read in class_equal
run #5: crashed: KASAN: slab-out-of-bounds Read in class_equal
run #6: crashed: WARNING in corrupted
run #7: crashed: kernel panic: corrupted stack end in corrupted
run #8: crashed: KASAN: use-after-free Read in class_equal
run #9: crashed: no output from test machine
testing release v4.19
testing commit 84df9525b0c27f3ebc2ebb1864fa62a97fdedb7d with gcc (GCC) 8.1.0
run #0: crashed: KASAN: use-after-free Read in psock_map_pop
run #1: crashed: KASAN: use-after-free Read in psock_map_pop
run #2: crashed: KASAN: use-after-free Read in psock_map_pop
run #3: crashed: KASAN: use-after-free Read in psock_map_pop
run #4: crashed: KASAN: use-after-free Read in psock_map_pop
run #5: crashed: KASAN: use-after-free Read in psock_map_pop
run #6: crashed: KASAN: use-after-free Read in psock_map_pop
run #7: OK
run #8: OK
run #9: OK
testing release v4.18
testing commit 94710cac0ef4ee177a63b5227664b38c95bbf703 with gcc (GCC) 8.1.0
run #0: crashed: KASAN: use-after-free Read in psock_map_pop
run #1: crashed: KASAN: use-after-free Read in psock_map_pop
run #2: crashed: KASAN: use-after-free Read in psock_map_pop
run #3: crashed: KASAN: use-after-free Read in psock_map_pop
run #4: crashed: KASAN: use-after-free Read in psock_map_pop
run #5: crashed: KASAN: use-after-free Read in psock_map_pop
run #6: crashed: KASAN: use-after-free Read in psock_map_pop
run #7: OK
run #8: OK
run #9: OK
testing release v4.17
testing commit 29dcea88779c856c7dc92040a0c01233263101d4 with gcc (GCC) 8.1.0
all runs: OK
# git bisect start v4.18 v4.17
Bisecting: 7032 revisions left to test after this (roughly 13 steps)
[3036bc45364f98515a2c446d7fac2c34dcfbeff4] Merge tag 'media/v4.18-2' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media
testing commit 3036bc45364f98515a2c446d7fac2c34dcfbeff4 with gcc (GCC) 8.1.0
run #0: OK
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: boot failed: KASAN: use-after-free Write in call_usermodehelper_exec_work
run #7: boot failed: KASAN: use-after-free Write in call_usermodehelper_exec_work
run #8: boot failed: KASAN: use-after-free Write in call_usermodehelper_exec_work
run #9: boot failed: KASAN: use-after-free Write in call_usermodehelper_exec_work
# git bisect good 3036bc45364f98515a2c446d7fac2c34dcfbeff4
Bisecting: 3348 revisions left to test after this (roughly 12 steps)
[721afaa2aeb860067decdddadc84ed16f42f2048] Merge tag 'armsoc-dt' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc
testing commit 721afaa2aeb860067decdddadc84ed16f42f2048 with gcc (GCC) 8.1.0
run #0: crashed: general protection fault in bpf_tcp_close
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
# git bisect bad 721afaa2aeb860067decdddadc84ed16f42f2048
Bisecting: 1639 revisions left to test after this (roughly 11 steps)
[eafdca4d7010a0e019aaaace3dd71b432a69b54c] Merge tag 'staging-4.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging
testing commit eafdca4d7010a0e019aaaace3dd71b432a69b54c with gcc (GCC) 8.1.0
run #0: OK
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: boot failed: KASAN: use-after-free Write in call_usermodehelper_exec_work
# git bisect good eafdca4d7010a0e019aaaace3dd71b432a69b54c
Bisecting: 813 revisions left to test after this (roughly 10 steps)
[883cad5ba8cc2d9b740b4ad0a8a91063c99c75a3] Merge tag 'mfd-next-4.18' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/mfd
testing commit 883cad5ba8cc2d9b740b4ad0a8a91063c99c75a3 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 883cad5ba8cc2d9b740b4ad0a8a91063c99c75a3
Bisecting: 407 revisions left to test after this (roughly 9 steps)
[efe5322843525cd8e6538a4b8ea561168e1e7c65] Merge tag 'qcom-arm64-for-4.18' of git://git.kernel.org/pub/scm/linux/kernel/git/agross/linux into next/dt
testing commit efe5322843525cd8e6538a4b8ea561168e1e7c65 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good efe5322843525cd8e6538a4b8ea561168e1e7c65
Bisecting: 241 revisions left to test after this (roughly 8 steps)
[958da6e3ff446fe558bdf0fd06fb2713539ebeef] Merge branch 'next/defconfig' into next/soc
testing commit 958da6e3ff446fe558bdf0fd06fb2713539ebeef with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 958da6e3ff446fe558bdf0fd06fb2713539ebeef
Bisecting: 118 revisions left to test after this (roughly 7 steps)
[b70c9d37f6b5e539798699ad4b48ed3fcd9ce282] Merge tag 'rproc-v4.18' of git://github.com/andersson/remoteproc
testing commit b70c9d37f6b5e539798699ad4b48ed3fcd9ce282 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good b70c9d37f6b5e539798699ad4b48ed3fcd9ce282
Bisecting: 59 revisions left to test after this (roughly 6 steps)
[21a9883f573e9142c64a39cfb35fbd1b7d46c579] arm64: dts: sprd: whale2: Add the rtc enable clock for watchdog
testing commit 21a9883f573e9142c64a39cfb35fbd1b7d46c579 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 21a9883f573e9142c64a39cfb35fbd1b7d46c579
Bisecting: 30 revisions left to test after this (roughly 5 steps)
[927c2fc2db19fe6022be7c6dc0e380cb5c56a878] ARM: dts: aspeed: Fix hwrng register address
testing commit 927c2fc2db19fe6022be7c6dc0e380cb5c56a878 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 927c2fc2db19fe6022be7c6dc0e380cb5c56a878
Bisecting: 17 revisions left to test after this (roughly 4 steps)
[16a7eec2fcd020c73cf0ca38bf774775167d22eb] watchdog: da9063: remove duplicated timeout_to_sel calls
testing commit 16a7eec2fcd020c73cf0ca38bf774775167d22eb with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 16a7eec2fcd020c73cf0ca38bf774775167d22eb
Bisecting: 8 revisions left to test after this (roughly 3 steps)
[4a2e84c6ed85434ce7843e4844b4d3263f7e233b] rpmsg: smd: do not use mananged resources for endpoints and channels
testing commit 4a2e84c6ed85434ce7843e4844b4d3263f7e233b with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 4a2e84c6ed85434ce7843e4844b4d3263f7e233b
Bisecting: 4 revisions left to test after this (roughly 2 steps)
[87815dda55934180d8e6ec0a0a448b104d251c54] Merge tag 'pxa-dt-4.18' of https://github.com/rjarzmik/linux into next/dt
testing commit 87815dda55934180d8e6ec0a0a448b104d251c54 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 87815dda55934180d8e6ec0a0a448b104d251c54
Bisecting: 2 revisions left to test after this (roughly 1 step)
[e16c4790de39dc861b749674c2a9319507f6f64f] Revert "iommu/amd_iommu: Use CONFIG_DMA_DIRECT_OPS=y and dma_direct_{alloc,free}()"
testing commit e16c4790de39dc861b749674c2a9319507f6f64f with gcc (GCC) 8.1.0
all runs: OK
# git bisect good e16c4790de39dc861b749674c2a9319507f6f64f
Bisecting: 0 revisions left to test after this (roughly 1 step)
[7c00e8ae041b349992047769af741b67379ce19a] Merge tag 'armsoc-soc' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc
testing commit 7c00e8ae041b349992047769af741b67379ce19a with gcc (GCC) 8.1.0
run #0: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/bin/linux_amd64/syz-fuzzer" "root@10.128.0.3:./syz-fuzzer"]: exit status 1
ssh: connect to host 10.128.0.3 port 22: Connection timed out
lost connection

run #1: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/bin/linux_amd64/syz-executor" "root@10.128.0.238:./syz-executor"]: exit status 1
ssh: connect to host 10.128.0.238 port 22: Connection timed out
lost connection

run #2: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/bin/linux_amd64/syz-execprog" "root@10.128.0.8:./syz-execprog"]: exit status 1
ssh: connect to host 10.128.0.8 port 22: Connection timed out
lost connection

run #3: OK
run #4: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/bin/linux_amd64/syz-execprog" "root@10.128.0.232:./syz-execprog"]: exit status 1
ssh: connect to host 10.128.0.232 port 22: Connection timed out
lost connection

run #5: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/bin/linux_amd64/syz-fuzzer" "root@10.128.1.45:./syz-fuzzer"]: exit status 1
ssh: connect to host 10.128.1.45 port 22: Connection timed out
lost connection

run #6: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/bin/linux_amd64/syz-executor" "root@10.128.0.85:./syz-executor"]: exit status 1
ssh: connect to host 10.128.0.85 port 22: Connection timed out
lost connection

run #7: basic kernel testing failed: timed out
run #8: OK
run #9: OK
# git bisect skip 7c00e8ae041b349992047769af741b67379ce19a
Bisecting: 0 revisions left to test after this (roughly 1 step)
[a2b7ab45b8905b9c1813b0212e82a39d5c081c8a] Merge tag 'linux-watchdog-4.18-rc1' of git://www.linux-watchdog.org/linux-watchdog
testing commit a2b7ab45b8905b9c1813b0212e82a39d5c081c8a with gcc (GCC) 8.1.0
failed: failed to create VM pool: failed to init gce: error getting instance info: Get https://www.googleapis.com/compute/beta/projects/syzkaller/zones/us-central1-c/instances/ci?alt=json: Get http://169.254.169.254/computeMetadata/v1/instance/service-accounts/default/token: dial tcp 169.254.169.254:80: i/o timeout
# git bisect skip a2b7ab45b8905b9c1813b0212e82a39d5c081c8a
There are only 'skip'ped commits left to test.
The first bad commit could be any of:
7c00e8ae041b349992047769af741b67379ce19a
a2b7ab45b8905b9c1813b0212e82a39d5c081c8a
721afaa2aeb860067decdddadc84ed16f42f2048
We cannot bisect more!
revisions tested: 22, total time: 7h33m14.178788809s (build: 3h53m56.983992558s, test: 3h27m22.122677635s)
bisection is inconclusive, the first bad commit could be any of:
7c00e8ae041b349992047769af741b67379ce19a
a2b7ab45b8905b9c1813b0212e82a39d5c081c8a
721afaa2aeb860067decdddadc84ed16f42f2048