bisecting fixing commit since 033c4ea49a4ba7a2b13aabf3ec755557924a9cda building syzkaller on 8742a2b9dba1ce2869b29fff6c5359cc9116c719 testing commit 033c4ea49a4ba7a2b13aabf3ec755557924a9cda with gcc (GCC) 8.1.0 kernel signature: c8b9313c82d07540abc48204feb3cf2359633e37700a0f10751baa22df4d8080 all runs: crashed: KASAN: null-ptr-deref Write in choke_reset testing current HEAD 3fc898571b974f9a05e4e5c1fe17b18548207091 testing commit 3fc898571b974f9a05e4e5c1fe17b18548207091 with gcc (GCC) 8.1.0 kernel signature: 3784f718f8e8d432c05c97931ddce52b06853c47bd0b73d8f23806cbab15eca3 all runs: OK # git bisect start 3fc898571b974f9a05e4e5c1fe17b18548207091 033c4ea49a4ba7a2b13aabf3ec755557924a9cda Bisecting: 179 revisions left to test after this (roughly 8 steps) [3d21543203675c6d63f9e7a4eab179ed89c8c1d0] powerpc: Remove STRICT_KERNEL_RWX incompatibility with RELOCATABLE testing commit 3d21543203675c6d63f9e7a4eab179ed89c8c1d0 with gcc (GCC) 8.1.0 kernel signature: 8997e1f9ceec17bbd1bfd618d693e710f7812c29346efec7c8a3ecaed02a39a6 all runs: OK # git bisect bad 3d21543203675c6d63f9e7a4eab179ed89c8c1d0 Bisecting: 89 revisions left to test after this (roughly 7 steps) [63e320a09544dfbae7ceb1b43d4a768bca285325] arm64: fix the flush_icache_range arguments in machine_kexec testing commit 63e320a09544dfbae7ceb1b43d4a768bca285325 with gcc (GCC) 8.1.0 kernel signature: f737a1ced1ce3c99e35bf4de5ff395a1d01dfe7b27ab314329fc577500603527 all runs: OK # git bisect bad 63e320a09544dfbae7ceb1b43d4a768bca285325 Bisecting: 44 revisions left to test after this (roughly 6 steps) [efc97a1dec84a0f19ad3851014e54306597f2602] netfilter: nat: never update the UDP checksum when it's 0 testing commit efc97a1dec84a0f19ad3851014e54306597f2602 with gcc (GCC) 8.1.0 kernel signature: 06f3c8d5e7e3c81003191e42755ae9c8de7c5d4679fdde3e1f8138acd3ec46bd all runs: OK # git bisect bad efc97a1dec84a0f19ad3851014e54306597f2602 Bisecting: 21 revisions left to test after this (roughly 5 steps) [9a05a6f1d2ee5dcdbba8e888098ff9bccae84879] USB: uas: add quirk for LaCie 2Big Quadra testing commit 9a05a6f1d2ee5dcdbba8e888098ff9bccae84879 with gcc (GCC) 8.1.0 kernel signature: f32964ca9a7531ed83683012152168c5ff71aba9d2787b77c12c53bfc3a649f1 run #0: OK run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: crashed: WARNING: ODEBUG bug in netdev_freemem # git bisect good 9a05a6f1d2ee5dcdbba8e888098ff9bccae84879 Bisecting: 10 revisions left to test after this (roughly 4 steps) [ba47355d79e18ba796ef01135eb53dd0b48ee320] batman-adv: fix batadv_nc_random_weight_tq testing commit ba47355d79e18ba796ef01135eb53dd0b48ee320 with gcc (GCC) 8.1.0 kernel signature: 228aaa4a1ac03aed2d66dde78c99b8ada6f3a2f93509cf7005710e595032940b all runs: OK # git bisect bad ba47355d79e18ba796ef01135eb53dd0b48ee320 Bisecting: 5 revisions left to test after this (roughly 3 steps) [66434c6037f028e99e7292bea92cae9f22d29b1c] arm64: hugetlb: avoid potential NULL dereference testing commit 66434c6037f028e99e7292bea92cae9f22d29b1c with gcc (GCC) 8.1.0 kernel signature: c9b292bf306de74ccc783e34fd10b0a753ad2d686409415a30f350451f62ca00 all runs: OK # git bisect bad 66434c6037f028e99e7292bea92cae9f22d29b1c Bisecting: 2 revisions left to test after this (roughly 1 step) [e52aece8809be6f4d1d9873fad2a710fa746d929] tracing: Add a vmalloc_sync_mappings() for safe measure testing commit e52aece8809be6f4d1d9873fad2a710fa746d929 with gcc (GCC) 8.1.0 kernel signature: 3d2e17e51893744dafd1ddef54f1d8a85588b5e8c69efc10b4df4db83e1306eb all runs: OK # git bisect bad e52aece8809be6f4d1d9873fad2a710fa746d929 Bisecting: 0 revisions left to test after this (roughly 0 steps) [1733fe42d94c70d5626854cace6db23674f24ca1] USB: serial: garmin_gps: add sanity checking for data length testing commit 1733fe42d94c70d5626854cace6db23674f24ca1 with gcc (GCC) 8.1.0 kernel signature: 5e969aa3398b1f1e4cee55f0097faeb5931a99658d1222798a1e9627bf8c588a all runs: OK # git bisect bad 1733fe42d94c70d5626854cace6db23674f24ca1 1733fe42d94c70d5626854cace6db23674f24ca1 is the first bad commit commit 1733fe42d94c70d5626854cace6db23674f24ca1 Author: Oliver Neukum Date: Wed Apr 15 16:03:04 2020 +0200 USB: serial: garmin_gps: add sanity checking for data length commit e9b3c610a05c1cdf8e959a6d89c38807ff758ee6 upstream. We must not process packets shorter than a packet ID Signed-off-by: Oliver Neukum Reported-and-tested-by: syzbot+d29e9263e13ce0b9f4fd@syzkaller.appspotmail.com Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2") Cc: stable Signed-off-by: Johan Hovold Signed-off-by: Greg Kroah-Hartman drivers/usb/serial/garmin_gps.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) culprit signature: 5e969aa3398b1f1e4cee55f0097faeb5931a99658d1222798a1e9627bf8c588a parent signature: f32964ca9a7531ed83683012152168c5ff71aba9d2787b77c12c53bfc3a649f1 revisions tested: 10, total time: 3h4m15.974282149s (build: 1h30m35.563911331s, test: 1h32m26.084142218s) first good commit: 1733fe42d94c70d5626854cace6db23674f24ca1 USB: serial: garmin_gps: add sanity checking for data length cc: ["gregkh@linuxfoundation.org" "johan@kernel.org" "oneukum@suse.com" "syzbot+d29e9263e13ce0b9f4fd@syzkaller.appspotmail.com"]