bisecting cause commit starting from 2265c5286967c58db9a99ed1b74105977507e690
building syzkaller on fd5118098a3df4301eba91aeca37119ccb209403
testing commit 2265c5286967c58db9a99ed1b74105977507e690
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1
kernel signature: 6975bfee81c80c335cd2fda3db63ed54484725e281aa8724d1d98343027d5949
run #0: crashed: WARNING in j1939_session_deactivate
run #1: crashed: WARNING in j1939_session_deactivate
run #2: crashed: WARNING in j1939_session_deactivate
run #3: crashed: WARNING in j1939_session_deactivate
run #4: crashed: WARNING in j1939_session_deactivate
run #5: crashed: WARNING in j1939_session_deactivate
run #6: crashed: WARNING in j1939_session_deactivate
run #7: crashed: WARNING in j1939_session_deactivate
run #8: crashed: WARNING in j1939_session_deactivate
run #9: crashed: WARNING in j1939_session_deactivate
run #10: crashed: WARNING in j1939_session_deactivate
run #11: crashed: WARNING in j1939_session_deactivate
run #12: crashed: WARNING in j1939_session_deactivate
run #13: crashed: WARNING in j1939_session_deactivate
run #14: crashed: KASAN: invalid-free in skb_release_data
run #15: crashed: WARNING in j1939_session_deactivate
run #16: crashed: WARNING in j1939_session_deactivate
run #17: crashed: WARNING in j1939_session_deactivate
run #18: crashed: WARNING in j1939_session_deactivate
run #19: crashed: WARNING in j1939_session_deactivate
testing release v5.13
testing commit 62fb9874f5da54fdb243003b386128037319b219
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1
kernel signature: 1cb5111c0f95c1fc7e3896d55db5b53fbce5858f143c657e735c92f7019c7d10
run #0: crashed: KASAN: invalid-free in j1939_xtp_rx_cts
run #1: crashed: KASAN: invalid-free in j1939_xtp_rx_cts
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
reproducer seems to be flaky
testing release v5.12
testing commit 9f4ad9e425a1d3b6a34617b8ea226d56a119a717
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1
kernel signature: f49397d19055b9442e2c2b720108afe8474cea2e340222187afff379ccf6ade1
run #0: crashed: unregister_netdevice: waiting for DEV to become free
run #1: crashed: unregister_netdevice: waiting for DEV to become free
run #2: crashed: unregister_netdevice: waiting for DEV to become free
run #3: crashed: unregister_netdevice: waiting for DEV to become free
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
testing release v5.11
testing commit f40ddce88593482919761f74910f42f4b84c004b
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1
kernel signature: 8eb48db83d9f749192d28a9978aa4fc25fb6641ea16d5a4553bec11708320c0f
run #0: crashed: WARNING in j1939_xtp_rx_rts
run #1: crashed: unregister_netdevice: waiting for DEV to become free
run #2: crashed: unregister_netdevice: waiting for DEV to become free
run #3: crashed: unregister_netdevice: waiting for DEV to become free
run #4: crashed: unregister_netdevice: waiting for DEV to become free
run #5: crashed: unregister_netdevice: waiting for DEV to become free
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
testing release v5.10
testing commit 2c85ebc57b3e1817b6ce1a6b703928e113a90442
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1
kernel signature: 8e87dd22a4dc96899d1b4a403d3465086b938b507b4b6839238b5a7ba1f0f554
run #0: crashed: unregister_netdevice: waiting for DEV to become free
run #1: crashed: unregister_netdevice: waiting for DEV to become free
run #2: crashed: unregister_netdevice: waiting for DEV to become free
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
testing release v5.9
testing commit bbf5c979011a099af5dc76498918ed7df445635b
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1
kernel signature: b8a087344937b7e38a4f18e1455ea1593aa6aaebc02c4143bab74e899afbca78
run #0: crashed: unregister_netdevice: waiting for DEV to become free
run #1: crashed: unregister_netdevice: waiting for DEV to become free
run #2: crashed: unregister_netdevice: waiting for DEV to become free
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
testing release v5.8
testing commit bcf876870b95592b52519ed4aafcf9d95999bc9c
compiler: gcc (GCC) 8.4.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1
kernel signature: 034991fec4a530d008328034d6c635820cb909fbe0b4ec001eca2280d398460f
run #0: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #1: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #2: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #3: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #4: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #5: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #6: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #7: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #8: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #9: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #10: crashed: KASAN: use-after-free Read in j1939_tp_txtimer
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
testing release v5.7
testing commit 3d77e6a8804abcc0504c904bd6e5cdf3a5cf8162
compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.35.1
kernel signature: 15c71a9bb990a61d15a1f41a4f8959105ba8dd4ddbaad7d4e5e149e8ba60d167
run #0: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #1: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #2: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #3: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #4: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #5: crashed: KASAN: use-after-free Read in j1939_tp_txtimer
run #6: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #7: crashed: unregister_netdevice: waiting for DEV to become free
run #8: crashed: unregister_netdevice: waiting for DEV to become free
run #9: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #10: crashed: KASAN: use-after-free Read in j1939_tp_txtimer
run #11: basic kernel testing failed: failed to copy test binary to VM: timedout ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/tmp/syz-executor864890985" "root@10.128.10.1:./syz-executor864890985"]
run #12: crashed: KASAN: use-after-free Read in j1939_tp_txtimer
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
testing release v5.6
testing commit 7111951b8d4973bda27ff663f2cf18b663d15b48
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 207dc7a0518e42a33d58cbd25a2ae109405d65433a265fdfb8f5101b88c8afb0
run #0: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #1: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #2: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #3: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #4: crashed: KASAN: use-after-free Read in j1939_tp_txtimer
run #5: crashed: KASAN: use-after-free Read in j1939_tp_txtimer
run #6: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #7: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #8: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #9: crashed: INFO: rcu detected stall in j1939_tp_txtimer
run #10: crashed: KASAN: use-after-free Read in j1939_tp_txtimer
run #11: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/tmp/syz-executor484861660" "root@10.128.10.24:./syz-executor484861660"]: exit status 1
Connection timed out during banner exchange
Connection to 10.128.10.24 port 22 timed out
lost connection

run #12: crashed: unregister_netdevice: waiting for DEV to become free
run #13: crashed: unregister_netdevice: waiting for DEV to become free
run #14: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
testing release v5.5
testing commit d5226fa6dbae0569ee43ecfc08bdcd6770fc4755
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: d7e45cbe9913f7d3284b66d46e93a0113e8a2c177aa588c1f32d723d0b76d197
run #0: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #1: crashed: KASAN: use-after-free Read in j1939_tp_txtimer
run #2: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #3: crashed: KASAN: use-after-free Read in j1939_tp_txtimer
run #4: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #5: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #6: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #7: crashed: unregister_netdevice: waiting for DEV to become free
run #8: crashed: unregister_netdevice: waiting for DEV to become free
run #9: crashed: unregister_netdevice: waiting for DEV to become free
run #10: crashed: unregister_netdevice: waiting for DEV to become free
run #11: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #12: OK
run #13: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
testing release v5.4
testing commit 219d54332a09e8d8741c1e1982f5eae56099de85
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: dee63f13999cb459ebeeba7ce3fbcbd5eab389f19f541cf7c1c50463cdb70cff
run #0: crashed: KASAN: use-after-free Read in j1939_tp_txtimer
run #1: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #2: crashed: KASAN: use-after-free Read in j1939_tp_txtimer
run #3: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #4: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #5: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #6: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #7: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #8: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #9: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/tmp/syz-executor194671751" "root@10.128.1.123:./syz-executor194671751"]: exit status 1
ssh: connect to host 10.128.1.123 port 22: Connection timed out
lost connection

run #10: crashed: unregister_netdevice: waiting for DEV to become free
run #11: crashed: unregister_netdevice: waiting for DEV to become free
run #12: crashed: unregister_netdevice: waiting for DEV to become free
run #13: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #14: crashed: KASAN: use-after-free Read in j1939_tp_txtimer
run #15: crashed: KASAN: slab-out-of-bounds Read in j1939_tp_txtimer
run #16: OK
run #17: OK
run #18: OK
run #19: OK
testing release v5.3
testing commit 4d856f72c10ecb060868ed10ff1b1453943fc6c8
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 12b5d22ca88f7051d782a6a2c56b44322175fafcce506c689f4aad48c6d531f2
all runs: OK
# git bisect start 219d54332a09e8d8741c1e1982f5eae56099de85 4d856f72c10ecb060868ed10ff1b1453943fc6c8
Bisecting: 7882 revisions left to test after this (roughly 13 steps)
[a9f8b38a071b468276a243ea3ea5a0636e848cf2] Merge tag 'for-linus-5.4-1' of git://github.com/cminyard/linux-ipmi

testing commit a9f8b38a071b468276a243ea3ea5a0636e848cf2
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: fd52e57152d3adf3010233f81d18502eac0126882a8a09ebaff0026f484bfab2
run #0: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #1: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #2: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #3: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #4: crashed: KASAN: use-after-free Write in j1939_sock_pending_del
run #5: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #6: crashed: KASAN: use-after-free Write in j1939_sock_pending_del
run #7: crashed: KASAN: use-after-free Write in j1939_sock_pending_del
run #8: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #9: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #10: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #11: crashed: KASAN: use-after-free Read in j1939_session_get_by_addr
run #12: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #13: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #14: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #15: crashed: KASAN: use-after-free Write in j1939_sock_pending_del
run #16: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #17: crashed: KASAN: use-after-free Write in j1939_sock_pending_del
run #18: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #19: crashed: KASAN: use-after-free Read in j1939_session_deactivate
# git bisect bad a9f8b38a071b468276a243ea3ea5a0636e848cf2
Bisecting: 3920 revisions left to test after this (roughly 12 steps)
[fe38bd6862074c0a2b9be7f31f043aaa70b2af5f] Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm

testing commit fe38bd6862074c0a2b9be7f31f043aaa70b2af5f
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 3139ca5ed8fcda3b1a550a019ffa0a75372305b81b1bc70b460374f9e962048c
all runs: OK
# git bisect good fe38bd6862074c0a2b9be7f31f043aaa70b2af5f
Bisecting: 1962 revisions left to test after this (roughly 11 steps)
[069841ef8293697e951c34f9a45601b77fb541d7] Merge branch '40GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

testing commit 069841ef8293697e951c34f9a45601b77fb541d7
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 5128f27490b0b65d3a8ad91c0a3767f7206315321f61aae601ec917c63f7edd5
run #0: crashed: KASAN: use-after-free Write in j1939_sock_pending_del
run #1: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #2: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #3: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #4: crashed: KASAN: use-after-free Write in j1939_sock_pending_del
run #5: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #6: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #7: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #8: crashed: KASAN: use-after-free Write in j1939_sock_pending_del
run #9: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #10: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #11: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #12: crashed: KASAN: use-after-free Write in j1939_sock_pending_del
run #13: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #14: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #15: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #16: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #17: crashed: KASAN: use-after-free Read in j1939_session_deactivate
run #18: crashed: KASAN: use-after-free Read in j1939_session_get_by_addr
run #19: crashed: KASAN: use-after-free Read in j1939_session_deactivate
# git bisect bad 069841ef8293697e951c34f9a45601b77fb541d7
Bisecting: 978 revisions left to test after this (roughly 10 steps)
[f33bf6b00f20c9d26c42dfdaf8b83c2b0c1e6f71] net: stmmac: dwmac-meson: use devm_platform_ioremap_resource() to simplify code

testing commit f33bf6b00f20c9d26c42dfdaf8b83c2b0c1e6f71
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: b970547dbb63821fd5412e91dc788ff64c531c93d530ef8f79bb7fca065c3ed5
all runs: OK
# git bisect good f33bf6b00f20c9d26c42dfdaf8b83c2b0c1e6f71
Bisecting: 487 revisions left to test after this (roughly 9 steps)
[67e974c3ae21c8ced474eae3ce9261a6f827e95c] Merge tag 'iwlwifi-next-for-kalle-2019-09-06' of git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next

testing commit 67e974c3ae21c8ced474eae3ce9261a6f827e95c
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: f92bc94e379b7fad4b3f68978bdf877cb97a898b11e564cad8eb0895fc91fbe0
run #0: crashed: general protection fault in batadv_iv_ogm_queue_add
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad 67e974c3ae21c8ced474eae3ce9261a6f827e95c
Bisecting: 245 revisions left to test after this (roughly 8 steps)
[6763c779c2d8b568b2e174f3eeeaf644fa38b34d] bnxt_en: Add new FW devlink_health_reporter

testing commit 6763c779c2d8b568b2e174f3eeeaf644fa38b34d
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 6a276a2270139d717c003d52e4c4d2fdf71429ad7ea28bc3c072b0fbd360499a
all runs: OK
# git bisect good 6763c779c2d8b568b2e174f3eeeaf644fa38b34d
Bisecting: 122 revisions left to test after this (roughly 7 steps)
[35e4ebeaace1fca705a705cd2a41c787554ac9ee] mt76: introduce mt76_mmio_read_copy routine

testing commit 35e4ebeaace1fca705a705cd2a41c787554ac9ee
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: f92bc94e379b7fad4b3f68978bdf877cb97a898b11e564cad8eb0895fc91fbe0
all runs: OK
# git bisect good 35e4ebeaace1fca705a705cd2a41c787554ac9ee
Bisecting: 61 revisions left to test after this (roughly 6 steps)
[ba7136f3f9e849e5776429317bf45ac3d4cfa3f7] iwlwifi: Set w-pointer upon resume according to SN

testing commit ba7136f3f9e849e5776429317bf45ac3d4cfa3f7
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: f92bc94e379b7fad4b3f68978bdf877cb97a898b11e564cad8eb0895fc91fbe0
all runs: OK
# git bisect good ba7136f3f9e849e5776429317bf45ac3d4cfa3f7
Bisecting: 30 revisions left to test after this (roughly 5 steps)
[bdc62390145687b14dc9806b30ccf56cf66c0087] iwlwifi: dbg_ini: make a single ops struct for paging collect

testing commit bdc62390145687b14dc9806b30ccf56cf66c0087
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: f92bc94e379b7fad4b3f68978bdf877cb97a898b11e564cad8eb0895fc91fbe0
all runs: OK
# git bisect good bdc62390145687b14dc9806b30ccf56cf66c0087
Bisecting: 15 revisions left to test after this (roughly 4 steps)
[5952e0ec3f05cc38aceaa3eef13d828aef0b6b3b] iwlwifi: mvm: add support for single antenna diversity

testing commit 5952e0ec3f05cc38aceaa3eef13d828aef0b6b3b
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: f92bc94e379b7fad4b3f68978bdf877cb97a898b11e564cad8eb0895fc91fbe0
all runs: OK
# git bisect good 5952e0ec3f05cc38aceaa3eef13d828aef0b6b3b
Bisecting: 7 revisions left to test after this (roughly 3 steps)
[d13b12c30c345a2cbc10b72eb05adbc188eb5a92] zd1211rw: use %*ph to print small buffer

testing commit d13b12c30c345a2cbc10b72eb05adbc188eb5a92
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: f92bc94e379b7fad4b3f68978bdf877cb97a898b11e564cad8eb0895fc91fbe0
all runs: OK
# git bisect good d13b12c30c345a2cbc10b72eb05adbc188eb5a92
Bisecting: 3 revisions left to test after this (roughly 2 steps)
[4d3f5e8e7e3c5783676fbf1c61436e47a4b6b4bd] iwlwifi: fw api: add DRAM buffer allocation command

testing commit 4d3f5e8e7e3c5783676fbf1c61436e47a4b6b4bd
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: f92bc94e379b7fad4b3f68978bdf877cb97a898b11e564cad8eb0895fc91fbe0
all runs: OK
# git bisect good 4d3f5e8e7e3c5783676fbf1c61436e47a4b6b4bd
Bisecting: 1 revision left to test after this (roughly 1 step)
[9b1bcfcc6e068ab2106749bf8faffb8a7d73b976] iwlwifi: dbg_ini: remove periodic trigger

testing commit 9b1bcfcc6e068ab2106749bf8faffb8a7d73b976
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: f92bc94e379b7fad4b3f68978bdf877cb97a898b11e564cad8eb0895fc91fbe0
all runs: OK
# git bisect good 9b1bcfcc6e068ab2106749bf8faffb8a7d73b976
Bisecting: 0 revisions left to test after this (roughly 0 steps)
[787350ef8d8044754582e79d28a0d5ef4df08ba4] iwlwifi: dbg: remove iwl_fw_cancel_dumps function

testing commit 787350ef8d8044754582e79d28a0d5ef4df08ba4
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: f92bc94e379b7fad4b3f68978bdf877cb97a898b11e564cad8eb0895fc91fbe0
all runs: OK
# git bisect good 787350ef8d8044754582e79d28a0d5ef4df08ba4
67e974c3ae21c8ced474eae3ce9261a6f827e95c is the first bad commit
commit 67e974c3ae21c8ced474eae3ce9261a6f827e95c
Merge: d13b12c30c34 787350ef8d80
Author: Kalle Valo <kvalo@codeaurora.org>
Date:   Sat Sep 7 10:21:07 2019 +0300

    Merge tag 'iwlwifi-next-for-kalle-2019-09-06' of git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next
    
    Patches intended for v5.4
    
    * Remove (broken) d0i3 support;
    * Debug infrastructure work continues;
    * Bump support FW API version to 50;
    * Fix for the SN value in certain suspend/resume situations;
    * Some work on new FW scan APIs;
    * Work on LTR FW APIs;
    * New FW channel-switch support;
    * Support new ACPI value for per-platform antenna gain;
    * Support for single antenna diversity;
    * Support for new WoWLAN FW API;
    * Initial refactoring of the device selection code;
    * A bunch of clean-ups;
    * Other small fixes and improvements;

 drivers/net/wireless/intel/iwlwifi/Kconfig         |   14 -
 drivers/net/wireless/intel/iwlwifi/cfg/1000.c      |   14 +-
 drivers/net/wireless/intel/iwlwifi/cfg/2000.c      |   26 +-
 drivers/net/wireless/intel/iwlwifi/cfg/22000.c     |   46 +-
 drivers/net/wireless/intel/iwlwifi/cfg/5000.c      |   18 +-
 drivers/net/wireless/intel/iwlwifi/cfg/6000.c      |   44 +-
 drivers/net/wireless/intel/iwlwifi/cfg/7000.c      |   10 +-
 drivers/net/wireless/intel/iwlwifi/cfg/8000.c      |   10 +-
 drivers/net/wireless/intel/iwlwifi/cfg/9000.c      |   10 +-
 drivers/net/wireless/intel/iwlwifi/dvm/devices.c   |    3 +-
 drivers/net/wireless/intel/iwlwifi/dvm/led.c       |    5 +-
 drivers/net/wireless/intel/iwlwifi/dvm/mac80211.c  |    4 +-
 drivers/net/wireless/intel/iwlwifi/dvm/main.c      |   12 +-
 drivers/net/wireless/intel/iwlwifi/dvm/power.c     |    3 +-
 drivers/net/wireless/intel/iwlwifi/dvm/tx.c        |    5 +-
 drivers/net/wireless/intel/iwlwifi/fw/acpi.h       |   12 +
 .../net/wireless/intel/iwlwifi/fw/api/commands.h   |    7 +
 drivers/net/wireless/intel/iwlwifi/fw/api/d3.h     |    6 +-
 .../net/wireless/intel/iwlwifi/fw/api/dbg-tlv.h    |  102 +-
 drivers/net/wireless/intel/iwlwifi/fw/api/debug.h  |   83 +-
 .../net/wireless/intel/iwlwifi/fw/api/location.h   |    4 +-
 drivers/net/wireless/intel/iwlwifi/fw/api/mac.h    |    4 +
 drivers/net/wireless/intel/iwlwifi/fw/api/phy.h    |    7 +
 drivers/net/wireless/intel/iwlwifi/fw/api/power.h  |   12 +
 drivers/net/wireless/intel/iwlwifi/fw/api/rs.h     |   18 +-
 drivers/net/wireless/intel/iwlwifi/fw/api/rx.h     |   32 +
 drivers/net/wireless/intel/iwlwifi/fw/api/scan.h   |   55 +-
 drivers/net/wireless/intel/iwlwifi/fw/dbg.c        | 1155 +++++++-------------
 drivers/net/wireless/intel/iwlwifi/fw/dbg.h        |  121 +-
 drivers/net/wireless/intel/iwlwifi/fw/error-dump.h |   38 +-
 drivers/net/wireless/intel/iwlwifi/fw/file.h       |   29 +-
 drivers/net/wireless/intel/iwlwifi/fw/img.h        |    9 -
 drivers/net/wireless/intel/iwlwifi/fw/init.c       |    2 -
 drivers/net/wireless/intel/iwlwifi/fw/paging.c     |    6 +-
 drivers/net/wireless/intel/iwlwifi/fw/runtime.h    |   23 +-
 drivers/net/wireless/intel/iwlwifi/fw/smem.c       |    2 +-
 drivers/net/wireless/intel/iwlwifi/iwl-config.h    |   51 +-
 drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c   |  236 ++--
 drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.h   |   36 +-
 drivers/net/wireless/intel/iwlwifi/iwl-devtrace.h  |    1 -
 drivers/net/wireless/intel/iwlwifi/iwl-drv.c       |   30 +-
 .../net/wireless/intel/iwlwifi/iwl-eeprom-parse.c  |   21 +-
 .../net/wireless/intel/iwlwifi/iwl-eeprom-parse.h  |    4 +-
 .../net/wireless/intel/iwlwifi/iwl-eeprom-read.c   |   14 +-
 drivers/net/wireless/intel/iwlwifi/iwl-fh.h        |    6 +-
 drivers/net/wireless/intel/iwlwifi/iwl-io.c        |   21 +-
 drivers/net/wireless/intel/iwlwifi/iwl-io.h        |   18 +-
 drivers/net/wireless/intel/iwlwifi/iwl-modparams.h |    9 +-
 drivers/net/wireless/intel/iwlwifi/iwl-nvm-parse.c |   60 +-
 drivers/net/wireless/intel/iwlwifi/iwl-op-mode.h   |   27 +-
 drivers/net/wireless/intel/iwlwifi/iwl-prph.h      |    5 +
 drivers/net/wireless/intel/iwlwifi/iwl-trans.c     |   16 -
 drivers/net/wireless/intel/iwlwifi/iwl-trans.h     |  150 +--
 drivers/net/wireless/intel/iwlwifi/mvm/constants.h |    1 +
 drivers/net/wireless/intel/iwlwifi/mvm/d3.c        |  224 +---
 drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c   |  154 +--
 drivers/net/wireless/intel/iwlwifi/mvm/fw.c        |  183 +++-
 drivers/net/wireless/intel/iwlwifi/mvm/led.c       |    6 +-
 drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c  |    9 +-
 drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c  |  424 ++-----
 drivers/net/wireless/intel/iwlwifi/mvm/mvm.h       |  150 +--
 drivers/net/wireless/intel/iwlwifi/mvm/nvm.c       |    4 +-
 drivers/net/wireless/intel/iwlwifi/mvm/ops.c       |  480 +-------
 drivers/net/wireless/intel/iwlwifi/mvm/phy-ctxt.c  |   11 +-
 drivers/net/wireless/intel/iwlwifi/mvm/power.c     |   82 +-
 drivers/net/wireless/intel/iwlwifi/mvm/rs-fw.c     |   19 +-
 drivers/net/wireless/intel/iwlwifi/mvm/rs.c        |    8 +-
 drivers/net/wireless/intel/iwlwifi/mvm/rx.c        |   18 +-
 drivers/net/wireless/intel/iwlwifi/mvm/rxmq.c      |  115 +-
 drivers/net/wireless/intel/iwlwifi/mvm/scan.c      |   98 +-
 drivers/net/wireless/intel/iwlwifi/mvm/sta.c       |   29 +-
 drivers/net/wireless/intel/iwlwifi/mvm/tdls.c      |    9 -
 .../net/wireless/intel/iwlwifi/mvm/time-event.c    |    8 +-
 drivers/net/wireless/intel/iwlwifi/mvm/tt.c        |   12 +-
 drivers/net/wireless/intel/iwlwifi/mvm/tx.c        |    9 +-
 drivers/net/wireless/intel/iwlwifi/mvm/utils.c     |   19 +-
 .../wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c   |    4 +-
 drivers/net/wireless/intel/iwlwifi/pcie/drv.c      |  326 ++----
 drivers/net/wireless/intel/iwlwifi/pcie/internal.h |   38 +-
 drivers/net/wireless/intel/iwlwifi/pcie/rx.c       |   77 +-
 .../net/wireless/intel/iwlwifi/pcie/trans-gen2.c   |   19 +-
 drivers/net/wireless/intel/iwlwifi/pcie/trans.c    |  380 +++----
 drivers/net/wireless/intel/iwlwifi/pcie/tx-gen2.c  |   52 +-
 drivers/net/wireless/intel/iwlwifi/pcie/tx.c       |  176 ++-
 84 files changed, 2167 insertions(+), 3633 deletions(-)

Reproducer flagged being flaky
revisions tested: 26, total time: 7h32m37.920438463s (build: 2h43m54.980183849s, test: 4h44m32.856175222s)
first bad commit: 67e974c3ae21c8ced474eae3ce9261a6f827e95c Merge tag 'iwlwifi-next-for-kalle-2019-09-06' of git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next
recipients (to): ["kvalo@codeaurora.org"]
recipients (cc): []
crash: general protection fault in batadv_iv_ogm_queue_add
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 21 Comm: kworker/u4:1 Not tainted 5.3.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
RIP: 0010:batadv_iv_ogm_queue_add+0x9b/0xec0 net/batman-adv/bat_iv_ogm.c:605
Code: 44 89 8d 64 ff ff ff c7 02 f1 f1 f1 f1 c7 42 04 04 f2 f2 f2 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4d d0 31 c9 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 cb 0b 00 00
RSP: 0018:ffff8880b39afab0 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: 00000000000003d4 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: ffff8880b39afbc8 R08: ffff88809a64d680 R09: 0000000000000001
R10: ffffed101150358f R11: ffff88808a81ac7f R12: ffff88809a64d680
R13: 0000000000000400 R14: ffff88808a81ac40 R15: 000000000000003c
FS:  0000000000000000(0000) GS:ffff8880ba200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f24cd97e740 CR3: 000000009ff4e000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 batadv_iv_ogm_schedule+0x79e/0xe80 net/batman-adv/bat_iv_ogm.c:797
 batadv_iv_send_outstanding_bat_ogm_packet+0x570/0x7d0 net/batman-adv/bat_iv_ogm.c:1675
 process_one_work+0x7d2/0x1560 kernel/workqueue.c:2269
 worker_thread+0x85/0xb60 kernel/workqueue.c:2415
 kthread+0x331/0x3f0 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Modules linked in:
---[ end trace f8e5cea2513904c4 ]---
RIP: 0010:batadv_iv_ogm_queue_add+0x9b/0xec0 net/batman-adv/bat_iv_ogm.c:605
Code: 44 89 8d 64 ff ff ff c7 02 f1 f1 f1 f1 c7 42 04 04 f2 f2 f2 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4d d0 31 c9 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 cb 0b 00 00
RSP: 0018:ffff8880b39afab0 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: 00000000000003d4 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: ffff8880b39afbc8 R08: ffff88809a64d680 R09: 0000000000000001
R10: ffffed101150358f R11: ffff88808a81ac7f R12: ffff88809a64d680
R13: 0000000000000400 R14: ffff88808a81ac40 R15: 000000000000003c
FS:  0000000000000000(0000) GS:ffff8880ba200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f24cd97e740 CR3: 000000009ff4e000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400