bisecting fixing commit since c37da90efff5f183bea6ae4c2af33571f61fe317
building syzkaller on abf9ba4fc75d9b29af15625d44dcfc1360fad3b7
testing commit c37da90efff5f183bea6ae4c2af33571f61fe317 with gcc (GCC) 8.1.0
kernel signature: ac11f5afa03efa84606c8ffed25df1869748015933696fa1159fc7c60bfae189
run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in corrupted
run #1: crashed: general protection fault in __kernel_write
run #2: crashed: kernel BUG at arch/x86/mm/physaddr.c:LINE!
run #3: crashed: unexpected kernel reboot
run #4: crashed: general protection fault in __radix_tree_lookup
run #5: crashed: kernel BUG at arch/x86/mm/physaddr.c:LINE!
run #6: crashed: general protection fault in alloc_set_pte
run #7: crashed: kernel BUG at arch/x86/mm/physaddr.c:LINE!
run #8: crashed: kernel BUG at arch/x86/mm/physaddr.c:LINE!
run #9: crashed: general protection fault in futex_wake
testing current HEAD f5d8eef067acee3fda37137f4a08c0d3f6427a8e
testing commit f5d8eef067acee3fda37137f4a08c0d3f6427a8e with gcc (GCC) 8.1.0
kernel signature: 9ea7eee3a701adbc9a2bedfd9ff514a0c173ab46ef12a01217204628ae108382
run #0: crashed: general protection fault in rcu_process_callbacks
run #1: crashed: general protection fault in anon_vma_interval_tree_insert
run #2: crashed: kernel panic: Fatal exception
run #3: crashed: BUG: corrupted list in __mutex_add_waiter
run #4: crashed: INFO: trying to register non-static key in __handle_mm_fault
run #5: crashed: kernel BUG at arch/x86/mm/physaddr.c:LINE!
run #6: crashed: general protection fault in anon_vma_interval_tree_insert
run #7: crashed: kernel BUG at arch/x86/mm/physaddr.c:LINE!
run #8: crashed: BUG: unable to handle kernel NULL pointer dereference in corrupted
run #9: OK
revisions tested: 2, total time: 34m57.749952297s (build: 17m32.247095672s, test: 16m47.515188816s)
the crash still happens on HEAD
commit msg: Linux 4.19.154
crash: BUG: unable to handle kernel NULL pointer dereference in corrupted
Bluetooth: hci1: command 0x0409 tx timeout
Bluetooth: hci1: command 0x041b tx timeout
Bluetooth: hci1: command 0x040f tx timeout
Bluetooth: hci1: command 0x0419 tx timeout
BUG: unable to handle kernel NULL pointer dereference at 0000000000000000
PGD 71ae3067 P4D 71ae3067 PUD 71ae7067 PMD 0 
Oops: 0010 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 14298 Comm: syz-executor.3 Not tainted 4.19.154-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:          (null)
Code: Bad RIP value.
RSP: 0018:ffff888000127898 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000004 RSI: 0000000000000001 RDI: ffffffff8a19da60
RBP: 0000000000007777 R08: ffffed10174c5859 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff888000127a70 R14: ffff8880001279d8 R15: ffffc90000c6c080
FS:  00000000028f4940(0000) GS:ffff8880ba600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 00000000a7641000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
Modules linked in:
CR2: 0000000000000000
---[ end trace 66368b025b954f1b ]---
RIP: 0010:          (null)
Code: Bad RIP value.
RSP: 0018:ffff888000127898 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000004 RSI: 0000000000000001 RDI: ffffffff8a19da60
RBP: 0000000000007777 R08: ffffed10174c5859 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff888000127a70 R14: ffff8880001279d8 R15: ffffc90000c6c080
FS:  00000000028f4940(0000) GS:ffff8880ba600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 00000000a7641000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400