bisecting cause commit starting from ae4b064e2a616b545acf02b8f50cc513b32c7522
building syzkaller on 08003f6440deafc4e193b159c4acece64f7864b1
testing commit ae4b064e2a616b545acf02b8f50cc513b32c7522 with gcc (GCC) 8.1.0
kernel signature: 6c016dc6cead58ac557e5e4d7535dfa175fe901a
all runs: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
testing release v5.4
testing commit 219d54332a09e8d8741c1e1982f5eae56099de85 with gcc (GCC) 8.1.0
kernel signature: 8808506210c15a5f0045c29d3713c4b22bc59e67
run #0: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #1: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #2: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #3: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #4: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #5: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #6: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #7: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #8: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/tmp/syz-executor860003190" "root@10.128.0.160:./syz-executor860003190"]: exit status 1
ssh: connect to host 10.128.0.160 port 22: Connection timed out
lost connection

run #9: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
testing release v5.3
testing commit 4d856f72c10ecb060868ed10ff1b1453943fc6c8 with gcc (GCC) 8.1.0
kernel signature: 96b771b69be563201a4829c7ed36de094b517844
run #0: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #1: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #2: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #3: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #4: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #5: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #6: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #7: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #8: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/tmp/syz-executor537922711" "root@10.128.0.179:./syz-executor537922711"]: exit status 1
ssh_exchange_identification: read: Connection reset by peer
lost connection

run #9: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
testing release v5.2
testing commit 0ecfebd2b52404ae0c54a878c872bb93363ada36 with gcc (GCC) 8.1.0
kernel signature: 9262f88925a5ba78e00f2c20e3b56355298bb09e
run #0: crashed: panic: runtime error: invalid memory address or nil pointer dereference
run #1: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #2: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #3: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #4: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #5: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #6: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #7: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #8: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #9: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
testing release v5.1
testing commit e93c9c99a629c61837d5a7fc2120cd2b6c70dbdd with gcc (GCC) 8.1.0
kernel signature: 4cbaaea7acd7a47d277c1f05e84a9364e95a502b
run #0: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #1: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #2: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #3: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #4: crashed: KASAN: out-of-bounds Write in __ext4_expand_extra_isize
run #5: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #6: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #7: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #8: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #9: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
testing release v5.0
testing commit 1c163f4c7b3f621efff9b28a47abb36f7378d783 with gcc (GCC) 8.1.0
kernel signature: 89eb8a2d2032bbd52f8e493f706063e73fd8abe6
run #0: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #1: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #2: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #3: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #4: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #5: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #6: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #7: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #8: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #9: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
testing release v4.20
testing commit 8fe28cb58bcb235034b64cbbb7550a8a43fd88be with gcc (GCC) 8.1.0
kernel signature: 981253107b6e7fddf3e0e9cf7700359ab99c178a
run #0: crashed: panic: runtime error: invalid memory address or nil pointer dereference
run #1: crashed: panic: inconsistent poll.fdMutex
run #2: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/tmp/syz-executor378106846" "root@10.128.10.31:./syz-executor378106846"]: exit status 1
ssh_exchange_identification: read: Connection reset by peer
lost connection

run #3: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/tmp/syz-executor984055717" "root@10.128.10.43:./syz-executor984055717"]: exit status 1
ssh_exchange_identification: read: Connection reset by peer
lost connection

run #4: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #5: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #6: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #7: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #8: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #9: crashed: no output from test machine
testing release v4.19
testing commit 84df9525b0c27f3ebc2ebb1864fa62a97fdedb7d with gcc (GCC) 8.1.0
kernel signature: de2671d80fab845b83807dcfb739e07a73358d4a
run #0: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #1: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #2: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #3: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #4: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #5: OK
run #6: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #7: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #8: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/tmp/syz-executor139412978" "root@10.128.1.44:./syz-executor139412978"]: exit status 1
ssh_exchange_identification: read: Connection reset by peer
lost connection

run #9: crashed: no output from test machine
testing release v4.18
testing commit 94710cac0ef4ee177a63b5227664b38c95bbf703 with gcc (GCC) 8.1.0
kernel signature: 8f9e154b4fa1dc4eaf287b851da54f8f74fc5b44
run #0: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #1: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #2: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #3: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #4: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #5: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #6: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #7: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #8: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #9: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
testing release v4.17
testing commit 29dcea88779c856c7dc92040a0c01233263101d4 with gcc (GCC) 8.1.0
kernel signature: 639d1edcb94aa297111ad0f93a118db4fac54967
run #0: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #1: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #2: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #3: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #4: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #5: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #6: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #7: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #8: crashed: KASAN: use-after-free Read in __xattr_check_inode
run #9: crashed: KASAN: out-of-bounds Read in ext4_xattr_set_entry
testing release v4.16
testing commit 0adb32858b0bddf4ada5f364a84ed60b196dbcda with gcc (GCC) 8.1.0
kernel signature: 9f13f711d564163679f1f77e8487f16fad2610f9
run #0: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #1: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #2: crashed: KASAN: out-of-bounds Write in __ext4_expand_extra_isize
run #3: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #4: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #5: crashed: KASAN: out-of-bounds Write in __ext4_expand_extra_isize
run #6: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #7: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #8: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #9: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/tmp/syz-executor036289350" "root@10.128.10.24:./syz-executor036289350"]: exit status 1
ssh: connect to host 10.128.10.24 port 22: Connection refused
lost connection

testing release v4.15
testing commit d8a5b80568a9cb66810e75b182018e9edb68e8ff with gcc (GCC) 8.1.0
kernel signature: 22b89d4d62b8ff655a57b3dcd8cf60d44aeb0eb2
run #0: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #1: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #2: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #3: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #4: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #5: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #6: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #7: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #8: crashed: unexpected kernel reboot
run #9: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
testing release v4.14
testing commit bebc6082da0a9f5d47a1ea2edc099bf671058bd4 with gcc (GCC) 8.1.0
kernel signature: 3f91312a4dd7728d59777137c072ad7bcaaad805
run #0: crashed: panic: inconsistent poll.fdMutex
run #1: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #2: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #3: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #4: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #5: crashed: KASAN: out-of-bounds Write in __ext4_expand_extra_isize
run #6: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #7: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #8: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/tmp/syz-executor757023399" "root@10.128.15.198:./syz-executor757023399"]: exit status 1
Connection reset by 10.128.15.198 port 22
lost connection

run #9: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
testing release v4.13
testing commit 569dbb88e80deb68974ef6fdd6a13edb9d686261 with gcc (GCC) 8.1.0
kernel signature: c794e4e6b0cd004a7d7da5d68842aa128a1c5e36
run #0: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/tmp/syz-executor905830769" "root@10.128.1.55:./syz-executor905830769"]: exit status 1
ssh_exchange_identification: read: Connection reset by peer
lost connection

run #1: crashed: KASAN: out-of-bounds Write in __ext4_expand_extra_isize
run #2: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #3: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #4: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #5: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #6: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
run #7: crashed: KASAN: use-after-free Read in __xattr_check_inode
run #8: crashed: KASAN: use-after-free Write in ext4_xattr_set_entry
run #9: crashed: KASAN: use-after-free Write in __ext4_expand_extra_isize
testing release v4.12
testing commit 6f7da290413ba713f0cdd9ff1a2a9bb129ef4f6c with gcc (GCC) 8.1.0
kernel signature: 16fa3211457410819e11c4ae9c2544bdb9b7f426
run #0: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #1: crashed: KASAN: out-of-bounds Read in __xattr_check_inode
run #2: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #3: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #4: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #5: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #6: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #7: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #8: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #9: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
testing release v4.11
testing commit a351e9b9fc24e982ec2f0e76379a49826036da12 with gcc (GCC) 7.3.0
kernel signature: b5180fb0a14d2384bee189f18485c06c7d763104
run #0: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #1: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #2: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #3: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #4: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #5: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #6: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #7: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #8: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #9: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
testing release v4.10
testing commit c470abd4fde40ea6a0846a2beab642a578c0b8cd with gcc (GCC) 5.5.0
kernel signature: 25e12fa98cb6addd2a80132a7140a79da5d0c8a2
all runs: OK
# git bisect start a351e9b9fc24e982ec2f0e76379a49826036da12 c470abd4fde40ea6a0846a2beab642a578c0b8cd
Bisecting: 7088 revisions left to test after this (roughly 13 steps)
[1ec5c1867af085897bb9e0f67bef3713334dbe7f] Merge tag 'gpio-v4.11-1' of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio
testing commit 1ec5c1867af085897bb9e0f67bef3713334dbe7f with gcc (GCC) 5.5.0
kernel signature: a7bc8a31b012f264a6fb1c6cbd97de008b69f6b4
all runs: boot failed: WARNING in __hrtimer_init
# git bisect skip 1ec5c1867af085897bb9e0f67bef3713334dbe7f
Bisecting: 7088 revisions left to test after this (roughly 13 steps)
[a9d2d53a788a9c5bc8a7d1b4ea7857b68e221357] ixgbe: test for trust in macvlan adjustments for VF
testing commit a9d2d53a788a9c5bc8a7d1b4ea7857b68e221357 with gcc (GCC) 5.5.0
kernel signature: a6eef3bdd1a78758c235b7d7115b126ece6c671a
all runs: OK
# git bisect good a9d2d53a788a9c5bc8a7d1b4ea7857b68e221357
Bisecting: 6730 revisions left to test after this (roughly 13 steps)
[28cbc335d272f293c4368abd4ac2e17e36805b79] Merge tag 'sound-4.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound
testing commit 28cbc335d272f293c4368abd4ac2e17e36805b79 with gcc (GCC) 5.5.0
kernel signature: c9ea0fd6d50a484887d5aedd90932109014b599c
all runs: boot failed: WARNING in __hrtimer_init
# git bisect skip 28cbc335d272f293c4368abd4ac2e17e36805b79
Bisecting: 6730 revisions left to test after this (roughly 13 steps)
[09624645e1e85df8d68b04de6e0607d696268333] scsi: aacraid: Save adapter fib log before an IOP reset
testing commit 09624645e1e85df8d68b04de6e0607d696268333 with gcc (GCC) 5.5.0
kernel signature: 5bdf9b45572417c2fdb002b4ffe8b6f9c6dbf56f
all runs: boot failed: WARNING in __hrtimer_init
# git bisect skip 09624645e1e85df8d68b04de6e0607d696268333
Bisecting: 6730 revisions left to test after this (roughly 13 steps)
[557c44be917c322860665be3d28376afa84aa936] net: ipv6: RTF_PCPU should not be settable from userspace
testing commit 557c44be917c322860665be3d28376afa84aa936 with gcc (GCC) 5.5.0
kernel signature: 3fffc325e44c41eb3d53f105390cd6acd0094817
all runs: boot failed: divide error in irq_create_affinity_masks
# git bisect skip 557c44be917c322860665be3d28376afa84aa936
Bisecting: 6730 revisions left to test after this (roughly 13 steps)
[6228b8f2d15bc9a9b76d6b209a8b760a642fa996] userfaultfd: non-cooperative: selftest: introduce userfaultfd_open
testing commit 6228b8f2d15bc9a9b76d6b209a8b760a642fa996 with gcc (GCC) 5.5.0
kernel signature: 5937009314dcdaa7b9271607344e4aa690bf8922
all runs: boot failed: WARNING in __hrtimer_init
# git bisect skip 6228b8f2d15bc9a9b76d6b209a8b760a642fa996
Bisecting: 6730 revisions left to test after this (roughly 13 steps)
[1ad38fd719da87980480886f21130053c73007ac] ath10k: fix typo in addr calculation
testing commit 1ad38fd719da87980480886f21130053c73007ac with gcc (GCC) 5.5.0
kernel signature: 9364a98ee0ca6caf7f43c7fdb47353a3789ec1e6
all runs: OK
# git bisect good 1ad38fd719da87980480886f21130053c73007ac
Bisecting: 6730 revisions left to test after this (roughly 13 steps)
[b2d5bfea2d00a0000da18f7667c2b0e2c2f168d9] sched/headers, timers: Remove the <linux/sysctl.h> include from <linux/timer.h>
testing commit b2d5bfea2d00a0000da18f7667c2b0e2c2f168d9 with gcc (GCC) 5.5.0
kernel signature: e5256f34bf485b59fb8d69502b7af6a66979d487
run #0: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #1: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #2: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #3: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #4: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #5: crashed: KASAN: slab-out-of-bounds Write in ext4_mark_inode_dirty
run #6: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #7: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #8: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #9: basic kernel testing failed: failed to copy test binary to VM: timedout ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/tmp/syz-executor404941811" "root@10.128.0.217:./syz-executor404941811"]
Warning: Permanently added '10.128.0.217' (ECDSA) to the list of known hosts.

# git bisect bad b2d5bfea2d00a0000da18f7667c2b0e2c2f168d9
Bisecting: 5334 revisions left to test after this (roughly 12 steps)
[caa59428971d5ad81d19512365c9ba580d83268c] Merge tag 'staging-4.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging
testing commit caa59428971d5ad81d19512365c9ba580d83268c with gcc (GCC) 5.5.0
kernel signature: 9526053f15b737d1fab7bf5c67731ffd53d9e177
all runs: boot failed: WARNING in __hrtimer_init
# git bisect skip caa59428971d5ad81d19512365c9ba580d83268c
Bisecting: 5334 revisions left to test after this (roughly 12 steps)
[6d1dd93ea0d0f0fb61b5450a2668896028ce3f75] Merge tag 'pstore-v4.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux
testing commit 6d1dd93ea0d0f0fb61b5450a2668896028ce3f75 with gcc (GCC) 5.5.0
kernel signature: fe100087e228f2f069f5567f8b03cfb5fd1e8a5f
all runs: boot failed: WARNING in __hrtimer_init
# git bisect skip 6d1dd93ea0d0f0fb61b5450a2668896028ce3f75
Bisecting: 5334 revisions left to test after this (roughly 12 steps)
[5c4412e0728063583ec971323f8256e8005a32b6] rt2x00: rt2800lib: add support for RT3352 with 20MHz crystal
testing commit 5c4412e0728063583ec971323f8256e8005a32b6 with gcc (GCC) 5.5.0
kernel signature: cda9f1cfedf0fa6abe3618ce0ce5df7eb0415f41
all runs: OK
# git bisect good 5c4412e0728063583ec971323f8256e8005a32b6
Bisecting: 5334 revisions left to test after this (roughly 12 steps)
[0dd12d54c4252e5a51f3b9f7b622b3b7a5b95293] net: dsa: mv88e6xxx: Add mdio private structure
testing commit 0dd12d54c4252e5a51f3b9f7b622b3b7a5b95293 with gcc (GCC) 5.5.0
kernel signature: 5e1820fb130ec767071b670bf3e3e2eb9bb1adec
all runs: OK
# git bisect good 0dd12d54c4252e5a51f3b9f7b622b3b7a5b95293
Bisecting: 5199 revisions left to test after this (roughly 12 steps)
[8dcde9def5a15df54fa4ca41f7750d80fa741d61] kernel/watchdog.c: do not hardcode CPU 0 as the initial thread
testing commit 8dcde9def5a15df54fa4ca41f7750d80fa741d61 with gcc (GCC) 5.5.0
kernel signature: 380588f4d5ab6b934d9831f7def06010f682f808
all runs: boot failed: WARNING in __hrtimer_init
# git bisect skip 8dcde9def5a15df54fa4ca41f7750d80fa741d61
Bisecting: 5199 revisions left to test after this (roughly 12 steps)
[40465257ac4159e9ebfba10ee502e795b917da76] f2fs: wait for discard completion after submission
testing commit 40465257ac4159e9ebfba10ee502e795b917da76 with gcc (GCC) 5.5.0
kernel signature: 0daec7122173222fe3cd9f7569167878a2239129
all runs: OK
# git bisect good 40465257ac4159e9ebfba10ee502e795b917da76
Bisecting: 5153 revisions left to test after this (roughly 12 steps)
[37c85961c3f87f2141c84e53df31e59db072fd2e] Merge tag 'tty-4.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty
testing commit 37c85961c3f87f2141c84e53df31e59db072fd2e with gcc (GCC) 5.5.0
kernel signature: b70bc45464a2a83762ebc93540e6896260734b89
all runs: boot failed: WARNING in __hrtimer_init
# git bisect skip 37c85961c3f87f2141c84e53df31e59db072fd2e
Bisecting: 5153 revisions left to test after this (roughly 12 steps)
[f2bf14d14dbc50dc56be3ebd18652ea2738ef6f8] mm/page_alloc.c: remove duplicate inclusion of page_ext.h
testing commit f2bf14d14dbc50dc56be3ebd18652ea2738ef6f8 with gcc (GCC) 5.5.0
kernel signature: c5fef82b1c346d6cf9468b9c31ccc1c689d3fd2d
all runs: boot failed: WARNING in __hrtimer_init
# git bisect skip f2bf14d14dbc50dc56be3ebd18652ea2738ef6f8
Bisecting: 5153 revisions left to test after this (roughly 12 steps)
[a29af939b24dc98c11e1e8a77be7669c4e4f5719] crypto: atmel-sha - update request queue management to make it more generic
testing commit a29af939b24dc98c11e1e8a77be7669c4e4f5719 with gcc (GCC) 5.5.0
kernel signature: deca068c8c3169356e9369911e1b93e282c6189b
all runs: OK
# git bisect good a29af939b24dc98c11e1e8a77be7669c4e4f5719
Bisecting: 5083 revisions left to test after this (roughly 12 steps)
[e6f7caa3de7a6a093e23d2722e45676a6e886e4c] xhci: rename size variable to num_tds
testing commit e6f7caa3de7a6a093e23d2722e45676a6e886e4c with gcc (GCC) 5.5.0
kernel signature: c762fdc8bcfb14d709a7da1711b7caa90b1f20ac
all runs: OK
# git bisect good e6f7caa3de7a6a093e23d2722e45676a6e886e4c
Bisecting: 5083 revisions left to test after this (roughly 12 steps)
[bf2f04366c1e3920fb23b57226ecb39207b1a104] drm/i915: Introduce engine_stalled helper
testing commit bf2f04366c1e3920fb23b57226ecb39207b1a104 with gcc (GCC) 5.5.0
kernel signature: bebd099b0cefd7079e58c743955e876849a648d1
all runs: OK
# git bisect good bf2f04366c1e3920fb23b57226ecb39207b1a104
Bisecting: 4656 revisions left to test after this (roughly 12 steps)
[bc3551257af837fc603d295e59f9e32953525b98] powerpc/64: Allow for relocation-on interrupts from guest to host
testing commit bc3551257af837fc603d295e59f9e32953525b98 with gcc (GCC) 5.5.0
kernel signature: dbfb91368e757218cb2d840fa9408319135dc7e7
all runs: OK
# git bisect good bc3551257af837fc603d295e59f9e32953525b98
Bisecting: 4656 revisions left to test after this (roughly 12 steps)
[ca45ba06885f9f3fa9a7e70296f99d9a4899dbf4] platform/x86: intel_mid_powerbtn: Unify IRQ acknowledgment
testing commit ca45ba06885f9f3fa9a7e70296f99d9a4899dbf4 with gcc (GCC) 5.5.0
kernel signature: 0ba626db525bcd4ea4399f05e74068b3d1c7d111
all runs: OK
# git bisect good ca45ba06885f9f3fa9a7e70296f99d9a4899dbf4
Bisecting: 4626 revisions left to test after this (roughly 12 steps)
[8a70aeca80c2425b60ff821140b5b5c141e28ba1] net: stmmac: Use readl_poll_timeout
testing commit 8a70aeca80c2425b60ff821140b5b5c141e28ba1 with gcc (GCC) 5.5.0
kernel signature: 65c3e114a2aa99de540959ae9eb5187d66df2867
all runs: OK
# git bisect good 8a70aeca80c2425b60ff821140b5b5c141e28ba1
Bisecting: 4626 revisions left to test after this (roughly 12 steps)
[6c992d35b8891646f838a8dc13ba042a1cc0cef0] arm64: dts: exynos: set LDO7 regulator as always on
testing commit 6c992d35b8891646f838a8dc13ba042a1cc0cef0 with gcc (GCC) 5.5.0
kernel signature: 52557c4bd2f25715a6a0ff9e6ba6f29fe9ba0366
all runs: OK
# git bisect good 6c992d35b8891646f838a8dc13ba042a1cc0cef0
Bisecting: 4606 revisions left to test after this (roughly 12 steps)
[9164bb4a18dfa592cd0aca455ea57abf89ca4526] sched/headers: Prepare to move 'init_task' and 'init_thread_union' from <linux/sched.h> to <linux/sched/task.h>
testing commit 9164bb4a18dfa592cd0aca455ea57abf89ca4526 with gcc (GCC) 5.5.0
kernel signature: 05e9f1e134e43cb0e446cf7e5c7b26c58751eaf3
run #0: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/tmp/syz-executor375891450" "root@10.128.0.242:./syz-executor375891450"]: exit status 1
Warning: Permanently added '10.128.0.242' (ECDSA) to the list of known hosts.
lost connection

run #1: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #2: crashed: KASAN: use-after-free Write in ext4_xattr_set_entry
run #3: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #4: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #5: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #6: crashed: KASAN: slab-out-of-bounds Write in ext4_mark_inode_dirty
run #7: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
run #8: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry
run #9: crashed: KASAN: use-after-free Write in ext4_mark_inode_dirty
# git bisect bad 9164bb4a18dfa592cd0aca455ea57abf89ca4526
Bisecting: 4511 revisions left to test after this (roughly 12 steps)
[7885bc8389eb92927957232cf06aad6b3907a395] staging: comedi: comedi_compat32.h: add identifiers to function parameters
testing commit 7885bc8389eb92927957232cf06aad6b3907a395 with gcc (GCC) 5.5.0
kernel signature: 03082565348652107a55fd9ce56f3bb716a30f46
all runs: OK
# git bisect good 7885bc8389eb92927957232cf06aad6b3907a395
Bisecting: 4511 revisions left to test after this (roughly 12 steps)
[75bcb0545b56eab2d69dbccf95ff7505b7114e5d] drm: tegra: use crtc helper drm_crtc_from_index()
testing commit 75bcb0545b56eab2d69dbccf95ff7505b7114e5d with gcc (GCC) 5.5.0
kernel signature: be16b4d43d1a02324757a9fc655f8e9d01b1734d
all runs: OK
# git bisect good 75bcb0545b56eab2d69dbccf95ff7505b7114e5d
Bisecting: 4471 revisions left to test after this (roughly 12 steps)
[a4ee7bacd6c08479d56738456c07e4f32fc8e523] Merge tag 'arc-4.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/vgupta/arc
testing commit a4ee7bacd6c08479d56738456c07e4f32fc8e523 with gcc (GCC) 5.5.0
kernel signature: 4945f54166a29794372e2bdb47db2d6598876b68
all runs: boot failed: WARNING in __hrtimer_init
# git bisect skip a4ee7bacd6c08479d56738456c07e4f32fc8e523
Bisecting: 4471 revisions left to test after this (roughly 12 steps)
[eb8db831be80692bf4bda3dfc55001daf64ec299] dm: always defer request allocation to the owner of the request_queue
testing commit eb8db831be80692bf4bda3dfc55001daf64ec299 with gcc (GCC) 5.5.0
kernel signature: 8652bb811622b184fb45db2f0b2f5483d4d9f583
all runs: OK
# git bisect good eb8db831be80692bf4bda3dfc55001daf64ec299
Bisecting: 4471 revisions left to test after this (roughly 12 steps)
[d4aa89cc2bbe021722c946eb11b21ebb0f13c825] sunvnet: remove unused variable in maybe_tx_wakeup
testing commit d4aa89cc2bbe021722c946eb11b21ebb0f13c825 with gcc (GCC) 5.5.0
kernel signature: b7a7254fd8e9e8925771523a8b3addd3232bff67
all runs: OK
# git bisect good d4aa89cc2bbe021722c946eb11b21ebb0f13c825
Bisecting: 4268 revisions left to test after this (roughly 12 steps)
[1265e3a69f1ea97357536773d48c92a409e01eaf] mm, vmscan: show the number of skipped pages in mm_vmscan_lru_isolate
testing commit 1265e3a69f1ea97357536773d48c92a409e01eaf with gcc (GCC) 5.5.0
kernel signature: 86173a72041e79ecad4975792d9c6e1cc0c8d99e
all runs: boot failed: WARNING in __hrtimer_init
# git bisect skip 1265e3a69f1ea97357536773d48c92a409e01eaf
Bisecting: 4268 revisions left to test after this (roughly 12 steps)
[c7bb6d8060eec4f3806b88796fbf46db1e73d900] Merge remote-tracking branch 'asoc/topic/dmaengine' into asoc-next
testing commit c7bb6d8060eec4f3806b88796fbf46db1e73d900 with gcc (GCC) 5.5.0
kernel signature: c56661ae3b60b4fb49a6fee9b3df8307b5ff9794
all runs: OK
# git bisect good c7bb6d8060eec4f3806b88796fbf46db1e73d900
Bisecting: 4257 revisions left to test after this (roughly 12 steps)
[9cc90c664a65f9b6b9f3ce1c719f1308539427bd] userfaultfd: shmem: lock the page before adding it to pagecache
testing commit 9cc90c664a65f9b6b9f3ce1c719f1308539427bd with gcc (GCC) 5.5.0
kernel signature: 9ae1a5665d819128b4e73885ca4264c337e95d52
all runs: boot failed: WARNING in __hrtimer_init
# git bisect skip 9cc90c664a65f9b6b9f3ce1c719f1308539427bd
Bisecting: 4257 revisions left to test after this (roughly 12 steps)
[eb994594bc22220976f367c03ffa141580aa45e4] ipmi: bt-bmc: Use a regmap for register access
testing commit eb994594bc22220976f367c03ffa141580aa45e4 with gcc (GCC) 5.5.0
kernel signature: e3c0db9a64bec4a89ad970671e0c89f4816214ed
all runs: OK
# git bisect good eb994594bc22220976f367c03ffa141580aa45e4
Bisecting: 4254 revisions left to test after this (roughly 12 steps)
[1c9e8def43a3452e7af658b340f5f4f4ecde5c38] userfaultfd: hugetlbfs: add UFFDIO_COPY support for shared mappings
testing commit 1c9e8def43a3452e7af658b340f5f4f4ecde5c38 with gcc (GCC) 5.5.0
kernel signature: 2f17f5a16c8f8dad27e39931de1d47dc67e358f3
all runs: boot failed: WARNING in __hrtimer_init
# git bisect skip 1c9e8def43a3452e7af658b340f5f4f4ecde5c38
Bisecting: 4254 revisions left to test after this (roughly 12 steps)
[a6e56d749f1b4c89f24d8cb008385d648fa52582] ath9k: clean up and fix ath_tx_count_airtime
testing commit a6e56d749f1b4c89f24d8cb008385d648fa52582 with gcc (GCC) 5.5.0
kernel signature: 28184642bfa40185ded3aa6233822b09728fde37
all runs: OK
# git bisect good a6e56d749f1b4c89f24d8cb008385d648fa52582
Bisecting: 4249 revisions left to test after this (roughly 12 steps)
[47dd924508f5fb10480afc69de04539fa3d14034] userfaultfd: hugetlbfs: UFFD_FEATURE_MISSING_SHMEM
testing commit 47dd924508f5fb10480afc69de04539fa3d14034 with gcc (GCC) 5.5.0
kernel signature: 7fd0f40597cea6b4429345abe57b4d2bba332567
all runs: boot failed: WARNING in __hrtimer_init
# git bisect skip 47dd924508f5fb10480afc69de04539fa3d14034
Bisecting: 4249 revisions left to test after this (roughly 12 steps)
[0e18060f99a42c20f87d64eb30e5f424509643ae] ALSA: x86: Drop unused hw_silence field
testing commit 0e18060f99a42c20f87d64eb30e5f424509643ae with gcc (GCC) 5.5.0
kernel signature: 429ea2be5134ce1006eec841184b57fb17df29de
all runs: OK
# git bisect good 0e18060f99a42c20f87d64eb30e5f424509643ae
Bisecting: 4232 revisions left to test after this (roughly 12 steps)
[369cd2121be440543280b91056de187f625d0dbb] userfaultfd: hugetlbfs: userfaultfd_huge_must_wait for hugepmd ranges
testing commit 369cd2121be440543280b91056de187f625d0dbb with gcc (GCC) 5.5.0
kernel signature: dac8d931218a113278135413802abcc42218fb24
all runs: boot failed: WARNING in __hrtimer_init
# git bisect skip 369cd2121be440543280b91056de187f625d0dbb
Bisecting: 4232 revisions left to test after this (roughly 12 steps)
[2c9c5f5a7310b62af66d7ecf6486371626b9ebf0] staging: comedi: ni_pcimio: remove unused variable 'serial_number'
testing commit 2c9c5f5a7310b62af66d7ecf6486371626b9ebf0 with gcc (GCC) 5.5.0
kernel signature: f7e8550506bd16d91485f0a5d91b3723171ceb8c
all runs: OK
# git bisect good 2c9c5f5a7310b62af66d7ecf6486371626b9ebf0
Bisecting: 3957 revisions left to test after this (roughly 12 steps)
[be5165a51d2500ae1afa1236a8b09858831fdf7e] Merge tag 'devicetree-for-4.11' of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux
testing commit be5165a51d2500ae1afa1236a8b09858831fdf7e with gcc (GCC) 5.5.0
kernel signature: 817c83685ba13e3005fa100bbe8b3b64fabbfecb
all runs: boot failed: WARNING in __hrtimer_init
# git bisect skip be5165a51d2500ae1afa1236a8b09858831fdf7e
Bisecting: 3957 revisions left to test after this (roughly 12 steps)
[013aec66afaa51581d4b41887fe418b94c54bc51] scsi: megaraid_sas: update can_queue only if the new value is less
testing commit 013aec66afaa51581d4b41887fe418b94c54bc51 with gcc (GCC) 5.5.0
kernel signature: 25b661b60e797a5ba3dbf71602620c21b1a1cf3d
all runs: OK
# git bisect good 013aec66afaa51581d4b41887fe418b94c54bc51
Bisecting: 3814 revisions left to test after this (roughly 12 steps)
[bc49a7831b1137ce1c2dda1c57e3631655f5d2ae] Merge branch 'akpm' (patches from Andrew)
testing commit bc49a7831b1137ce1c2dda1c57e3631655f5d2ae with gcc (GCC) 5.5.0
kernel signature: a21a0ee5b4f22ea868c3fd2f34dc797bc709d934
all runs: boot failed: WARNING in __hrtimer_init
# git bisect skip bc49a7831b1137ce1c2dda1c57e3631655f5d2ae
Bisecting: 3814 revisions left to test after this (roughly 12 steps)
[64b2ae74e83c0294f66ab8db9c99c274fa1a5f1a] IB/hfi1: use size_t for passing array length
testing commit 64b2ae74e83c0294f66ab8db9c99c274fa1a5f1a with gcc (GCC) 5.5.0
kernel signature: bd0110c00d3826b35a8cdec8a99d85fa7181fb2b
all runs: OK
# git bisect good 64b2ae74e83c0294f66ab8db9c99c274fa1a5f1a
Bisecting: 3857 revisions left to test after this (roughly 12 steps)
[f50c0e6371c960ad3481daa4504b33a9de4e9d01] s390: opt into HAVE_COPY_THREAD_TLS
testing commit f50c0e6371c960ad3481daa4504b33a9de4e9d01 with gcc (GCC) 5.5.0
kernel signature: ae285ec5b6e43a7e782574c01bd237434c70f876
all runs: boot failed: WARNING in __hrtimer_init
# git bisect skip f50c0e6371c960ad3481daa4504b33a9de4e9d01
Bisecting: 3857 revisions left to test after this (roughly 12 steps)
[8835cae5f2abd7f7a3143afe357f416aff5517a4] power: supply: bq27xxx: adds specific support for bq27520-g4 revision.
testing commit 8835cae5f2abd7f7a3143afe357f416aff5517a4 with gcc (GCC) 5.5.0
kernel signature: 2aca06cd9a4175f124f866fe66467cfa96c0bf2a
run #0: crashed: WARNING in batadv_mcast_mla_update
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
# git bisect bad 8835cae5f2abd7f7a3143afe357f416aff5517a4
Bisecting: 29 revisions left to test after this (roughly 5 steps)
[e3668e37f9078ccc1e938b9ddfc112877bbcf60a] power: supply: axp288_charger: Use devm_power_supply_register
testing commit e3668e37f9078ccc1e938b9ddfc112877bbcf60a with gcc (GCC) 5.5.0
kernel signature: 1be62c443042b89b4669f1d6351c75988a097b4b
all runs: OK
# git bisect good e3668e37f9078ccc1e938b9ddfc112877bbcf60a
Bisecting: 14 revisions left to test after this (roughly 4 steps)
[c56ca24a01ee88e53d2ecf4c070653b6ef45968f] power: supply: fix spelling mistake: supply: "Celcius" -> "Celsius"
testing commit c56ca24a01ee88e53d2ecf4c070653b6ef45968f with gcc (GCC) 5.5.0
kernel signature: 4b5b87bacf84faf05495a8f8d3a9d4d35ec350b2
all runs: OK
# git bisect good c56ca24a01ee88e53d2ecf4c070653b6ef45968f
Bisecting: 6 revisions left to test after this (roughly 3 steps)
[32833635b0fe9bf71bbf867d1c3abfb5b006bf29] power: supply: bq27xxx: adds specific support for bq27500/1 revision.
testing commit 32833635b0fe9bf71bbf867d1c3abfb5b006bf29 with gcc (GCC) 5.5.0
kernel signature: d74fbbfcd17ec77ea5569538558c343dde74a14c
all runs: OK
# git bisect good 32833635b0fe9bf71bbf867d1c3abfb5b006bf29
Bisecting: 2 revisions left to test after this (roughly 2 steps)
[68f2a813eb25bd0ef72453aeef9b1ce156157d14] power: supply: bq27xxx: adds specific support for bq27520-g1 revision.
testing commit 68f2a813eb25bd0ef72453aeef9b1ce156157d14 with gcc (GCC) 5.5.0
kernel signature: ba4741a691c9f6340dcd4937d127e7f3475cdfd4
all runs: OK
# git bisect good 68f2a813eb25bd0ef72453aeef9b1ce156157d14
Bisecting: 0 revisions left to test after this (roughly 1 step)
[825e915ba2e811b91a034ac6290cd172387c5447] power: supply: bq27xxx: adds specific support for bq27520-g3 revision.
testing commit 825e915ba2e811b91a034ac6290cd172387c5447 with gcc (GCC) 5.5.0
kernel signature: 8a8dd9ca5726f129b6d36eb6e1f3b78cc7c18b31
all runs: OK
# git bisect good 825e915ba2e811b91a034ac6290cd172387c5447
8835cae5f2abd7f7a3143afe357f416aff5517a4 is the first bad commit
commit 8835cae5f2abd7f7a3143afe357f416aff5517a4
Author: Chris Lapa <chris@lapa.com.au>
Date:   Wed Jan 11 12:44:47 2017 +1100

    power: supply: bq27xxx: adds specific support for bq27520-g4 revision.
    
    This commit adds the BQ27520G4 chip definition to specifically match the
    bq27520-G4 functionality as described in the datasheet.
    
    Signed-off-by: Chris Lapa <chris@lapa.com.au>
    Acked-by: Pali Rohár <pali.rohar@gmail.com>
    Reviewed-by: Andrew F. Davis <afd@ti.com>
    Signed-off-by: Sebastian Reichel <sre@kernel.org>

 drivers/power/supply/bq27xxx_battery.c     | 39 ++++++++++++++++++++++++++++++
 drivers/power/supply/bq27xxx_battery_i2c.c |  2 ++
 include/linux/power/bq27xxx_battery.h      |  1 +
 3 files changed, 42 insertions(+)
culprit signature: 2aca06cd9a4175f124f866fe66467cfa96c0bf2a
parent  signature: 8a8dd9ca5726f129b6d36eb6e1f3b78cc7c18b31
revisions tested: 67, total time: 15h36m41.78676488s (build: 5h9m49.809681377s, test: 10h21m35.409790932s)
first bad commit: 8835cae5f2abd7f7a3143afe357f416aff5517a4 power: supply: bq27xxx: adds specific support for bq27520-g4 revision.
cc: ["afd@ti.com" "chris@lapa.com.au" "pali.rohar@gmail.com" "sre@kernel.org"]
crash: WARNING in batadv_mcast_mla_update
team0 (unregistering): Port device team_slave_0 removed
bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5 at net/batman-adv/multicast.c:315 batadv_mcast_mla_tt_add net/batman-adv/multicast.c:315 [inline]
WARNING: CPU: 1 PID: 5 at net/batman-adv/multicast.c:315 __batadv_mcast_mla_update net/batman-adv/multicast.c:579 [inline]
WARNING: CPU: 1 PID: 5 at net/batman-adv/multicast.c:315 batadv_mcast_mla_update+0x140d/0x1b70 net/batman-adv/multicast.c:604
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 5 Comm: kworker/u4:0 Not tainted 4.10.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bat_events batadv_mcast_mla_update
Call Trace:
 __dump_stack lib/dump_stack.c:15 [inline]
 dump_stack+0xe6/0x120 lib/dump_stack.c:51
 panic+0x1b6/0x358 kernel/panic.c:179
 __warn+0x18d/0x1b0 kernel/panic.c:539
 warn_slowpath_null+0x18/0x20 kernel/panic.c:582
 batadv_mcast_mla_tt_add net/batman-adv/multicast.c:315 [inline]
 __batadv_mcast_mla_update net/batman-adv/multicast.c:579 [inline]
 batadv_mcast_mla_update+0x140d/0x1b70 net/batman-adv/multicast.c:604
 process_one_work+0x72f/0x16a0 kernel/workqueue.c:2098
 worker_thread+0xe1/0x1110 kernel/workqueue.c:2232
 kthread+0x2c9/0x3d0 kernel/kthread.c:227
 ret_from_fork+0x2a/0x40 arch/x86/entry/entry_64.S:427
Kernel Offset: disabled