ci2 starts bisection 2025-04-30 12:08:04.152273738 +0000 UTC m=+68745.083457069 bisecting fixing commit since da4373fbcf006deda90e5e6a87c499e0ff747572 building syzkaller on 6b856513c13bbdf86191190923fb64438219ea68 ensuring issue is reproducible on original commit da4373fbcf006deda90e5e6a87c499e0ff747572 testing commit da4373fbcf006deda90e5e6a87c499e0ff747572 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 355173e9a60c295b7c4635fb12ce567d39c9daf1746c15d032b5f7d8cf91de1a run #0: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #1: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #2: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #3: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #4: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #5: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #6: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #7: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #8: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #9: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #10: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #11: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #12: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #13: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #14: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #15: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #16: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #17: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #18: crashed: KASAN: slab-use-after-free Read in scatterwalk_copychunks run #19: crashed: KASAN: use-after-free Read in scatterwalk_copychunks representative crash: KASAN: use-after-free Read in scatterwalk_copychunks, types: [KASAN] check whether we can drop unnecessary instrumentation disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed testing commit da4373fbcf006deda90e5e6a87c499e0ff747572 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 7e1cc7aee74b22b75c455bffa5d8b8d0850ea868931c59b715c019b147cdd0db all runs: crashed: KASAN: use-after-free Read in scatterwalk_copychunks representative crash: KASAN: use-after-free Read in scatterwalk_copychunks, types: [KASAN] the bug reproduces without the instrumentation disabling configs for [BUG LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed kconfig minimization: base=4080 full=8184 leaves diff=2139 split chunks (needed=false): <2139> split chunk #0 of len 2139 into 5 parts testing without sub-chunk 1/5 disabling configs for [UBSAN BUG LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit da4373fbcf006deda90e5e6a87c499e0ff747572 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 3b148496fcd584ed985aa19e3ed5150345fc3397507b91a8bffd5761f3819db1 all runs: OK false negative chance: 0.000 testing without sub-chunk 2/5 disabling configs for [BUG LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit da4373fbcf006deda90e5e6a87c499e0ff747572 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 6513735489a4326869039a046659ed4778d803bc280f1095c631497cfdb4c98d all runs: crashed: KASAN: use-after-free Read in scatterwalk_copychunks representative crash: KASAN: use-after-free Read in scatterwalk_copychunks, types: [KASAN] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG LOCKDEP], they are not needed testing commit da4373fbcf006deda90e5e6a87c499e0ff747572 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: f5495a30eea6bd4c0838836a16521a7fa29e26a76e4914167dd410630224be1c all runs: crashed: KASAN: use-after-free Read in scatterwalk_copychunks representative crash: KASAN: use-after-free Read in scatterwalk_copychunks, types: [KASAN] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG LOCKDEP], they are not needed testing commit da4373fbcf006deda90e5e6a87c499e0ff747572 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 4ce7f4f7edc4b7cb61997caccfaa378db11aa2460c3ee0b7762d2049522ef482 all runs: crashed: KASAN: use-after-free Read in scatterwalk_copychunks representative crash: KASAN: use-after-free Read in scatterwalk_copychunks, types: [KASAN] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [UBSAN BUG LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit da4373fbcf006deda90e5e6a87c499e0ff747572 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 0f9718d3ba993ae8557611ae90497a229ac12dd6da88753dfa096301d45df7b7 all runs: crashed: KASAN: use-after-free Read in scatterwalk_copychunks representative crash: KASAN: use-after-free Read in scatterwalk_copychunks, types: [KASAN] the chunk can be dropped minimized to 428 configs; suspects: [6LOWPAN 6LOWPAN_GHC_EXT_HDR_DEST 6LOWPAN_GHC_EXT_HDR_FRAG 6LOWPAN_GHC_EXT_HDR_HOP 6LOWPAN_GHC_EXT_HDR_ROUTE 6LOWPAN_GHC_ICMPV6 6LOWPAN_GHC_UDP 6LOWPAN_NHC 6LOWPAN_NHC_DEST 6LOWPAN_NHC_FRAGMENT 6LOWPAN_NHC_HOP 6LOWPAN_NHC_IPV6 6LOWPAN_NHC_MOBILITY 6LOWPAN_NHC_ROUTING 6LOWPAN_NHC_UDP 6PACK 842_COMPRESS 842_DECOMPRESS 9P_FSCACHE 9P_FS_POSIX_ACL 9P_FS_SECURITY ACORN_PARTITION ACORN_PARTITION_ADFS ACORN_PARTITION_CUMANA ACORN_PARTITION_EESOX ACORN_PARTITION_ICS ACORN_PARTITION_POWERTEC ACORN_PARTITION_RISCIX ACPI_NFIT ACPI_NHLT ACPI_PLATFORM_PROFILE ADFS_FS AFFS_FS AFS_FS AFS_FSCACHE AF_KCM AF_RXRPC AF_RXRPC_IPV6 AIX_PARTITION AMD_SFH_HID AMIGA_PARTITION ANDROID_BINDERFS ANDROID_BINDER_IPC ANON_VMA_NAME APERTURE_HELPERS APPLE_MFI_FASTCHARGE AR5523 ARCH_ENABLE_MEMORY_HOTREMOVE ARCH_ENABLE_THP_MIGRATION ARCH_SUPPORTS_HUGE_PFNMAP ARCH_SUPPORTS_PMD_PFNMAP ARCH_SUPPORTS_PUD_PFNMAP ARCH_WANT_PMD_MKWRITE ASM_MODVERSIONS ASUS_TF103C_DOCK ASYNC_CORE ASYNC_MEMCPY ASYNC_PQ ASYNC_RAID6_RECOV ASYNC_TX_DMA ASYNC_XOR AS_SHA1_NI AS_SHA256_NI AS_TPAUSE ATARI_PARTITION ATA_GENERIC ATA_OVER_ETH ATH10K ATH10K_CE ATH10K_LEDS ATH10K_PCI ATH10K_USB ATH11K ATH6KL ATH6KL_USB ATH9K ATH9K_AHB ATH9K_BTCOEX_SUPPORT ATH9K_CHANNEL_CONTEXT ATH9K_COMMON ATH9K_COMMON_DEBUG ATH9K_COMMON_SPECTRAL ATH9K_DEBUGFS ATH9K_DYNACK ATH9K_HTC ATH9K_HTC_DEBUGFS ATH9K_HW ATH9K_PCI ATH9K_PCOEM ATH9K_RFKILL ATH_COMMON ATM ATM_BR2684 ATM_CLIP ATM_DRIVERS ATM_LANE ATM_MPOA ATM_TCP AUXILIARY_BUS AX25 AX25_DAMA_SLAVE AX88796B_PHY BAREUDP BATMAN_ADV BATMAN_ADV_BATMAN_V BATMAN_ADV_BLA BATMAN_ADV_DAT BATMAN_ADV_MCAST BATMAN_ADV_NC BCACHE BCACHEFS_DEBUG BCACHEFS_ERASURE_CODING BCACHEFS_FS BCACHEFS_POSIX_ACL BCACHEFS_QUOTA BCACHEFS_SIX_OPTIMISTIC_SPIN BCMA BCMA_HOST_PCI_POSSIBLE BEFS_FS BFQ_CGROUP_DEBUG BFQ_GROUP_IOSCHED BFS_FS BIG_KEYS BLK_CGROUP_PUNT_BIO BLK_CGROUP_RWSTAT BLK_DEV_BSGLIB BLK_DEV_INTEGRITY BLK_DEV_NBD BLK_DEV_NULL_BLK BLK_DEV_NULL_BLK_FAULT_INJECTION BLK_DEV_NVME BLK_DEV_PMEM BLK_DEV_RAM BLK_DEV_RNBD BLK_DEV_RNBD_CLIENT BLK_DEV_THROTTLING BLK_DEV_ZONED BLK_ICQ BLK_INLINE_ENCRYPTION BLK_INLINE_ENCRYPTION_FALLBACK BLK_WBT BLK_WBT_MQ BONDING BOOT_VESA_SUPPORT BPF_EVENTS BPF_JIT BPF_JIT_ALWAYS_ON BPF_JIT_DEFAULT_ON BPF_LSM BPF_PRELOAD BPF_PRELOAD_UMD BPF_STREAM_PARSER BPF_SYSCALL BPQETHER BRIDGE BRIDGE_CFM BRIDGE_EBT_802_3 BRIDGE_EBT_AMONG BRIDGE_EBT_ARP BRIDGE_EBT_ARPREPLY BRIDGE_EBT_BROUTE BRIDGE_EBT_DNAT BRIDGE_EBT_IP BRIDGE_EBT_IP6 BRIDGE_EBT_LIMIT BRIDGE_EBT_LOG BRIDGE_EBT_MARK BRIDGE_EBT_MARK_T BRIDGE_EBT_NFLOG BRIDGE_EBT_PKTTYPE BRIDGE_EBT_REDIRECT BRIDGE_EBT_SNAT BRIDGE_EBT_STP BRIDGE_EBT_T_FILTER BRIDGE_EBT_T_NAT BRIDGE_EBT_VLAN BRIDGE_IGMP_SNOOPING BRIDGE_MRP BRIDGE_NF_EBTABLES BRIDGE_NF_EBTABLES_LEGACY BRIDGE_VLAN_FILTERING BSD_DISKLABEL BSD_PROCESS_ACCT_V3 BT BTRFS_ASSERT BTRFS_FS BTRFS_FS_POSIX_ACL BTRFS_FS_REF_VERIFY BTT BT_6LOWPAN BT_ATH3K BT_BCM BT_BNEP BT_BNEP_MC_FILTER BT_BNEP_PROTO_FILTER BT_BREDR BT_HCIBCM203X BT_HCIBFUSB BT_HCIBPA10X BT_HCIBTUSB BT_HCIBTUSB_AUTOSUSPEND BT_HCIBTUSB_BCM BT_HCIBTUSB_MTK BT_HCIBTUSB_POLL_SYNC BT_HCIBTUSB_RTL BT_HCIUART BT_HCIUART_3WIRE BT_HCIUART_AG6XX BT_HCIUART_BCSP BT_HCIUART_H4 BT_HCIUART_LL BT_HCIUART_MRVL BT_HCIUART_QCA BT_HCIUART_SERDEV BT_HCIVHCI BT_INTEL BT_LE BT_LEDS BT_LE_L2CAP_ECRED BT_MRVL BT_MRVL_SDIO BT_MSFTEXT BT_MTK BT_MTKSDIO BT_MTKUART BT_QCA BT_RFCOMM BT_RFCOMM_TTY BT_RTL CACHEFILES CAIF CAIF_DEBUG CAIF_DRIVERS CAIF_NETDEV CAIF_TTY CAIF_USB CAIF_VIRTIO CAN CAN_8DEV_USB CAN_BCM CAN_CALC_BITTIMING CAN_DEV CAN_EMS_USB CAN_ESD_USB CAN_ETAS_ES58X CAN_F81604 CAN_GS_USB CAN_GW CAN_IFI_CANFD CAN_ISOTP CAN_J1939 CAN_KVASER_USB CAN_MCBA_USB CAN_NETLINK CAN_PEAK_USB CAN_RAW CAN_RX_OFFLOAD CAN_SLCAN CAN_UCAN CAN_VCAN CAN_VXCAN CARL9170 CARL9170_HWRNG CARL9170_LEDS CARL9170_WPC CC_HAS_AUTO_VAR_INIT_ZERO_ENABLER CC_HAS_SANE_STACKPROTECTOR CEC_CORE CEPH_FS CEPH_FSCACHE CEPH_FS_POSIX_ACL CEPH_LIB CEPH_LIB_USE_DNS_RESOLVER CFG80211 CFG80211_CRDA_SUPPORT CFG80211_DEBUGFS CFG80211_DEFAULT_PS CFG80211_REQUIRE_SIGNED_REGDB CFG80211_USE_KERNEL_REGDB_KEYS CFG80211_WEXT CFS_BANDWIDTH CGROUP_BPF CHARGER_ISP1704 CHR_DEV_ST CIFS CIFS_ALLOW_INSECURE_LEGACY CIFS_DEBUG CIFS_DFS_UPCALL CIFS_FSCACHE CIFS_POSIX CIFS_SMB_DIRECT CIFS_SWN_UPCALL CIFS_UPCALL CIFS_XATTR CLOCKSOURCE_VALIDATE_LAST_CYCLE CLOSURES CLS_U32_MARK CLS_U32_PERF CMA CMA_SIZE_SEL_MAX CMDLINE_PARTITION COMEDI COMEDI_DT9812 COMEDI_NI_USB6501 COMEDI_USBDUX COMEDI_USBDUXFAST COMEDI_USBDUXSIGMA COMEDI_USB_DRIVERS COMEDI_VMK80XX COMPAT_NETLINK_MESSAGES COUNTER CRAMFS CRAMFS_BLOCKDEV CRAMFS_MTD CRC32_SLICEBY8 CRC4 CRC64 CRC64_ROCKSOFT CRC7 CRC8 CRC_ITU_T CRC_T10DIF CRYPTO_842 CRYPTO_ADIANTUM CRYPTO_AEGIS128 CRYPTO_AEGIS128_AESNI_SSE2 CRYPTO_AES_NI_INTEL CRYPTO_AES_TI CRYPTO_ANSI_CPRNG CRYPTO_ANUBIS CRYPTO_ARC4 CRYPTO_ARCH_HAVE_LIB_BLAKE2S CRYPTO_ARCH_HAVE_LIB_CHACHA CRYPTO_ARCH_HAVE_LIB_CURVE25519 CRYPTO_ARCH_HAVE_LIB_POLY1305 CRYPTO_ARIA CRYPTO_ARIA_AESNI_AVX_X86_64 CRYPTO_BLAKE2B CRYPTO_BLAKE2S_X86 CRYPTO_BLOWFISH CRYPTO_BLOWFISH_COMMON CRYPTO_BLOWFISH_X86_64 CRYPTO_CAMELLIA CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 CRYPTO_CAMELLIA_AESNI_AVX_X86_64 CRYPTO_CAMELLIA_X86_64 CRYPTO_CAST5 CRYPTO_CAST5_AVX_X86_64 CRYPTO_CAST6 CRYPTO_CAST6_AVX_X86_64 CRYPTO_CAST_COMMON CRYPTO_CHACHA20 CRYPTO_CHACHA20POLY1305 CRYPTO_CHACHA20_X86_64 CRYPTO_CRC32 CRYPTO_CRC32C CRYPTO_CRC32C_INTEL CRYPTO_CRC32_PCLMUL CRYPTO_CRC64_ROCKSOFT CRYPTO_CRCT10DIF CRYPTO_CRCT10DIF_PCLMUL CRYPTO_CRYPTD CRYPTO_CURVE25519 CRYPTO_CURVE25519_X86 CRYPTO_DEFLATE CRYPTO_DES CRYPTO_DES3_EDE_X86_64 CRYPTO_DEV_CCP CRYPTO_DEV_CCP_DD CRYPTO_DEV_PADLOCK CRYPTO_DEV_PADLOCK_AES CRYPTO_DEV_PADLOCK_SHA CRYPTO_DEV_QAT CRYPTO_DEV_QAT_C3XXX CRYPTO_DEV_QAT_C3XXXVF CRYPTO_DEV_QAT_C62X CRYPTO_DEV_QAT_C62XVF CRYPTO_DEV_QAT_DH895xCC CRYPTO_DEV_QAT_DH895xCCVF CRYPTO_DEV_VIRTIO CRYPTO_DH CRYPTO_DRBG_CTR CRYPTO_DRBG_HASH CRYPTO_ECDH CRYPTO_ECRDSA CRYPTO_ENGINE CRYPTO_ESSIV CRYPTO_FCRYPT CRYPTO_GHASH_CLMUL_NI_INTEL CRYPTO_HCTR2 CRYPTO_KDF800108_CTR CRYPTO_KEYWRAP CRYPTO_KHAZAD CRYPTO_KPP CRYPTO_LIB_ARC4 CRYPTO_LIB_CHACHA CRYPTO_LIB_CHACHA20POLY1305 CRYPTO_LIB_CHACHA_GENERIC CRYPTO_LIB_CURVE25519 CRYPTO_LIB_CURVE25519_GENERIC CRYPTO_LIB_DES CRYPTO_LIB_POLY1305 CRYPTO_LIB_POLY1305_GENERIC CRYPTO_LRW CRYPTO_LZ4 CRYPTO_LZ4HC CRYPTO_MICHAEL_MIC CRYPTO_NHPOLY1305 CRYPTO_NHPOLY1305_AVX2 CRYPTO_NHPOLY1305_SSE2 CRYPTO_PCBC CRYPTO_PCRYPT CRYPTO_POLY1305 CRYPTO_POLY1305_X86_64 CRYPTO_POLYVAL CRYPTO_POLYVAL_CLMUL_NI CRYPTO_RMD160 CRYPTO_SEED CRYPTO_SERPENT CRYPTO_SERPENT_AVX2_X86_64 CRYPTO_SERPENT_AVX_X86_64 CRYPTO_SERPENT_SSE2_X86_64 CRYPTO_SHA1_SSSE3 CRYPTO_SHA256_SSSE3 CRYPTO_SHA512_SSSE3 CRYPTO_SIMD CRYPTO_SM3 CRYPTO_SM3_AVX_X86_64 CRYPTO_SM4 CRYPTO_SM4_AESNI_AVX2_X86_64 CRYPTO_SM4_AESNI_AVX_X86_64 CRYPTO_SM4_GENERIC CRYPTO_STREEBOG CRYPTO_TEA CRYPTO_TWOFISH CRYPTO_TWOFISH_AVX_X86_64 CRYPTO_TWOFISH_COMMON CRYPTO_TWOFISH_X86_64 CRYPTO_TWOFISH_X86_64_3WAY CRYPTO_USER CRYPTO_USER_API CRYPTO_USER_API_AEAD CRYPTO_USER_API_ENABLE_OBSOLETE CRYPTO_USER_API_HASH CRYPTO_USER_API_RNG CRYPTO_USER_API_SKCIPHER CRYPTO_VMAC CRYPTO_WP512 CRYPTO_XCBC CRYPTO_XCTR CRYPTO_XTS CRYPTO_XXHASH CRYPTO_ZSTD CUSE CYPRESS_FIRMWARE DAMON DAMON_PADDR DAMON_RECLAIM DAMON_VADDR DAX DCA DCB DEBUG_TIMEKEEPING DEFAULT_CODEL DEVICE_MIGRATION DEVICE_PRIVATE DEV_COREDUMP DEV_DAX DLN2_ADC DMABUF_HEAPS DMABUF_HEAPS_CMA DMABUF_HEAPS_SYSTEM DMABUF_MOVE_NOTIFY DMA_CMA DMA_ENGINE_RAID DM_AUDIT DM_BIO_PRISON DM_BUFIO DM_CACHE DM_CACHE_SMQ DM_CLONE DM_CRYPT DM_FLAKEY DM_INTEGRITY DM_MULTIPATH DM_MULTIPATH_QL DM_MULTIPATH_ST DM_PERSISTENT_DATA DM_RAID DM_SNAPSHOT DM_THIN_PROVISIONING DM_UEVENT DM_VERITY DM_VERITY_FEC DM_WRITECACHE DM_ZONED DRAGONRISE_FF DRM DRM_AUX_BRIDGE DRM_BOCHS DRM_BRIDGE DRM_BUDDY DRM_CIRRUS_QEMU DRM_DEBUG_MM DRM_DISPLAY_DP_AUX_BUS DRM_DISPLAY_DP_HELPER DRM_DISPLAY_HDCP_HELPER DRM_DISPLAY_HDMI_HELPER DRM_DISPLAY_HELPER DRM_FBDEV_EMULATION DRM_GEM_SHMEM_HELPER ENCRYPTED_KEYS FSCACHE FUSE_FS GPIOLIB HAMRADIO HID_DRAGONRISE IIO INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_RTRS_CLIENT IOSCHED_BFQ LIBNVDIMM MAC80211 MAC80211_DEBUGFS MAC80211_LEDS MCORE2 MEDIA_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MMC MTD NET_CLS_U32 NET_SCH_DEFAULT PARTITION_ADVANCED RFKILL SERIAL_DEV_BUS TLS TLS_DEVICE TRANSPARENT_HUGEPAGE TRUSTED_KEYS USB_GADGET USB_PHY VLAN_8021Q WANT_COMPAT_NETLINK_MESSAGES WEXT_CORE WIRELESS WIRELESS_EXT WLAN WLAN_VENDOR_ATH X86_X32_ABI ZONE_DEVICE] disabling configs for [UBSAN BUG LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing current HEAD b6ea1680d0ac0e45157a819c41b46565f4616186 testing commit b6ea1680d0ac0e45157a819c41b46565f4616186 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: fa07cb058396785cc3e44054476fdf70b47e2a975cae74598d4b6c288e1ccc6e all runs: OK false negative chance: 0.000 # git bisect start b6ea1680d0ac0e45157a819c41b46565f4616186 da4373fbcf006deda90e5e6a87c499e0ff747572 Bisecting: 20703 revisions left to test after this (roughly 14 steps) [4e517a6acdc40d61076ead4244b980c276af9b6e] Merge tag 'soc-new-6.14' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc determine whether the revision contains the guilty commit revision da4373fbcf006deda90e5e6a87c499e0ff747572 crashed and is reachable testing commit 4e517a6acdc40d61076ead4244b980c276af9b6e gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 6ba74cc25c8cd175dd5eb2201dc068e2d265ace94616afc7797680df35fa4a93 all runs: OK false negative chance: 0.000 # git bisect bad 4e517a6acdc40d61076ead4244b980c276af9b6e Bisecting: 10286 revisions left to test after this (roughly 13 steps) [b50ecc5aca4d18f1f0c4942f5c797bc85edef144] Merge tag 'perf-tools-for-v6.13-2024-11-24' of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools determine whether the revision contains the guilty commit revision da4373fbcf006deda90e5e6a87c499e0ff747572 crashed and is reachable testing commit b50ecc5aca4d18f1f0c4942f5c797bc85edef144 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: bb6ca1bb0dd6a04c0a66359505597059beb5bff7fcf2071f277093244df9f38b all runs: OK false negative chance: 0.000 # git bisect bad b50ecc5aca4d18f1f0c4942f5c797bc85edef144 Bisecting: 4596 revisions left to test after this (roughly 12 steps) [fcc79e1714e8c2b8e216dc3149812edd37884eef] Merge tag 'net-next-6.13' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next determine whether the revision contains the guilty commit revision da4373fbcf006deda90e5e6a87c499e0ff747572 crashed and is reachable testing commit fcc79e1714e8c2b8e216dc3149812edd37884eef gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 5a2481a7cafc71358b42e39575aa2e9f2c7bdb1f114fc7a444b3d64c97a6ff77 all runs: OK false negative chance: 0.000 # git bisect bad fcc79e1714e8c2b8e216dc3149812edd37884eef Bisecting: 2858 revisions left to test after this (roughly 12 steps) [9f5a6a1fe690a43896e0235377c7eb0b657c05a9] Merge tag 'media/v6.13-1' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media determine whether the revision contains the guilty commit revision da4373fbcf006deda90e5e6a87c499e0ff747572 crashed and is reachable testing commit 9f5a6a1fe690a43896e0235377c7eb0b657c05a9 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 916e0c0ddb8e13a5a01294134033894ce5cc97f687698f2c5c1c201a73f20a91 all runs: OK false negative chance: 0.000 # git bisect bad 9f5a6a1fe690a43896e0235377c7eb0b657c05a9 Bisecting: 1450 revisions left to test after this (roughly 11 steps) [ad52c55e1d3a2e85e05e47b6d7056c662a9c0246] Merge tag 'pm-6.13-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm determine whether the revision contains the guilty commit revision da4373fbcf006deda90e5e6a87c499e0ff747572 crashed and is reachable testing commit ad52c55e1d3a2e85e05e47b6d7056c662a9c0246 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 6799c520339ff7fb1a82dfe8222ce6c17f5895a0eaff8143fc5ff99bfdd35ab1 all runs: OK false negative chance: 0.000 # git bisect bad ad52c55e1d3a2e85e05e47b6d7056c662a9c0246 Bisecting: 764 revisions left to test after this (roughly 10 steps) [3d1b536c13f7cd966aa660d1730855b26d01c9ae] Merge tag 'ata-6.13-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/libata/linux determine whether the revision contains the guilty commit revision da4373fbcf006deda90e5e6a87c499e0ff747572 crashed and is reachable testing commit 3d1b536c13f7cd966aa660d1730855b26d01c9ae gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: f0d295feb8ac9f1f38a83cec0057e922a2aa9cee986842a8516bbbc2797a27ee all runs: OK false negative chance: 0.000 # git bisect bad 3d1b536c13f7cd966aa660d1730855b26d01c9ae Bisecting: 337 revisions left to test after this (roughly 8 steps) [70e7730c2a78313e3ccc932410c939816e3ba1bc] Merge tag 'vfs-6.13.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs determine whether the revision contains the guilty commit revision da4373fbcf006deda90e5e6a87c499e0ff747572 crashed and is reachable testing commit 70e7730c2a78313e3ccc932410c939816e3ba1bc gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: ffbbd5862cf542e6b40ee4615442066a5387cdf6b06ef688bf5dd016baa0d05e all runs: OK false negative chance: 0.000 # git bisect bad 70e7730c2a78313e3ccc932410c939816e3ba1bc Bisecting: 158 revisions left to test after this (roughly 8 steps) [cfaaa7d010d1fc58f9717fcc8591201e741d2d49] Merge tag 'net-6.12-rc8' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net determine whether the revision contains the guilty commit revision da4373fbcf006deda90e5e6a87c499e0ff747572 crashed and is reachable testing commit cfaaa7d010d1fc58f9717fcc8591201e741d2d49 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 80837c52688322b28730b71ab43fee46db946facfd76fb3e2ac8ced413edc05d all runs: OK false negative chance: 0.000 # git bisect bad cfaaa7d010d1fc58f9717fcc8591201e741d2d49 Bisecting: 96 revisions left to test after this (roughly 7 steps) [5456ec9dab3a918ccfc0dc82677d38a74fab4212] Merge tag 'for-6.12/dm-fixes-3' of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm determine whether the revision contains the guilty commit revision da4373fbcf006deda90e5e6a87c499e0ff747572 crashed and is reachable testing commit 5456ec9dab3a918ccfc0dc82677d38a74fab4212 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 0c134023cc2166a505e293c0836ede5d561f98edc177cbd6411ac1d9e41d896b all runs: crashed: KASAN: use-after-free Read in scatterwalk_copychunks representative crash: KASAN: use-after-free Read in scatterwalk_copychunks, types: [KASAN] # git bisect good 5456ec9dab3a918ccfc0dc82677d38a74fab4212 Bisecting: 44 revisions left to test after this (roughly 6 steps) [4abcd80f23357808b0444d261ed08e5a77dbaa9a] Merge tag 'bcachefs-2024-11-13' of git://evilpiepirate.org/bcachefs determine whether the revision contains the guilty commit revision 5456ec9dab3a918ccfc0dc82677d38a74fab4212 crashed and is reachable testing commit 4abcd80f23357808b0444d261ed08e5a77dbaa9a gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 81c543a95f579194bd6db7b86ac3a3950e6af63fd9106cbc40da451722342976 all runs: OK false negative chance: 0.000 # git bisect bad 4abcd80f23357808b0444d261ed08e5a77dbaa9a Bisecting: 26 revisions left to test after this (roughly 5 steps) [4b49c0ba4eeb31b44462303cac4162476b72c831] Merge tag 'mm-hotfixes-stable-2024-11-12-16-39' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm determine whether the revision contains the guilty commit revision 5456ec9dab3a918ccfc0dc82677d38a74fab4212 crashed and is reachable testing commit 4b49c0ba4eeb31b44462303cac4162476b72c831 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: eb3cf3a2a9f0a9c45341063d8df5166cc1218af96006558a4acd2c3a52d65c91 all runs: crashed: KASAN: use-after-free Read in scatterwalk_copychunks representative crash: KASAN: use-after-free Read in scatterwalk_copychunks, types: [KASAN] # git bisect good 4b49c0ba4eeb31b44462303cac4162476b72c831 Bisecting: 14 revisions left to test after this (roughly 4 steps) [9f8e716d46c68112484a23d1742d9ec725e082fc] Merge tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf determine whether the revision contains the guilty commit revision da4373fbcf006deda90e5e6a87c499e0ff747572 crashed and is reachable testing commit 9f8e716d46c68112484a23d1742d9ec725e082fc gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: cb98e993a62f837a55fe4edfe1073dca0939f3f82894877bfec87728e4857e36 all runs: crashed: KASAN: use-after-free Read in scatterwalk_copychunks representative crash: KASAN: use-after-free Read in scatterwalk_copychunks, types: [KASAN] # git bisect good 9f8e716d46c68112484a23d1742d9ec725e082fc Bisecting: 7 revisions left to test after this (roughly 3 steps) [2642084f26b5a5e9353fa530efb30f49e752185d] bcachefs: Allow for unknown key types in backpointers fsck determine whether the revision contains the guilty commit checking the merge base 8440da933127fc5330c3d1090cdd612fddbc40eb no existing result, test the revision testing commit 8440da933127fc5330c3d1090cdd612fddbc40eb gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 5b591b89b1aa1300f222c4f504f7adbc3802e4fb5e30c0bd1d97566ad858f305 all runs: crashed: KASAN: use-after-free Read in scatterwalk_copychunks representative crash: KASAN: use-after-free Read in scatterwalk_copychunks, types: [KASAN] testing commit 2642084f26b5a5e9353fa530efb30f49e752185d gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 36c56a284c753f895248ccd162524994e4e34d1df41fb6b8ad00dd8defa41af7 all runs: OK false negative chance: 0.000 # git bisect bad 2642084f26b5a5e9353fa530efb30f49e752185d Bisecting: 3 revisions left to test after this (roughly 2 steps) [f8f1dde6868139f2294786365c56d7ff5cc3f4e7] bcachefs: Fix missing validation for bch_backpointer.level determine whether the revision contains the guilty commit revision 8440da933127fc5330c3d1090cdd612fddbc40eb crashed and is reachable testing commit f8f1dde6868139f2294786365c56d7ff5cc3f4e7 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: a901d16aca5a8586005da51df1fb8a93be16e02ffe767b2559ca1962022588b0 all runs: crashed: KASAN: use-after-free Read in scatterwalk_copychunks representative crash: KASAN: use-after-free Read in scatterwalk_copychunks, types: [KASAN] # git bisect good f8f1dde6868139f2294786365c56d7ff5cc3f4e7 Bisecting: 1 revision left to test after this (roughly 1 step) [bcf77a05fb3d6210026483703bcacb22ed961c99] bcachefs: Fix hidden btree errors when reading roots determine whether the revision contains the guilty commit revision f8f1dde6868139f2294786365c56d7ff5cc3f4e7 crashed and is reachable testing commit bcf77a05fb3d6210026483703bcacb22ed961c99 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 0c6da3ba5f8e0ee128b089d82c192f859ca64bc7905aa7d9569e1deed48ddcd9 all runs: OK false negative chance: 0.000 # git bisect bad bcf77a05fb3d6210026483703bcacb22ed961c99 Bisecting: 0 revisions left to test after this (roughly 0 steps) [dc537189b5cf09e61839491fc6a465c5659d7dbd] bcachefs: Fix validate_bset() repair path determine whether the revision contains the guilty commit revision 8440da933127fc5330c3d1090cdd612fddbc40eb crashed and is reachable testing commit dc537189b5cf09e61839491fc6a465c5659d7dbd gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 830766b85bf9ed977df14023165af116685a3b3797718b3ffa0539c11263b6fa all runs: crashed: KASAN: use-after-free Read in scatterwalk_copychunks representative crash: KASAN: use-after-free Read in scatterwalk_copychunks, types: [KASAN] # git bisect good dc537189b5cf09e61839491fc6a465c5659d7dbd bcf77a05fb3d6210026483703bcacb22ed961c99 is the first bad commit commit bcf77a05fb3d6210026483703bcacb22ed961c99 Author: Kent Overstreet Date: Fri Nov 8 00:25:18 2024 -0500 bcachefs: Fix hidden btree errors when reading roots We silence btree errors in btree_node_scan, since it's probing and errors are expected: add a fake pass so that btree_node_scan is no longer recovery pass 0, and we don't think we're in btree node scan when reading btree roots. Signed-off-by: Kent Overstreet fs/bcachefs/recovery_passes.c | 6 ++++++ fs/bcachefs/recovery_passes_types.h | 1 + 2 files changed, 7 insertions(+) accumulated error probability: 0.00 culprit signature: 0c6da3ba5f8e0ee128b089d82c192f859ca64bc7905aa7d9569e1deed48ddcd9 parent signature: 830766b85bf9ed977df14023165af116685a3b3797718b3ffa0539c11263b6fa revisions tested: 25, total time: 8h26m34.344524218s (build: 3h52m59.416913958s, test: 3h11m29.690399192s) first good commit: bcf77a05fb3d6210026483703bcacb22ed961c99 bcachefs: Fix hidden btree errors when reading roots recipients (to): ["kent.overstreet@linux.dev"] recipients (cc): []