ci2 starts bisection 2025-12-30 16:25:18.486176709 +0000 UTC m=+2948130.663299776 bisecting fixing commit since 03d38806a902b36bf364cae8de6f1183c0a35a67 building syzkaller on c3901742785ff25afdc6f470af7b25b69d7c4f2f ensuring issue is reproducible on original commit 03d38806a902b36bf364cae8de6f1183c0a35a67 testing commit 03d38806a902b36bf364cae8de6f1183c0a35a67 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 2a0175aee58e4978892e1564846bfd550aa0f7743f17de85cc002b67293a3b43 run #0: crashed: BUG: corrupted list in new_inode run #1: crashed: BUG: unable to handle kernel paging request in l3mdev_master_ifindex_rcu run #2: crashed: BUG: unable to handle kernel NULL pointer dereference in rcu_core run #3: crashed: BUG: unable to handle kernel paging request in corrupted run #4: crashed: INFO: trying to register non-static key in simple_recursive_removal run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in qlist_free_all run #6: crashed: kernel BUG in qlist_free_all run #7: crashed: possible deadlock in console_flush_all run #8: crashed: WARNING: locking bug in simple_recursive_removal run #9: crashed: BUG: unable to handle kernel NULL pointer dereference in bioset_exit run #10: crashed: BUG: unable to handle kernel NULL pointer dereference in rcu_core run #11: crashed: BUG: corrupted list in list_lru_del run #12: crashed: BUG: unable to handle kernel NULL pointer dereference in bioset_exit run #13: crashed: possible deadlock in get_partial_node run #14: crashed: possible deadlock in get_partial_node run #15: crashed: KASAN: stack-out-of-bounds Read in __schedule run #16: crashed: possible deadlock in get_partial_node run #17: crashed: INFO: trying to register non-static key in fast_dput run #18: crashed: possible deadlock in get_partial_node run #19: crashed: possible deadlock in get_partial_node representative crash: possible deadlock in console_flush_all, types: [LOCKDEP NULL-POINTER-DEREFERENCE MEMORY_SAFETY_BUG] check whether we can drop unnecessary instrumentation disabling configs for [hang memleak ubsan kasan atomic_sleep], they are not needed testing commit 03d38806a902b36bf364cae8de6f1183c0a35a67 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 55972bc13e4fbcfec80867241620a0bab262b32fb242d108f8b5435cf6112055 run #0: crashed: go runtime error run #1: crashed: BUG: corrupted list in iget_locked run #2: crashed: kernel BUG in __fput run #3: crashed: general protection fault in mempool_alloc_slab run #4: crashed: INFO: trying to register non-static key in simple_recursive_removal run #5: crashed: BUG: corrupted list in list_lru_del_obj run #6: crashed: INFO: trying to register non-static key in simple_recursive_removal run #7: crashed: BUG: unable to handle kernel paging request in __d_lookup run #8: crashed: BUG: unable to handle kernel NULL pointer dereference in __bch2_btree_node_mem_alloc run #9: crashed: kernel BUG in xas_create representative crash: BUG: corrupted list in iget_locked, types: [MEMORY_SAFETY_BUG DoS BUG] the bug reproduces without the instrumentation disabling configs for [ubsan kasan atomic_sleep hang memleak], they are not needed kconfig minimization: base=4109 full=8254 leaves diff=2158 split chunks (needed=false): <2158> split chunk #0 of len 2158 into 5 parts testing without sub-chunk 1/5 disabling configs for [kasan atomic_sleep hang memleak ubsan], they are not needed testing commit 03d38806a902b36bf364cae8de6f1183c0a35a67 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 53bcaf7863e00d1e46fdbc4f359e69c2e11fcc1f0efc8888c43930580d8dd0cb all runs: OK false negative chance: 0.000 testing without sub-chunk 2/5 disabling configs for [ubsan kasan atomic_sleep hang memleak], they are not needed testing commit 03d38806a902b36bf364cae8de6f1183c0a35a67 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: faa8a083d6228278ffc3754fe2000bd597583042417d95e6773c3f6ac4b2c85e run #0: crashed: kernel BUG in corrupted run #1: crashed: BUG: unable to handle kernel paging request in zero_mask run #2: crashed: BUG: unable to handle kernel NULL pointer dereference in kernfs_dop_revalidate run #3: crashed: WARNING in bioset_exit run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in __d_lookup run #5: crashed: BUG: corrupted list in evict run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in rcu_core run #7: crashed: INFO: trying to register non-static key in corrupted run #8: crashed: INFO: trying to register non-static key in simple_recursive_removal run #9: crashed: no output from test machine representative crash: BUG: unable to handle kernel NULL pointer dereference in kernfs_dop_revalidate, types: [NULL-POINTER-DEREFERENCE UNKNOWN MEMORY_SAFETY_BUG] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [atomic_sleep hang memleak ubsan kasan], they are not needed testing commit 03d38806a902b36bf364cae8de6f1183c0a35a67 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 0fdd2674adef95f6a3b386c284b957c54fdf5b4e8128f22bf8224673c9d9fd94 run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in rcu_core run #1: crashed: general protection fault in __ipv6_chk_addr_and_flags run #2: crashed: kernel BUG in shmem_undo_range run #3: crashed: general protection fault in __d_lookup run #4: crashed: BUG: corrupted list in iget_locked run #5: crashed: WARNING in bioset_init run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in __free_object run #7: crashed: INFO: trying to register non-static key in simple_recursive_removal run #8: crashed: general protection fault in generic_permission run #9: crashed: no output from test machine representative crash: general protection fault in __ipv6_chk_addr_and_flags, types: [DoS NULL-POINTER-DEREFERENCE UNKNOWN] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [hang memleak ubsan kasan atomic_sleep], they are not needed testing commit 03d38806a902b36bf364cae8de6f1183c0a35a67 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 231c80bbd2cfc96ab1c6c3b66e6da39df8356035577d74d36d6360d446e6765f run #0: crashed: kernel BUG in xas_create run #1: crashed: general protection fault in rcu_core run #2: crashed: WARNING: locking bug in simple_empty run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in shmem_undo_range run #4: crashed: general protection fault in rcu_core run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in vfs_read run #6: crashed: BUG: unable to handle kernel paging request in simple_recursive_removal run #7: crashed: general protection fault in count_matching_names run #8: crashed: WARNING in rcu_check_gp_start_stall run #9: crashed: BUG: workqueue lockup representative crash: general protection fault in rcu_core, types: [DoS NULL-POINTER-DEREFERENCE BUG] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [ubsan kasan atomic_sleep hang memleak], they are not needed testing commit 03d38806a902b36bf364cae8de6f1183c0a35a67 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 5a96f5ea923bdf1d138c68543ba71b6c87d9c75636d56a779a86ac2d94665fd8 run #0: crashed: BUG: unable to handle kernel paging request in corrupted run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in rcu_core run #2: crashed: BUG: corrupted list in evict run #3: crashed: general protection fault in kernfs_dop_revalidate run #4: crashed: kernel BUG in shmem_undo_range run #5: crashed: kernel BUG in radix_tree_extend run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in generic_permission run #7: crashed: INFO: trying to register non-static key in d_walk run #8: crashed: general protection fault in rcu_core run #9: crashed: BUG: workqueue lockup representative crash: BUG: unable to handle kernel paging request in corrupted, types: [MEMORY_SAFETY_BUG NULL-POINTER-DEREFERENCE DoS] the chunk can be dropped minimized to 432 configs; suspects: [6LOWPAN 6LOWPAN_GHC_EXT_HDR_DEST 6LOWPAN_GHC_EXT_HDR_FRAG 6LOWPAN_GHC_EXT_HDR_HOP 6LOWPAN_GHC_EXT_HDR_ROUTE 6LOWPAN_GHC_ICMPV6 6LOWPAN_GHC_UDP 6LOWPAN_NHC 6LOWPAN_NHC_DEST 6LOWPAN_NHC_FRAGMENT 6LOWPAN_NHC_HOP 6LOWPAN_NHC_IPV6 6LOWPAN_NHC_MOBILITY 6LOWPAN_NHC_ROUTING 6LOWPAN_NHC_UDP 6PACK 842_COMPRESS 842_DECOMPRESS 9P_FSCACHE 9P_FS_POSIX_ACL 9P_FS_SECURITY ACORN_PARTITION ACORN_PARTITION_ADFS ACORN_PARTITION_CUMANA ACORN_PARTITION_EESOX ACORN_PARTITION_ICS ACORN_PARTITION_POWERTEC ACORN_PARTITION_RISCIX ACPI_NFIT ACPI_NHLT ACPI_PLATFORM_PROFILE ADFS_FS AFFS_FS AFS_FS AFS_FSCACHE AF_KCM AF_RXRPC AF_RXRPC_IPV6 AIX_PARTITION AMD_SFH_HID AMIGA_PARTITION ANDROID_BINDER_IPC ANON_VMA_NAME APERTURE_HELPERS APPLE_MFI_FASTCHARGE AR5523 ARCH_ENABLE_MEMORY_HOTREMOVE ARCH_ENABLE_THP_MIGRATION ARCH_HAS_CRC32 ARCH_HAS_CRC_T10DIF ARCH_HAS_PTE_DEVMAP ARCH_HAS_USER_SHADOW_STACK ARCH_SUPPORTS_CFI_CLANG ARCH_SUPPORTS_HUGE_PFNMAP ARCH_SUPPORTS_PMD_PFNMAP ARCH_SUPPORTS_PUD_PFNMAP ARCH_WANT_PMD_MKWRITE ASM_MODVERSIONS ASUS_TF103C_DOCK ASYNC_CORE ASYNC_MEMCPY ASYNC_PQ ASYNC_RAID6_RECOV ASYNC_TX_DMA ASYNC_XOR AS_AVX512 AS_GFNI AS_SHA1_NI AS_SHA256_NI AS_TPAUSE AS_VAES AS_VPCLMULQDQ ATARI_PARTITION ATA_GENERIC ATA_OVER_ETH ATH10K ATH10K_CE ATH10K_LEDS ATH10K_PCI ATH10K_USB ATH11K ATH6KL ATH6KL_USB ATH9K ATH9K_AHB ATH9K_BTCOEX_SUPPORT ATH9K_CHANNEL_CONTEXT ATH9K_COMMON ATH9K_COMMON_DEBUG ATH9K_COMMON_SPECTRAL ATH9K_DEBUGFS ATH9K_DYNACK ATH9K_HTC ATH9K_HTC_DEBUGFS ATH9K_HW ATH9K_PCI ATH9K_PCOEM ATH9K_RFKILL ATH_COMMON ATM ATM_BR2684 ATM_CLIP ATM_DRIVERS ATM_LANE ATM_MPOA ATM_TCP AUXILIARY_BUS AX25 AX25_DAMA_SLAVE AX88796B_PHY BAREUDP BATMAN_ADV BATMAN_ADV_BATMAN_V BATMAN_ADV_BLA BATMAN_ADV_DAT BATMAN_ADV_MCAST BATMAN_ADV_NC BCACHE BCACHEFS_DEBUG BCACHEFS_ERASURE_CODING BCACHEFS_FS BCACHEFS_POSIX_ACL BCACHEFS_QUOTA BCACHEFS_SIX_OPTIMISTIC_SPIN BCMA BCMA_HOST_PCI_POSSIBLE BEFS_FS BFQ_CGROUP_DEBUG BFQ_GROUP_IOSCHED BFS_FS BIG_KEYS BLK_CGROUP_PUNT_BIO BLK_CGROUP_RWSTAT BLK_DEV_BSGLIB BLK_DEV_INTEGRITY BLK_DEV_NBD BLK_DEV_NULL_BLK BLK_DEV_NULL_BLK_FAULT_INJECTION BLK_DEV_NVME BLK_DEV_PMEM BLK_DEV_RAM BLK_DEV_RNBD BLK_DEV_RNBD_CLIENT BLK_DEV_THROTTLING BLK_DEV_ZONED BLK_ICQ BLK_INLINE_ENCRYPTION BLK_INLINE_ENCRYPTION_FALLBACK BLK_MQ_PCI BLK_MQ_VIRTIO BLK_WBT BLK_WBT_MQ BONDING BOOT_VESA_SUPPORT BPF_EVENTS BPF_JIT BPF_JIT_ALWAYS_ON BPF_JIT_DEFAULT_ON BPF_LSM BPF_PRELOAD BPF_PRELOAD_UMD BPF_STREAM_PARSER BPF_SYSCALL BPQETHER BRIDGE BRIDGE_CFM BRIDGE_EBT_802_3 BRIDGE_EBT_AMONG BRIDGE_EBT_ARP BRIDGE_EBT_ARPREPLY BRIDGE_EBT_BROUTE BRIDGE_EBT_DNAT BRIDGE_EBT_IP BRIDGE_EBT_IP6 BRIDGE_EBT_LIMIT BRIDGE_EBT_LOG BRIDGE_EBT_MARK BRIDGE_EBT_MARK_T BRIDGE_EBT_NFLOG BRIDGE_EBT_PKTTYPE BRIDGE_EBT_REDIRECT BRIDGE_EBT_SNAT BRIDGE_EBT_STP BRIDGE_EBT_T_FILTER BRIDGE_EBT_T_NAT BRIDGE_EBT_VLAN BRIDGE_IGMP_SNOOPING BRIDGE_MRP BRIDGE_NF_EBTABLES BRIDGE_NF_EBTABLES_LEGACY BRIDGE_VLAN_FILTERING BSD_DISKLABEL BSD_PROCESS_ACCT_V3 BT BTRFS_ASSERT BTRFS_FS BTRFS_FS_POSIX_ACL BTRFS_FS_REF_VERIFY BTT BT_6LOWPAN BT_ATH3K BT_BCM BT_BNEP BT_BNEP_MC_FILTER BT_BNEP_PROTO_FILTER BT_BREDR BT_HCIBCM203X BT_HCIBFUSB BT_HCIBPA10X BT_HCIBTUSB BT_HCIBTUSB_AUTOSUSPEND BT_HCIBTUSB_BCM BT_HCIBTUSB_MTK BT_HCIBTUSB_POLL_SYNC BT_HCIBTUSB_RTL BT_HCIUART BT_HCIUART_3WIRE BT_HCIUART_AG6XX BT_HCIUART_BCSP BT_HCIUART_H4 BT_HCIUART_LL BT_HCIUART_MRVL BT_HCIUART_QCA BT_HCIUART_SERDEV BT_HCIVHCI BT_INTEL BT_LE BT_LEDS BT_LE_L2CAP_ECRED BT_MRVL BT_MRVL_SDIO BT_MSFTEXT BT_MTK BT_MTKSDIO BT_MTKUART BT_QCA BT_RFCOMM BT_RFCOMM_TTY BT_RTL CACHEFILES CAIF CAIF_DEBUG CAIF_DRIVERS CAIF_NETDEV CAIF_TTY CAIF_USB CAIF_VIRTIO CAN CAN_8DEV_USB CAN_BCM CAN_CALC_BITTIMING CAN_DEV CAN_EMS_USB CAN_ESD_USB CAN_ETAS_ES58X CAN_F81604 CAN_GS_USB CAN_GW CAN_IFI_CANFD CAN_ISOTP CAN_J1939 CAN_KVASER_USB CAN_MCBA_USB CAN_NETLINK CAN_PEAK_USB CAN_RAW CAN_RX_OFFLOAD CAN_SLCAN CAN_UCAN CAN_VCAN CAN_VXCAN CARL9170 CARL9170_HWRNG CARL9170_LEDS CARL9170_WPC CC_CAN_LINK_STATIC CC_HAS_AUTO_VAR_INIT_ZERO_ENABLER CC_HAS_SANE_STACKPROTECTOR CEC_CORE CEPH_FS CEPH_FSCACHE CEPH_FS_POSIX_ACL CEPH_LIB CEPH_LIB_USE_DNS_RESOLVER CFG80211 CFG80211_CRDA_SUPPORT CFG80211_DEBUGFS CFG80211_DEFAULT_PS CFG80211_REQUIRE_SIGNED_REGDB CFG80211_USE_KERNEL_REGDB_KEYS CFG80211_WEXT CFS_BANDWIDTH CGROUP_BPF CHARGER_ISP1704 CHR_DEV_ST CIFS CIFS_ALLOW_INSECURE_LEGACY CIFS_DEBUG CIFS_DFS_UPCALL CIFS_FSCACHE CIFS_POSIX CIFS_SMB_DIRECT CIFS_SWN_UPCALL CIFS_UPCALL CIFS_XATTR CLOSURES CLS_U32_MARK CLS_U32_PERF CMA CMA_SIZE_SEL_MAX CMDLINE_PARTITION COMEDI COMEDI_DT9812 COMEDI_NI_USB6501 COMEDI_USBDUX COMEDI_USBDUXFAST COMEDI_USBDUXSIGMA COMEDI_USB_DRIVERS COMEDI_VMK80XX COMPAT_NETLINK_MESSAGES COUNTER CRAMFS CRAMFS_BLOCKDEV CRAMFS_MTD CRC4 CRC64 CRC64_ROCKSOFT CRC7 CRC8 CRC_ITU_T CRC_T10DIF CRC_T10DIF_ARCH CRYPTO_842 CRYPTO_ADIANTUM CRYPTO_AEGIS128 CRYPTO_AEGIS128_AESNI_SSE2 CRYPTO_AES_NI_INTEL CRYPTO_AES_TI CRYPTO_ANSI_CPRNG CRYPTO_ANUBIS CRYPTO_ARC4 CRYPTO_ARCH_HAVE_LIB_BLAKE2S CRYPTO_ARCH_HAVE_LIB_CHACHA CRYPTO_ARCH_HAVE_LIB_CURVE25519 CRYPTO_ARCH_HAVE_LIB_POLY1305 CRYPTO_ARIA CRYPTO_ARIA_AESNI_AVX_X86_64 CRYPTO_BLAKE2B CRYPTO_BLAKE2S_X86 CRYPTO_BLOWFISH CRYPTO_BLOWFISH_COMMON CRYPTO_BLOWFISH_X86_64 CRYPTO_CAMELLIA CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 CRYPTO_CAMELLIA_AESNI_AVX_X86_64 CRYPTO_CAMELLIA_X86_64 CRYPTO_CAST5 CRYPTO_CAST5_AVX_X86_64 CRYPTO_CAST6 CRYPTO_CAST6_AVX_X86_64 CRYPTO_CAST_COMMON CRYPTO_CHACHA20 CRYPTO_CHACHA20POLY1305 CRYPTO_CHACHA20_X86_64 CRYPTO_CRC32 CRYPTO_CRC32C CRYPTO_CRC64_ROCKSOFT CRYPTO_CRYPTD CRYPTO_CTS CRYPTO_CURVE25519 CRYPTO_CURVE25519_X86 CRYPTO_DEFLATE CRYPTO_DES CRYPTO_DES3_EDE_X86_64 CRYPTO_DEV_CCP CRYPTO_DEV_CCP_DD CRYPTO_DEV_PADLOCK CRYPTO_DEV_PADLOCK_AES CRYPTO_DEV_PADLOCK_SHA CRYPTO_DEV_QAT CRYPTO_DEV_QAT_C3XXX CRYPTO_DEV_QAT_C3XXXVF CRYPTO_DEV_QAT_C62X CRYPTO_DEV_QAT_C62XVF CRYPTO_DEV_QAT_DH895xCC CRYPTO_DEV_QAT_DH895xCCVF CRYPTO_DEV_VIRTIO CRYPTO_DH CRYPTO_DRBG_CTR CRYPTO_DRBG_HASH CRYPTO_ECDH CRYPTO_ECRDSA CRYPTO_ENGINE CRYPTO_ESSIV CRYPTO_FCRYPT CRYPTO_GHASH_CLMUL_NI_INTEL CRYPTO_HCTR2 CRYPTO_KDF800108_CTR CRYPTO_KHAZAD CRYPTO_KPP CRYPTO_LIB_ARC4 CRYPTO_LIB_BLAKE2S_GENERIC CRYPTO_LIB_CHACHA CRYPTO_LIB_CHACHA20POLY1305 CRYPTO_LIB_CHACHA_GENERIC CRYPTO_LIB_CURVE25519 CRYPTO_LIB_CURVE25519_GENERIC CRYPTO_LIB_DES CRYPTO_LIB_POLY1305 CRYPTO_LIB_POLY1305_GENERIC CRYPTO_LRW CRYPTO_LZ4 CRYPTO_LZ4HC CRYPTO_MANAGER_DISABLE_TESTS CRYPTO_MICHAEL_MIC CRYPTO_NHPOLY1305 CRYPTO_NHPOLY1305_AVX2 CRYPTO_NHPOLY1305_SSE2 CRYPTO_NULL CRYPTO_NULL2 CRYPTO_PCBC CRYPTO_PCRYPT CRYPTO_POLY1305 CRYPTO_POLY1305_X86_64 CRYPTO_POLYVAL CRYPTO_POLYVAL_CLMUL_NI CRYPTO_RMD160 CRYPTO_SEED CRYPTO_SERPENT CRYPTO_SERPENT_AVX2_X86_64 CRYPTO_SERPENT_AVX_X86_64 CRYPTO_SERPENT_SSE2_X86_64 CRYPTO_SHA1_SSSE3 CRYPTO_SHA256_SSSE3 CRYPTO_SHA512_SSSE3 CRYPTO_SIMD CRYPTO_SM3 CRYPTO_SM3_AVX_X86_64 CRYPTO_SM4 CRYPTO_SM4_AESNI_AVX2_X86_64 CRYPTO_SM4_AESNI_AVX_X86_64 CRYPTO_SM4_GENERIC CRYPTO_STREEBOG CRYPTO_TEA CRYPTO_TWOFISH CRYPTO_TWOFISH_AVX_X86_64 CRYPTO_TWOFISH_COMMON CRYPTO_TWOFISH_X86_64 CRYPTO_TWOFISH_X86_64_3WAY CRYPTO_USER CRYPTO_USER_API CRYPTO_USER_API_AEAD CRYPTO_USER_API_ENABLE_OBSOLETE CRYPTO_USER_API_HASH CRYPTO_USER_API_RNG CRYPTO_USER_API_SKCIPHER CRYPTO_WP512 CRYPTO_XCBC CRYPTO_XCTR CRYPTO_XTS CRYPTO_XXHASH CRYPTO_ZSTD CUSE CYPRESS_FIRMWARE DAMON DAMON_PADDR DAMON_RECLAIM DAMON_VADDR DAX DCA DCB DEFAULT_CODEL DEVICE_MIGRATION DEVICE_PRIVATE DEV_COREDUMP DEV_DAX DLN2_ADC DMABUF_HEAPS DMABUF_HEAPS_CMA DMABUF_HEAPS_SYSTEM DMABUF_MOVE_NOTIFY DMA_CMA DMA_ENGINE_RAID DM_AUDIT DM_BIO_PRISON DM_BUFIO DM_CACHE DM_CACHE_SMQ DM_CLONE DM_CRYPT DM_FLAKEY DM_INTEGRITY DM_MULTIPATH DM_MULTIPATH_QL DM_MULTIPATH_ST DM_PERSISTENT_DATA DM_RAID DM_SNAPSHOT DM_THIN_PROVISIONING DM_UEVENT DM_VERITY DM_VERITY_FEC DM_WRITECACHE DM_ZONED DRAGONRISE_FF DRM DRM_AUX_BRIDGE DRM_BOCHS DRM_BRIDGE DRM_BUDDY DRM_CIRRUS_QEMU DRM_CLIENT DRM_CLIENT_DEFAULT_FBDEV DRM_CLIENT_SELECTION DRM_FBDEV_EMULATION ENCRYPTED_KEYS FSCACHE FUSE_FS GPIOLIB HAMRADIO HID_DRAGONRISE IIO INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_RTRS_CLIENT IOSCHED_BFQ LIBNVDIMM MAC80211 MAC80211_DEBUGFS MAC80211_LEDS MCORE2 MEDIA_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MMC MTD NET_CLS_U32 NET_SCH_DEFAULT PARTITION_ADVANCED RFKILL SERIAL_DEV_BUS TLS TLS_DEVICE TRANSPARENT_HUGEPAGE TRUSTED_KEYS USB_GADGET USB_PHY VLAN_8021Q WANT_COMPAT_NETLINK_MESSAGES WEXT_CORE WIRELESS WLAN WLAN_VENDOR_ATH X86_X32_ABI ZONE_DEVICE] disabling configs for [hang memleak ubsan kasan atomic_sleep], they are not needed testing current HEAD 8640b74557fc8b4c300030f6ccb8cd078f665ec8 testing commit 8640b74557fc8b4c300030f6ccb8cd078f665ec8 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: d47f9531dad82dd5ac6035e5d52309bfeee5fddb5dce27b506c797c06d890a32 all runs: OK false negative chance: 0.000 # git bisect start 8640b74557fc8b4c300030f6ccb8cd078f665ec8 03d38806a902b36bf364cae8de6f1183c0a35a67 Bisecting: 38762 revisions left to test after this (roughly 15 steps) [33503c083fda048c77903460ac0429e1e2c0e341] io_uring/memmap: cast nr_pages to size_t before shifting determine whether the revision contains the guilty commit revision 03d38806a902b36bf364cae8de6f1183c0a35a67 crashed and is reachable testing commit 33503c083fda048c77903460ac0429e1e2c0e341 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 89fe7c557cc78ee8315531fd1da44264e0f9889fba8284716f1d5a95986a3b58 all runs: OK false negative chance: 0.000 # git bisect bad 33503c083fda048c77903460ac0429e1e2c0e341 Bisecting: 18667 revisions left to test after this (roughly 14 steps) [f6bd8faeb113c8ab783466bc5bc1a5442ae85176] Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net determine whether the revision contains the guilty commit revision 03d38806a902b36bf364cae8de6f1183c0a35a67 crashed and is reachable testing commit f6bd8faeb113c8ab783466bc5bc1a5442ae85176 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 43498a79466775117827744fa4caaa8a7ca6eec3b6802597f9d31a6c5a951cda all runs: OK false negative chance: 0.000 # git bisect bad f6bd8faeb113c8ab783466bc5bc1a5442ae85176 Bisecting: 10020 revisions left to test after this (roughly 13 steps) [390513642ee6763c7ada07f0a1470474986e6c1c] io_uring: always do atomic put from iowq determine whether the revision contains the guilty commit revision 03d38806a902b36bf364cae8de6f1183c0a35a67 crashed and is reachable testing commit 390513642ee6763c7ada07f0a1470474986e6c1c gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: a5b78fa75af63ee4127e0e13478625d0ab448ce9f95d9fc01ead83181cf7183e all runs: OK false negative chance: 0.000 # git bisect bad 390513642ee6763c7ada07f0a1470474986e6c1c Bisecting: 4219 revisions left to test after this (roughly 12 steps) [e50da555ca4d42b1b98d0f26789db64f26a0919a] Merge tag 'sound-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound determine whether the revision contains the guilty commit revision 03d38806a902b36bf364cae8de6f1183c0a35a67 crashed and is reachable testing commit e50da555ca4d42b1b98d0f26789db64f26a0919a gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 41f0d7eedd38126aef954b1c2d9c8582d7e3bd5248e351e5319ee8ce42b4ab69 all runs: boot failed: BUG: unable to handle kernel NULL pointer dereference in msix_capability_init unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 # git bisect skip e50da555ca4d42b1b98d0f26789db64f26a0919a Bisecting: 4219 revisions left to test after this (roughly 12 steps) [c56f649646ecec3dd1a2e400e6e5ec83439d940f] landlock: Log mount-related denials determine whether the revision contains the guilty commit revision 03d38806a902b36bf364cae8de6f1183c0a35a67 crashed and is reachable testing commit c56f649646ecec3dd1a2e400e6e5ec83439d940f gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 2687c89ce658c9326359a86b44998ed3ea104a1f9144157821003e323658be0b run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in jbd2_journal_put_journal_head run #1: crashed: general protection fault in kernfs_dop_revalidate run #2: crashed: BUG: unable to handle kernel NULL pointer dereference in rcu_core run #3: crashed: BUG: corrupted list in evict run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in rcu_core run #5: crashed: go runtime error run #6: crashed: BUG: unable to handle kernel paging request in folio_try_get run #7: crashed: BUG: corrupted list in evict run #8: crashed: BUG: corrupted list in new_inode run #9: crashed: BUG: workqueue lockup representative crash: BUG: corrupted list in evict, types: [MEMORY_SAFETY_BUG NULL-POINTER-DEREFERENCE DoS] # git bisect good c56f649646ecec3dd1a2e400e6e5ec83439d940f Bisecting: 4200 revisions left to test after this (roughly 12 steps) [0d7336f8f06d4a1a1e2c62624d086561e8490bb7] tcp: ulp: diag: more info without CAP_NET_ADMIN determine whether the revision contains the guilty commit revision 03d38806a902b36bf364cae8de6f1183c0a35a67 crashed and is reachable testing commit 0d7336f8f06d4a1a1e2c62624d086561e8490bb7 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: c46b054fe4aee1b334b5c51177209befb528ad6846958ec921b467739e3ce83e run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in tomoyo_realpath_from_path run #1: crashed: BUG: unable to handle kernel paging request in fast_dput run #2: crashed: BUG: unable to handle kernel paging request in corrupted run #3: crashed: WARNING in invalidate_bh_lru run #4: crashed: WARNING: locking bug in lockref_get run #5: crashed: BUG: corrupted list in iget_locked run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in tomoyo_realpath_from_path run #7: crashed: BUG: corrupted list in new_inode run #8: crashed: WARNING: locking bug in sock_wfree run #9: crashed: BUG: workqueue lockup representative crash: BUG: unable to handle kernel paging request in fast_dput, types: [MEMORY_SAFETY_BUG NULL-POINTER-DEREFERENCE LOCKDEP] # git bisect good 0d7336f8f06d4a1a1e2c62624d086561e8490bb7 Bisecting: 3866 revisions left to test after this (roughly 12 steps) [d48b663f410f8b35b8ba9bd597bafaa00f53293b] arm64/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch() determine whether the revision contains the guilty commit revision 03d38806a902b36bf364cae8de6f1183c0a35a67 crashed and is reachable testing commit d48b663f410f8b35b8ba9bd597bafaa00f53293b gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 42fffedbb299f1694e226cd90efe03e81ee3e143f58ee10faf3662e00e38918c all runs: boot failed: BUG: unable to handle kernel NULL pointer dereference in msix_capability_init unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 # git bisect skip d48b663f410f8b35b8ba9bd597bafaa00f53293b Bisecting: 3866 revisions left to test after this (roughly 12 steps) [08549ff3e53b9c7bc55724d660ca733041a8bd5f] cleanup: Provide retain_ptr() determine whether the revision contains the guilty commit checking the merge base d082ecbc71e9e0bf49883ee4afd435a77a5101b6 no existing result, test the revision testing commit d082ecbc71e9e0bf49883ee4afd435a77a5101b6 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: edbf009736021b2094202f4d16dea84053143f85c8ee24482a0565f7a28caf37 run #0: crashed: WARNING in lock_list_lru_of_memcg run #1: crashed: BUG: spinlock bad magic in simple_empty run #2: crashed: BUG: unable to handle kernel paging request in kernfs_dop_revalidate run #3: crashed: WARNING: locking bug in fast_dput run #4: crashed: kernel BUG in shmem_undo_range run #5: crashed: BUG: corrupted list in new_inode run #6: crashed: BUG: Bad rss-counter state run #7: crashed: BUG: unable to handle kernel paging request in kernfs_dop_revalidate run #8: crashed: BUG: unable to handle kernel paging request in folio_try_get run #9: crashed: BUG: workqueue lockup representative crash: BUG: unable to handle kernel paging request in kernfs_dop_revalidate, types: [MEMORY_SAFETY_BUG LOCKDEP UNKNOWN] testing commit 08549ff3e53b9c7bc55724d660ca733041a8bd5f gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 18ed607351c8e1f5047b8a348c831d99ce7d47fa12a60d13145cc085dc6b062c run #0: crashed: BUG: unable to handle kernel paging request in proc_invalidate_siblings_dcache run #1: crashed: INFO: trying to register non-static key in d_splice_alias run #2: crashed: kernel BUG in radix_tree_insert run #3: crashed: BUG: spinlock bad magic in simple_empty run #4: crashed: BUG: corrupted list in iget_locked run #5: crashed: BUG: unable to handle kernel paging request in corrupted run #6: crashed: BUG: corrupted list in list_lru_del_obj run #7: crashed: BUG: unable to handle kernel NULL pointer dereference in __d_lookup run #8: crashed: BUG: unable to handle kernel paging request in xas_free_nodes run #9: crashed: BUG: workqueue lockup representative crash: BUG: unable to handle kernel paging request in proc_invalidate_siblings_dcache, types: [MEMORY_SAFETY_BUG UNKNOWN BUG] # git bisect good 08549ff3e53b9c7bc55724d660ca733041a8bd5f Bisecting: 3866 revisions left to test after this (roughly 12 steps) [e23d68d7d3b35a44eb83d834b65cd28ca08844ec] ASoC: codec: nau8824: use inclusive language for SND_SOC_DAIFMT_CBx_CFx determine whether the revision contains the guilty commit checking the merge base 0ad2507d5d93f39619fc42372c347d6006b64319 no existing result, test the revision testing commit 0ad2507d5d93f39619fc42372c347d6006b64319 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: bbfd7bdd7c4cb1ca71ab53815d9bf21a1f010baee7f97c5d01bcef8278d9b171 run #0: crashed: BUG: unable to handle kernel paging request in corrupted run #1: crashed: BUG: corrupted list in evict run #2: crashed: BUG: unable to handle kernel paging request in k_cur run #3: crashed: BUG: corrupted list in new_inode run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in __d_alloc run #5: crashed: kernel BUG in shmem_undo_range run #6: crashed: BUG: corrupted list in new_inode run #7: crashed: BUG: corrupted list in new_inode run #8: crashed: kernel BUG in xas_create run #9: crashed: BUG: corrupted list in __list_lru_walk_one representative crash: BUG: unable to handle kernel paging request in corrupted, types: [MEMORY_SAFETY_BUG BUG] testing commit e23d68d7d3b35a44eb83d834b65cd28ca08844ec gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 3bdfdb272a62ddf93ac8495066fd856f9e5b7a5918b420634c0201a69626128f run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in rcu_core run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in rcu_core run #2: crashed: BUG: unable to handle kernel NULL pointer dereference in __d_lookup run #3: crashed: BUG: unable to handle kernel paging request in corrupted run #4: crashed: kernel BUG in shmem_undo_range run #5: crashed: BUG: corrupted list in list_lru_del_obj run #6: crashed: general protection fault in filemap_fault run #7: crashed: BUG: corrupted list in list_lru_add run #8: crashed: WARNING: locking bug in simple_recursive_removal run #9: crashed: BUG: unable to handle kernel NULL pointer dereference in rcu_core representative crash: BUG: unable to handle kernel NULL pointer dereference in rcu_core, types: [NULL-POINTER-DEREFERENCE MEMORY_SAFETY_BUG BUG] # git bisect good e23d68d7d3b35a44eb83d834b65cd28ca08844ec Bisecting: 3613 revisions left to test after this (roughly 12 steps) [536e8b9b80bc7a0a8e87af2d5fb7fe3e230669ca] srcu: Add FORCE_NEED_SRCU_NMI_SAFE Kconfig for testing determine whether the revision contains the guilty commit checking the merge base 2014c95afecee3e76ca4a56956a936e23283f05b no existing result, test the revision testing commit 2014c95afecee3e76ca4a56956a936e23283f05b gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 863dd649bbdfded26bb71a9a9f4d347203129a4dacfed474bc8eb14470cb9683 run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in rcu_core run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in jbd2_journal_get_write_access run #2: crashed: BUG: unable to handle kernel NULL pointer dereference in sock_poll run #3: crashed: WARNING: locking bug in simple_recursive_removal run #4: crashed: WARNING: locking bug in simple_recursive_removal run #5: crashed: WARNING: ODEBUG bug in handle_softirqs run #6: crashed: BUG: unable to handle kernel paging request in kernfs_dop_revalidate run #7: crashed: kernel BUG in shmem_undo_range run #8: crashed: BUG: unable to handle kernel NULL pointer dereference in rcu_core run #9: crashed: BUG: corrupted list in evict representative crash: BUG: unable to handle kernel NULL pointer dereference in rcu_core, types: [NULL-POINTER-DEREFERENCE LOCKDEP MEMORY_SAFETY_BUG] testing commit 536e8b9b80bc7a0a8e87af2d5fb7fe3e230669ca gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 9550119f80215e57d01dfa03bca4b4191f507d60c0196a17a218118fb1037c62 run #0: crashed: WARNING in bioset_init run #1: crashed: BUG: unable to handle kernel paging request in alloc_inode run #2: crashed: BUG: unable to handle kernel paging request in kernfs_dop_revalidate run #3: crashed: BUG: corrupted list in evict run #4: crashed: general protection fault in try_to_wake_up run #5: crashed: BUG: corrupted list in new_inode run #6: crashed: BUG: unable to handle kernel paging request in corrupted run #7: crashed: BUG: unable to handle kernel NULL pointer dereference in rcu_core run #8: crashed: go runtime error run #9: crashed: BUG: unable to handle kernel paging request in lockref_get_not_zero representative crash: BUG: unable to handle kernel paging request in alloc_inode, types: [MEMORY_SAFETY_BUG DoS] # git bisect good 536e8b9b80bc7a0a8e87af2d5fb7fe3e230669ca Bisecting: 3613 revisions left to test after this (roughly 12 steps) [60e6ce746bfcbe7541c205085c11ce0ff2ffd014] io_uring: pass ctx instead of req to io_init_req_drain() determine whether the revision contains the guilty commit revision 2014c95afecee3e76ca4a56956a936e23283f05b crashed and is reachable testing commit 60e6ce746bfcbe7541c205085c11ce0ff2ffd014 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 8b78d6e4b0916e6e869f76a41e18abc0e4eb3af14eb96123baa108cdfd10e385 run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in __d_lookup run #1: crashed: kernel BUG in shmem_undo_range run #2: crashed: BUG: unable to handle kernel paging request in block_dirty_folio run #3: crashed: BUG: unable to handle kernel paging request in corrupted run #4: crashed: WARNING: locking bug in sock_wfree run #5: crashed: WARNING: locking bug in sock_wfree run #6: crashed: WARNING: locking bug in sock_def_readable run #7: crashed: BUG: corrupted list in list_lru_add run #8: crashed: BUG: corrupted list in list_lru_del_obj run #9: crashed: BUG: spinlock bad magic in simple_recursive_removal representative crash: BUG: unable to handle kernel paging request in block_dirty_folio, types: [MEMORY_SAFETY_BUG LOCKDEP] # git bisect good 60e6ce746bfcbe7541c205085c11ce0ff2ffd014 Bisecting: 3587 revisions left to test after this (roughly 12 steps) [ebfbcfc7b962c06c43cd19cf07396d1e5d545d4b] ASoC: Convert to modern PM macros determine whether the revision contains the guilty commit revision 03d38806a902b36bf364cae8de6f1183c0a35a67 crashed and is reachable testing commit ebfbcfc7b962c06c43cd19cf07396d1e5d545d4b gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 93da7af1826bf1943c8cffff3407926c4a50fb607352d540a9fb3ef62e9f01a4 run #0: crashed: WARNING: locking bug in sock_def_readable run #1: crashed: WARNING: locking bug in kernfs_dop_revalidate run #2: crashed: general protection fault in count_matching_names run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in generic_permission run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in folio_try_get run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in pipe_write run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in vfs_read run #7: crashed: BUG: unable to handle kernel NULL pointer dereference in kernfs_dop_revalidate run #8: crashed: BUG: unable to handle kernel NULL pointer dereference in rcu_core run #9: crashed: BUG: Bad rss-counter state representative crash: BUG: unable to handle kernel NULL pointer dereference in generic_permission, types: [NULL-POINTER-DEREFERENCE LOCKDEP] # git bisect good ebfbcfc7b962c06c43cd19cf07396d1e5d545d4b Bisecting: 3233 revisions left to test after this (roughly 12 steps) [1e26c5e28ca5821a824e90dd359556f5e9e7b89f] Merge tag 'media/v6.15-1' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media determine whether the revision contains the guilty commit revision 08549ff3e53b9c7bc55724d660ca733041a8bd5f crashed and is reachable testing commit 1e26c5e28ca5821a824e90dd359556f5e9e7b89f gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: a188bb620242933762defb5e6facea029d91b301b2b921db93231082d1d72c67 all runs: boot failed: BUG: unable to handle kernel NULL pointer dereference in msix_capability_init unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 # git bisect skip 1e26c5e28ca5821a824e90dd359556f5e9e7b89f Bisecting: 3233 revisions left to test after this (roughly 12 steps) [a416637f905f26b64658adb2fed2b79cc4fb0fda] btrfs: replace PAGE_SIZE with folio_size for subpage.[ch] determine whether the revision contains the guilty commit revision 0ad2507d5d93f39619fc42372c347d6006b64319 crashed and is reachable testing commit a416637f905f26b64658adb2fed2b79cc4fb0fda gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 90c6aaf98b57e9322ca0525594f54f55b9999b8fd0ae290cc7d32f0cd2589079 all runs: OK false negative chance: 0.000 # git bisect bad a416637f905f26b64658adb2fed2b79cc4fb0fda Bisecting: 300 revisions left to test after this (roughly 8 steps) [4003c9e78778e93188a09d6043a74f7154449d43] Merge tag 'net-6.14-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net determine whether the revision contains the guilty commit revision 03d38806a902b36bf364cae8de6f1183c0a35a67 crashed and is reachable testing commit 4003c9e78778e93188a09d6043a74f7154449d43 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: ea5d1dcd95f65da3821759fedbc144984d190a1fbea206fe9bd51f05b66cb625 run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in rcu_core run #1: crashed: WARNING: locking bug in kernfs_dop_revalidate run #2: crashed: WARNING: locking bug in fsnotify_grab_connector run #3: crashed: general protection fault in count_matching_names run #4: crashed: WARNING: locking bug in kernfs_dop_revalidate run #5: crashed: WARNING: locking bug in sock_def_readable run #6: crashed: general protection fault in rcu_core run #7: crashed: general protection fault in count_matching_names run #8: crashed: BUG: workqueue lockup run #9: crashed: BUG: workqueue lockup representative crash: WARNING: locking bug in kernfs_dop_revalidate, types: [LOCKDEP DoS UNKNOWN] # git bisect good 4003c9e78778e93188a09d6043a74f7154449d43 Bisecting: 150 revisions left to test after this (roughly 7 steps) [4701f33a10702d5fc577c32434eb62adde0a1ae1] Linux 6.14-rc7 determine whether the revision contains the guilty commit revision 0ad2507d5d93f39619fc42372c347d6006b64319 crashed and is reachable testing commit 4701f33a10702d5fc577c32434eb62adde0a1ae1 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: cdac6a3ff0badabf7e711bd6f69c57065eb09b3a7bb79f54e85982cd2a0ac37c all runs: OK false negative chance: 0.000 # git bisect bad 4701f33a10702d5fc577c32434eb62adde0a1ae1 Bisecting: 74 revisions left to test after this (roughly 6 steps) [b35233e7bfa04045388967d3dc219e80cc88bc74] Merge tag 'for-6.14/dm-fixes-2' of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm determine whether the revision contains the guilty commit revision 4003c9e78778e93188a09d6043a74f7154449d43 crashed and is reachable testing commit b35233e7bfa04045388967d3dc219e80cc88bc74 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: da7cab698263b33aa28cfef95fb6d5fb580a34feaab89d823604c3b4d2242caf all runs: OK false negative chance: 0.000 # git bisect bad b35233e7bfa04045388967d3dc219e80cc88bc74 Bisecting: 34 revisions left to test after this (roughly 5 steps) [00ddc3f951e266a7df5fead1cfec69b251ca7d41] Merge tag 'drm-fixes-2025-03-14' of https://gitlab.freedesktop.org/drm/kernel determine whether the revision contains the guilty commit revision 0ad2507d5d93f39619fc42372c347d6006b64319 crashed and is reachable testing commit 00ddc3f951e266a7df5fead1cfec69b251ca7d41 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 3bb2dec5e30d0113ec9c812bd9996c829ff6e2285784a0735016ff768c3e0d15 all runs: OK false negative chance: 0.000 # git bisect bad 00ddc3f951e266a7df5fead1cfec69b251ca7d41 Bisecting: 18 revisions left to test after this (roughly 4 steps) [c8a74954cde651726e0a2380de3907d0e903f809] Merge tag 'drm-intel-fixes-2025-03-13' of https://gitlab.freedesktop.org/drm/i915/kernel into drm-fixes determine whether the revision contains the guilty commit revision d082ecbc71e9e0bf49883ee4afd435a77a5101b6 crashed and is reachable testing commit c8a74954cde651726e0a2380de3907d0e903f809 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 9c5a858e4d12810c7bc1d30cbd9f807fede82dcbd675e5ca420c5f7b7b4d8820 run #0: crashed: WARNING in file_remove_privs_flags run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in kernfs_dop_revalidate run #2: crashed: WARNING: locking bug in lockref_get run #3: crashed: WARNING: locking bug in fast_dput run #4: crashed: BUG: corrupted list in evict run #5: crashed: BUG: corrupted list in evict run #6: crashed: BUG: corrupted list in new_inode run #7: crashed: INFO: trying to register non-static key in simple_recursive_removal run #8: crashed: WARNING: locking bug in copy_mm run #9: crashed: go runtime error representative crash: WARNING: locking bug in lockref_get, types: [LOCKDEP MEMORY_SAFETY_BUG WARNING] # git bisect good c8a74954cde651726e0a2380de3907d0e903f809 Bisecting: 11 revisions left to test after this (roughly 3 steps) [131c040bbb0f561ef68ad2ba6fcd28c97fa6d4cf] Merge tag 'bcachefs-2025-03-13' of git://evilpiepirate.org/bcachefs determine whether the revision contains the guilty commit revision d082ecbc71e9e0bf49883ee4afd435a77a5101b6 crashed and is reachable testing commit 131c040bbb0f561ef68ad2ba6fcd28c97fa6d4cf gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: d0a327a6de191560a81f824f45a4cf33a5eadb0735d6d345cc5a79116a4571b3 all runs: OK false negative chance: 0.000 # git bisect bad 131c040bbb0f561ef68ad2ba6fcd28c97fa6d4cf Bisecting: 2 revisions left to test after this (roughly 2 steps) [3bcde88d381a336ff252d67867c186ee602e6656] bcachefs: fix tiny leak in bch2_dev_add() determine whether the revision contains the guilty commit revision 03d38806a902b36bf364cae8de6f1183c0a35a67 crashed and is reachable testing commit 3bcde88d381a336ff252d67867c186ee602e6656 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 300236e8693bfaab837d6acf5dc00c3754ce9a517f2aeb515f4a62b9969b5a5e all runs: OK false negative chance: 0.000 # git bisect bad 3bcde88d381a336ff252d67867c186ee602e6656 Bisecting: 1 revision left to test after this (roughly 1 step) [58517f4df8424ec28dfe7290ccc61908eda57aae] bcachefs: Initialize from_inode members for bch_io_opts determine whether the revision contains the guilty commit revision 03d38806a902b36bf364cae8de6f1183c0a35a67 crashed and is reachable testing commit 58517f4df8424ec28dfe7290ccc61908eda57aae gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 961d6a757a548bb76e154fb78940d2ad280663521004418bf9beb9e600c7e29e all runs: OK false negative chance: 0.000 # git bisect bad 58517f4df8424ec28dfe7290ccc61908eda57aae Bisecting: 0 revisions left to test after this (roughly 0 steps) [3a04334d6282d08fbdd6201e374db17d31927ba3] bcachefs: Fix b->written overflow determine whether the revision contains the guilty commit revision 03d38806a902b36bf364cae8de6f1183c0a35a67 crashed and is reachable testing commit 3a04334d6282d08fbdd6201e374db17d31927ba3 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 6774a7f5322e9b0749b1dee7826eee32ac82be1bd56270d27d6411a46dc8a393 all runs: OK false negative chance: 0.000 # git bisect bad 3a04334d6282d08fbdd6201e374db17d31927ba3 3a04334d6282d08fbdd6201e374db17d31927ba3 is the first bad commit commit 3a04334d6282d08fbdd6201e374db17d31927ba3 Author: Alan Huang Date: Sat Mar 8 00:58:27 2025 +0800 bcachefs: Fix b->written overflow When bset past end of btree node, we should not add sectors to b->written, which will overflow b->written. Reported-by: syzbot+3cb3d9e8c3f197754825@syzkaller.appspotmail.com Tested-by: syzbot+3cb3d9e8c3f197754825@syzkaller.appspotmail.com Signed-off-by: Alan Huang Signed-off-by: Kent Overstreet fs/bcachefs/btree_io.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) accumulated error probability: 0.00 parent commit 80e54e84911a923c40d7bee33a34c1b4be148d7a wasn't tested testing commit 80e54e84911a923c40d7bee33a34c1b4be148d7a gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: bb06a94615c8e0cd4ce22f1cae4ce4b55871e8291e18c3cfb79954f9887a205f culprit signature: 6774a7f5322e9b0749b1dee7826eee32ac82be1bd56270d27d6411a46dc8a393 parent signature: bb06a94615c8e0cd4ce22f1cae4ce4b55871e8291e18c3cfb79954f9887a205f revisions tested: 34, total time: 9h16m19.175751687s (build: 2h58m30.07775907s, test: 5h48m2.403232622s) first good commit: 3a04334d6282d08fbdd6201e374db17d31927ba3 bcachefs: Fix b->written overflow recipients (to): ["kent.overstreet@linux.dev" "mmpgouride@gmail.com" "syzbot+3cb3d9e8c3f197754825@syzkaller.appspotmail.com"] recipients (cc): []