ci starts bisection 2025-11-11 23:04:53.904024769 +0000 UTC m=+458348.205287662 bisecting cause commit starting from a0c3aefb08cd81864b17c23c25b388dba90b9dad building syzkaller on 4e1406b4defac0e2a9d9424c70706f79a7750cf3 ensuring issue is reproducible on original commit a0c3aefb08cd81864b17c23c25b388dba90b9dad testing commit a0c3aefb08cd81864b17c23c25b388dba90b9dad gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 26fa04ba0ac0c8d06c3d73ca9b2a3505064bf24010a87f640299e48a636a55fd run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: basic kernel testing failed: SYZFAIL: failed to recv rpc run #4: crashed: KASAN: invalid-free in inet_sock_destruct run #5: crashed: KASAN: invalid-free in inet_sock_destruct run #6: crashed: KASAN: invalid-free in inet_sock_destruct run #7: crashed: KASAN: invalid-free in inet_sock_destruct run #8: crashed: KASAN: invalid-free in inet_sock_destruct run #9: crashed: KASAN: invalid-free in inet_sock_destruct run #10: crashed: KASAN: invalid-free in inet_sock_destruct run #11: crashed: KASAN: invalid-free in inet_sock_destruct run #12: crashed: KASAN: invalid-free in inet_sock_destruct run #13: crashed: KASAN: invalid-free in inet_sock_destruct run #14: crashed: KASAN: invalid-free in inet_sock_destruct run #15: crashed: KASAN: invalid-free in inet_sock_destruct run #16: crashed: KASAN: invalid-free in inet_sock_destruct run #17: crashed: KASAN: invalid-free in inet_sock_destruct run #18: crashed: KASAN: invalid-free in inet_sock_destruct run #19: crashed: KASAN: invalid-free in inet_sock_destruct representative crash: KASAN: invalid-free in inet_sock_destruct, types: [KASAN-INVALID-FREE] check whether we can drop unnecessary instrumentation disabling configs for [hang memleak ubsan bug_or_warning locking atomic_sleep], they are not needed testing commit a0c3aefb08cd81864b17c23c25b388dba90b9dad gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: dad2f8440638da31f842598a0830e13c9105d29b30dd62757aba7c3248375999 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: basic kernel testing failed: SYZFAIL: failed to recv rpc run #4: basic kernel testing failed: SYZFAIL: failed to recv rpc run #5: basic kernel testing failed: SYZFAIL: failed to recv rpc run #6: crashed: KASAN: invalid-free in inet_sock_destruct run #7: crashed: KASAN: invalid-free in inet_sock_destruct run #8: crashed: KASAN: invalid-free in inet_sock_destruct run #9: crashed: KASAN: invalid-free in inet_sock_destruct representative crash: KASAN: invalid-free in inet_sock_destruct, types: [KASAN-INVALID-FREE] unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 4 kconfig minimization: base=4116 full=8531 leaves diff=2157 split chunks (needed=false): <2157> split chunk #0 of len 2157 into 5 parts testing without sub-chunk 1/5 testing commit a0c3aefb08cd81864b17c23c25b388dba90b9dad gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 071f514355254f4bcf45e0724d856edfddeedb25704427b7ad54c2485f9063fc run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: crashed: KASAN: invalid-free in inet_sock_destruct run #3: crashed: KASAN: invalid-free in inet_sock_destruct run #4: crashed: KASAN: invalid-free in inet_sock_destruct run #5: crashed: KASAN: invalid-free in inet_sock_destruct run #6: crashed: KASAN: invalid-free in inet_sock_destruct run #7: crashed: KASAN: invalid-free in inet_sock_destruct run #8: crashed: KASAN: invalid-free in inet_sock_destruct run #9: crashed: KASAN: invalid-free in inet_sock_destruct representative crash: KASAN: invalid-free in inet_sock_destruct, types: [KASAN-INVALID-FREE] the chunk can be dropped testing without sub-chunk 2/5 testing commit a0c3aefb08cd81864b17c23c25b388dba90b9dad gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 5222ec6ef45b65518b2c99069f3b214e4fa56c222386669819bfc1acc40d51bb run #0: infra problem: failed to get create instance operation operation-1762906629898-6435aaf727f1e-c0d6eb75-ae18858a: googleapi: Error 503: Visibility check was unavailable. Please retry the request and contact support if the problem persists, backendError run #1: crashed: KASAN: invalid-free in inet_sock_destruct run #2: crashed: KASAN: invalid-free in inet_sock_destruct run #3: crashed: KASAN: invalid-free in inet_sock_destruct run #4: crashed: KASAN: invalid-free in inet_sock_destruct run #5: crashed: KASAN: invalid-free in inet_sock_destruct run #6: crashed: KASAN: invalid-free in inet_sock_destruct run #7: crashed: KASAN: invalid-free in inet_sock_destruct run #8: crashed: KASAN: invalid-free in inet_sock_destruct run #9: crashed: KASAN: invalid-free in inet_sock_destruct representative crash: KASAN: invalid-free in inet_sock_destruct, types: [KASAN-INVALID-FREE] the chunk can be dropped testing without sub-chunk 3/5 testing commit a0c3aefb08cd81864b17c23c25b388dba90b9dad gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: ea1f1e681ad012ca2fbfe4a21052e5ab0ae32cc1e855b6fbaf39cac67a9fbc6b run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: crashed: KASAN: invalid-free in inet_sock_destruct run #4: crashed: KASAN: invalid-free in inet_sock_destruct run #5: crashed: KASAN: invalid-free in inet_sock_destruct run #6: crashed: KASAN: invalid-free in inet_sock_destruct run #7: crashed: KASAN: invalid-free in inet_sock_destruct run #8: crashed: KASAN: invalid-free in inet_sock_destruct run #9: crashed: KASAN: invalid-free in inet_sock_destruct representative crash: KASAN: invalid-free in inet_sock_destruct, types: [KASAN-INVALID-FREE] the chunk can be dropped testing without sub-chunk 4/5 testing commit a0c3aefb08cd81864b17c23c25b388dba90b9dad gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: b716af79240f14f897206533cadfce81618cd23298fdf67dc39c24a71154d141 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: basic kernel testing failed: SYZFAIL: failed to recv rpc run #4: basic kernel testing failed: SYZFAIL: failed to recv rpc run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 testing without sub-chunk 5/5 testing commit a0c3aefb08cd81864b17c23c25b388dba90b9dad gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 02363de848b82526b90c0a201fe5450f142d88cfb5cef881abfbb09fcd3f2604 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: crashed: KASAN: invalid-free in inet_sock_destruct run #3: crashed: KASAN: invalid-free in inet_sock_destruct run #4: crashed: KASAN: invalid-free in inet_sock_destruct run #5: crashed: KASAN: invalid-free in inet_sock_destruct run #6: crashed: KASAN: invalid-free in inet_sock_destruct run #7: crashed: KASAN: invalid-free in inet_sock_destruct run #8: crashed: KASAN: invalid-free in inet_sock_destruct run #9: crashed: KASAN: invalid-free in inet_sock_destruct representative crash: KASAN: invalid-free in inet_sock_destruct, types: [KASAN-INVALID-FREE] the chunk can be dropped minimized to 432 configs; suspects: [AF_RXRPC ARCH_ENABLE_MEMORY_HOTREMOVE ATM AX25 BT BT_BREDR BT_HIDP BXT_WC_PMIC_OPREGION CFG80211 CMA DAX DIBS DLM DMABUF_HEAPS DRM DVB_CORE ENCRYPTED_KEYS EXTCON GENEVE GPIOLIB HAMRADIO HAVE_CLK HID_NINTENDO HID_NVIDIA_SHIELD HID_PLAYSTATION HID_SENSOR_HUB HID_SMARTJOYPLUS HID_STEAM HID_THRUSTMASTER IIO INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_IPOIB INFINIBAND_USER_ACCESS INFINIBAND_VIRT_DMA INPUT_TABLET INPUT_TOUCHSCREEN INTEL_SCU_IPC INTEL_SOC_PMIC_BXTWC IP_SCTP L2TP LEDS_CLASS_MULTICOLOR LIBNVDIMM MAC80211 MEDIA_COMMON_OPTIONS MEDIA_DIGITAL_TV_SUPPORT MEDIA_PLATFORM_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_USB_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MFD_INTEL_PMC_BXT MFD_MT6360 MFD_MT6370 MFD_RETU MMC MTD MTD_UBI NETFILTER_ADVANCED NETFILTER_CONNCOUNT NET_IPGRE NET_IPGRE_DEMUX NFS_V4_1 NF_CONNTRACK_SNMP NF_CT_PROTO_UDPLITE NF_DUP_IPV4 NF_DUP_IPV6 NF_DUP_NETDEV NF_FLOW_TABLE NF_FLOW_TABLE_INET NF_NAT_AMANDA NF_NAT_H323 NF_NAT_OVS NF_NAT_PPTP NF_NAT_REDIRECT NF_NAT_SNMP_BASIC NF_NAT_TFTP NF_SOCKET_IPV4 NF_SOCKET_IPV6 NF_TABLES NF_TABLES_NETDEV NF_TPROXY_IPV4 NF_TPROXY_IPV6 NILFS2_FS NINTENDO_FF NLMON NLS_CODEPAGE_1250 NLS_CODEPAGE_1251 NLS_CODEPAGE_737 NLS_CODEPAGE_775 NLS_CODEPAGE_850 NLS_CODEPAGE_852 NLS_CODEPAGE_855 NLS_CODEPAGE_857 NLS_CODEPAGE_860 NLS_CODEPAGE_861 NLS_CODEPAGE_862 NLS_CODEPAGE_863 NLS_CODEPAGE_864 NLS_CODEPAGE_865 NLS_CODEPAGE_866 NLS_CODEPAGE_869 NLS_CODEPAGE_874 NLS_CODEPAGE_932 NLS_CODEPAGE_936 NLS_CODEPAGE_949 NLS_CODEPAGE_950 NLS_ISO8859_13 NLS_ISO8859_14 NLS_ISO8859_15 NLS_ISO8859_2 NLS_ISO8859_3 NLS_ISO8859_4 NLS_ISO8859_5 NLS_ISO8859_6 NLS_ISO8859_7 NLS_ISO8859_8 NLS_ISO8859_9 NLS_KOI8_R NLS_KOI8_U NLS_MAC_CELTIC NLS_MAC_CENTEURO NLS_MAC_CROATIAN NLS_MAC_CYRILLIC NLS_MAC_GAELIC NLS_MAC_GREEK NLS_MAC_ICELAND NLS_MAC_INUIT NLS_MAC_ROMAN NLS_MAC_ROMANIAN NLS_MAC_TURKISH NLS_UCS2_UTILS NOZOMI NTFS3_FS NTFS3_FS_POSIX_ACL NTFS3_LZX_XPRESS NULL_TTY NUMA_BALANCING NUMA_BALANCING_DEFAULT_ENABLED NUMA_EMU NUMA_KEEP_MEMINFO NVDIMM_DAX NVDIMM_KEYS NVDIMM_PFN NVIDIA_SHIELD_FF NVME_CORE NVME_FABRICS NVME_FC NVME_MULTIPATH NVME_RDMA NVME_TARGET NVME_TARGET_FC NVME_TARGET_FCLOOP NVME_TARGET_LOOP NVME_TARGET_RDMA NVME_TARGET_TCP NVME_TCP N_GSM N_HDLC OCFS2_DEBUG_FS OCFS2_FS OCFS2_FS_O2CB OCFS2_FS_STATS OCFS2_FS_USERSPACE_CLUSTER OF_GPIO OF_PMEM OMFS_FS OPENVSWITCH OPENVSWITCH_GENEVE OPENVSWITCH_GRE OPENVSWITCH_VXLAN OPTEE_STATIC_PROTMEM_POOL ORANGEFS_FS OSF_PARTITION OVERLAY_FS OVERLAY_FS_DEBUG OVERLAY_FS_INDEX OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW OVERLAY_FS_REDIRECT_DIR PACKET_DIAG PAGE_IDLE_FLAG PAGE_REPORTING PAHOLE_HAS_BTF_TAG PAHOLE_HAS_LANG_EXCLUDE PAHOLE_HAS_SPLIT_BTF PARPORT PARPORT_NOT_PC PARTITION_ADVANCED PCCARD PCCARD_NONSTATIC PCIEAER PCI_ENDPOINT PCI_IOV PCMCIA PCMCIA_LOAD_CIS PERCPU_STATS PERSISTENT_KEYRINGS PHYLINK PHY_CPCAP_USB PHY_QCOM_USB_HS PHY_QCOM_USB_HSIC PHY_SAMSUNG_USB2 PHY_TUSB1210 PKCS7_TEST_KEY PKCS8_PRIVATE_KEY_PARSER PLAYSTATION_FF PLFXLC PMIC_OPREGION PM_CLK PNFS_BLOCK PNFS_FILE_LAYOUT PNFS_FLEXFILE_LAYOUT POSIX_AUX_CLOCKS PPP PPPOATM PPPOE PPPOE_HASH_BITS_1 PPPOL2TP PPP_ASYNC PPP_BSDCOMP PPP_DEFLATE PPP_FILTER PPP_MPPE PPP_MULTILINK PPP_SYNC_TTY PPTP PREEMPT PREEMPT_NOTIFIERS PROC_CHILDREN PSAMPLE PSI PSTORE PSTORE_COMPRESS QCOM_QMI_HELPERS QNX4FS_FS QNX6FS_FS QRTR QRTR_TUN RADIO_ADAPTERS RADIO_SHARK RADIO_SHARK2 RADIO_TEA575X RAID6_PQ RAID_ATTRS RC_ATI_REMOTE RC_CORE RC_DEVICES RC_XBOX_DVD RDMA_RXE RDMA_SIW RDS RDS_RDMA RDS_TCP READ_ONLY_THP_FOR_FS REALTEK_AUTOPM REED_SOLOMON REED_SOLOMON_DEC8 REGMAP REGMAP_I2C REGMAP_IRQ REGMAP_MMIO REGMAP_SPI REGULATOR REGULATOR_FIXED_VOLTAGE REGULATOR_TWL4030 RESET_CONTROLLER RFKILL RFKILL_INPUT RFKILL_LEDS RMI4_2D_SENSOR RMI4_CORE RMI4_F03 RMI4_F03_SERIO RMI4_F11 RMI4_F12 RMI4_F30 RMI4_F3A ROMFS_BACKED_BY_BOTH ROMFS_FS ROMFS_ON_BLOCK ROMFS_ON_MTD ROSE RTC_DRV_HID_SENSOR_TIME RXKAD SCHED_CORE SCREEN_INFO SCSI_FC_ATTRS SCSI_HPSA SCSI_ISCSI_ATTRS SCSI_LOGGING SCSI_NETLINK SCSI_SAS_ATA SCSI_SAS_ATTRS SCSI_SAS_LIBSAS SCSI_SCAN_ASYNC SCSI_SRP_ATTRS SCTP_DEFAULT_COOKIE_HMAC_SHA256 SECONDARY_TRUSTED_KEYRING SECURITY_INFINIBAND SECURITY_NETWORK_XFRM SENSORS_AQUACOMPUTER_D5NEXT SENSORS_CORSAIR_CPRO SENSORS_CORSAIR_PSU SENSORS_GIGABYTE_WATERFORCE SENSORS_NZXT_KRAKEN2 SENSORS_NZXT_SMART2 SENSORS_POWERZ SERIAL_DEV_BUS SERIAL_DEV_CTRL_TTYPORT SERIAL_MCTRL_GPIO SGI_PARTITION SIGNATURE SIGNED_PE_FILE_VERIFICATION SKB_DECRYPTED SLHC SLIP SLIP_COMPRESSED SLIP_MODE_SLIP6 SLIP_SMART SMARTJOYPLUS_FF SMBFS SMB_SERVER SMC SMC_DIAG SMSC_PHY SMS_SDIO_DRV SMS_SIANO_DEBUGFS SMS_SIANO_MDTV SMS_SIANO_RC SMS_USB_DRV SND SND_ALOOP SND_BCD2000 SND_CTL_FAST_LOOKUP SND_CTL_LED SND_DEBUG SND_DMA_SGBUF SND_DRIVERS SND_DUMMY SND_HDA SND_HDA_CODEC_ANALOG SND_HDA_CODEC_CA0110 SND_HDA_CODEC_CA0132 SND_HDA_CODEC_CIRRUS SND_HDA_CODEC_CMEDIA SND_HDA_CODEC_CONEXANT SND_HDA_CODEC_HDMI SND_HDA_CODEC_REALTEK SND_HDA_CODEC_SI3054 SND_HDA_CODEC_SIGMATEL SND_HDA_CODEC_VIA SND_HDA_COMPONENT SND_HDA_CORE SND_HDA_GENERIC SND_HDA_GENERIC_LEDS SND_HDA_HWDEP SND_HDA_I915 SND_HDA_INPUT_BEEP SND_HDA_INTEL SND_HDA_PATCH_LOADER SND_HDA_RECONFIG SND_HRTIMER SND_HWDEP SND_INTEL_DSP_CONFIG SND_INTEL_NHLT SND_INTEL_SOUNDWIRE_ACPI SND_JACK SND_JACK_INPUT_DEV SND_MIXER_OSS SND_OSSEMUL SND_PCI SND_PCM SND_PCMCIA SND_PCM_OSS SND_PCM_OSS_PLUGINS SND_PCM_TIMER SND_PCM_XRUN_DEBUG SND_PROC_FS SND_RAWMIDI SND_SEQUENCER SND_SEQUENCER_OSS SND_SEQ_DEVICE SND_SEQ_DUMMY SND_SEQ_HRTIMER_DEFAULT SND_SEQ_MIDI SND_SEQ_MIDI_EVENT SND_SEQ_VIRMIDI SND_SOC SND_SOC_I2C_AND_SPI SND_SOC_SDCA_OPTIONAL SND_SUPPORT_OLD_API SND_TIMER SND_UMP SND_UMP_LEGACY_RAWMIDI SND_USB SND_USB_6FIRE SND_USB_AUDIO SND_USB_AUDIO_MIDI_V2 SND_USB_AUDIO_USE_MEDIA_CONTROLLER SND_USB_CAIAQ SND_USB_CAIAQ_INPUT SND_USB_HIFACE SND_USB_LINE6 SND_USB_POD SND_USB_PODHD SND_USB_TONEPORT SND_USB_UA101 SND_USB_US122L SND_USB_USX2Y SND_USB_VARIAX SND_VERBOSE_PROCFS SND_VIRMIDI SND_VIRTIO SND_VMASTER SND_X86 SOCK_VALIDATE_XMIT SOLARIS_X86_PARTITION SONY_FF SOUND SOUNDWIRE SOUND_OSS_CORE SOUND_OSS_CORE_PRECLAIM SPI SPI_DLN2 SPI_DYNAMIC SPI_LJCA SPI_MASTER SQUASHFS SQUASHFS_4K_DEVBLK_SIZE SQUASHFS_COMPILE_DECOMP_MULTI SQUASHFS_DECOMP_MULTI SQUASHFS_FILE_DIRECT SQUASHFS_LZ4 SQUASHFS_LZO SQUASHFS_XATTR SQUASHFS_XZ SQUASHFS_ZLIB SQUASHFS_ZSTD SSB SSB_PCIHOST_POSSIBLE SSB_PCMCIAHOST_POSSIBLE SSB_SDIOHOST_POSSIBLE STEAM_FF STP STREAM_PARSER SUNRPC_BACKCHANNEL SUN_PARTITION SURFACE_AGGREGATOR SURFACE_AGGREGATOR_BUS SURFACE_AGGREGATOR_REGISTRY SURFACE_HID SURFACE_HID_CORE SURFACE_KBD SW_SYNC SYSFB SYSFS_SYSCALL SYSV68_PARTITION TABLET_USB_ACECAD TABLET_USB_AIPTEK TABLET_USB_HANWANG TABLET_USB_KBTAB TABLET_USB_PEGASUS TAHVO_USB TAHVO_USB_HOST_BY_DEFAULT TCG_CRB TCG_TIS TCG_TIS_CORE TCG_TPM TCP_CONG_BBR TCP_CONG_BIC TCP_CONG_CDG TCP_CONG_DCTCP TCP_CONG_HSTCP TCP_CONG_HTCP TCP_CONG_HYBLA TCP_CONG_ILLINOIS TCP_CONG_LP TCP_CONG_NV TCP_CONG_SCALABLE TCP_CONG_VEGAS TCP_CONG_VENO TCP_CONG_WESTWOOD TCP_CONG_YEAH TEE TEE_DMABUF_HEAPS TEXTSEARCH TEXTSEARCH_BM TEXTSEARCH_FSM TEXTSEARCH_KMP THP_SWAP THRUSTMASTER_FF TIPC TIPC_CRYPTO TIPC_DIAG TIPC_MEDIA_IB TIPC_MEDIA_UDP TLS TLS_TOE TMPFS_QUOTA TOOLS_SUPPORT_RELR TOUCHSCREEN_SUR40 TOUCHSCREEN_USB_3M TOUCHSCREEN_USB_COMPOSITE TOUCHSCREEN_USB_DMC_TSC10 TOUCHSCREEN_USB_E2I TOUCHSCREEN_USB_EASYTOUCH TOUCHSCREEN_USB_EGALAX TOUCHSCREEN_USB_ELO TOUCHSCREEN_USB_ETT_TC45USB TOUCHSCREEN_USB_ETURBO TOUCHSCREEN_USB_GENERAL_TOUCH TOUCHSCREEN_USB_GOTOP TOUCHSCREEN_USB_GUNZE TOUCHSCREEN_USB_IDEALTEK TOUCHSCREEN_USB_IRTOUCH TOUCHSCREEN_USB_ITM TOUCHSCREEN_USB_JASTEC TOUCHSCREEN_USB_NEXIO TOUCHSCREEN_USB_PANJIT TOUCHSCREEN_USB_ZYTRONIC TRANSPARENT_HUGEPAGE TRANSPARENT_HUGEPAGE_MADVISE TTPCI_EEPROM TTY_PRINTK TUN_VNET_CROSS_LE TWL4030_CORE TYPEC TYPEC_ANX7411 TYPEC_DP_ALTMODE TYPEC_FUSB302 TYPEC_HD3SS3220 TYPEC_MT6360 TYPEC_MUX_FSA4480 TYPEC_MUX_GPIO_SBU TYPEC_MUX_INTEL_PMC TYPEC_MUX_NB7VPQ904M TYPEC_MUX_PTN36502 TYPEC_MUX_WCD939X_USBSS TYPEC_NVIDIA_ALTMODE TYPEC_RT1711H TYPEC_RT1719 TYPEC_STUSB160X TYPEC_TCPCI TYPEC_TCPCI_MAXIM TYPEC_TCPCI_MT6370 TYPEC_TCPM TYPEC_TPS6598X TYPEC_UCSI TYPEC_WCOVE TYPEC_WUSB3801 UBIFS_ATIME_SUPPORT UBIFS_FS UBIFS_FS_ADVANCED_COMPR UBIFS_FS_LZO UBIFS_FS_SECURITY UBIFS_FS_XATTR UBIFS_FS_ZLIB UBIFS_FS_ZSTD UCSI_ACPI UCSI_CCG UCSI_STM32G0 UDF_FS UDMABUF UFS_FS UFS_FS_WRITE UHID ULTRIX_PARTITION UNICODE UNIXWARE_DISKLABEL UNIX_DIAG USB4 USB4_NET USBIP_CORE USBIP_HOST USBIP_VHCI_HCD USBIP_VUDC USBPCWATCHDOG USB_ACM USB_ADUTUX USB_AIRSPY USB_ALI_M5632 USB_DWC2 USB_GADGET USB_LJCA USB_MUSB_HDRC USB_NET_CDC_SUBSET USB_ROLE_SWITCH USB_STORAGE_REALTEK USB_ULPI_BUS USB_USBNET VIDEO_DEV VXLAN WIRELESS WLAN WLAN_VENDOR_PURELIFI ZONE_DEVICE] picked [v6.17 v6.16 v6.15 v6.13 v6.11 v6.9 v6.7 v6.5 v6.2 v5.19 v5.16 v5.13 v5.10 v5.7 v5.4 v5.1 v4.19] out of 40 release tags testing release v6.17 testing commit e5f0a698b34ed76002dc5cff3804a61c80233a7a gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 2c009249a18ee0125474242375a2cd637eaadf555516c95663f8bc252adf0a04 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: basic kernel testing failed: SYZFAIL: failed to recv rpc run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect start a0c3aefb08cd81864b17c23c25b388dba90b9dad e5f0a698b34ed76002dc5cff3804a61c80233a7a Bisecting: 7792 revisions left to test after this (roughly 13 steps) [f79e772258df311c2cb21594ca0996318e720d28] Merge tag 'media/v6.18-1' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media testing commit f79e772258df311c2cb21594ca0996318e720d28 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 67c233616838019131cfb2c4529fc54f2677f867897c155c41425b9fc41762af run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect good f79e772258df311c2cb21594ca0996318e720d28 Bisecting: 3959 revisions left to test after this (roughly 12 steps) [5d2f4730bb7550d64c87785f1035d0e641dbc979] Merge tag 'tty-6.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty testing commit 5d2f4730bb7550d64c87785f1035d0e641dbc979 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 882f353382956a44d5900c21ec3ee8c918312e1b506f2ec5d9c31d194a414d57 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect good 5d2f4730bb7550d64c87785f1035d0e641dbc979 Bisecting: 1979 revisions left to test after this (roughly 11 steps) [8cc8ea228c4199482cf087fc6ed2d6e31b7a49e2] Merge tag 'parisc-for-6.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux testing commit 8cc8ea228c4199482cf087fc6ed2d6e31b7a49e2 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: d63476f78616d3aa6b0c52d6630f3bc07f7adf09f948720f487290fcabab8587 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: basic kernel testing failed: SYZFAIL: failed to recv rpc run #4: basic kernel testing failed: SYZFAIL: failed to recv rpc run #5: basic kernel testing failed: SYZFAIL: failed to recv rpc run #6: basic kernel testing failed: SYZFAIL: failed to recv rpc run #7: OK run #8: OK run #9: OK unable to determine the verdict: 3 good runs (wanted 5), for bad wanted 5 in total, got 3 # git bisect skip 8cc8ea228c4199482cf087fc6ed2d6e31b7a49e2 Bisecting: 1979 revisions left to test after this (roughly 11 steps) [dd72c8fcf6d35de5d6d976f20dc1ae84ce7af08b] Merge tag 'platform-drivers-x86-v6.18-2' of git://git.kernel.org/pub/scm/linux/kernel/git/pdx86/platform-drivers-x86 testing commit dd72c8fcf6d35de5d6d976f20dc1ae84ce7af08b gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: b29458d930653e51fd6f42812afc044ff2505b5cea408eaf9c83260a99854916 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: basic kernel testing failed: SYZFAIL: failed to recv rpc run #4: basic kernel testing failed: SYZFAIL: failed to recv rpc run #5: basic kernel testing failed: SYZFAIL: failed to recv rpc run #6: OK run #7: OK run #8: OK run #9: OK unable to determine the verdict: 4 good runs (wanted 5), for bad wanted 5 in total, got 4 # git bisect skip dd72c8fcf6d35de5d6d976f20dc1ae84ce7af08b Bisecting: 1979 revisions left to test after this (roughly 11 steps) [2e3da8cfe3b281d503ef0e968af131323562ae7c] fbdev: s3fb: Revert mclk stop in suspend testing commit 2e3da8cfe3b281d503ef0e968af131323562ae7c gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: f10f7b31e73f9dceff8ccfc5fad7fffe81030e3e25030de24babed7ee26b25d2 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: basic kernel testing failed: SYZFAIL: failed to recv rpc run #4: basic kernel testing failed: SYZFAIL: failed to recv rpc run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect good 2e3da8cfe3b281d503ef0e968af131323562ae7c Bisecting: 1973 revisions left to test after this (roughly 11 steps) [eba41c0173c8c27702b720730ed9d399088409f0] Merge tag 'io_uring-6.18-20251009' of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux testing commit eba41c0173c8c27702b720730ed9d399088409f0 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 5e3d6db55305f29031769eaeb6bb2f326fe82bcd91a36e79922d34b7cb7b7032 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: basic kernel testing failed: SYZFAIL: failed to recv rpc run #4: basic kernel testing failed: SYZFAIL: failed to recv rpc run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect good eba41c0173c8c27702b720730ed9d399088409f0 Bisecting: 986 revisions left to test after this (roughly 10 steps) [cebba694d26d29467615c641a8fefd5b2cd4a1aa] Merge branch 'net-stmmac-add-support-for-coarse-timestamping' testing commit cebba694d26d29467615c641a8fefd5b2cd4a1aa gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: d2d31099bb732caa1801deac3cb32c24fb8594ae0dd68b89c8ba7c7a18c5f2c7 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: basic kernel testing failed: SYZFAIL: failed to recv rpc run #4: basic kernel testing failed: SYZFAIL: failed to recv rpc run #5: basic kernel testing failed: SYZFAIL: failed to recv rpc run #6: basic kernel testing failed: SYZFAIL: failed to recv rpc run #7: crashed: KASAN: invalid-free in inet_sock_destruct run #8: crashed: KASAN: invalid-free in inet_sock_destruct run #9: crashed: KASAN: invalid-free in inet_sock_destruct representative crash: KASAN: invalid-free in inet_sock_destruct, types: [KASAN-INVALID-FREE] unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 3 # git bisect skip cebba694d26d29467615c641a8fefd5b2cd4a1aa Bisecting: 986 revisions left to test after this (roughly 10 steps) [24990d89c23de4dbef6b0b3d58383cafefdd6983] trace: tcp: add three metrics to trace_tcp_rcvbuf_grow() testing commit 24990d89c23de4dbef6b0b3d58383cafefdd6983 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: ed7db5e2cfcadd7739b3263a095f5f0d26d5800817deb272633cd960709d2978 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: basic kernel testing failed: SYZFAIL: failed to recv rpc run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect good 24990d89c23de4dbef6b0b3d58383cafefdd6983 Bisecting: 569 revisions left to test after this (roughly 9 steps) [1a2352ad82b515035efe563f997ef8f5ca4f8080] Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit 1a2352ad82b515035efe563f997ef8f5ca4f8080 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: c37e9a6e91342113ea94f0642e7194368f38c4f5cc47ecbec21e25790fafd042 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: basic kernel testing failed: SYZFAIL: failed to recv rpc run #4: crashed: KASAN: invalid-free in inet_sock_destruct run #5: crashed: KASAN: invalid-free in inet_sock_destruct run #6: crashed: KASAN: invalid-free in inet_sock_destruct run #7: crashed: KASAN: invalid-free in inet_sock_destruct run #8: crashed: KASAN: invalid-free in inet_sock_destruct run #9: crashed: KASAN: invalid-free in inet_sock_destruct representative crash: KASAN: invalid-free in inet_sock_destruct, types: [KASAN-INVALID-FREE] # git bisect bad 1a2352ad82b515035efe563f997ef8f5ca4f8080 Bisecting: 325 revisions left to test after this (roughly 8 steps) [02da595751833a272ce0e30438a544a77eb7c103] selftests: traceroute: Add ICMP extensions tests testing commit 02da595751833a272ce0e30438a544a77eb7c103 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: bd3ed4caa1799565923e93dd3645baa5d9bd78fcbc7d219284d0f74fac94d8e3 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: basic kernel testing failed: SYZFAIL: failed to recv rpc run #4: basic kernel testing failed: SYZFAIL: failed to recv rpc run #5: crashed: KASAN: invalid-free in inet_sock_destruct run #6: crashed: KASAN: invalid-free in inet_sock_destruct run #7: crashed: KASAN: invalid-free in inet_sock_destruct run #8: crashed: KASAN: invalid-free in inet_sock_destruct run #9: crashed: KASAN: invalid-free in inet_sock_destruct representative crash: KASAN: invalid-free in inet_sock_destruct, types: [KASAN-INVALID-FREE] # git bisect bad 02da595751833a272ce0e30438a544a77eb7c103 Bisecting: 162 revisions left to test after this (roughly 7 steps) [3dc835a66e039fbb46c82a50725c40a5cdbfb32f] Merge branch 'networking-docs-section-headings-cleanup' testing commit 3dc835a66e039fbb46c82a50725c40a5cdbfb32f gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 0148377c55e4e6f727122c192ec3a7f527822e0314f4f8eea22b4014ffc35006 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: basic kernel testing failed: SYZFAIL: failed to recv rpc run #4: basic kernel testing failed: SYZFAIL: failed to recv rpc run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect good 3dc835a66e039fbb46c82a50725c40a5cdbfb32f Bisecting: 81 revisions left to test after this (roughly 6 steps) [68800bbf583f26f71491141e4b3c8582f9cfcbde] net: bridge: Flush multicast groups when snooping is disabled testing commit 68800bbf583f26f71491141e4b3c8582f9cfcbde gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 61252db54780a7480c77acca652dd0fe19ae03d93556ee38e068561bad49d9e3 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect good 68800bbf583f26f71491141e4b3c8582f9cfcbde Bisecting: 40 revisions left to test after this (roughly 5 steps) [ae7a9585ea6974bd7a772fee96bb8514e250dbd6] net: macb: match skb_reserve(skb, NET_IP_ALIGN) with HW alignment testing commit ae7a9585ea6974bd7a772fee96bb8514e250dbd6 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 63aa490f4d6d88d5e2a2c00877d55068e2ab9f7462f5711c3bfac81d4ec73219 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: basic kernel testing failed: SYZFAIL: failed to recv rpc run #4: basic kernel testing failed: SYZFAIL: failed to recv rpc run #5: basic kernel testing failed: SYZFAIL: failed to recv rpc run #6: basic kernel testing failed: SYZFAIL: failed to recv rpc run #7: basic kernel testing failed: SYZFAIL: failed to recv rpc run #8: crashed: KASAN: invalid-free in inet_sock_destruct run #9: crashed: KASAN: invalid-free in inet_sock_destruct representative crash: KASAN: invalid-free in inet_sock_destruct, types: [KASAN-INVALID-FREE] unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 2 # git bisect skip ae7a9585ea6974bd7a772fee96bb8514e250dbd6 Bisecting: 40 revisions left to test after this (roughly 5 steps) [3f7e51cd5fbf4d970b14956ee9464515bb40666f] net: macb: rename bp->sgmii_phy field to bp->phy testing commit 3f7e51cd5fbf4d970b14956ee9464515bb40666f gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 34dd83833493ac7c2e54e8dadb0463d93dafc36daf0c2e46210c01619d176197 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: crashed: KASAN: invalid-free in inet_sock_destruct run #3: crashed: KASAN: invalid-free in inet_sock_destruct run #4: crashed: KASAN: invalid-free in inet_sock_destruct run #5: crashed: KASAN: invalid-free in inet_sock_destruct run #6: crashed: KASAN: invalid-free in inet_sock_destruct run #7: crashed: KASAN: invalid-free in inet_sock_destruct run #8: crashed: KASAN: invalid-free in inet_sock_destruct run #9: crashed: KASAN: invalid-free in inet_sock_destruct representative crash: KASAN: invalid-free in inet_sock_destruct, types: [KASAN-INVALID-FREE] # git bisect bad 3f7e51cd5fbf4d970b14956ee9464515bb40666f Bisecting: 20 revisions left to test after this (roughly 5 steps) [b7ddb55f31279f4e59acde3395fc03c3d94b6e5f] sctp: Use sctp_clone_sock() in sctp_do_peeloff(). testing commit b7ddb55f31279f4e59acde3395fc03c3d94b6e5f gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 221b183818c387e6285d0a59cfe5e02d890a307a96244ee509309f4d5a232261 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: crashed: KASAN: invalid-free in inet_sock_destruct run #2: crashed: KASAN: invalid-free in inet_sock_destruct run #3: crashed: KASAN: invalid-free in inet_sock_destruct run #4: crashed: KASAN: invalid-free in inet_sock_destruct run #5: crashed: KASAN: invalid-free in inet_sock_destruct run #6: crashed: KASAN: invalid-free in inet_sock_destruct run #7: crashed: KASAN: invalid-free in inet_sock_destruct run #8: crashed: KASAN: invalid-free in inet_sock_destruct run #9: crashed: KASAN: invalid-free in inet_sock_destruct representative crash: KASAN: invalid-free in inet_sock_destruct, types: [KASAN-INVALID-FREE] # git bisect bad b7ddb55f31279f4e59acde3395fc03c3d94b6e5f Bisecting: 10 revisions left to test after this (roughly 4 steps) [38efb0ba3cd07c3f144ef80895966debeee3f60e] ionic: convert to ndo_hwtstamp API testing commit 38efb0ba3cd07c3f144ef80895966debeee3f60e gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 220e3f0b09d9c9d759547e29e986000f37f73c18f0b67ce712b1faf8c8776b4a run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect good 38efb0ba3cd07c3f144ef80895966debeee3f60e Bisecting: 4 revisions left to test after this (roughly 3 steps) [2d4df59aae91340e777660cfe9862b7d8e15b077] sctp: Don't copy sk_sndbuf and sk_rcvbuf in sctp_sock_migrate(). testing commit 2d4df59aae91340e777660cfe9862b7d8e15b077 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 335960e450b498e6a442df0afc2c75f64e17aa051f4dee7850fca678052af657 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: basic kernel testing failed: SYZFAIL: failed to recv rpc run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect good 2d4df59aae91340e777660cfe9862b7d8e15b077 Bisecting: 2 revisions left to test after this (roughly 1 step) [151b98d10ef7c3174465e409b99d8762e7e8de60] net: Add sk_clone(). testing commit 151b98d10ef7c3174465e409b99d8762e7e8de60 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 76ed0cae682517db35afb47fcd21cfab9b53720c7a159cd81440391257918759 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect good 151b98d10ef7c3174465e409b99d8762e7e8de60 Bisecting: 1 revision left to test after this (roughly 1 step) [16942cf4d3e31b6246b7d000dd823f7b0b38bf8c] sctp: Use sk_clone() in sctp_accept(). testing commit 16942cf4d3e31b6246b7d000dd823f7b0b38bf8c gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 0e1a2bc03218c9d30c425a37ba2da71e69148005d0e0cf6f1baf187ed41930a9 run #0: basic kernel testing failed: SYZFAIL: failed to recv rpc run #1: basic kernel testing failed: SYZFAIL: failed to recv rpc run #2: crashed: KASAN: invalid-free in inet_sock_destruct run #3: crashed: KASAN: invalid-free in inet_sock_destruct run #4: crashed: KASAN: invalid-free in inet_sock_destruct run #5: crashed: KASAN: invalid-free in inet_sock_destruct run #6: crashed: KASAN: invalid-free in inet_sock_destruct run #7: crashed: KASAN: invalid-free in inet_sock_destruct run #8: crashed: KASAN: invalid-free in inet_sock_destruct run #9: crashed: KASAN: invalid-free in inet_sock_destruct representative crash: KASAN: invalid-free in inet_sock_destruct, types: [KASAN-INVALID-FREE] # git bisect bad 16942cf4d3e31b6246b7d000dd823f7b0b38bf8c 16942cf4d3e31b6246b7d000dd823f7b0b38bf8c is the first bad commit commit 16942cf4d3e31b6246b7d000dd823f7b0b38bf8c Author: Kuniyuki Iwashima Date: Thu Oct 23 23:16:54 2025 +0000 sctp: Use sk_clone() in sctp_accept(). sctp_accept() calls sctp_v[46]_create_accept_sk() to allocate a new socket and calls sctp_sock_migrate() to copy fields from the parent socket to the new socket. sctp_v4_create_accept_sk() allocates sk by sk_alloc(), initialises it by sock_init_data(), and copy a bunch of fields from the parent socekt by sctp_copy_sock(). sctp_sock_migrate() calls sctp_copy_descendant() to copy most fields in sctp_sock from the parent socket by memcpy(). These can be simply replaced by sk_clone(). Let's consolidate sctp_v[46]_create_accept_sk() to sctp_clone_sock() with sk_clone(). We will reuse sctp_clone_sock() for sctp_do_peeloff() and then remove sctp_copy_descendant(). Note that sock_reset_flag(newsk, SOCK_ZAPPED) is not copied to sctp_clone_sock() as sctp does not use SOCK_ZAPPED at all. Signed-off-by: Kuniyuki Iwashima Acked-by: Xin Long Link: https://patch.msgid.link/20251023231751.4168390-6-kuniyu@google.com Signed-off-by: Jakub Kicinski net/ipv4/af_inet.c | 4 +- net/sctp/socket.c | 113 +++++++++++++++++++++++++++++++++++------------------ 2 files changed, 77 insertions(+), 40 deletions(-) accumulated error probability: 0.00 culprit signature: 0e1a2bc03218c9d30c425a37ba2da71e69148005d0e0cf6f1baf187ed41930a9 parent signature: 76ed0cae682517db35afb47fcd21cfab9b53720c7a159cd81440391257918759 revisions tested: 27, total time: 12h3m41.233247264s (build: 7h52m53.053493344s, test: 3h23m35.809687773s) first bad commit: 16942cf4d3e31b6246b7d000dd823f7b0b38bf8c sctp: Use sk_clone() in sctp_accept(). recipients (to): ["kuba@kernel.org" "kuniyu@google.com" "lucien.xin@gmail.com"] recipients (cc): [] crash: KASAN: invalid-free in inet_sock_destruct ================================================================== BUG: KASAN: double-free in inet_sock_destruct+0x281/0x670 net/ipv4/af_inet.c:159 Free of addr ffff88801a9a8bc0 by task ksoftirqd/0/15 CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Call Trace: dump_stack_lvl+0xfc/0x190 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xca/0x240 mm/kasan/report.c:482 kasan_report_invalid_free+0xea/0x110 mm/kasan/report.c:557 check_slab_allocation+0xe1/0x130 include/linux/page-flags.h:-1 kasan_slab_pre_free include/linux/kasan.h:198 [inline] slab_free_hook mm/slub.c:2475 [inline] slab_free mm/slub.c:6619 [inline] kfree+0x148/0x6d0 mm/slub.c:6826 inet_sock_destruct+0x281/0x670 net/ipv4/af_inet.c:159 __sk_destruct+0x79/0x4d0 net/core/sock.c:2350 sock_put include/net/sock.h:1991 [inline] sctp_endpoint_destroy_rcu+0x8a/0xc0 net/sctp/endpointola.c:197 rcu_do_batch kernel/rcu/tree.c:2605 [inline] rcu_core+0xcab/0x1770 kernel/rcu/tree.c:2861 handle_softirqs+0x277/0x860 kernel/softirq.c:622 run_ksoftirqd+0x9b/0x100 kernel/softirq.c:1063 smpboot_thread_fn+0x4e5/0x910 kernel/smpboot.c:160 kthread+0x600/0x770 kernel/kthread.c:463 ret_from_fork+0x2e2/0x590 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Allocated by task 3727: kasan_save_stack mm/kasan/common.c:56 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:77 poison_kmalloc_redzone mm/kasan/common.c:400 [inline] __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:417 kasan_kmalloc include/linux/kasan.h:262 [inline] __do_kmalloc_node mm/slub.c:5634 [inline] __kmalloc_noprof+0x411/0x7f0 mm/slub.c:5646 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] ip_options_get+0x4b/0x3d0 net/ipv4/ip_options.c:517 do_ip_setsockopt+0x1013/0x1d30 net/ipv4/ip_sockglue.c:1087 ip_setsockopt+0x3a/0x80 net/ipv4/ip_sockglue.c:1417 do_sock_setsockopt+0x113/0x140 net/socket.c:2360 __sys_setsockopt net/socket.c:2385 [inline] __do_sys_setsockopt net/socket.c:2391 [inline] __se_sys_setsockopt net/socket.c:2388 [inline] __x64_sys_setsockopt+0x13f/0x180 net/socket.c:2388 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 15: kasan_save_stack mm/kasan/common.c:56 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:77 __kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:587 kasan_save_free_info mm/kasan/kasan.h:406 [inline] poison_slab_object mm/kasan/common.c:252 [inline] __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:284 kasan_slab_free include/linux/kasan.h:234 [inline] slab_free_hook mm/slub.c:2530 [inline] slab_free mm/slub.c:6619 [inline] kfree+0x19a/0x6d0 mm/slub.c:6826 inet_sock_destruct+0x281/0x670 net/ipv4/af_inet.c:159 __sk_destruct+0x79/0x4d0 net/core/sock.c:2350 sock_put include/net/sock.h:1991 [inline] sctp_endpoint_destroy_rcu+0x8a/0xc0 net/sctp/endpointola.c:197 rcu_do_batch kernel/rcu/tree.c:2605 [inline] rcu_core+0xcab/0x1770 kernel/rcu/tree.c:2861 handle_softirqs+0x277/0x860 kernel/softirq.c:622 run_ksoftirqd+0x9b/0x100 kernel/softirq.c:1063 smpboot_thread_fn+0x4e5/0x910 kernel/smpboot.c:160 kthread+0x600/0x770 kernel/kthread.c:463 ret_from_fork+0x2e2/0x590 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 The buggy address belongs to the object at ffff88801a9a8bc0 which belongs to the cache kmalloc-32 of size 32 The buggy address is located 0 bytes inside of 32-byte region [ffff88801a9a8bc0, ffff88801a9a8be0) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1a9a8 flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000000 ffff88813fea6780 dead000000000122 0000000000000000 raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP), pid 3724, tgid 3724 (modprobe), ts 98099199683, free_ts 98097861039 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x240/0x2a0 mm/page_alloc.c:1850 prep_new_page mm/page_alloc.c:1858 [inline] get_page_from_freelist+0x2365/0x2440 mm/page_alloc.c:3884 __alloc_frozen_pages_noprof+0x181/0x370 mm/page_alloc.c:5183 alloc_pages_mpol+0x150/0x360 mm/mempolicy.c:2416 alloc_slab_page mm/slub.c:3046 [inline] allocate_slab+0x96/0x3a0 mm/slub.c:3219 new_slab mm/slub.c:3273 [inline] ___slab_alloc+0xe94/0x18a0 mm/slub.c:4643 __slab_alloc+0x65/0x100 mm/slub.c:4762 __slab_alloc_node mm/slub.c:4838 [inline] slab_alloc_node mm/slub.c:5260 [inline] __kmalloc_cache_noprof+0x411/0x6f0 mm/slub.c:5750 kmalloc_noprof include/linux/slab.h:957 [inline] slab_free_hook mm/slub.c:2482 [inline] slab_free mm/slub.c:6619 [inline] kmem_cache_free+0x16f/0x690 mm/slub.c:6729 task_work_run+0x150/0x1f0 kernel/task_work.c:227 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x572/0x1cb0 kernel/exit.c:966 do_group_exit+0x1b1/0x280 kernel/exit.c:1107 __do_sys_exit_group kernel/exit.c:1118 [inline] __se_sys_exit_group kernel/exit.c:1116 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1116 x64_sys_call+0x21f7/0x2200 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f page last free pid 3724 tgid 3724 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1394 [inline] __free_frozen_pages+0xbc4/0xd30 mm/page_alloc.c:2906 tlb_batch_list_free mm/mmu_gather.c:159 [inline] tlb_finish_mmu+0x134/0x190 mm/mmu_gather.c:500 exit_mmap+0x384/0x8d0 mm/mmap.c:1293 __mmput+0x9d/0x2e0 kernel/fork.c:1133 exit_mm+0x198/0x260 kernel/exit.c:582 do_exit+0x50f/0x1cb0 kernel/exit.c:954 do_group_exit+0x1b1/0x280 kernel/exit.c:1107 __do_sys_exit_group kernel/exit.c:1118 [inline] __se_sys_exit_group kernel/exit.c:1116 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1116 x64_sys_call+0x21f7/0x2200 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Memory state around the buggy address: ffff88801a9a8a80: fa fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc ffff88801a9a8b00: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc >ffff88801a9a8b80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc ^ ffff88801a9a8c00: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc ffff88801a9a8c80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc ==================================================================