ci2 starts bisection 2024-02-20 06:27:09.917399919 +0000 UTC m=+65105.743766561 bisecting fixing commit since ca48fc16c49388400eddd6c6614593ebf7c7726a building syzkaller on 90c93c40627cb0ac3c2c7cb99d807fd4c137adcb ensuring issue is reproducible on original commit ca48fc16c49388400eddd6c6614593ebf7c7726a testing commit ca48fc16c49388400eddd6c6614593ebf7c7726a gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e77c7ca12d2def6bb0018c00aeb4e3271e4f75746eb26fadd7d467f6f32d220e all runs: crashed: KASAN: out-of-bounds Read in leaf_paste_entries representative crash: KASAN: out-of-bounds Read in leaf_paste_entries, types: [KASAN] check whether we can drop unnecessary instrumentation disabling configs for [BUG LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit ca48fc16c49388400eddd6c6614593ebf7c7726a gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5d3148cd1d0f55c853b003313d1d5db820b0b7a55c58d3a93f1fd562ffd5af50 all runs: crashed: KASAN: out-of-bounds Read in leaf_paste_entries representative crash: KASAN: out-of-bounds Read in leaf_paste_entries, types: [KASAN] the bug reproduces without the instrumentation disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed kconfig minimization: base=7493 full=9689 leaves diff=1935 split chunks (needed=false): <1935> split chunk #0 of len 1935 into 5 parts testing without sub-chunk 1/5 disabling configs for [LEAK UBSAN BUG LOCKDEP ATOMIC_SLEEP HANG], they are not needed testing commit ca48fc16c49388400eddd6c6614593ebf7c7726a gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b87fe9f1b2cd63a3388aa075aa2df480ef8c6c100e2c1f13317d771b6e41fec5 all runs: crashed: KASAN: out-of-bounds Read in leaf_paste_entries representative crash: KASAN: out-of-bounds Read in leaf_paste_entries, types: [KASAN] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [BUG LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit ca48fc16c49388400eddd6c6614593ebf7c7726a gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 15adab3d12dfe16e4bef2fc4f34f0c81153fa1be0f95935be609c730597efcb1 all runs: boot failed: can't ssh into the instance unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 testing without sub-chunk 3/5 disabling configs for [BUG LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit ca48fc16c49388400eddd6c6614593ebf7c7726a gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6ce62e109a1a857e636b2f384f4e08846afc8c3ce66b69b6361e3e84f17d7a2d all runs: crashed: KASAN: out-of-bounds Read in leaf_paste_entries representative crash: KASAN: out-of-bounds Read in leaf_paste_entries, types: [KASAN] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG LOCKDEP], they are not needed testing commit ca48fc16c49388400eddd6c6614593ebf7c7726a gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a6fa7e0b09ab4b3761542f72f7e8d84cbc81ea939f9feebe18142bcecc24db25 all runs: OK false negative chance: 0.000 testing without sub-chunk 5/5 disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed testing commit ca48fc16c49388400eddd6c6614593ebf7c7726a gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6ceb09ce920854c952ba71b6e2c93c57737e9afb2208a5da9d78ad233ed4cef1 all runs: crashed: KASAN: out-of-bounds Read in leaf_paste_entries representative crash: KASAN: out-of-bounds Read in leaf_paste_entries, types: [KASAN] the chunk can be dropped minimized to 774 configs; suspects: [6LOWPAN ACPI_VIDEO AF_RXRPC ATM AX25 CFG80211 DLM DRM DRM_BRIDGE DRM_ROCKCHIP DRM_TI_SN65DSI86 DRM_TTM DRM_TTM_HELPER DRM_UDL DRM_V3D DRM_VC4 DRM_VGEM DRM_VIRTIO_GPU DRM_VKMS DRM_VRAM_HELPER DUMMY DVB_AF9013 DVB_AF9033 DVB_AS102 DVB_AS102_FE DVB_B2C2_FLEXCOP DVB_B2C2_FLEXCOP_USB DVB_DIB3000MB DVB_DIB3000MC DVB_EC100 DVB_GP8PSK_FE DVB_RTL2830 DVB_RTL2832 DVB_RTL2832_SDR DVB_TEST_DRIVERS DVB_TTUSB_BUDGET DVB_TTUSB_DEC DVB_USB DVB_USB_A800 DVB_USB_AF9005 DVB_USB_AF9005_REMOTE DVB_USB_AF9015 DVB_USB_AF9035 DVB_USB_ANYSEE DVB_USB_AU6610 DVB_USB_AZ6007 DVB_USB_AZ6027 DVB_USB_CE6230 DVB_USB_CINERGY_T2 DVB_USB_CXUSB DVB_USB_DIB0700 DVB_USB_DIB3000MC DVB_USB_DIBUSB_MB DVB_USB_DIBUSB_MC DVB_USB_DIGITV DVB_USB_DTT200U DVB_USB_DTV5100 DVB_USB_DVBSKY DVB_USB_DW2102 DVB_USB_EC168 DVB_USB_GL861 DVB_USB_GP8PSK DVB_USB_LME2510 DVB_USB_M920X DVB_USB_MXL111SF DVB_USB_NOVA_T_USB2 DVB_USB_OPERA1 DVB_USB_PCTV452E DVB_USB_RTL28XXU DVB_USB_TECHNISAT_USB2 DVB_USB_TTUSB2 DVB_USB_UMT_010 DVB_USB_V2 DVB_USB_VP702X DVB_USB_VP7045 DVB_USB_ZD1301 DVB_VIDTV DVB_ZL10353 E100 ECRYPT_FS ECRYPT_FS_MESSAGING EEPROM_93CX6 EFS_FS ENCRYPTED_KEYS EQUALIZER EROFS_FS EROFS_FS_POSIX_ACL EROFS_FS_SECURITY EROFS_FS_XATTR EROFS_FS_ZIP EVM EVM_ADD_XATTRS EVM_ATTR_FSUUID EXFAT_FS EXPORTFS_BLOCK_OPS EXT3_FS_POSIX_ACL EXT3_FS_SECURITY EXT4_FS_SECURITY F2FS_CHECK_FS F2FS_FAULT_INJECTION F2FS_FS F2FS_FS_COMPRESSION F2FS_FS_LZ4 F2FS_FS_LZ4HC F2FS_FS_LZO F2FS_FS_LZORLE F2FS_FS_POSIX_ACL F2FS_FS_SECURITY F2FS_FS_XATTR F2FS_FS_ZSTD F2FS_STAT_FS FB_DEFERRED_IO FB_SYS_COPYAREA FB_SYS_FILLRECT FB_SYS_FOPS FB_SYS_IMAGEBLIT FB_TILEBLITTING FB_VIRTUAL FDDI FIB_RULES FIREWIRE FIREWIRE_NET FIREWIRE_OHCI FIREWIRE_SBP2 FRAMEBUFFER_CONSOLE_ROTATION FRONTSWAP FS_DAX FS_DAX_PMD FS_ENCRYPTION FS_ENCRYPTION_ALGS FS_VERITY FS_VERITY_BUILTIN_SIGNATURES FTL FW_LOADER_COMPRESS FW_LOADER_USER_HELPER_FALLBACK GACT_PROB GENEVE GET_FREE_REGION GFS2_FS GFS2_FS_LOCKING_DLM GOOGLE_COREBOOT_TABLE GOOGLE_FIRMWARE GOOGLE_MEMCONSOLE GOOGLE_MEMCONSOLE_COREBOOT GOOGLE_VPD GPIO_DLN2 GPIO_VIPERBOARD GREENASIA_FF GREYBUS GREYBUS_BRIDGED_PHY GREYBUS_ES2 GREYBUS_HID GREYBUS_USB GTP GVE HAMRADIO HAVE_ARCH_USERFAULTFD_MINOR HAVE_IMA_KEXEC HDLC HDLC_CISCO HDLC_FR HDLC_PPP HDLC_RAW HDLC_RAW_ETH HDLC_X25 HDMI HFSPLUS_FS HFS_FS HIDRAW HID_ACCUTOUCH HID_ACRUX HID_ACRUX_FF HID_ALPS HID_APPLEIR HID_ASUS HID_AUREAL HID_BATTERY_STRENGTH HID_BETOP_FF HID_CMEDIA HID_CORSAIR HID_CP2112 HID_ELECOM HID_ELO HID_EMS_FF HID_GEMBIRD HID_GFRM HID_GREENASIA HID_GT683R HID_GYRATION HID_HOLTEK HID_ICADE HID_KEYTOUCH HID_KYE HID_LCPOWER HID_LED HID_LENOVO HID_LOGITECH_DJ HID_LOGITECH_HIDPP HID_MAGICMOUSE HID_MAYFLASH HID_NTI HID_NTRIG HID_ORTEK HID_PANTHERLORD HID_PENMOUNT HID_PETALYNX HID_PICOLCD HID_PICOLCD_BACKLIGHT HID_PICOLCD_CIR HID_PICOLCD_FB HID_PICOLCD_LCD HID_PICOLCD_LEDS HID_PID HID_PLANTRONICS HID_PRIMAX HID_PRODIKEYS HID_RETRODE HID_RMI HID_ROCCAT HID_SAITEK HID_SAMSUNG HID_SENSOR_ACCEL_3D HID_SENSOR_ALS HID_SENSOR_CUSTOM_SENSOR HID_SENSOR_DEVICE_ROTATION HID_SENSOR_GYRO_3D HID_SENSOR_HUB HID_SENSOR_HUMIDITY HID_SENSOR_IIO_COMMON HID_SENSOR_IIO_TRIGGER HID_SENSOR_INCLINOMETER_3D HID_SENSOR_MAGNETOMETER_3D HID_SENSOR_PRESS HID_SENSOR_PROX HID_SENSOR_TEMP HID_SMARTJOYPLUS HID_SONY HID_SPEEDLINK HID_STEELSERIES HID_SUNPLUS HID_THINGM HID_TIVO HID_TOPSEED HID_TWINHAN HID_UCLOGIC HID_UDRAW_PS3 HID_WACOM HID_WALTOP HID_WIIMOTE HID_XINMO HID_ZYDACRON HMM_MIRROR HOLTEK_FF HOTPLUG_PCI_PCIE HPFS_FS I2C_DIOLAN_U2C I2C_DLN2 I2C_MUX_REG I2C_ROBOTFUZZ_OSIF I2C_SI4713 I2C_SLAVE_EEPROM I2C_TINY_USB I2C_VIPERBOARD IEEE802154 IEEE802154_6LOWPAN IEEE802154_ATUSB IEEE802154_DRIVERS IEEE802154_HWSIM IEEE802154_NL802154_EXPERIMENTAL IEEE802154_SOCKET IFB IMA IMA_APPRAISE IMA_APPRAISE_MODSIG IMA_DEFAULT_HASH_SHA256 IMA_LSM_RULES IMA_MEASURE_ASYMMETRIC_KEYS IMA_NG_TEMPLATE IMA_QUEUE_EARLY_BOOT_KEYS IMA_READ_POLICY IMA_WRITE_POLICY INET6_AH INET6_ESP INET6_ESPINTCP INET6_ESP_OFFLOAD INET6_IPCOMP INET6_TUNNEL INET6_XFRM_TUNNEL INET_AH INET_DCCP_DIAG INET_DIAG_DESTROY INET_ESP INET_ESPINTCP INET_ESP_OFFLOAD INET_IPCOMP INET_MPTCP_DIAG INET_RAW_DIAG INET_SCTP_DIAG INET_UDP_DIAG INET_XFRM_TUNNEL INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_ADDR_TRANS_CONFIGFS INFINIBAND_IPOIB INFINIBAND_IPOIB_CM INFINIBAND_IPOIB_DEBUG INFINIBAND_ISER INFINIBAND_ON_DEMAND_PAGING INFINIBAND_RTRS INFINIBAND_SRP INFINIBAND_USER_ACCESS INFINIBAND_USER_MAD INFINIBAND_USER_MEM INFINIBAND_VIRT_DMA INPUT_ATI_REMOTE2 INPUT_CM109 INPUT_IMS_PCU INPUT_JOYDEV INPUT_JOYSTICK INPUT_KEYSPAN_REMOTE INPUT_LEDS INPUT_MOUSEDEV INPUT_MOUSEDEV_PSAUX INPUT_POWERMATE INPUT_TABLET INPUT_UINPUT INPUT_YEALINK INTEGRITY INTEGRITY_ASYMMETRIC_KEYS INTEGRITY_AUDIT INTEGRITY_SIGNATURE INTEGRITY_TRUSTED_KEYRING IP6_NF_MATCH_AH IP6_NF_MATCH_EUI64 IP6_NF_MATCH_FRAG IP6_NF_MATCH_HL IP6_NF_MATCH_IPV6HEADER IP6_NF_MATCH_MH IP6_NF_MATCH_OPTS IP6_NF_MATCH_RPFILTER IP6_NF_MATCH_RT IP6_NF_MATCH_SRH IP6_NF_RAW IP6_NF_SECURITY IP6_NF_TARGET_HL IP6_NF_TARGET_NPT IP6_NF_TARGET_SYNPROXY IPV6_FOU IPV6_FOU_TUNNEL IPV6_GRE IPV6_ILA IPV6_MIP6 IPV6_MROUTE IPV6_MROUTE_MULTIPLE_TABLES IPV6_MULTIPLE_TABLES IPV6_OPTIMISTIC_DAD IPV6_PIMSM_V2 IPV6_ROUTER_PREF IPV6_ROUTE_INFO IPV6_RPL_LWTUNNEL IPV6_SEG6_BPF IPV6_SEG6_HMAC IPV6_SEG6_LWTUNNEL IPV6_SIT_6RD IPV6_SUBTREES IPV6_TUNNEL IPV6_VTI IPVLAN IPVLAN_L3S IPVTAP IP_ADVANCED_ROUTER IP_DCCP IP_DCCP_CCID3 IP_DCCP_TFRC_LIB IP_FIB_TRIE_STATS IP_MROUTE IP_MROUTE_COMMON IP_MROUTE_MULTIPLE_TABLES IP_NF_ARPFILTER IP_NF_ARPTABLES IP_NF_ARP_MANGLE IP_NF_MATCH_AH IP_NF_MATCH_ECN IP_NF_MATCH_RPFILTER IP_NF_MATCH_TTL IP_NF_RAW IP_NF_SECURITY IP_NF_TARGET_CLUSTERIP IP_NF_TARGET_ECN IP_NF_TARGET_NETMAP IP_NF_TARGET_REDIRECT IP_NF_TARGET_SYNPROXY IP_NF_TARGET_TTL IP_PIMSM_V1 IP_PIMSM_V2 IP_PNP_RARP IP_ROUTE_CLASSID IP_ROUTE_MULTIPATH IP_ROUTE_VERBOSE IP_SCTP IP_SET IP_SET_BITMAP_IP IP_SET_BITMAP_IPMAC IP_SET_BITMAP_PORT IP_SET_HASH_IP IP_SET_HASH_IPMAC IP_SET_HASH_IPMARK IP_SET_HASH_IPPORT IP_SET_HASH_IPPORTIP IP_SET_HASH_IPPORTNET IP_SET_HASH_MAC IP_SET_HASH_NET IP_SET_HASH_NETIFACE IP_SET_HASH_NETNET IP_SET_HASH_NETPORT IP_SET_HASH_NETPORTNET IP_SET_LIST_SET IP_VS_DH IP_VS_FO IP_VS_FTP IP_VS_IPV6 IP_VS_LBLC IP_VS_LBLCR IP_VS_LC IP_VS_MH IP_VS_NFCT IP_VS_NQ IP_VS_OVF IP_VS_PE_SIP IP_VS_PROTO_AH IP_VS_PROTO_AH_ESP IP_VS_PROTO_ESP IP_VS_PROTO_SCTP IP_VS_PROTO_TCP IP_VS_PROTO_UDP IP_VS_RR IP_VS_SED IP_VS_SH IP_VS_TWOS IP_VS_WLC IP_VS_WRR IR_IGORPLUGUSB IR_IGUANA IR_IMON IR_MCEUSB IR_REDRAT3 IR_STREAMZAP IR_TTUSBIR ISDN ISDN_CAPI_MIDDLEWARE ISO9660_FS JFFS2_CMODE_PRIORITY JFFS2_COMPRESSION_OPTIONS JFFS2_FS JFFS2_FS_POSIX_ACL JFFS2_FS_SECURITY JFFS2_FS_WRITEBUFFER JFFS2_FS_XATTR JFFS2_LZO JFFS2_RTIME JFFS2_RUBIN JFFS2_SUMMARY JFFS2_ZLIB JFS_DEBUG JFS_FS JFS_POSIX_ACL JFS_SECURITY JOLIET JOYSTICK_IFORCE JOYSTICK_IFORCE_USB JOYSTICK_XPAD JOYSTICK_XPAD_FF JOYSTICK_XPAD_LEDS KARMA_PARTITION KCOV KCOV_ENABLE_COMPARISONS KCOV_INSTRUMENT_ALL L2TP LAPB LCD_CLASS_DEVICE MAC802154 MEDIA_COMMON_OPTIONS MEDIA_RADIO_SUPPORT MEDIA_TEST_SUPPORT MFD_DLN2 MFD_RETU MFD_VIPERBOARD MPTCP NETFILTER_CONNCOUNT NET_IPGRE NET_IPGRE_DEMUX NFT_FWD_NETDEV NF_CONNTRACK_FTP NF_CONNTRACK_SIP NF_TABLES NF_TABLES_NETDEV N_HDLC OCFS2_DEBUG_FS OCFS2_FS OCFS2_FS_O2CB OCFS2_FS_STATS OCFS2_FS_USERSPACE_CLUSTER OMFS_FS OPENVSWITCH OPENVSWITCH_GENEVE OPENVSWITCH_GRE OPENVSWITCH_VXLAN ORANGEFS_FS OSF_PARTITION OVERLAY_FS_INDEX OVERLAY_FS_REDIRECT_DIR PACKET_DIAG PADATA PAGE_IDLE_FLAG PAHOLE_HAS_SPLIT_BTF PANTHERLORD_FF PARPORT PARPORT_NOT_PC PARTITION_ADVANCED PATA_AMD PATA_OLDPIIX PATA_SCH PCCARD PCMCIA PERCPU_STATS PERSISTENT_KEYRINGS PHY_CPCAP_USB PHY_QCOM_USB_HSIC PHY_TUSB1210 PKCS7_TEST_KEY PKCS8_PRIVATE_KEY_PARSER PM_DEBUG PM_SLEEP_DEBUG PPP PPPOATM PPPOE PPPOL2TP PPP_ASYNC PPP_BSDCOMP PPP_DEFLATE PPP_FILTER PPP_MPPE PPP_MULTILINK PPP_SYNC_TTY PPTP PRISM2_USB PROC_CHILDREN PROC_KCORE PSI PSTORE_842_COMPRESS PSTORE_LZ4HC_COMPRESS PSTORE_LZ4_COMPRESS PSTORE_LZO_COMPRESS PSTORE_ZSTD_COMPRESS QFMT_V2 QNX4FS_FS QNX6FS_FS QUOTA_NETLINK_INTERFACE QUOTA_TREE R8712U RADIO_ADAPTERS RADIO_SHARK RADIO_SHARK2 RADIO_SI4713 RADIO_TEA575X RC_ATI_REMOTE RDMA_RXE RDMA_SIW RDS RDS_RDMA RDS_TCP READ_ONLY_THP_FOR_FS REALTEK_AUTOPM REED_SOLOMON REED_SOLOMON_DEC8 REGMAP_SOUNDWIRE REGULATOR_TWL4030 REISERFS_FS REISERFS_FS_POSIX_ACL REISERFS_FS_SECURITY REISERFS_FS_XATTR REISERFS_PROC_INFO RFKILL RFKILL_INPUT RFKILL_LEDS RMI4_2D_SENSOR RMI4_CORE RMI4_F03 RMI4_F03_SERIO RMI4_F11 RMI4_F12 RMI4_F30 ROCKCHIP_ANALOGIX_DP ROCKCHIP_CDN_DP ROCKCHIP_DW_HDMI ROCKCHIP_DW_MIPI_DSI ROCKCHIP_INNO_HDMI ROCKCHIP_LVDS ROCKCHIP_VOP ROMFS_BACKED_BY_BOTH ROMFS_FS ROMFS_ON_BLOCK ROMFS_ON_MTD ROSE RTC_DRV_HID_SENSOR_TIME RXKAD SCHEDSTATS SCSI_CONSTANTS SCSI_FC_ATTRS SCSI_HPSA SCSI_ISCSI_ATTRS SCSI_LOGGING SCSI_NETLINK SCSI_SCAN_ASYNC SCSI_SPI_ATTRS SCSI_SRP_ATTRS SCTP_COOKIE_HMAC_MD5 SCTP_COOKIE_HMAC_SHA1 SCTP_DEFAULT_COOKIE_HMAC_MD5 SECONDARY_TRUSTED_KEYRING SECURITY_INFINIBAND SECURITY_NETWORK_XFRM SERIAL_8250_DETECT_IRQ SERIAL_8250_MANY_PORTS SERIAL_8250_RSA SERIAL_NONSTANDARD SERIO_SERPORT SGI_PARTITION SIGNATURE SIGNED_PE_FILE_VERIFICATION SLHC SLIP SLIP_COMPRESSED SLIP_MODE_SLIP6 SLIP_SMART SMARTJOYPLUS_FF SMBFS_COMMON SMC SMC_DIAG SMS_SDIO_DRV SMS_SIANO_DEBUGFS SMS_SIANO_MDTV SMS_SIANO_RC SMS_USB_DRV SND SND_ALOOP SND_AUDIO_GRAPH_CARD SND_AUDIO_GRAPH_CARD2 SND_BCD2000 SND_BCM2835_SOC_I2S SND_COMPRESS_OFFLOAD SND_CTL_FAST_LOOKUP SND_CTL_LED SND_DEBUG SND_DMAENGINE_PCM SND_DRIVERS SND_DUMMY SND_DYNAMIC_MINORS SND_HDA SND_HDA_ALIGNED_MMIO SND_HDA_CODEC_ANALOG SND_HDA_CODEC_CA0110 SND_HDA_CODEC_CA0132 SND_HDA_CODEC_CIRRUS SND_HDA_CODEC_CMEDIA SND_HDA_CODEC_CONEXANT SND_HDA_CODEC_HDMI SND_HDA_CODEC_REALTEK SND_HDA_CODEC_SI3054 SND_HDA_CODEC_SIGMATEL SND_HDA_CODEC_VIA SND_HDA_COMPONENT SND_HDA_CORE SND_HDA_GENERIC SND_HDA_GENERIC_LEDS SND_HDA_HWDEP SND_HDA_INPUT_BEEP SND_HDA_INTEL SND_HDA_PATCH_LOADER SND_HDA_RECONFIG SND_HDA_TEGRA SND_HRTIMER SND_HWDEP SND_IMX_SOC SND_INTEL_DSP_CONFIG SND_INTEL_NHLT SND_INTEL_SOUNDWIRE_ACPI SND_JACK SND_JACK_INPUT_DEV SND_MESON_AIU SND_MESON_AXG_FIFO SND_MESON_AXG_FRDDR SND_MESON_AXG_PDM SND_MESON_AXG_SOUND_CARD SND_MESON_AXG_SPDIFIN SND_MESON_AXG_SPDIFOUT SND_MESON_AXG_TDMIN SND_MESON_AXG_TDMOUT SND_MESON_AXG_TDM_FORMATTER SND_MESON_AXG_TDM_INTERFACE SND_MESON_AXG_TODDR SND_MESON_CARD_UTILS SND_MESON_CODEC_GLUE SND_MESON_G12A_TOACODEC SND_MESON_G12A_TOHDMITX SND_MESON_GX_SOUND_CARD SND_MIXER_OSS SND_OSSEMUL SND_PCI SND_PCM SND_PCM_ELD SND_PCM_IEC958 SND_PCM_OSS SND_PCM_OSS_PLUGINS SND_PCM_TIMER SND_PCM_XRUN_DEBUG SND_PROC_FS SND_RAWMIDI SND_SEQUENCER SND_SEQUENCER_OSS SND_SEQ_DEVICE SND_SEQ_DUMMY SND_SEQ_MIDI SND_SEQ_MIDI_EVENT SND_SEQ_VIRMIDI SND_SIMPLE_CARD SND_SIMPLE_CARD_UTILS SND_SOC SND_SOC_ADAU7002 SND_SOC_AK4613 SND_SOC_APPLE_MCA SND_SOC_APQ8016_SBC SND_SOC_COMPRESS SND_SOC_DA7219 SND_SOC_DMIC SND_SOC_ES7134 SND_SOC_ES7241 SND_SOC_FSL_ASOC_CARD SND_SOC_FSL_ASRC SND_SOC_FSL_AUDMIX SND_SOC_FSL_EASRC SND_SOC_FSL_ESAI SND_SOC_FSL_MICFIL SND_SOC_FSL_SAI SND_SOC_FSL_SPDIF SND_SOC_FSL_SSI SND_SOC_FSL_UTILS SND_SOC_GENERIC_DMAENGINE_PCM SND_SOC_GTM601 SND_SOC_HDMI_CODEC SND_SOC_I2C_AND_SPI SND_SOC_IMX_AUDMIX SND_SOC_IMX_AUDMUX SND_SOC_IMX_PCM_DMA SND_SOC_IMX_SGTL5000 SND_SOC_IMX_SPDIF SND_SOC_LPASS_APQ8016 SND_SOC_LPASS_CDC_DMA SND_SOC_LPASS_CPU SND_SOC_LPASS_HDMI SND_SOC_LPASS_MACRO_COMMON SND_SOC_LPASS_PLATFORM SND_SOC_LPASS_RX_MACRO SND_SOC_LPASS_SC7180 SND_SOC_LPASS_SC7280 SND_SOC_LPASS_TX_MACRO SND_SOC_LPASS_VA_MACRO SND_SOC_LPASS_WSA_MACRO SND_SOC_MAX98357A SND_SOC_MAX98927 SND_SOC_MESON_T9015 SND_SOC_MSM8916_WCD_ANALOG SND_SOC_MSM8916_WCD_DIGITAL SND_SOC_MSM8996 SND_SOC_NAU8822 SND_SOC_PCM3168A SND_SOC_PCM3168A_I2C SND_SOC_QCOM SND_SOC_QCOM_COMMON SND_SOC_QCOM_SDW SND_SOC_QDSP6 SND_SOC_QDSP6_ADM SND_SOC_QDSP6_AFE SND_SOC_QDSP6_AFE_CLOCKS SND_SOC_QDSP6_AFE_DAI SND_SOC_QDSP6_APM SND_SOC_QDSP6_APM_DAI SND_SOC_QDSP6_APM_LPASS_DAI SND_SOC_QDSP6_ASM SND_SOC_QDSP6_ASM_DAI SND_SOC_QDSP6_COMMON SND_SOC_QDSP6_CORE SND_SOC_QDSP6_PRM SND_SOC_QDSP6_PRM_LPASS_CLOCKS SND_SOC_QDSP6_ROUTING SND_SOC_RCAR SND_SOC_RK3399_GRU_SOUND SND_SOC_RL6231 SND_SOC_ROCKCHIP SND_SOC_ROCKCHIP_I2S SND_SOC_ROCKCHIP_RT5645 SND_SOC_ROCKCHIP_SPDIF SND_SOC_RT5514 SND_SOC_RT5514_SPI SND_SOC_RT5645 SND_SOC_RT5659 SND_SOC_RT5663 SND_SOC_RT5682 SND_SOC_RT5682S SND_SOC_RT5682_I2C SND_SOC_RZ SND_SOC_SAMSUNG SND_SOC_SC7180 SND_SOC_SC7280 SND_SOC_SDM845 SND_SOC_SGTL5000 SND_SOC_SIMPLE_AMPLIFIER SND_SOC_SIMPLE_MUX SND_SOC_SM8250 SND_SOC_SPDIF SND_SOC_TAS571X SND_SOC_TEGRA SND_SOC_TEGRA186_ASRC SND_SOC_TEGRA186_DSPK SND_SOC_TEGRA210_ADMAIF SND_SOC_TEGRA210_ADX SND_SOC_TEGRA210_AHUB SND_SOC_TEGRA210_AMX SND_SOC_TEGRA210_DMIC SND_SOC_TEGRA210_I2S SND_SOC_TEGRA210_MIXER SND_SOC_TEGRA210_MVC SND_SOC_TEGRA210_OPE SND_SOC_TEGRA210_SFC SND_SOC_TEGRA_AUDIO_GRAPH_CARD SND_SOC_TLV320AIC31XX SND_SOC_TLV320AIC32X4 SND_SOC_TLV320AIC32X4_I2C SND_SOC_TOPOLOGY SND_SOC_WCD9335 SND_SOC_WCD934X SND_SOC_WCD938X SND_SOC_WCD938X_SDW SND_SOC_WCD_MBHC SND_SOC_WM8524 SND_SOC_WM8904 SND_SOC_WM8960 SND_SOC_WM8962 SND_SOC_WM8978 SND_SOC_WM8994 SND_SOC_WM_HUBS SND_SOC_WSA881X SND_SPI SND_SUN4I_I2S SND_SUN4I_SPDIF SND_SUN50I_CODEC_ANALOG SND_SUN8I_ADDA_PR_REGMAP SND_SUN8I_CODEC SND_SUN8I_CODEC_ANALOG SND_SUPPORT_OLD_API SND_TIMER SND_USB SND_USB_6FIRE SND_USB_AUDIO SND_USB_AUDIO_USE_MEDIA_CONTROLLER SND_USB_CAIAQ SND_USB_CAIAQ_INPUT SND_USB_HIFACE SND_USB_LINE6 SND_USB_POD SND_USB_PODHD SND_USB_TONEPORT SND_USB_UA101 SND_USB_VARIAX SND_VERBOSE_PROCFS SND_VIRMIDI SND_VIRTIO SND_VMASTER SOCK_VALIDATE_XMIT SOLARIS_X86_PARTITION SONY_FF SOUND SOUNDWIRE_QCOM SOUND_OSS_CORE SOUND_OSS_CORE_PRECLAIM SPI_DLN2 SQUASHFS_4K_DEVBLK_SIZE SQUASHFS_FILE_DIRECT SQUASHFS_LZ4 SQUASHFS_LZO SQUASHFS_XATTR SQUASHFS_XZ SQUASHFS_ZSTD SSB SSB_PCIHOST_POSSIBLE SSB_PCMCIAHOST_POSSIBLE SSB_SDIOHOST_POSSIBLE STREAM_PARSER SUN_PARTITION SW_SYNC SYN_COOKIES SYSV68_PARTITION SYSV_FS TABLET_USB_ACECAD TABLET_USB_AIPTEK TABLET_USB_HANWANG TABLET_USB_KBTAB TABLET_USB_PEGASUS TAHVO_USB TAHVO_USB_HOST_BY_DEFAULT TCG_CRB TCG_TIS_I2C_INFINEON TCG_TPM TCP_CONG_ADVANCED TCP_CONG_BBR TCP_CONG_BIC TCP_CONG_CDG TCP_CONG_DCTCP TCP_CONG_HSTCP TCP_CONG_HTCP TCP_CONG_HYBLA TCP_CONG_ILLINOIS TCP_CONG_LP TCP_CONG_NV TCP_CONG_SCALABLE TCP_CONG_VEGAS TCP_CONG_VENO TCP_CONG_WESTWOOD TCP_CONG_YEAH TCP_MD5SIG TEXTSEARCH TEXTSEARCH_BM TEXTSEARCH_FSM TEXTSEARCH_KMP TWL4030_CORE USB_STORAGE_REALTEK VXLAN WAN WIRELESS WLAN XFRM ZONE_DEVICE] disabling configs for [BUG LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing current HEAD 8b4118fabd6eb75fed19483b04dab3a036886489 testing commit 8b4118fabd6eb75fed19483b04dab3a036886489 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1ad43b71243a4cc00a237268a48313651706bef2ab696b0f2e3e018c5b29895d all runs: crashed: KASAN: out-of-bounds Read in leaf_paste_entries representative crash: KASAN: out-of-bounds Read in leaf_paste_entries, types: [KASAN] crash still not fixed/happens on the oldest tested release revisions tested: 8, total time: 1h57m56.946695457s (build: 1h15m29.182077633s, test: 39m39.999355459s) crash still not fixed or there were kernel test errors commit msg: Linux 6.1.78 crash: KASAN: out-of-bounds Read in leaf_paste_entries REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 REISERFS (device loop0): checking transaction log (loop0) REISERFS (device loop0): Using tea hash to sort names ================================================================== BUG: KASAN: out-of-bounds in leaf_paste_entries+0x698/0xb10 fs/reiserfs/lbalance.c:1377 Read of size 18446744073709551584 at addr ffff0000ddf74fa4 by task syz-executor.0/3469 CPU: 0 PID: 3469 Comm: syz-executor.0 Not tainted 6.1.78-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 Call trace: dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xc0/0x104 lib/dump_stack.c:106 print_address_description mm/kasan/report.c:284 [inline] print_report+0x174/0x4c0 mm/kasan/report.c:395 kasan_report+0xcc/0x124 mm/kasan/report.c:495 kasan_check_range+0x264/0x2a4 mm/kasan/generic.c:189 memmove+0x48/0x90 mm/kasan/shadow.c:54 leaf_paste_entries+0x698/0xb10 fs/reiserfs/lbalance.c:1377 balance_leaf_finish_node_paste_dirent fs/reiserfs/do_balan.c:1295 [inline] balance_leaf_finish_node_paste fs/reiserfs/do_balan.c:1321 [inline] balance_leaf_finish_node fs/reiserfs/do_balan.c:1364 [inline] balance_leaf fs/reiserfs/do_balan.c:1452 [inline] do_balance+0x6c20/0xb510 fs/reiserfs/do_balan.c:1888 reiserfs_paste_into_item+0x5d0/0x6e4 fs/reiserfs/stree.c:2159 reiserfs_add_entry+0x8ec/0xcc4 fs/reiserfs/namei.c:567 reiserfs_mkdir+0x588/0x77c fs/reiserfs/namei.c:862 xattr_mkdir fs/reiserfs/xattr.c:76 [inline] create_privroot fs/reiserfs/xattr.c:882 [inline] reiserfs_xattr_init+0x294/0x688 fs/reiserfs/xattr.c:1005 reiserfs_fill_super+0x1bfc/0x2028 fs/reiserfs/super.c:2175 mount_bdev+0x25c/0x33c fs/super.c:1432 get_super_block+0x44/0x58 fs/reiserfs/super.c:2601 legacy_get_tree+0xd4/0x16c fs/fs_context.c:632 vfs_get_tree+0x90/0x1c0 fs/super.c:1562 do_new_mount+0x278/0x8fc fs/namespace.c:3051 path_mount+0x590/0xe3c fs/namespace.c:3381 do_mount fs/namespace.c:3394 [inline] __do_sys_mount fs/namespace.c:3602 [inline] __se_sys_mount fs/namespace.c:3579 [inline] __arm64_sys_mount+0x45c/0x59c fs/namespace.c:3579 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x134/0x24c arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x218 arch/arm64/kernel/syscall.c:206 el0_svc+0x34/0x100 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 The buggy address belongs to the physical page: page:000000004a712c7c refcount:3 mapcount:0 mapping:000000006819ebe9 index:0x213 pfn:0x11df74 memcg:ffff0000d1a00000 aops:def_blk_aops ino:700000 flags: 0x5ffc00000002022(referenced|active|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002022 0000000000000000 dead000000000122 ffff0000c0481310 raw: 0000000000000213 ffff0000dc7ebae0 00000003ffffffff ffff0000d1a00000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff0000ddf74e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff0000ddf74f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffff0000ddf74f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ^ ffff0000ddf75000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff0000ddf75080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ================================================================== REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 29662, item_location 2, free_space(entry_count) 37376 REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? REISERFS (device loop0): Remounting filesystem read-only REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [1 2 0x0 SD] stat data REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 29662, item_location 2, free_space(entry_count) 37376 REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error