ci2 starts bisection 2026-01-15 21:46:47.269011316 +0000 UTC m=+4349819.446134373 bisecting fixing commit since 36c254515dc6592c44db77b84908358979dd6b50 building syzkaller on 084d817847fa603dabdd081770a757e9c41f1ae7 ensuring issue is reproducible on original commit 36c254515dc6592c44db77b84908358979dd6b50 testing commit 36c254515dc6592c44db77b84908358979dd6b50 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 8a9fa4991903e86e5ae69b4fa2fb3ca1d1bf5892af805076036f2244fb6687c1 run #0: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #1: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #2: crashed: KASAN: slab-out-of-bounds Read in ocfs2_reserve_suballoc_bits run #3: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #4: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #5: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #6: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #7: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #8: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #9: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #10: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #11: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #12: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #13: crashed: KASAN: out-of-bounds Read in ocfs2_reserve_suballoc_bits run #14: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #15: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #16: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #17: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #18: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #19: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits representative crash: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits, types: [KASAN-USE-AFTER-FREE-READ] check whether we can drop unnecessary instrumentation disabling configs for [atomic_sleep hang memleak ubsan bug_or_warning locking], they are not needed testing commit 36c254515dc6592c44db77b84908358979dd6b50 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 4699306c4fb8e6a92ca11e80cb672e19d3af54a4c03db7d4352737ba3b28a015 run #0: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #1: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #2: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #3: crashed: KASAN: out-of-bounds Read in ocfs2_reserve_suballoc_bits run #4: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #5: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #6: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #7: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #8: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #9: crashed: KASAN: out-of-bounds Read in ocfs2_reserve_suballoc_bits representative crash: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits, types: [KASAN-USE-AFTER-FREE-READ] the bug reproduces without the instrumentation disabling configs for [bug_or_warning locking atomic_sleep hang memleak ubsan], they are not needed kconfig minimization: base=4109 full=8185 leaves diff=2161 split chunks (needed=false): <2161> split chunk #0 of len 2161 into 5 parts testing without sub-chunk 1/5 disabling configs for [bug_or_warning locking atomic_sleep hang memleak ubsan], they are not needed testing commit 36c254515dc6592c44db77b84908358979dd6b50 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 3e9dcef3ac5de6027e30523e0164622994231577d42c2f67fb66ec72a24924f0 run #0: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #1: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #2: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #3: crashed: KASAN: slab-out-of-bounds Read in ocfs2_reserve_suballoc_bits run #4: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #5: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #6: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #7: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #8: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #9: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits representative crash: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits, types: [KASAN-USE-AFTER-FREE-READ] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [hang memleak ubsan bug_or_warning locking atomic_sleep], they are not needed testing commit 36c254515dc6592c44db77b84908358979dd6b50 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 7b8d798360147da8b221521db5a63b8f923df68762eefa8e48e8baaa9f7fa98e run #0: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #1: crashed: KASAN: slab-out-of-bounds Read in ocfs2_reserve_suballoc_bits run #2: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #3: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #4: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #5: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #6: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #7: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #8: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #9: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits representative crash: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits, types: [KASAN-USE-AFTER-FREE-READ] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [ubsan bug_or_warning locking atomic_sleep hang memleak], they are not needed testing commit 36c254515dc6592c44db77b84908358979dd6b50 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: a7dfaafde9f1cb1ce1a4a614aab84bf7a63d37e621f5f2da5eafcfba4d0f6d60 run #0: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #1: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #2: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #3: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #4: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #5: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #6: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #7: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #8: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #9: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits representative crash: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits, types: [KASAN-USE-AFTER-FREE-READ] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [locking atomic_sleep hang memleak ubsan bug_or_warning], they are not needed testing commit 36c254515dc6592c44db77b84908358979dd6b50 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 807a9007e5be11606a703bc482a41c850fb298bcd6d539fe8c653607b66a3f03 all runs: OK false negative chance: 0.000 testing without sub-chunk 5/5 disabling configs for [hang memleak ubsan bug_or_warning locking atomic_sleep], they are not needed testing commit 36c254515dc6592c44db77b84908358979dd6b50 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: af72b59bd22b88b4607ed7aa185dded228f27647cfe48a0215ee6be559337d00 all runs: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits representative crash: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits, types: [KASAN-USE-AFTER-FREE-READ] the chunk can be dropped minimized to 433 configs; suspects: [AF_RXRPC ARCH_ENABLE_MEMORY_HOTREMOVE ARCH_HAS_PTE_DEVMAP ATM AX25 BT BT_BREDR BT_HIDP BXT_WC_PMIC_OPREGION CFG80211 CMA CRYPTO_CTS DAX DLM DRM DVB_CORE ENCRYPTED_KEYS EXTCON GENEVE GPIOLIB HAMRADIO HAVE_CLK HID_NVIDIA_SHIELD HID_PLAYSTATION HID_SENSOR_HUB HID_SMARTJOYPLUS HID_STEAM HID_THRUSTMASTER IIO INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_IPOIB INFINIBAND_USER_ACCESS INFINIBAND_VIRT_DMA INPUT_TABLET INPUT_TOUCHSCREEN INTEL_SCU_IPC INTEL_SOC_PMIC_BXTWC IP_SCTP L2TP LEDS_CLASS_MULTICOLOR LIBNVDIMM MAC80211 MCORE2 MEDIA_COMMON_OPTIONS MEDIA_DIGITAL_TV_SUPPORT MEDIA_PLATFORM_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_USB_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MFD_INTEL_PMC_BXT MFD_MT6360 MFD_MT6370 MFD_RETU MMC MTD MTD_UBI NETFILTER_CONNCOUNT NET_IPGRE NET_IPGRE_DEMUX NFS_V4_1 NLS_CODEPAGE_1250 NLS_CODEPAGE_1251 NLS_CODEPAGE_737 NLS_CODEPAGE_775 NLS_CODEPAGE_850 NLS_CODEPAGE_852 NLS_CODEPAGE_855 NLS_CODEPAGE_857 NLS_CODEPAGE_860 NLS_CODEPAGE_861 NLS_CODEPAGE_862 NLS_CODEPAGE_863 NLS_CODEPAGE_864 NLS_CODEPAGE_865 NLS_CODEPAGE_866 NLS_CODEPAGE_869 NLS_CODEPAGE_874 NLS_CODEPAGE_932 NLS_CODEPAGE_936 NLS_CODEPAGE_949 NLS_CODEPAGE_950 NLS_ISO8859_13 NLS_ISO8859_14 NLS_ISO8859_15 NLS_ISO8859_2 NLS_ISO8859_3 NLS_ISO8859_4 NLS_ISO8859_5 NLS_ISO8859_6 NLS_ISO8859_7 NLS_ISO8859_8 NLS_ISO8859_9 NLS_KOI8_R NLS_KOI8_U NLS_MAC_CELTIC NLS_MAC_CENTEURO NLS_MAC_CROATIAN NLS_MAC_CYRILLIC NLS_MAC_GAELIC NLS_MAC_GREEK NLS_MAC_ICELAND NLS_MAC_INUIT NLS_MAC_ROMAN NLS_MAC_ROMANIAN NLS_MAC_TURKISH NLS_UCS2_UTILS NOZOMI NTFS3_FS NTFS3_FS_POSIX_ACL NTFS3_LZX_XPRESS NULL_TTY NUMA_BALANCING NUMA_BALANCING_DEFAULT_ENABLED NUMA_EMU NUMA_KEEP_MEMINFO NVDIMM_DAX NVDIMM_KEYS NVDIMM_PFN NVIDIA_SHIELD_FF NVME_CORE NVME_FABRICS NVME_FC NVME_MULTIPATH NVME_RDMA NVME_TARGET NVME_TARGET_FC NVME_TARGET_FCLOOP NVME_TARGET_LOOP NVME_TARGET_RDMA NVME_TARGET_TCP NVME_TCP N_GSM N_HDLC OCFS2_DEBUG_FS OCFS2_FS OCFS2_FS_O2CB OCFS2_FS_STATS OCFS2_FS_USERSPACE_CLUSTER OF_GPIO OF_PMEM OMFS_FS OPENVSWITCH OPENVSWITCH_GENEVE OPENVSWITCH_GRE OPENVSWITCH_VXLAN ORANGEFS_FS OSF_PARTITION OVERLAY_FS OVERLAY_FS_DEBUG OVERLAY_FS_INDEX OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW OVERLAY_FS_REDIRECT_DIR PACKET_DIAG PAGE_IDLE_FLAG PAGE_REPORTING PAHOLE_HAS_BTF_TAG PAHOLE_HAS_LANG_EXCLUDE PAHOLE_HAS_SPLIT_BTF PARPORT PARPORT_NOT_PC PARTITION_ADVANCED PCCARD PCCARD_NONSTATIC PCIEAER PCI_ENDPOINT PCI_IOV PCMCIA PCMCIA_LOAD_CIS PERCPU_STATS PERSISTENT_KEYRINGS PHONET PHYLINK PHY_CPCAP_USB PHY_QCOM_USB_HS PHY_QCOM_USB_HSIC PHY_SAMSUNG_USB2 PHY_TUSB1210 PKCS7_TEST_KEY PKCS8_PRIVATE_KEY_PARSER PLAYSTATION_FF PLFXLC PMIC_OPREGION PM_CLK PNFS_BLOCK PNFS_FILE_LAYOUT PNFS_FLEXFILE_LAYOUT PPP PPPOATM PPPOE PPPOE_HASH_BITS_1 PPPOL2TP PPP_ASYNC PPP_BSDCOMP PPP_DEFLATE PPP_FILTER PPP_MPPE PPP_MULTILINK PPP_SYNC_TTY PPTP PREEMPT PREEMPT_NOTIFIERS PROC_CHILDREN PROC_PID_CPUSET PSAMPLE PSI PSTORE PSTORE_COMPRESS PTDUMP_CORE QCOM_QMI_HELPERS QNX4FS_FS QNX6FS_FS QRTR QRTR_TUN R8712U RADIO_ADAPTERS RADIO_SHARK RADIO_SHARK2 RADIO_TEA575X RAID6_PQ RAID_ATTRS RC_ATI_REMOTE RC_CORE RC_DEVICES RC_XBOX_DVD RDMA_RXE RDMA_SIW RDS RDS_RDMA RDS_TCP READ_ONLY_THP_FOR_FS REALTEK_AUTOPM REED_SOLOMON REED_SOLOMON_DEC8 REGMAP REGMAP_I2C REGMAP_IRQ REGMAP_MMIO REGMAP_SPI REGULATOR REGULATOR_FIXED_VOLTAGE REGULATOR_TWL4030 REISERFS_FS REISERFS_FS_POSIX_ACL REISERFS_FS_SECURITY REISERFS_FS_XATTR REISERFS_PROC_INFO RESET_CONTROLLER RFKILL RFKILL_INPUT RFKILL_LEDS RMI4_2D_SENSOR RMI4_CORE RMI4_F03 RMI4_F03_SERIO RMI4_F11 RMI4_F12 RMI4_F30 ROMFS_BACKED_BY_BOTH ROMFS_FS ROMFS_ON_BLOCK ROMFS_ON_MTD ROSE RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA1 RTC_DRV_HID_SENSOR_TIME RXKAD SCHED_CORE SCREEN_INFO SCSI_FC_ATTRS SCSI_HPSA SCSI_ISCSI_ATTRS SCSI_LOGGING SCSI_NETLINK SCSI_SAS_ATA SCSI_SAS_ATTRS SCSI_SAS_LIBSAS SCSI_SCAN_ASYNC SCSI_SRP_ATTRS SCTP_COOKIE_HMAC_MD5 SCTP_COOKIE_HMAC_SHA1 SCTP_DEFAULT_COOKIE_HMAC_MD5 SECONDARY_TRUSTED_KEYRING SECURITY_INFINIBAND SECURITY_NETWORK_XFRM SECURITY_SMACK_NETFILTER SENSORS_AQUACOMPUTER_D5NEXT SENSORS_CORSAIR_CPRO SENSORS_CORSAIR_PSU SENSORS_GIGABYTE_WATERFORCE SENSORS_NZXT_KRAKEN2 SENSORS_NZXT_SMART2 SENSORS_POWERZ SERIAL_DEV_BUS SERIAL_DEV_CTRL_TTYPORT SERIAL_MCTRL_GPIO SGI_PARTITION SIGNATURE SIGNED_PE_FILE_VERIFICATION SKB_DECRYPTED SLHC SLIP SLIP_COMPRESSED SLIP_MODE_SLIP6 SLIP_SMART SMARTJOYPLUS_FF SMBFS SMC SMC_DIAG SMSC_PHY SMS_SDIO_DRV SMS_SIANO_DEBUGFS SMS_SIANO_MDTV SMS_SIANO_RC SMS_USB_DRV SND SND_ALOOP SND_BCD2000 SND_CTL_FAST_LOOKUP SND_CTL_LED SND_DEBUG SND_DMA_SGBUF SND_DRIVERS SND_DUMMY SND_DYNAMIC_MINORS SND_HDA SND_HDA_CODEC_ANALOG SND_HDA_CODEC_CA0110 SND_HDA_CODEC_CA0132 SND_HDA_CODEC_CIRRUS SND_HDA_CODEC_CMEDIA SND_HDA_CODEC_CONEXANT SND_HDA_CODEC_HDMI SND_HDA_CODEC_REALTEK SND_HDA_CODEC_SI3054 SND_HDA_CODEC_SIGMATEL SND_HDA_CODEC_VIA SND_HDA_COMPONENT SND_HDA_CORE SND_HDA_GENERIC SND_HDA_GENERIC_LEDS SND_HDA_HWDEP SND_HDA_I915 SND_HDA_INPUT_BEEP SND_HDA_INTEL SND_HDA_PATCH_LOADER SND_HDA_RECONFIG SND_HDA_SCODEC_COMPONENT SND_HRTIMER SND_HWDEP SND_INTEL_DSP_CONFIG SND_INTEL_NHLT SND_INTEL_SOUNDWIRE_ACPI SND_JACK SND_JACK_INPUT_DEV SND_MIXER_OSS SND_OSSEMUL SND_PCI SND_PCM SND_PCMCIA SND_PCM_OSS SND_PCM_OSS_PLUGINS SND_PCM_TIMER SND_PCM_XRUN_DEBUG SND_PROC_FS SND_RAWMIDI SND_SEQUENCER SND_SEQUENCER_OSS SND_SEQ_DEVICE SND_SEQ_DUMMY SND_SEQ_HRTIMER_DEFAULT SND_SEQ_MIDI SND_SEQ_MIDI_EVENT SND_SEQ_UMP_CLIENT SND_SEQ_VIRMIDI SND_SOC SND_SOC_I2C_AND_SPI SND_SUPPORT_OLD_API SND_TIMER SND_UMP SND_UMP_LEGACY_RAWMIDI SND_USB SND_USB_6FIRE SND_USB_AUDIO SND_USB_AUDIO_MIDI_V2 SND_USB_AUDIO_USE_MEDIA_CONTROLLER SND_USB_CAIAQ SND_USB_CAIAQ_INPUT SND_USB_HIFACE SND_USB_LINE6 SND_USB_POD SND_USB_PODHD SND_USB_TONEPORT SND_USB_UA101 SND_USB_US122L SND_USB_USX2Y SND_USB_VARIAX SND_VERBOSE_PROCFS SND_VIRMIDI SND_VIRTIO SND_VMASTER SND_X86 SOCK_VALIDATE_XMIT SOLARIS_X86_PARTITION SONY_FF SOUND SOUNDWIRE SOUND_OSS_CORE SOUND_OSS_CORE_PRECLAIM SPI SPI_DLN2 SPI_DYNAMIC SPI_LJCA SPI_MASTER SQUASHFS SQUASHFS_4K_DEVBLK_SIZE SQUASHFS_COMPILE_DECOMP_MULTI SQUASHFS_DECOMP_MULTI SQUASHFS_FILE_DIRECT SQUASHFS_LZ4 SQUASHFS_LZO SQUASHFS_XATTR SQUASHFS_XZ SQUASHFS_ZLIB SQUASHFS_ZSTD SSB SSB_PCIHOST_POSSIBLE SSB_PCMCIAHOST_POSSIBLE SSB_SDIOHOST_POSSIBLE STAGING STEAM_FF STP STREAM_PARSER SUNRPC_BACKCHANNEL SUN_PARTITION SW_SYNC SYSFB SYSFS_SYSCALL SYSV68_PARTITION SYSV_FS TABLET_USB_ACECAD TABLET_USB_AIPTEK TABLET_USB_HANWANG TABLET_USB_KBTAB TABLET_USB_PEGASUS TAHVO_USB TAHVO_USB_HOST_BY_DEFAULT TCG_CRB TCG_TIS TCG_TIS_CORE TCG_TPM TCP_CONG_BBR TCP_CONG_BIC TCP_CONG_CDG TCP_CONG_DCTCP TCP_CONG_HSTCP TCP_CONG_HTCP TCP_CONG_HYBLA TCP_CONG_ILLINOIS TCP_CONG_LP TCP_CONG_NV TCP_CONG_SCALABLE TCP_CONG_VEGAS TCP_CONG_VENO TCP_CONG_WESTWOOD TCP_CONG_YEAH TEE TEXTSEARCH TEXTSEARCH_BM TEXTSEARCH_FSM TEXTSEARCH_KMP THERMAL_GOV_USER_SPACE THP_SWAP THRUSTMASTER_FF TIPC TIPC_CRYPTO TIPC_DIAG TIPC_MEDIA_IB TIPC_MEDIA_UDP TLS TLS_TOE TMPFS_QUOTA TOOLS_SUPPORT_RELR TOUCHSCREEN_SUR40 TOUCHSCREEN_USB_3M TOUCHSCREEN_USB_COMPOSITE TOUCHSCREEN_USB_DMC_TSC10 TOUCHSCREEN_USB_E2I TOUCHSCREEN_USB_EASYTOUCH TOUCHSCREEN_USB_EGALAX TOUCHSCREEN_USB_ELO TOUCHSCREEN_USB_ETT_TC45USB TOUCHSCREEN_USB_ETURBO TOUCHSCREEN_USB_GENERAL_TOUCH TOUCHSCREEN_USB_GOTOP TOUCHSCREEN_USB_GUNZE TOUCHSCREEN_USB_IDEALTEK TOUCHSCREEN_USB_IRTOUCH TOUCHSCREEN_USB_ITM TOUCHSCREEN_USB_JASTEC TOUCHSCREEN_USB_NEXIO TOUCHSCREEN_USB_PANJIT TOUCHSCREEN_USB_ZYTRONIC TRANSPARENT_HUGEPAGE TRANSPARENT_HUGEPAGE_MADVISE TTPCI_EEPROM TTY_PRINTK TUN_VNET_CROSS_LE TWL4030_CORE TYPEC TYPEC_ANX7411 TYPEC_DP_ALTMODE TYPEC_FUSB302 TYPEC_HD3SS3220 TYPEC_MT6360 TYPEC_MUX_FSA4480 TYPEC_MUX_GPIO_SBU TYPEC_MUX_INTEL_PMC TYPEC_MUX_NB7VPQ904M TYPEC_MUX_PTN36502 TYPEC_MUX_WCD939X_USBSS TYPEC_NVIDIA_ALTMODE TYPEC_RT1711H TYPEC_RT1719 TYPEC_STUSB160X TYPEC_TCPCI TYPEC_TCPCI_MAXIM TYPEC_TCPCI_MT6370 TYPEC_TCPM TYPEC_TPS6598X TYPEC_UCSI TYPEC_WCOVE TYPEC_WUSB3801 UBIFS_ATIME_SUPPORT UBIFS_FS UBIFS_FS_ADVANCED_COMPR UBIFS_FS_LZO UBIFS_FS_SECURITY UBIFS_FS_XATTR UBIFS_FS_ZLIB UBIFS_FS_ZSTD UCSI_ACPI UCSI_CCG UCSI_STM32G0 UDF_FS UDMABUF UFS_FS UFS_FS_WRITE UHID ULTRIX_PARTITION UNICODE UNIXWARE_DISKLABEL UNIX_DIAG USB4 USB4_NET USBIP_CORE USBIP_HOST USBIP_VHCI_HCD USBIP_VUDC USBPCWATCHDOG USB_ACM USB_ADUTUX USB_AIRSPY USB_ALI_M5632 USB_AN2720 USB_APPLEDISPLAY USB_ARMLINUX USB_BDC_UDC USB_BELKIN USB_C67X00_HCD USB_CATC USB_CDC_PHONET USB_CDNS2_UDC USB_CDNS3 USB_CDNS3_GADGET USB_CDNS3_HOST USB_CDNS_SUPPORT USB_DWC2 USB_GADGET USB_LJCA USB_MUSB_HDRC USB_NET_CDC_SUBSET USB_ROLE_SWITCH USB_STORAGE_REALTEK USB_ULPI_BUS USB_USBNET VIDEO_DEV VXLAN WIRELESS WLAN WLAN_VENDOR_PURELIFI ZONE_DEVICE] disabling configs for [locking atomic_sleep hang memleak ubsan bug_or_warning], they are not needed testing current HEAD 603c05a1639f60e0c52c5fdd25cf5e0b44b9bd8e testing commit 603c05a1639f60e0c52c5fdd25cf5e0b44b9bd8e gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 036be3b8f1754431f83deb256047f7046b557b7b8df15a8a6f6169df2090f2d6 all runs: OK false negative chance: 0.000 # git bisect start 603c05a1639f60e0c52c5fdd25cf5e0b44b9bd8e 36c254515dc6592c44db77b84908358979dd6b50 Bisecting: 51945 revisions left to test after this (roughly 16 steps) [ec6a328b2e68adfaa322b633519b72ab6cd33e3a] Merge tag 'ovpn-net-20250603' of https://github.com/OpenVPN/ovpn-net-next determine whether the revision contains the guilty commit revision 36c254515dc6592c44db77b84908358979dd6b50 crashed and is reachable testing commit ec6a328b2e68adfaa322b633519b72ab6cd33e3a gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 5978948002d877f9e8e1be00355869664d8db393b1ebcb6ddb146be3ed7b4c78 all runs: boot failed: KASAN: global-out-of-bounds Read in acpi_ps_alloc_op unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 # git bisect skip ec6a328b2e68adfaa322b633519b72ab6cd33e3a Bisecting: 51908 revisions left to test after this (roughly 16 steps) [6fe26f694c824b8a4dbf50c635bee1302e3f099c] Bluetooth: MGMT: Protect mgmt_pending list with its own lock determine whether the revision contains the guilty commit revision 36c254515dc6592c44db77b84908358979dd6b50 crashed and is reachable testing commit 6fe26f694c824b8a4dbf50c635bee1302e3f099c gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: b188db42c21aa3d97dfb183629074a303edd8a849b0437bf316d85d6040992c3 all runs: boot failed: KASAN: global-out-of-bounds Read in acpi_ps_alloc_op unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 # git bisect skip 6fe26f694c824b8a4dbf50c635bee1302e3f099c Bisecting: 51908 revisions left to test after this (roughly 16 steps) [e6ed54e86aae9e4f7286ce8d5c73780f91b48d1c] Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete determine whether the revision contains the guilty commit revision ec6a328b2e68adfaa322b633519b72ab6cd33e3a crashed and is reachable testing commit e6ed54e86aae9e4f7286ce8d5c73780f91b48d1c gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 2bd03f287e5a147a3698d03735d336eb418b5ca65c1608bbe38e5f3c12f73ff2 all runs: boot failed: KASAN: global-out-of-bounds Read in acpi_ps_alloc_op unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 # git bisect skip e6ed54e86aae9e4f7286ce8d5c73780f91b48d1c Bisecting: 51908 revisions left to test after this (roughly 16 steps) [82d6229e7e5c5f8be09a0b38bbcfeece5d2d28c5] s390/uaccess: Merge cmpxchg_user_key() inline assemblies determine whether the revision contains the guilty commit revision 36c254515dc6592c44db77b84908358979dd6b50 crashed and is reachable testing commit 82d6229e7e5c5f8be09a0b38bbcfeece5d2d28c5 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 824dddf1332cb0fab71a8b8269e711fe290f1285bd1fb9a16c09077baaebdc92 run #0: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #1: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #2: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #3: crashed: KASAN: out-of-bounds Read in ocfs2_reserve_suballoc_bits run #4: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #5: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #6: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #7: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #8: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #9: crashed: KASAN: out-of-bounds Read in ocfs2_reserve_suballoc_bits representative crash: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good 82d6229e7e5c5f8be09a0b38bbcfeece5d2d28c5 Bisecting: 22648 revisions left to test after this (roughly 15 steps) [f79e772258df311c2cb21594ca0996318e720d28] Merge tag 'media/v6.18-1' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media determine whether the revision contains the guilty commit revision ec6a328b2e68adfaa322b633519b72ab6cd33e3a crashed and is reachable testing commit f79e772258df311c2cb21594ca0996318e720d28 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: d3d402f7f21c506724ed3e7fb7674d43f499dcbc15aeaff69b8d69dbbc5f0650 all runs: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits representative crash: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good f79e772258df311c2cb21594ca0996318e720d28 Bisecting: 10559 revisions left to test after this (roughly 14 steps) [8f7aa3d3c7323f4ca2768a9e74ebbe359c4f8f88] Merge tag 'net-next-6.19' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next determine whether the revision contains the guilty commit revision e6ed54e86aae9e4f7286ce8d5c73780f91b48d1c crashed and is reachable testing commit 8f7aa3d3c7323f4ca2768a9e74ebbe359c4f8f88 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 91a07d08b3187c90acc7d9cdf93b390c3ceb4dd9e4035164e944585be66fbc87 run #0: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #1: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #2: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #3: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #4: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #5: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #6: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #7: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #8: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #9: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits representative crash: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good 8f7aa3d3c7323f4ca2768a9e74ebbe359c4f8f88 Bisecting: 5282 revisions left to test after this (roughly 12 steps) [7cd122b55283d3ceef71a5b723ccaa03a72284b4] Merge tag 'pull-persistency' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs determine whether the revision contains the guilty commit revision ec6a328b2e68adfaa322b633519b72ab6cd33e3a crashed and is reachable testing commit 7cd122b55283d3ceef71a5b723ccaa03a72284b4 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 239c61b546ac39a6825064283e62aa826693943e56b67a8986206b0e73b5b199 run #0: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #1: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #2: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #3: crashed: KASAN: out-of-bounds Read in ocfs2_reserve_suballoc_bits run #4: crashed: KASAN: out-of-bounds Read in ocfs2_reserve_suballoc_bits run #5: crashed: KASAN: out-of-bounds Read in ocfs2_reserve_suballoc_bits run #6: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #7: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #8: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #9: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits representative crash: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits, types: [KASAN-USE-AFTER-FREE-READ KASAN-READ] # git bisect good 7cd122b55283d3ceef71a5b723ccaa03a72284b4 Bisecting: 2578 revisions left to test after this (roughly 11 steps) [f5e9d31e79c1ce8ba948ecac74d75e9c8d2f0c87] Merge tag 'usb-6.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb determine whether the revision contains the guilty commit revision ec6a328b2e68adfaa322b633519b72ab6cd33e3a crashed and is reachable testing commit f5e9d31e79c1ce8ba948ecac74d75e9c8d2f0c87 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: ff30398d4057d0864b521c7a8dcd001a32e00561f5dcec46b4f4aaac1957791b all runs: OK false negative chance: 0.000 # git bisect bad f5e9d31e79c1ce8ba948ecac74d75e9c8d2f0c87 Bisecting: 1415 revisions left to test after this (roughly 10 steps) [66a1025f7f0bc00404ec6357af68815c70dadae2] Merge tag 'soc-newsoc-6.19' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc determine whether the revision contains the guilty commit revision ec6a328b2e68adfaa322b633519b72ab6cd33e3a crashed and is reachable testing commit 66a1025f7f0bc00404ec6357af68815c70dadae2 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 7dc2efa31c3e3907aab2875d0ce7ca844e76703aa0a483e7a94e7458b0eae198 run #0: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #1: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #2: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #3: crashed: KASAN: out-of-bounds Read in ocfs2_reserve_suballoc_bits run #4: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #5: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #6: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #7: crashed: KASAN: out-of-bounds Read in ocfs2_reserve_suballoc_bits run #8: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #9: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits representative crash: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good 66a1025f7f0bc00404ec6357af68815c70dadae2 Bisecting: 710 revisions left to test after this (roughly 10 steps) [09670b8c38b37bc2d6fc5d01fa7e02c38f7adf36] Merge tag 'trace-v6.19-2' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace determine whether the revision contains the guilty commit revision ec6a328b2e68adfaa322b633519b72ab6cd33e3a crashed and is reachable testing commit 09670b8c38b37bc2d6fc5d01fa7e02c38f7adf36 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: b7b2e22c5e0e415a776a3bcf2c65c67ec75629c85afecdcf01bf88eed818ae48 run #0: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #1: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #2: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #3: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #4: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #5: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #6: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #7: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #8: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #9: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits representative crash: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good 09670b8c38b37bc2d6fc5d01fa7e02c38f7adf36 Bisecting: 391 revisions left to test after this (roughly 9 steps) [82d12088c297fa1cef670e1718b3d24f414c23f7] char: applicom: fix NULL pointer dereference in ac_ioctl determine whether the revision contains the guilty commit revision f79e772258df311c2cb21594ca0996318e720d28 crashed and is reachable testing commit 82d12088c297fa1cef670e1718b3d24f414c23f7 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: fd17874633cba232c4bc5c43a86e31e6ff98c13312bfa86a06a97118358efb8d run #0: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #1: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #2: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #3: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #4: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #5: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #6: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #7: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #8: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #9: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits representative crash: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good 82d12088c297fa1cef670e1718b3d24f414c23f7 Bisecting: 165 revisions left to test after this (roughly 8 steps) [edf602a17b03e6bca31c48f34ac8fc3341503ac1] Merge tag 'tty-6.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty determine whether the revision contains the guilty commit revision 8f7aa3d3c7323f4ca2768a9e74ebbe359c4f8f88 crashed and is reachable testing commit edf602a17b03e6bca31c48f34ac8fc3341503ac1 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 320eb15e684133ffc11c996c645232d3f128026f2090950accdfaca3026b6c67 all runs: OK false negative chance: 0.000 # git bisect bad edf602a17b03e6bca31c48f34ac8fc3341503ac1 Bisecting: 112 revisions left to test after this (roughly 7 steps) [0153094d03df5a2e834a19c59b255649a258ae46] liveupdate: luo_session: add sessions support determine whether the revision contains the guilty commit revision 36c254515dc6592c44db77b84908358979dd6b50 crashed and is reachable testing commit 0153094d03df5a2e834a19c59b255649a258ae46 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: bab755dfc249a2eca2f1a9d030ba5f2bf61862cf0e15f71f120948ca2233738e all runs: OK false negative chance: 0.000 # git bisect bad 0153094d03df5a2e834a19c59b255649a258ae46 Bisecting: 56 revisions left to test after this (roughly 6 steps) [c9dddd981600538d8c39d58ba89679439231959f] MAINTAINERS: add Pratyush as a reviewer for KHO determine whether the revision contains the guilty commit revision 36c254515dc6592c44db77b84908358979dd6b50 crashed and is reachable testing commit c9dddd981600538d8c39d58ba89679439231959f gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 1377ea9862762b1c2f4c6308bf7025bea2aa0cc7f173cfed21f961b64dbb8e3d all runs: OK false negative chance: 0.000 # git bisect bad c9dddd981600538d8c39d58ba89679439231959f Bisecting: 27 revisions left to test after this (roughly 5 steps) [a2b1c419ff72ec62ff5831684e30cd1d4f0b09ee] ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() determine whether the revision contains the guilty commit revision 6fe26f694c824b8a4dbf50c635bee1302e3f099c crashed and is reachable testing commit a2b1c419ff72ec62ff5831684e30cd1d4f0b09ee gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: a59ff7ebf34af04abc3a0caa361a198996a65725fb0bb4c9d332861aa556a25c run #0: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #1: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #2: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #3: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #4: crashed: KASAN: out-of-bounds Read in ocfs2_reserve_suballoc_bits run #5: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #6: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #7: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #8: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #9: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits representative crash: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good a2b1c419ff72ec62ff5831684e30cd1d4f0b09ee Bisecting: 13 revisions left to test after this (roughly 4 steps) [93ce0ff117b0c468961d7c296a03ad57e1e8da9f] ocfs2: validate cl_bpc in allocator inodes to prevent divide-by-zero determine whether the revision contains the guilty commit revision ec6a328b2e68adfaa322b633519b72ab6cd33e3a crashed and is reachable testing commit 93ce0ff117b0c468961d7c296a03ad57e1e8da9f gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 052fcdcb851e5d47fa236220f5bdd83ff02d49c35bddfd409bfa8907d2b2c034 all runs: OK false negative chance: 0.000 # git bisect bad 93ce0ff117b0c468961d7c296a03ad57e1e8da9f Bisecting: 6 revisions left to test after this (roughly 3 steps) [d79a3aeb747c17095d679cc4402d87f0e7c3405e] panic: sys_info: capture si_bits_global before iterating over it determine whether the revision contains the guilty commit revision 36c254515dc6592c44db77b84908358979dd6b50 crashed and is reachable testing commit d79a3aeb747c17095d679cc4402d87f0e7c3405e gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: add7171c222c0f208fdcc3facd6dc927ad0b4112a3e6d2a719efa9e2ceee4f11 run #0: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #1: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #2: crashed: KASAN: slab-out-of-bounds Read in ocfs2_reserve_suballoc_bits run #3: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #4: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #5: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #6: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #7: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #8: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #9: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits representative crash: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good d79a3aeb747c17095d679cc4402d87f0e7c3405e Bisecting: 3 revisions left to test after this (roughly 2 steps) [eb72c4667f4567a7363f6e00d082d2ab32b6a03a] panic: sys_info: rewrite a fix for a compilation error (`make W=1`) determine whether the revision contains the guilty commit revision a2b1c419ff72ec62ff5831684e30cd1d4f0b09ee crashed and is reachable testing commit eb72c4667f4567a7363f6e00d082d2ab32b6a03a gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 6b96c1d25fbc1c5488900862c801ab90e304c36c98c6fa079765997ac93de746 run #0: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #1: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #2: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #3: crashed: KASAN: out-of-bounds Read in ocfs2_reserve_suballoc_bits run #4: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #5: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #6: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #7: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #8: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #9: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits representative crash: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good eb72c4667f4567a7363f6e00d082d2ab32b6a03a Bisecting: 1 revision left to test after this (roughly 1 step) [9125163273f8033af5d38907b483c1d9f99d781b] panic: sys_info: factor out read and write handlers determine whether the revision contains the guilty commit revision a2b1c419ff72ec62ff5831684e30cd1d4f0b09ee crashed and is reachable testing commit 9125163273f8033af5d38907b483c1d9f99d781b gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: bf00a4f2301f85f2d2da32170b5130a4d1da476661b754a8dc3dfe827663761e run #0: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #1: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #2: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #3: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #4: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #5: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #6: crashed: KASAN: slab-use-after-free Read in ocfs2_reserve_suballoc_bits run #7: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #8: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits run #9: crashed: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits representative crash: KASAN: use-after-free Read in ocfs2_reserve_suballoc_bits, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good 9125163273f8033af5d38907b483c1d9f99d781b Bisecting: 0 revisions left to test after this (roughly 0 steps) [e1c70505ee8158c1108340d9cd67182ade93af4a] ocfs2: add extra consistency checks for chain allocator dinodes determine whether the revision contains the guilty commit revision ec6a328b2e68adfaa322b633519b72ab6cd33e3a crashed and is reachable testing commit e1c70505ee8158c1108340d9cd67182ade93af4a gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 025dc902f022c0ca04155c0dbad96f33035e28b56611e900c4af29fd1b773656 all runs: OK false negative chance: 0.000 # git bisect bad e1c70505ee8158c1108340d9cd67182ade93af4a e1c70505ee8158c1108340d9cd67182ade93af4a is the first bad commit commit e1c70505ee8158c1108340d9cd67182ade93af4a Author: Dmitry Antipov Date: Thu Oct 30 18:30:02 2025 +0300 ocfs2: add extra consistency checks for chain allocator dinodes When validating chain allocator dinode in 'ocfs2_validate_inode_block()', add an extra checks whether a) the maximum amount of chain records in 'struct ocfs2_chain_list' matches the value calculated based on the filesystem block size, and b) the next free slot index is within the valid range. Link: https://lkml.kernel.org/r/20251030153003.1934585-1-dmantipov@yandex.ru Signed-off-by: Dmitry Antipov Reported-by: syzbot+77026564530dbc29b854@syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=77026564530dbc29b854 Reported-by: syzbot+5054473a31f78f735416@syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=5054473a31f78f735416 Suggested-by: Joseph Qi Reviewed-by: Joseph Qi Cc: Junxiao Bi Cc: Jun Piao Cc: Deepanshu Kartikey Cc: Heming Zhao Cc: Joel Becker Cc: Mark Fasheh Signed-off-by: Andrew Morton fs/ocfs2/inode.c | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) accumulated error probability: 0.00 culprit signature: 025dc902f022c0ca04155c0dbad96f33035e28b56611e900c4af29fd1b773656 parent signature: bf00a4f2301f85f2d2da32170b5130a4d1da476661b754a8dc3dfe827663761e revisions tested: 28, total time: 8h13m27.78217591s (build: 3h58m38.832946195s, test: 3h46m55.205037887s) first good commit: e1c70505ee8158c1108340d9cd67182ade93af4a ocfs2: add extra consistency checks for chain allocator dinodes recipients (to): ["akpm@linux-foundation.org" "dmantipov@yandex.ru" "joseph.qi@linux.alibaba.com"] recipients (cc): []