ci2 starts bisection 2025-08-09 11:26:00.86057228 +0000 UTC m=+76647.700871710 bisecting fixing commit since da3c5173c55f7a0cf65c967d864386c79dcba3f7 building syzkaller on 3d2f584ddab119da50e8a8d26765aa98d3b33c02 ensuring issue is reproducible on original commit da3c5173c55f7a0cf65c967d864386c79dcba3f7 testing commit da3c5173c55f7a0cf65c967d864386c79dcba3f7 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 4bf776ecdfd600d9dc0e20db65f47f90643fa2f722488320019ca9d9f7570528 all runs: crashed: KASAN: use-after-free Read in rose_get_neigh representative crash: KASAN: use-after-free Read in rose_get_neigh, types: [KASAN-USE-AFTER-FREE-READ] check whether we can drop unnecessary instrumentation disabling configs for [hang memleak ubsan bug_or_warning locking atomic_sleep], they are not needed testing commit da3c5173c55f7a0cf65c967d864386c79dcba3f7 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 528bdbc936cc71fd11689e4b56810267a5b853b0d3eef37ddcd20d363e2bcdf9 all runs: crashed: KASAN: use-after-free Read in rose_get_neigh representative crash: KASAN: use-after-free Read in rose_get_neigh, types: [KASAN-USE-AFTER-FREE-READ] the bug reproduces without the instrumentation disabling configs for [locking atomic_sleep hang memleak ubsan bug_or_warning], they are not needed kconfig minimization: base=7505 full=9721 leaves diff=1997 split chunks (needed=false): <1997> split chunk #0 of len 1997 into 5 parts testing without sub-chunk 1/5 disabling configs for [hang memleak ubsan bug_or_warning locking atomic_sleep], they are not needed testing commit da3c5173c55f7a0cf65c967d864386c79dcba3f7 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: f6373b400ab1f6336bed12f1420751ff4b0f2dcc9caa36953111307a67da4d90 all runs: OK false negative chance: 0.000 testing without sub-chunk 2/5 disabling configs for [ubsan bug_or_warning locking atomic_sleep hang memleak], they are not needed testing commit da3c5173c55f7a0cf65c967d864386c79dcba3f7 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 807a2dc84745f102693231de961aad34f94a82f0daa48b2fbdc637016f7057d3 all runs: crashed: KASAN: use-after-free Read in rose_get_neigh representative crash: KASAN: use-after-free Read in rose_get_neigh, types: [KASAN-USE-AFTER-FREE-READ] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [atomic_sleep hang memleak ubsan bug_or_warning locking], they are not needed testing commit da3c5173c55f7a0cf65c967d864386c79dcba3f7 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: c6e5cdb121d37bb932801849562c7b21774b237600df047754f749e6b996738e all runs: crashed: KASAN: use-after-free Read in rose_get_neigh representative crash: KASAN: use-after-free Read in rose_get_neigh, types: [KASAN-USE-AFTER-FREE-READ] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [bug_or_warning locking atomic_sleep hang memleak ubsan], they are not needed testing commit da3c5173c55f7a0cf65c967d864386c79dcba3f7 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 4c48e69bbb1ecf2129a934016d1e61d9c6a8931bc2c5570835860de3d94abf0e all runs: OK false negative chance: 0.000 testing without sub-chunk 5/5 disabling configs for [memleak ubsan bug_or_warning locking atomic_sleep hang], they are not needed testing commit da3c5173c55f7a0cf65c967d864386c79dcba3f7 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 4dda7359c5e043c8ee5b2e54add70c066d71382de9df39962faedad73c289262 all runs: OK false negative chance: 0.000 minimized to 1197 configs; suspects: [6LOWPAN 6LOWPAN_GHC_EXT_HDR_DEST 6LOWPAN_GHC_EXT_HDR_FRAG 6LOWPAN_GHC_EXT_HDR_HOP 6LOWPAN_GHC_EXT_HDR_ROUTE 6LOWPAN_GHC_ICMPV6 6LOWPAN_GHC_UDP 6LOWPAN_NHC 6LOWPAN_NHC_DEST 6LOWPAN_NHC_FRAGMENT 6LOWPAN_NHC_HOP 6LOWPAN_NHC_IPV6 6LOWPAN_NHC_MOBILITY 6LOWPAN_NHC_ROUTING 6LOWPAN_NHC_UDP 6PACK 842_COMPRESS 842_DECOMPRESS 9P_FSCACHE 9P_FS_POSIX_ACL 9P_FS_SECURITY ACORN_PARTITION ACORN_PARTITION_ADFS ACORN_PARTITION_CUMANA ACORN_PARTITION_EESOX ACORN_PARTITION_ICS ACORN_PARTITION_POWERTEC ACORN_PARTITION_RISCIX ACPI_DOCK ADFS_FS AFFS_FS AFS_FS AFS_FSCACHE AF_KCM AF_RXRPC AF_RXRPC_IPV6 AIX_PARTITION AMIGA_PARTITION ANDROID_BINDERFS ANDROID_BINDER_IPC ANON_VMA_NAME APPLE_MFI_FASTCHARGE AR5523 ASM_MODVERSIONS ASYNC_CORE ASYNC_MEMCPY ASYNC_PQ ASYNC_RAID6_RECOV ASYNC_TX_DMA ASYNC_XOR ATARI_PARTITION ATA_GENERIC ATA_OVER_ETH ATA_PIIX ATH10K ATH10K_CE ATH10K_PCI ATH10K_SNOC ATH10K_USB ATH11K ATH11K_AHB ATH11K_PCI ATH6KL ATH6KL_USB ATH9K ATH9K_AHB ATH9K_BTCOEX_SUPPORT ATH9K_CHANNEL_CONTEXT ATH9K_COMMON ATH9K_COMMON_DEBUG ATH9K_COMMON_SPECTRAL ATH9K_DEBUGFS ATH9K_DYNACK ATH9K_HTC ATH9K_HTC_DEBUGFS ATH9K_HW ATH9K_PCI ATH9K_PCOEM ATH9K_RFKILL ATH_COMMON ATM ATM_BR2684 ATM_CLIP ATM_DRIVERS ATM_LANE ATM_MPOA ATM_TCP AX25 AX25_DAMA_SLAVE BAREUDP BATMAN_ADV BATMAN_ADV_BATMAN_V BATMAN_ADV_BLA BATMAN_ADV_DAT BATMAN_ADV_MCAST BATMAN_ADV_NC BCACHE BCMA BCMA_HOST_PCI_POSSIBLE BEFS_FS BFQ_CGROUP_DEBUG BFQ_GROUP_IOSCHED BFS_FS BIG_KEYS BINFMT_MISC BLK_CGROUP_IOCOST BLK_CGROUP_IOLATENCY BLK_CGROUP_RWSTAT BLK_DEBUG_FS_ZONED BLK_DEV_NULL_BLK BLK_DEV_NULL_BLK_FAULT_INJECTION BLK_DEV_RAM BLK_DEV_RNBD BLK_DEV_RNBD_CLIENT BLK_DEV_SR BLK_DEV_THROTTLING BLK_DEV_ZONED BLK_ICQ BLK_INLINE_ENCRYPTION BLK_INLINE_ENCRYPTION_FALLBACK BLK_MQ_RDMA BLK_RQ_ALLOC_TIME BLK_WBT BLK_WBT_MQ BONDING BPF_JIT_ALWAYS_ON BPF_STREAM_PARSER BPQETHER BRIDGE_CFM BRIDGE_EBT_802_3 BRIDGE_EBT_AMONG BRIDGE_EBT_ARP BRIDGE_EBT_ARPREPLY BRIDGE_EBT_BROUTE BRIDGE_EBT_DNAT BRIDGE_EBT_IP BRIDGE_EBT_IP6 BRIDGE_EBT_LIMIT BRIDGE_EBT_LOG BRIDGE_EBT_MARK BRIDGE_EBT_MARK_T BRIDGE_EBT_NFLOG BRIDGE_EBT_PKTTYPE BRIDGE_EBT_REDIRECT BRIDGE_EBT_SNAT BRIDGE_EBT_STP BRIDGE_EBT_T_FILTER BRIDGE_EBT_T_NAT BRIDGE_EBT_VLAN BRIDGE_MRP BRIDGE_NF_EBTABLES BSD_DISKLABEL BTRFS_ASSERT BTRFS_FS_REF_VERIFY BT_6LOWPAN BT_ATH3K BT_BNEP BT_BNEP_MC_FILTER BT_BNEP_PROTO_FILTER BT_CMTP BT_HCIBCM203X BT_HCIBFUSB BT_HCIBPA10X BT_HCIBTUSB_AUTOSUSPEND BT_HCIBTUSB_MTK BT_HCIUART_3WIRE BT_HCIUART_AG6XX BT_HCIUART_BCSP BT_HCIVHCI BT_HS BT_LE BT_MSFTEXT BT_MTK BT_RFCOMM BT_RFCOMM_TTY CACHEFILES CAIF CAIF_DEBUG CAIF_DRIVERS CAIF_NETDEV CAIF_TTY CAIF_USB CAIF_VIRTIO CAN_8DEV_USB CAN_EMS_USB CAN_ESD_USB CAN_ETAS_ES58X CAN_GS_USB CAN_IFI_CANFD CAN_ISOTP CAN_J1939 CAN_KVASER_USB CAN_MCBA_USB CAN_PEAK_USB CAN_SLCAN CAN_UCAN CAN_VCAN CAN_VXCAN CAPI_TRACE CARL9170 CARL9170_HWRNG CARL9170_LEDS CARL9170_WPC CDROM CEC_CORE CEC_NOTIFIER CEPH_FS CEPH_FSCACHE CEPH_FS_POSIX_ACL CEPH_LIB CEPH_LIB_USE_DNS_RESOLVER CFG80211 CFG80211_CRDA_SUPPORT CFG80211_DEBUGFS CFG80211_DEFAULT_PS CFG80211_REQUIRE_SIGNED_REGDB CFG80211_USE_KERNEL_REGDB_KEYS CFG80211_WEXT CFS_BANDWIDTH CGROUP_NET_CLASSID CGROUP_NET_PRIO CGROUP_RDMA CHARGER_BQ24190 CHARGER_ISP1704 CHECKPOINT_RESTORE CHECK_SIGNATURE CHR_DEV_SG CHR_DEV_ST CIFS CIFS_ALLOW_INSECURE_LEGACY CIFS_DEBUG CIFS_DFS_UPCALL CIFS_FSCACHE CIFS_POSIX CIFS_SMB_DIRECT CIFS_SWN_UPCALL CIFS_UPCALL CIFS_XATTR CLS_U32_MARK CLS_U32_PERF CMDLINE_PARTITION COMEDI COMEDI_DT9812 COMEDI_NI_USB6501 COMEDI_USBDUX COMEDI_USBDUXFAST COMEDI_USBDUXSIGMA COMEDI_USB_DRIVERS COMEDI_VMK80XX COMPAT_NETLINK_MESSAGES CONNECTOR COUNTER CPU_FREQ_DEFAULT_GOV_USERSPACE CRAMFS CRAMFS_BLOCKDEV CRAMFS_MTD CRC4 CRYPTO_842 CRYPTO_ADIANTUM CRYPTO_AEGIS128 CRYPTO_AES_ARM64 CRYPTO_AES_TI CRYPTO_ANUBIS CRYPTO_ARC4 CRYPTO_ARCH_HAVE_LIB_POLY1305 CRYPTO_ARIA CRYPTO_BLOWFISH CRYPTO_BLOWFISH_COMMON CRYPTO_CAMELLIA CRYPTO_CHACHA20 CRYPTO_CHACHA20POLY1305 CRYPTO_CRC32 CRYPTO_CTS CRYPTO_DEV_CCP CRYPTO_DEV_CCP_DD CRYPTO_DEV_VIRTIO CRYPTO_DRBG_CTR CRYPTO_DRBG_HASH CRYPTO_ECRDSA CRYPTO_ESSIV CRYPTO_FCRYPT CRYPTO_HCTR2 CRYPTO_KDF800108_CTR CRYPTO_KEYWRAP CRYPTO_KHAZAD CRYPTO_LIB_ARC4 CRYPTO_LIB_CHACHA CRYPTO_LIB_CHACHA20POLY1305 CRYPTO_LIB_CURVE25519 CRYPTO_LIB_POLY1305 CRYPTO_LIB_POLY1305_GENERIC CRYPTO_LRW CRYPTO_LZ4 CRYPTO_LZ4HC CRYPTO_LZO CRYPTO_NHPOLY1305 CRYPTO_PCBC CRYPTO_PCRYPT CRYPTO_POLY1305 CRYPTO_POLY1305_NEON CRYPTO_POLYVAL CRYPTO_RMD160 CRYPTO_SEED CRYPTO_SEQIV CRYPTO_SM2 CRYPTO_SM4_ARM64_CE CRYPTO_SM4_ARM64_CE_BLK CRYPTO_SM4_ARM64_NEON_BLK CRYPTO_STREEBOG CRYPTO_TEA CRYPTO_TWOFISH CRYPTO_TWOFISH_COMMON CRYPTO_USER CRYPTO_USER_API_AEAD CRYPTO_USER_API_HASH CRYPTO_USER_API_SKCIPHER CRYPTO_VMAC CRYPTO_WP512 CRYPTO_XCBC CRYPTO_XCTR CRYPTO_ZSTD CYPRESS_FIRMWARE DAMON DAMON_DBGFS DAMON_PADDR DAMON_RECLAIM DAMON_VADDR DAX DCB DEFAULT_CUBIC DEFAULT_PFIFO_FAST DEVICE_MIGRATION DEVICE_PRIVATE DLN2_ADC DMABUF_HEAPS DMABUF_HEAPS_CMA DMABUF_HEAPS_SYSTEM DMABUF_MOVE_NOTIFY DM_AUDIT DM_BIO_PRISON DM_BUFIO DM_CACHE DM_CACHE_SMQ DM_CLONE DM_CRYPT DM_FLAKEY DM_INTEGRITY DM_MULTIPATH DM_MULTIPATH_QL DM_MULTIPATH_ST DM_PERSISTENT_DATA DM_RAID DM_SNAPSHOT DM_THIN_PROVISIONING DM_UEVENT DM_VERITY DM_VERITY_FEC DM_WRITECACHE DM_ZONED DRAGONRISE_FF DRM DRM_ANALOGIX_DP DRM_BOCHS DRM_BRIDGE DRM_CDNS_MHDP8546 DRM_CDNS_MHDP8546_J721E DRM_CIRRUS_QEMU DRM_DEBUG_MM DRM_DISPLAY_CONNECTOR DRM_DISPLAY_DP_HELPER DRM_DISPLAY_HDCP_HELPER DRM_DISPLAY_HDMI_HELPER DRM_DISPLAY_HELPER DRM_DP_AUX_BUS DRM_DW_HDMI DRM_DW_HDMI_AHB_AUDIO DRM_DW_HDMI_CEC DRM_DW_HDMI_I2S_AUDIO DRM_DW_MIPI_DSI DRM_ETNAVIV DRM_ETNAVIV_THERMAL DRM_EXYNOS DRM_EXYNOS5433_DECON DRM_EXYNOS7_DECON DRM_EXYNOS_DSI DRM_EXYNOS_HDMI DRM_EXYNOS_MIC DRM_FBDEV_EMULATION DRM_GEM_DMA_HELPER DRM_GEM_SHMEM_HELPER DRM_GM12U320 DRM_GUD DRM_HDLCD DRM_HISI_HIBMC DRM_HISI_KIRIN DRM_I2C_ADV7511 DRM_I2C_ADV7511_AUDIO DRM_I2C_ADV7511_CEC DRM_I2C_CH7006 DRM_I2C_NXP_TDA998X DRM_I2C_SIL164 DRM_IMX_DCSS DRM_KMS_HELPER DRM_KOMEDA DRM_LEGACY DRM_LIMA DRM_LONTIUM_LT8912B DRM_LONTIUM_LT9611 DRM_LONTIUM_LT9611UXC DRM_MALI_DISPLAY DRM_MEDIATEK DRM_MEDIATEK_HDMI DRM_MESON DRM_MESON_DW_HDMI DRM_MIPI_DSI DRM_MSM DRM_MSM_DP DRM_MSM_DPU DRM_MSM_DSI DRM_MSM_DSI_10NM_PHY DRM_MSM_DSI_14NM_PHY DRM_MSM_DSI_20NM_PHY DRM_MSM_DSI_28NM_8960_PHY DRM_MSM_DSI_28NM_PHY DRM_MSM_DSI_7NM_PHY DRM_MSM_GPU_STATE DRM_MSM_HDMI DRM_MSM_HDMI_HDCP DRM_MSM_MDP4 DRM_MSM_MDP5 DRM_MSM_MDSS DRM_MXS DRM_MXSFB DRM_NOMODESET DRM_NOUVEAU DRM_NOUVEAU_BACKLIGHT DRM_NWL_MIPI_DSI DRM_PANEL DRM_PANEL_BOE_TV101WUM_NL6 DRM_PANEL_BRIDGE DRM_PANEL_EDP DRM_PANEL_LVDS DRM_PANEL_MANTIX_MLAF057WE51 DRM_PANEL_RAYDIUM_RM67191 DRM_PANEL_SIMPLE DRM_PANEL_SITRONIX_ST7703 DRM_PANEL_TRULY_NT35597_WQXGA DRM_PANFROST DRM_PARADE_PS8640 DRM_PL111 DRM_RCAR_CMM DRM_RCAR_DU DRM_RCAR_DW_HDMI DRM_RCAR_LVDS DRM_RCAR_MIPI_DSI DRM_RCAR_USE_CMM DRM_RCAR_USE_LVDS DRM_RCAR_USE_MIPI_DSI DRM_RCAR_VSP DRM_RCAR_WRITEBACK DRM_ROCKCHIP DRM_SCHED DRM_SII902X DRM_SIMPLEDRM DRM_SIMPLE_BRIDGE DRM_SUN4I DRM_SUN6I_DSI DRM_SUN8I_DW_HDMI DRM_SUN8I_MIXER DRM_SUN8I_TCON_TOP DRM_TEGRA DRM_THINE_THC63LVD1024 DRM_TIDSS DRM_TI_SN65DSI86 DRM_TTM DRM_TTM_HELPER DRM_UDL DRM_V3D DRM_VC4 DRM_VGEM DRM_VIRTIO_GPU DRM_VKMS DRM_VRAM_HELPER ENCRYPTED_KEYS FSCACHE HAMRADIO HID_DRAGONRISE HID_PANTHERLORD HID_PLAYSTATION HID_SENSOR_HUB HID_SMARTJOYPLUS HID_SONY HID_THRUSTMASTER HID_ZEROPLUS INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_IPOIB INFINIBAND_RTRS_CLIENT INFINIBAND_USER_ACCESS INFINIBAND_VIRT_DMA INPUT_TABLET INPUT_TOUCHSCREEN IOSCHED_BFQ IP_SCTP ISDN ISDN_CAPI ISO9660_FS L2TP MAC80211 MAC80211_LEDS MEDIA_CEC_SUPPORT MEDIA_COMMON_OPTIONS MEDIA_RADIO_SUPPORT MEDIA_TEST_SUPPORT MFD_DLN2 MFD_MT6370 MFD_RETU MFD_VIPERBOARD MTD_UBI NET_CLS_U32 NET_IPGRE_DEMUX NET_SCH_DEFAULT OVERLAY_FS_INDEX OVERLAY_FS_REDIRECT_DIR PACKET_DIAG PADATA PAGE_IDLE_FLAG PAHOLE_HAS_BTF_TAG PAHOLE_HAS_LANG_EXCLUDE PAHOLE_HAS_SPLIT_BTF PANTHERLORD_FF PARPORT PARPORT_NOT_PC PARTITION_ADVANCED PATA_AMD PATA_OLDPIIX PATA_SCH PCCARD PCMCIA PERCPU_STATS PERSISTENT_KEYRINGS PHONET PHY_CPCAP_USB PHY_QCOM_USB_HSIC PHY_TUSB1210 PKCS7_TEST_KEY PKCS8_PRIVATE_KEY_PARSER PLAYSTATION_FF PLFXLC PMIC_OPREGION PM_DEBUG PM_SLEEP_DEBUG PPP PPPOATM PPPOE PPPOL2TP PPP_ASYNC PPP_BSDCOMP PPP_DEFLATE PPP_FILTER PPP_MPPE PPP_MULTILINK PPP_SYNC_TTY PPTP PRISM2_USB PROC_CHILDREN PROC_KCORE PROC_MEM_ALWAYS_FORCE PSI PSTORE_842_COMPRESS PSTORE_LZ4HC_COMPRESS PSTORE_LZ4_COMPRESS PSTORE_LZO_COMPRESS PSTORE_ZSTD_COMPRESS QFMT_V2 QNX4FS_FS QNX6FS_FS QUOTA_NETLINK_INTERFACE QUOTA_TREE R8712U RADIO_ADAPTERS RADIO_SHARK RADIO_SHARK2 RADIO_SI470X RADIO_SI4713 RADIO_TEA575X RC_ATI_REMOTE RC_XBOX_DVD RDMA_RXE RDMA_SIW RDS RDS_RDMA RDS_TCP READ_ONLY_THP_FOR_FS REALTEK_AUTOPM REED_SOLOMON REED_SOLOMON_DEC8 REGMAP_SOUNDWIRE REGULATOR_TWL4030 REISERFS_FS REISERFS_FS_POSIX_ACL REISERFS_FS_SECURITY REISERFS_FS_XATTR REISERFS_PROC_INFO RELAY RFKILL RFKILL_INPUT RFKILL_LEDS RMI4_2D_SENSOR RMI4_CORE RMI4_F03 RMI4_F03_SERIO RMI4_F11 RMI4_F12 RMI4_F30 ROCKCHIP_ANALOGIX_DP ROCKCHIP_CDN_DP ROCKCHIP_DW_HDMI ROCKCHIP_DW_MIPI_DSI ROCKCHIP_INNO_HDMI ROCKCHIP_LVDS ROCKCHIP_VOP ROMFS_BACKED_BY_BOTH ROMFS_FS ROMFS_ON_BLOCK ROMFS_ON_MTD ROSE RTC_DRV_HID_SENSOR_TIME RXKAD SCHEDSTATS SCSI_CONSTANTS SCSI_FC_ATTRS SCSI_HPSA SCSI_ISCSI_ATTRS SCSI_LOGGING SCSI_NETLINK SCSI_SCAN_ASYNC SCSI_SPI_ATTRS SCSI_SRP_ATTRS SCTP_COOKIE_HMAC_MD5 SCTP_COOKIE_HMAC_SHA1 SCTP_DEFAULT_COOKIE_HMAC_MD5 SECONDARY_TRUSTED_KEYRING SECURITY_INFINIBAND SECURITY_NETWORK_XFRM SENSORS_AQUACOMPUTER_D5NEXT SENSORS_CORSAIR_CPRO SENSORS_CORSAIR_PSU SENSORS_NZXT_KRAKEN2 SENSORS_NZXT_SMART2 SERIAL_8250_DETECT_IRQ SERIAL_8250_MANY_PORTS SERIAL_8250_RSA SERIO_SERPORT SGI_PARTITION SIGNATURE SIGNED_PE_FILE_VERIFICATION SLHC SLIP SLIP_COMPRESSED SLIP_MODE_SLIP6 SLIP_SMART SMARTJOYPLUS_FF SMBFS SMB_SERVER SMC SMC_DIAG SMS_SDIO_DRV SMS_SIANO_DEBUGFS SMS_SIANO_MDTV SMS_SIANO_RC SMS_USB_DRV SND SND_ALOOP SND_AUDIO_GRAPH_CARD SND_AUDIO_GRAPH_CARD2 SND_BCD2000 SND_BCM2835_SOC_I2S SND_COMPRESS_OFFLOAD SND_CTL_FAST_LOOKUP SND_CTL_LED SND_DEBUG SND_DMAENGINE_PCM SND_DRIVERS SND_DUMMY SND_DYNAMIC_MINORS SND_HDA SND_HDA_ALIGNED_MMIO SND_HDA_CODEC_ANALOG SND_HDA_CODEC_CA0110 SND_HDA_CODEC_CA0132 SND_HDA_CODEC_CIRRUS SND_HDA_CODEC_CMEDIA SND_HDA_CODEC_CONEXANT SND_HDA_CODEC_HDMI SND_HDA_CODEC_REALTEK SND_HDA_CODEC_SI3054 SND_HDA_CODEC_SIGMATEL SND_HDA_CODEC_VIA SND_HDA_COMPONENT SND_HDA_CORE SND_HDA_GENERIC SND_HDA_GENERIC_LEDS SND_HDA_HWDEP SND_HDA_INPUT_BEEP SND_HDA_INTEL SND_HDA_PATCH_LOADER SND_HDA_RECONFIG SND_HDA_TEGRA SND_HRTIMER SND_HWDEP SND_IMX_SOC SND_INTEL_DSP_CONFIG SND_INTEL_NHLT SND_INTEL_SOUNDWIRE_ACPI SND_JACK SND_JACK_INPUT_DEV SND_MESON_AIU SND_MESON_AXG_FIFO SND_MESON_AXG_FRDDR SND_MESON_AXG_PDM SND_MESON_AXG_SOUND_CARD SND_MESON_AXG_SPDIFIN SND_MESON_AXG_SPDIFOUT SND_MESON_AXG_TDMIN SND_MESON_AXG_TDMOUT SND_MESON_AXG_TDM_FORMATTER SND_MESON_AXG_TDM_INTERFACE SND_MESON_AXG_TODDR SND_MESON_CARD_UTILS SND_MESON_CODEC_GLUE SND_MESON_G12A_TOACODEC SND_MESON_G12A_TOHDMITX SND_MESON_GX_SOUND_CARD SND_MIXER_OSS SND_OSSEMUL SND_PCI SND_PCM SND_PCM_ELD SND_PCM_IEC958 SND_PCM_OSS SND_PCM_OSS_PLUGINS SND_PCM_TIMER SND_PCM_XRUN_DEBUG SND_PROC_FS SND_RAWMIDI SND_SEQUENCER SND_SEQUENCER_OSS SND_SEQ_DEVICE SND_SEQ_DUMMY SND_SEQ_MIDI SND_SEQ_MIDI_EVENT SND_SEQ_VIRMIDI SND_SIMPLE_CARD SND_SIMPLE_CARD_UTILS SND_SOC SND_SOC_ADAU7002 SND_SOC_AK4613 SND_SOC_APPLE_MCA SND_SOC_APQ8016_SBC SND_SOC_COMPRESS SND_SOC_DA7219 SND_SOC_DMIC SND_SOC_ES7134 SND_SOC_ES7241 SND_SOC_FSL_ASOC_CARD SND_SOC_FSL_ASRC SND_SOC_FSL_AUDMIX SND_SOC_FSL_EASRC SND_SOC_FSL_ESAI SND_SOC_FSL_MICFIL SND_SOC_FSL_SAI SND_SOC_FSL_SPDIF SND_SOC_FSL_SSI SND_SOC_FSL_UTILS SND_SOC_GENERIC_DMAENGINE_PCM SND_SOC_GTM601 SND_SOC_HDMI_CODEC SND_SOC_I2C_AND_SPI SND_SOC_IMX_AUDMIX SND_SOC_IMX_AUDMUX SND_SOC_IMX_PCM_DMA SND_SOC_IMX_SGTL5000 SND_SOC_IMX_SPDIF SND_SOC_LPASS_APQ8016 SND_SOC_LPASS_CDC_DMA SND_SOC_LPASS_CPU SND_SOC_LPASS_HDMI SND_SOC_LPASS_MACRO_COMMON SND_SOC_LPASS_PLATFORM SND_SOC_LPASS_RX_MACRO SND_SOC_LPASS_SC7180 SND_SOC_LPASS_SC7280 SND_SOC_LPASS_TX_MACRO SND_SOC_LPASS_VA_MACRO SND_SOC_LPASS_WSA_MACRO SND_SOC_MAX98357A SND_SOC_MAX98927 SND_SOC_MESON_T9015 SND_SOC_MSM8916_WCD_ANALOG SND_SOC_MSM8916_WCD_DIGITAL SND_SOC_MSM8996 SND_SOC_NAU8822 SND_SOC_PCM3168A SND_SOC_PCM3168A_I2C SND_SOC_QCOM SND_SOC_QCOM_COMMON SND_SOC_QCOM_SDW SND_SOC_QDSP6 SND_SOC_QDSP6_ADM SND_SOC_QDSP6_AFE SND_SOC_QDSP6_AFE_CLOCKS SND_SOC_QDSP6_AFE_DAI SND_SOC_QDSP6_APM SND_SOC_QDSP6_APM_DAI SND_SOC_QDSP6_APM_LPASS_DAI SND_SOC_QDSP6_ASM SND_SOC_QDSP6_ASM_DAI SND_SOC_QDSP6_COMMON SND_SOC_QDSP6_CORE SND_SOC_QDSP6_PRM SND_SOC_QDSP6_PRM_LPASS_CLOCKS SND_SOC_QDSP6_ROUTING SND_SOC_RCAR SND_SOC_RK3399_GRU_SOUND SND_SOC_RL6231 SND_SOC_ROCKCHIP SND_SOC_ROCKCHIP_I2S SND_SOC_ROCKCHIP_RT5645 SND_SOC_ROCKCHIP_SPDIF SND_SOC_RT5514 SND_SOC_RT5514_SPI SND_SOC_RT5645 SND_SOC_RT5659 SND_SOC_RT5663 SND_SOC_RT5682 SND_SOC_RT5682S SND_SOC_RT5682_I2C SND_SOC_RZ SND_SOC_SAMSUNG SND_SOC_SC7180 SND_SOC_SC7280 SND_SOC_SDM845 SND_SOC_SGTL5000 SND_SOC_SIMPLE_AMPLIFIER SND_SOC_SIMPLE_MUX SND_SOC_SM8250 SND_SOC_SPDIF SND_SOC_TAS571X SND_SOC_TEGRA SND_SOC_TEGRA186_ASRC SND_SOC_TEGRA186_DSPK SND_SOC_TEGRA210_ADMAIF SND_SOC_TEGRA210_ADX SND_SOC_TEGRA210_AHUB SND_SOC_TEGRA210_AMX SND_SOC_TEGRA210_DMIC SND_SOC_TEGRA210_I2S SND_SOC_TEGRA210_MIXER SND_SOC_TEGRA210_MVC SND_SOC_TEGRA210_OPE SND_SOC_TEGRA210_SFC SND_SOC_TEGRA_AUDIO_GRAPH_CARD SND_SOC_TLV320AIC31XX SND_SOC_TLV320AIC32X4 SND_SOC_TLV320AIC32X4_I2C SND_SOC_TOPOLOGY SND_SOC_WCD9335 SND_SOC_WCD934X SND_SOC_WCD938X SND_SOC_WCD938X_SDW SND_SOC_WCD_MBHC SND_SOC_WM8524 SND_SOC_WM8904 SND_SOC_WM8960 SND_SOC_WM8962 SND_SOC_WM8978 SND_SOC_WM8994 SND_SOC_WM_HUBS SND_SOC_WSA881X SND_SPI SND_SUN4I_I2S SND_SUN4I_SPDIF SND_SUN50I_CODEC_ANALOG SND_SUN8I_ADDA_PR_REGMAP SND_SUN8I_CODEC SND_SUN8I_CODEC_ANALOG SND_SUPPORT_OLD_API SND_TIMER SND_USB SND_USB_6FIRE SND_USB_AUDIO SND_USB_AUDIO_USE_MEDIA_CONTROLLER SND_USB_CAIAQ SND_USB_CAIAQ_INPUT SND_USB_HIFACE SND_USB_LINE6 SND_USB_POD SND_USB_PODHD SND_USB_TONEPORT SND_USB_UA101 SND_USB_VARIAX SND_VERBOSE_PROCFS SND_VIRMIDI SND_VIRTIO SND_VMASTER SOCK_VALIDATE_XMIT SOLARIS_X86_PARTITION SONY_FF SOUND SOUNDWIRE_QCOM SOUND_OSS_CORE SOUND_OSS_CORE_PRECLAIM SPI_DLN2 SQUASHFS_4K_DEVBLK_SIZE SQUASHFS_FILE_DIRECT SQUASHFS_LZ4 SQUASHFS_LZO SQUASHFS_XATTR SQUASHFS_XZ SQUASHFS_ZSTD SSB SSB_PCIHOST_POSSIBLE SSB_PCMCIAHOST_POSSIBLE SSB_SDIOHOST_POSSIBLE STREAM_PARSER SUN_PARTITION SW_SYNC SYN_COOKIES SYSV68_PARTITION SYSV_FS TABLET_USB_ACECAD TABLET_USB_AIPTEK TABLET_USB_HANWANG TABLET_USB_KBTAB TABLET_USB_PEGASUS TAHVO_USB TAHVO_USB_HOST_BY_DEFAULT TARGET_CORE TCG_CRB TCG_TIS_I2C_INFINEON TCG_TPM TCP_CONG_ADVANCED TCP_CONG_BBR TCP_CONG_BIC TCP_CONG_CDG TCP_CONG_DCTCP TCP_CONG_HSTCP TCP_CONG_HTCP TCP_CONG_HYBLA TCP_CONG_ILLINOIS TCP_CONG_LP TCP_CONG_NV TCP_CONG_SCALABLE TCP_CONG_VEGAS TCP_CONG_VENO TCP_CONG_WESTWOOD TCP_CONG_YEAH TCP_MD5SIG TEXTSEARCH TEXTSEARCH_BM TEXTSEARCH_FSM TEXTSEARCH_KMP THERMAL_NETLINK THRUSTMASTER_FF TIPC TIPC_CRYPTO TIPC_DIAG TIPC_MEDIA_IB TIPC_MEDIA_UDP TLS TLS_DEVICE TLS_TOE TOOLS_SUPPORT_RELR TOUCHSCREEN_ATMEL_MXT TOUCHSCREEN_EDT_FT5X06 TOUCHSCREEN_GOODIX TOUCHSCREEN_SUR40 TOUCHSCREEN_USB_3M TOUCHSCREEN_USB_COMPOSITE TOUCHSCREEN_USB_DMC_TSC10 TOUCHSCREEN_USB_E2I TOUCHSCREEN_USB_EASYTOUCH TOUCHSCREEN_USB_EGALAX TOUCHSCREEN_USB_ELO TOUCHSCREEN_USB_ETT_TC45USB TOUCHSCREEN_USB_ETURBO TOUCHSCREEN_USB_GENERAL_TOUCH TOUCHSCREEN_USB_GOTOP TOUCHSCREEN_USB_GUNZE TOUCHSCREEN_USB_IDEALTEK TOUCHSCREEN_USB_IRTOUCH TOUCHSCREEN_USB_ITM TOUCHSCREEN_USB_JASTEC TOUCHSCREEN_USB_NEXIO TOUCHSCREEN_USB_PANJIT TOUCHSCREEN_USB_ZYTRONIC TRANSPARENT_HUGEPAGE_MADVISE TRUSTED_KEYS TTPCI_EEPROM TTY_PRINTK TUN_VNET_CROSS_LE TWL4030_CORE TYPEC_ANX7411 TYPEC_DP_ALTMODE TYPEC_MT6360 TYPEC_MUX_FSA4480 TYPEC_MUX_PI3USB30532 TYPEC_NVIDIA_ALTMODE TYPEC_RT1711H TYPEC_RT1719 TYPEC_STUSB160X TYPEC_TCPCI_MAXIM TYPEC_TCPCI_MT6370 TYPEC_UCSI TYPEC_WUSB3801 UBIFS_ATIME_SUPPORT UBIFS_FS UBIFS_FS_ADVANCED_COMPR UBIFS_FS_LZO UBIFS_FS_SECURITY UBIFS_FS_XATTR UBIFS_FS_ZLIB UBIFS_FS_ZSTD UCSI_ACPI UCSI_CCG UCSI_STM32G0 UDF_FS UDMABUF UFS_FS UFS_FS_WRITE UHID ULTRIX_PARTITION UNICODE UNIXWARE_DISKLABEL UNIX_DIAG USB4 USB4_NET USBIP_CORE USBIP_HOST USBIP_VHCI_HCD USBIP_VUDC USBPCWATCHDOG USB_ADUTUX USB_AIRSPY USB_ALI_M5632 USB_AMD5536UDC USB_AN2720 USB_ANNOUNCE_NEW_DEVICES USB_APPLEDISPLAY USB_ATM USB_C67X00_HCD USB_CATC USB_CDC_PHONET USB_CDNSP_GADGET USB_CDNSP_HOST USB_CDNSP_PCI USB_CHAOSKEY USB_CONFIGFS_F_HID USB_CONFIGFS_F_LB_SS USB_CONFIGFS_F_MIDI USB_CONFIGFS_F_PRINTER USB_CONFIGFS_F_TCM USB_CONFIGFS_F_UAC1 USB_CONFIGFS_F_UAC1_LEGACY USB_CONFIGFS_F_UAC2 USB_CONFIGFS_F_UVC USB_CONFIGFS_PHONET USB_CXACRU USB_CYPRESS_CY7C63 USB_CYTHERM USB_DSBR USB_DUMMY_HCD USB_DWC2_PCI USB_DWC3_GADGET USB_DWC3_ULPI USB_DYNAMIC_MINORS USB_EG20T USB_EHCI_FSL USB_EHSET_TEST_FIXTURE USB_EMI26 USB_EMI62 USB_EPSON2888 USB_EZUSB_FX2 USB_FEW_INIT_RETRIES USB_FOTG210_HCD USB_FOTG210_UDC USB_FTDI_ELAN USB_F_HID USB_F_MIDI USB_F_PHONET USB_F_PRINTER USB_F_SS_LB USB_F_TCM USB_F_UAC1 USB_F_UAC1_LEGACY USB_F_UAC2 USB_F_UVC USB_GADGETFS USB_GADGET_DEBUG_FILES USB_GADGET_DEBUG_FS USB_GL860 USB_GOKU USB_GPIO_VBUS USB_GR_UDC USB_GSPCA USB_GSPCA_BENQ USB_GSPCA_CONEX USB_GSPCA_CPIA1 USB_GSPCA_DTCS033 USB_GSPCA_ETOMS USB_GSPCA_FINEPIX USB_GSPCA_JEILINJ USB_GSPCA_JL2005BCD USB_GSPCA_KINECT USB_GSPCA_KONICA USB_GSPCA_MARS USB_GSPCA_MR97310A USB_GSPCA_NW80X USB_GSPCA_OV519 USB_GSPCA_OV534 USB_GSPCA_OV534_9 USB_GSPCA_PAC207 USB_GSPCA_PAC7302 USB_GSPCA_PAC7311 USB_GSPCA_SE401 USB_GSPCA_SN9C2028 USB_GSPCA_SN9C20X USB_GSPCA_SONIXB USB_GSPCA_SONIXJ USB_GSPCA_SPCA1528 USB_GSPCA_SPCA500 USB_GSPCA_SPCA501 USB_GSPCA_SPCA505 USB_GSPCA_SPCA506 USB_GSPCA_SPCA508 USB_GSPCA_SPCA561 USB_GSPCA_SQ905 USB_GSPCA_SQ905C USB_GSPCA_SQ930X USB_GSPCA_STK014 USB_GSPCA_STK1135 USB_GSPCA_STV0680 USB_GSPCA_SUNPLUS USB_GSPCA_T613 USB_GSPCA_TOPRO USB_GSPCA_TOUPTEK USB_GSPCA_TV8532 USB_GSPCA_VC032X USB_GSPCA_VICAM USB_GSPCA_XIRLINK_CIT USB_GSPCA_ZC3XX USB_HACKRF USB_HCD_BCMA USB_HCD_SSB USB_HIDDEV USB_HSIC_USB4604 USB_HSO USB_HUB_USB251XB USB_IDMOUSE USB_IOWARRIOR USB_IPHETH USB_ISIGHTFW USB_ISP116X_HCD USB_ISP1301 USB_KAWETH USB_KC2190 USB_KEENE USB_LCD USB_LD USB_LEDS_TRIGGER_USBPORT USB_LED_TRIG USB_LEGOTOWER USB_LINK_LAYER_TEST USB_M5602 USB_MA901 USB_MAX3420_UDC USB_MAX3421_HCD USB_MDC800 USB_MICROTEK USB_MON USB_MR800 USB_MSI2500 USB_MV_U3D USB_MV_UDC USB_NET2272 USB_NET2272_DMA USB_NET2280 USB_NET_AQC111 USB_NET_CDC_EEM USB_NET_CDC_MBIM USB_NET_CH9200 USB_NET_CX82310_ETH USB_NET_GL620A USB_NET_HUAWEI_CDC_NCM USB_NET_INT51X1 USB_NET_KALMIA USB_NET_QMI_WWAN USB_NET_RNDIS_HOST USB_NET_RNDIS_WLAN USB_NET_SR9700 USB_OTG_FSM USB_OXU210HP_HCD USB_PRINTER USB_PULSE8_CEC USB_PWC USB_PWC_INPUT_EVDEV USB_PXA27X USB_R8A66597 USB_R8A66597_HCD USB_RAINSHADOW_CEC USB_RAREMONO USB_RAW_GADGET USB_S2255 USB_SERIAL_AIRCABLE USB_SERIAL_ARK3116 USB_SERIAL_BELKIN USB_SERIAL_CH341 USB_SERIAL_CONSOLE USB_SERIAL_CYBERJACK USB_SERIAL_CYPRESS_M8 USB_SERIAL_DEBUG USB_SERIAL_DIGI_ACCELEPORT USB_SERIAL_EDGEPORT USB_SERIAL_EDGEPORT_TI USB_SERIAL_EMPEG USB_SERIAL_F81232 USB_SERIAL_F8153X USB_SERIAL_GARMIN USB_SERIAL_GENERIC USB_SERIAL_IPAQ USB_SERIAL_IPW USB_SERIAL_IR USB_SERIAL_IUU USB_SERIAL_KEYSPAN USB_SERIAL_KEYSPAN_PDA USB_SERIAL_KLSI USB_SERIAL_KOBIL_SCT USB_SERIAL_MCT_U232 USB_SERIAL_METRO USB_SERIAL_MOS7715_PARPORT USB_SERIAL_MOS7720 USB_SERIAL_MOS7840 USB_SERIAL_MXUPORT USB_SERIAL_NAVMAN USB_SERIAL_OMNINET USB_SERIAL_OPTICON USB_SERIAL_OTI6858 USB_SERIAL_PL2303 USB_SERIAL_QCAUX USB_SERIAL_QT2 USB_SERIAL_QUALCOMM USB_SERIAL_SAFE USB_SERIAL_SIERRAWIRELESS USB_SERIAL_SIMPLE USB_SERIAL_SPCP8X5 USB_SERIAL_SSU100 USB_SERIAL_SYMBOL USB_SERIAL_TI USB_SERIAL_UPD78F0730 USB_SERIAL_VISOR USB_SERIAL_WHITEHEAT USB_SERIAL_WISHBONE USB_SERIAL_XR USB_SERIAL_XSENS_MT USB_SEVSEG USB_SI470X USB_SI4713 USB_SIERRA_NET USB_SISUSBVGA USB_SL811_CS USB_SL811_HCD USB_SL811_HCD_ISO USB_SPEEDTOUCH USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_ENE_UB6250 USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_REALTEK USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_STV06XX USB_TEST USB_TMC USB_TRANCEVIBRATOR USB_U132_HCD USB_UAS USB_UEAGLEATM USB_UHCI_HCD USB_USS720 USB_U_AUDIO USB_VL600 USB_WDM USB_XHCI_DBGCAP USB_XUSBATM USB_YUREX USERFAULTFD USERIO U_SERIAL_CONSOLE V4L_TEST_DRIVERS VALIDATE_FS_PARSER VDPA VDPA_SIM VDPA_SIM_BLOCK VDPA_SIM_NET VDPA_USER VHOST VHOST_CROSS_ENDIAN_LEGACY VHOST_IOTLB VHOST_NET VHOST_RING VHOST_VDPA VHOST_VSOCK VIDEOMODE_HELPERS VIDEO_AU0828 VIDEO_AU0828_RC VIDEO_AU0828_V4L2 VIDEO_CS53L32A VIDEO_CX231XX VIDEO_CX231XX_ALSA VIDEO_CX231XX_DVB VIDEO_CX231XX_RC VIDEO_CX2341X VIDEO_CX25840 VIDEO_EM28XX VIDEO_EM28XX_ALSA VIDEO_EM28XX_DVB VIDEO_EM28XX_RC VIDEO_EM28XX_V4L2 VIDEO_GO7007 VIDEO_GO7007_LOADER VIDEO_GO7007_USB VIDEO_GO7007_USB_S2250_BOARD VIDEO_HDPVR VIDEO_MSP3400 VIDEO_PVRUSB2 VIDEO_PVRUSB2_DVB VIDEO_PVRUSB2_SYSFS VIDEO_SAA711X VIDEO_STK1160 VIDEO_STK1160_COMMON VIDEO_TUNER VIDEO_TVEEPROM VIDEO_USBTV VIDEO_V4L2_TPG VIDEO_VICODEC VIDEO_VIM2M VIDEO_VIMC VIDEO_VIVID VIDEO_VIVID_CEC VIDEO_WM8775 VIPERBOARD_ADC VIRTIO_DMA_SHARED_BUFFER VIRTIO_FS VIRTIO_MMIO_CMDLINE_DEVICES VIRTIO_VDPA VIRTIO_VSOCKETS VIRTIO_VSOCKETS_COMMON VIRT_WIFI VMXNET3 VP_VDPA VSOCKETS VSOCKETS_DIAG VSOCKETS_LOOPBACK VSOCKMON VXFS_FS WCN36XX WEXT_CORE WEXT_PRIV WEXT_PROC WIREGUARD WIRELESS WIRELESS_EXT WLAN WLAN_VENDOR_ADMTEK WLAN_VENDOR_ATH WLAN_VENDOR_PURELIFI WLAN_VENDOR_SILABS XDP_SOCKETS XDP_SOCKETS_DIAG XFRM XFRM_AH XFRM_ALGO XFRM_ESP XFRM_ESPINTCP XFRM_INTERFACE XFRM_IPCOMP XFRM_MIGRATE XFRM_OFFLOAD XFRM_STATISTICS XFRM_SUB_POLICY XFRM_USER XFS_FS XFS_POSIX_ACL XFS_QUOTA XFS_RT XILLYBUS_CLASS XILLYUSB ZBUD ZEROPLUS_FF ZISOFS ZONEFS_FS ZONE_DEVICE ZPOOL ZRAM ZRAM_DEF_COMP_LZORLE ZSMALLOC ZSWAP ZSWAP_COMPRESSOR_DEFAULT_LZO ZSWAP_DEFAULT_ON ZSWAP_ZPOOL_DEFAULT_ZBUD] disabling configs for [hang memleak ubsan bug_or_warning locking atomic_sleep], they are not needed testing current HEAD 3594f306da129190de25938b823f353ef7f9e322 testing commit 3594f306da129190de25938b823f353ef7f9e322 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: d4ca3e050020d8674df30324aafd1d0464b4a45e0a34dc0323fa0b8945b341be run #0: crashed: KASAN: use-after-free Read in rose_new_lci run #1: crashed: KASAN: use-after-free Read in rose_new_lci run #2: crashed: KASAN: use-after-free Read in rose_new_lci run #3: crashed: KASAN: use-after-free Read in rose_new_lci run #4: crashed: KASAN: use-after-free Read in rose_new_lci run #5: crashed: KASAN: use-after-free Read in rose_new_lci run #6: crashed: KASAN: use-after-free Read in rose_new_lci run #7: crashed: KASAN: use-after-free Read in rose_new_lci run #8: OK run #9: OK representative crash: KASAN: use-after-free Read in rose_new_lci, types: [KASAN-USE-AFTER-FREE-READ] crash still not fixed/happens on the oldest tested release revisions tested: 8, total time: 2h11m47.743866215s (build: 1h8m36.727657933s, test: 57m19.890098843s) crash still not fixed or there were kernel test errors commit msg: Linux 6.1.147 crash: KASAN: use-after-free Read in rose_new_lci ================================================================== BUG: KASAN: use-after-free in rose_new_lci+0x250/0x254 net/rose/af_rose.c:325 Read of size 1 at addr ffff0000cd02b031 by task syz.5.3706/12906 CPU: 1 PID: 12906 Comm: syz.5.3706 Not tainted 6.1.147-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 Call trace: dump_backtrace+0x100/0x150 arch/arm64/kernel/stacktrace.c:158 show_stack+0x18/0x24 arch/arm64/kernel/stacktrace.c:165 __dump_stack+0x28/0x38 lib/dump_stack.c:88 dump_stack_lvl+0x68/0x94 lib/dump_stack.c:106 print_address_description+0x88/0x200 mm/kasan/report.c:316 print_report+0x50/0x68 mm/kasan/report.c:418 kasan_report+0xa8/0xfc mm/kasan/report.c:522 __asan_report_load1_noabort+0x2c/0x38 mm/kasan/report_generic.c:348 rose_new_lci+0x250/0x254 net/rose/af_rose.c:325 rose_connect+0x2d8/0xb34 net/rose/af_rose.c:823 __sys_connect_file net/socket.c:2011 [inline] __sys_connect+0x1f4/0x228 net/socket.c:2028 __do_sys_connect net/socket.c:2038 [inline] __se_sys_connect net/socket.c:2035 [inline] __arm64_sys_connect+0x78/0x90 net/socket.c:2035 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x78/0x25c arch/arm64/kernel/syscall.c:52 el0_svc_common+0x15c/0x1d8 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x50/0x108 arch/arm64/kernel/syscall.c:204 el0_svc+0x34/0xd4 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Allocated by task 12910: kasan_save_stack mm/kasan/common.c:45 [inline] kasan_set_track+0x4c/0x80 mm/kasan/common.c:52 kasan_save_alloc_info+0x28/0x34 mm/kasan/generic.c:505 ____kasan_kmalloc mm/kasan/common.c:374 [inline] __kasan_kmalloc+0xa0/0xb8 mm/kasan/common.c:383 kasan_kmalloc include/linux/kasan.h:211 [inline] kmalloc_trace+0x54/0x68 mm/slab_common.c:1031 kmalloc include/linux/slab.h:563 [inline] rose_add_node+0x140/0x9dc net/rose/rose_route.c:85 rose_rt_ioctl+0x5cc/0x970 net/rose/rose_route.c:740 rose_ioctl+0x300/0x7bc net/rose/af_rose.c:1380 sock_do_ioctl+0xf4/0x1cc net/socket.c:1204 sock_ioctl+0x4e4/0x5bc net/socket.c:1321 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __arm64_sys_ioctl+0x108/0x14c fs/ioctl.c:856 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x78/0x25c arch/arm64/kernel/syscall.c:52 el0_svc_common+0x15c/0x1d8 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x50/0x108 arch/arm64/kernel/syscall.c:204 el0_svc+0x34/0xd4 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Freed by task 12912: kasan_save_stack mm/kasan/common.c:45 [inline] kasan_set_track+0x4c/0x80 mm/kasan/common.c:52 kasan_save_free_info+0x3c/0x60 mm/kasan/generic.c:516 ____kasan_slab_free+0x148/0x1b0 mm/kasan/common.c:236 __kasan_slab_free+0x18/0x28 mm/kasan/common.c:244 kasan_slab_free include/linux/kasan.h:177 [inline] slab_free_hook mm/slub.c:1724 [inline] slab_free_freelist_hook+0x16c/0x1ec mm/slub.c:1750 slab_free mm/slub.c:3661 [inline] __kmem_cache_free+0xc0/0x224 mm/slub.c:3674 kfree+0x88/0xb8 mm/slab_common.c:988 rose_remove_neigh+0x208/0x230 net/rose/rose_route.c:-1 rose_rt_device_down+0x6c/0x2a0 net/rose/rose_route.c:515 rose_device_event+0x444/0x4dc net/rose/af_rose.c:248 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0x68/0xec kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:2001 [inline] call_netdevice_notifiers_extack net/core/dev.c:2039 [inline] call_netdevice_notifiers net/core/dev.c:2053 [inline] __dev_notify_flags+0x160/0x288 net/core/dev.c:-1 dev_change_flags+0xa4/0x148 net/core/dev.c:8702 dev_ifsioc+0x4c0/0xa30 net/core/dev_ioctl.c:327 dev_ioctl+0x138/0x990 net/core/dev_ioctl.c:588 sock_do_ioctl+0x150/0x1cc net/socket.c:1218 sock_ioctl+0x4e4/0x5bc net/socket.c:1321 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __arm64_sys_ioctl+0x108/0x14c fs/ioctl.c:856 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x78/0x25c arch/arm64/kernel/syscall.c:52 el0_svc_common+0x15c/0x1d8 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x50/0x108 arch/arm64/kernel/syscall.c:204 el0_svc+0x34/0xd4 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 The buggy address belongs to the object at ffff0000cd02b000 which belongs to the cache kmalloc-512 of size 512 The buggy address is located 49 bytes inside of 512-byte region [ffff0000cd02b000, ffff0000cd02b200) The buggy address belongs to the physical page: page:00000000a71184ae refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d028 head:00000000a71184ae order:2 compound_mapcount:0 compound_pincount:0 flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000010200 dead000000000100 dead000000000122 ffff0000c0002600 raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff0000cd02af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff0000cd02af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc >ffff0000cd02b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff0000cd02b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff0000cd02b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ==================================================================