ci2 starts bisection 2025-10-25 15:30:31.60970222 +0000 UTC m=+250690.427080211 bisecting fixing commit since 3db754f56897798e2228b3dd13a117de723c2be6 building syzkaller on e2beed91937c0ace342f19a2e9afb67adb3a828a ensuring issue is reproducible on original commit 3db754f56897798e2228b3dd13a117de723c2be6 testing commit 3db754f56897798e2228b3dd13a117de723c2be6 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: f81a9c089cce1de656b4427bbda0e941826b469fc887a721f26a6380f4c75446 all runs: crashed: KASAN: use-after-free Read in nr_add_node representative crash: KASAN: use-after-free Read in nr_add_node, types: [KASAN-USE-AFTER-FREE-READ] check whether we can drop unnecessary instrumentation disabling configs for [atomic_sleep hang memleak ubsan bug_or_warning locking], they are not needed testing commit 3db754f56897798e2228b3dd13a117de723c2be6 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: a91ac15a68c91ccf90113d5fc3ba586fdb4e4568d3f561dc9168a4b6f7d4c0c1 all runs: crashed: KASAN: use-after-free Read in nr_add_node representative crash: KASAN: use-after-free Read in nr_add_node, types: [KASAN-USE-AFTER-FREE-READ] the bug reproduces without the instrumentation disabling configs for [bug_or_warning locking atomic_sleep hang memleak ubsan], they are not needed kconfig minimization: base=7505 full=9787 leaves diff=2009 split chunks (needed=false): <2009> split chunk #0 of len 2009 into 5 parts testing without sub-chunk 1/5 disabling configs for [hang memleak ubsan bug_or_warning locking atomic_sleep], they are not needed testing commit 3db754f56897798e2228b3dd13a117de723c2be6 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 457c5714b09e87c27f3380a01182b36ce2a19af215d707e487c9983c4a9a2642 all runs: OK false negative chance: 0.000 testing without sub-chunk 2/5 disabling configs for [atomic_sleep hang memleak ubsan bug_or_warning locking], they are not needed testing commit 3db754f56897798e2228b3dd13a117de723c2be6 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: d39975d7db4262f13abeeb415b5177e775ac83f7d6666f6ebcd55c6f41dcbe5c all runs: crashed: KASAN: use-after-free Read in nr_add_node representative crash: KASAN: use-after-free Read in nr_add_node, types: [KASAN-USE-AFTER-FREE-READ] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [hang memleak ubsan bug_or_warning locking atomic_sleep], they are not needed testing commit 3db754f56897798e2228b3dd13a117de723c2be6 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 0d21bc57a96a6ed221cfaae5af4e73639afa2f74b01eeb884321ff20139db9e6 all runs: OK false negative chance: 0.000 testing without sub-chunk 4/5 disabling configs for [ubsan bug_or_warning locking atomic_sleep hang memleak], they are not needed testing commit 3db754f56897798e2228b3dd13a117de723c2be6 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: bd2d798f217af55cd73667ba5c26568b1df3d650c050fc0bc3c3715e691d9e36 all runs: crashed: KASAN: use-after-free Read in nr_add_node representative crash: KASAN: use-after-free Read in nr_add_node, types: [KASAN-USE-AFTER-FREE-READ] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [hang memleak ubsan bug_or_warning locking atomic_sleep], they are not needed testing commit 3db754f56897798e2228b3dd13a117de723c2be6 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 436e7b596a1f2168cdd453f0b2ea42a18e34e1de4205211bc78ea3278c9ef7dd all runs: OK false negative chance: 0.000 minimized to 1205 configs; suspects: [6LOWPAN 6LOWPAN_GHC_EXT_HDR_DEST 6LOWPAN_GHC_EXT_HDR_FRAG 6LOWPAN_GHC_EXT_HDR_HOP 6LOWPAN_GHC_EXT_HDR_ROUTE 6LOWPAN_GHC_ICMPV6 6LOWPAN_GHC_UDP 6LOWPAN_NHC 6LOWPAN_NHC_DEST 6LOWPAN_NHC_FRAGMENT 6LOWPAN_NHC_HOP 6LOWPAN_NHC_IPV6 6LOWPAN_NHC_MOBILITY 6LOWPAN_NHC_ROUTING 6LOWPAN_NHC_UDP 6PACK 842_COMPRESS 842_DECOMPRESS 9P_FSCACHE 9P_FS_POSIX_ACL 9P_FS_SECURITY ACORN_PARTITION ACORN_PARTITION_ADFS ACORN_PARTITION_CUMANA ACORN_PARTITION_EESOX ACORN_PARTITION_ICS ACORN_PARTITION_POWERTEC ACORN_PARTITION_RISCIX ACPI_DOCK ADFS_FS AFFS_FS AFS_FS AFS_FSCACHE AF_KCM AF_RXRPC AF_RXRPC_IPV6 AIX_PARTITION AMIGA_PARTITION ANDROID_BINDERFS ANDROID_BINDER_IPC ANON_VMA_NAME APPLE_MFI_FASTCHARGE AR5523 ARM_SDE_INTERFACE ASM_MODVERSIONS ASYNC_CORE ASYNC_MEMCPY ASYNC_PQ ASYNC_RAID6_RECOV ASYNC_TX_DMA ASYNC_XOR ATARI_PARTITION ATA_GENERIC ATA_OVER_ETH ATA_PIIX ATH10K ATH10K_CE ATH10K_PCI ATH10K_SNOC ATH10K_USB ATH11K ATH11K_AHB ATH11K_PCI ATH6KL ATH6KL_USB ATH9K ATH9K_AHB ATH9K_BTCOEX_SUPPORT ATH9K_CHANNEL_CONTEXT ATH9K_COMMON ATH9K_COMMON_DEBUG ATH9K_COMMON_SPECTRAL ATH9K_DEBUGFS ATH9K_DYNACK ATH9K_HTC ATH9K_HTC_DEBUGFS ATH9K_HW ATH9K_PCI ATH9K_PCOEM ATH9K_RFKILL ATH_COMMON ATM ATM_BR2684 ATM_CLIP ATM_DRIVERS ATM_LANE ATM_MPOA ATM_TCP AX25 AX25_DAMA_SLAVE BAREUDP BATMAN_ADV BATMAN_ADV_BATMAN_V BATMAN_ADV_BLA BATMAN_ADV_DAT BATMAN_ADV_MCAST BATMAN_ADV_NC BCACHE BCMA BCMA_HOST_PCI_POSSIBLE BEFS_FS BFQ_CGROUP_DEBUG BFQ_GROUP_IOSCHED BFS_FS BIG_KEYS BINFMT_MISC BLK_CGROUP_IOCOST BLK_CGROUP_IOLATENCY BLK_CGROUP_RWSTAT BLK_DEBUG_FS_ZONED BLK_DEV_NULL_BLK BLK_DEV_NULL_BLK_FAULT_INJECTION BLK_DEV_RAM BLK_DEV_RNBD BLK_DEV_RNBD_CLIENT BLK_DEV_SR BLK_DEV_THROTTLING BLK_DEV_ZONED BLK_ICQ BLK_INLINE_ENCRYPTION BLK_INLINE_ENCRYPTION_FALLBACK BLK_MQ_RDMA BLK_RQ_ALLOC_TIME BLK_WBT BLK_WBT_MQ BONDING BPF_JIT_ALWAYS_ON BPQETHER BRIDGE_CFM BRIDGE_EBT_802_3 BRIDGE_EBT_AMONG BRIDGE_EBT_ARP BRIDGE_EBT_ARPREPLY BRIDGE_EBT_BROUTE BRIDGE_EBT_DNAT BRIDGE_EBT_IP BRIDGE_EBT_IP6 BRIDGE_EBT_LIMIT BRIDGE_EBT_LOG BRIDGE_EBT_MARK BRIDGE_EBT_MARK_T BRIDGE_EBT_NFLOG BRIDGE_EBT_PKTTYPE BRIDGE_EBT_REDIRECT BRIDGE_EBT_SNAT BRIDGE_EBT_STP BRIDGE_EBT_T_FILTER BRIDGE_EBT_T_NAT BRIDGE_EBT_VLAN BRIDGE_MRP BRIDGE_NF_EBTABLES BSD_DISKLABEL BTRFS_ASSERT BTRFS_FS_REF_VERIFY BT_6LOWPAN BT_ATH3K BT_BNEP BT_BNEP_MC_FILTER BT_BNEP_PROTO_FILTER BT_CMTP BT_HCIBCM203X BT_HCIBFUSB BT_HCIBPA10X BT_HCIBTUSB_AUTOSUSPEND BT_HCIBTUSB_MTK BT_HCIUART_3WIRE BT_HCIUART_AG6XX BT_HCIUART_BCSP BT_HCIVHCI BT_HS BT_LE BT_MSFTEXT BT_MTK BT_RFCOMM BT_RFCOMM_TTY CACHEFILES CAIF CAIF_DEBUG CAIF_DRIVERS CAIF_NETDEV CAIF_TTY CAIF_USB CAIF_VIRTIO CAN_8DEV_USB CAN_EMS_USB CAN_ESD_USB CAN_ETAS_ES58X CAN_GS_USB CAN_IFI_CANFD CAN_ISOTP CAN_J1939 CAN_KVASER_USB CAN_MCBA_USB CAN_PEAK_USB CAN_SLCAN CAN_UCAN CAN_VCAN CAN_VXCAN CAPI_TRACE CARL9170 CARL9170_HWRNG CARL9170_LEDS CARL9170_WPC CDROM CEC_CORE CEC_NOTIFIER CEPH_FS CEPH_FSCACHE CEPH_FS_POSIX_ACL CEPH_LIB CEPH_LIB_USE_DNS_RESOLVER CFG80211 CFG80211_CRDA_SUPPORT CFG80211_DEBUGFS CFG80211_DEFAULT_PS CFG80211_REQUIRE_SIGNED_REGDB CFG80211_USE_KERNEL_REGDB_KEYS CFG80211_WEXT CFS_BANDWIDTH CGROUP_NET_CLASSID CGROUP_NET_PRIO CGROUP_RDMA CHARGER_BQ24190 CHARGER_ISP1704 CHECKPOINT_RESTORE CHECK_SIGNATURE CHR_DEV_SG CHR_DEV_ST CIFS CIFS_ALLOW_INSECURE_LEGACY CIFS_DEBUG CIFS_DFS_UPCALL CIFS_FSCACHE CIFS_POSIX CIFS_SMB_DIRECT CIFS_SWN_UPCALL CIFS_UPCALL CIFS_XATTR CLS_U32_MARK CLS_U32_PERF CMDLINE_PARTITION COMEDI COMEDI_8254 COMEDI_8255 COMEDI_8255_PCI COMEDI_8255_SA COMEDI_ADL_PCI9118 COMEDI_BOND COMEDI_DT9812 COMEDI_KCOMEDILIB COMEDI_MISC_DRIVERS COMEDI_NI_DAQ_700_CS COMEDI_NI_LABPC COMEDI_NI_LABPC_CS COMEDI_NI_LABPC_PCI COMEDI_NI_USB6501 COMEDI_PARPORT COMEDI_PCI_DRIVERS COMEDI_PCMCIA_DRIVERS COMEDI_TEST COMEDI_USBDUX COMEDI_USBDUXFAST COMEDI_USBDUXSIGMA COMEDI_USB_DRIVERS COMEDI_VMK80XX COMPAT_NETLINK_MESSAGES CONNECTOR COUNTER CPU_FREQ_DEFAULT_GOV_USERSPACE CRAMFS CRAMFS_BLOCKDEV CRAMFS_MTD CRC4 CRYPTO_842 CRYPTO_ADIANTUM CRYPTO_AEGIS128 CRYPTO_AES_ARM64 CRYPTO_AES_TI CRYPTO_ANUBIS CRYPTO_ARC4 CRYPTO_ARCH_HAVE_LIB_POLY1305 CRYPTO_ARIA CRYPTO_BLOWFISH CRYPTO_BLOWFISH_COMMON CRYPTO_CAMELLIA CRYPTO_CHACHA20 CRYPTO_CHACHA20POLY1305 CRYPTO_CRC32 CRYPTO_CTS CRYPTO_DEV_CCP CRYPTO_DEV_CCP_DD CRYPTO_DEV_VIRTIO CRYPTO_DRBG_CTR CRYPTO_DRBG_HASH CRYPTO_ECRDSA CRYPTO_ESSIV CRYPTO_FCRYPT CRYPTO_HCTR2 CRYPTO_KDF800108_CTR CRYPTO_KEYWRAP CRYPTO_KHAZAD CRYPTO_LIB_ARC4 CRYPTO_LIB_CHACHA CRYPTO_LIB_CHACHA20POLY1305 CRYPTO_LIB_CURVE25519 CRYPTO_LIB_POLY1305 CRYPTO_LIB_POLY1305_GENERIC CRYPTO_LRW CRYPTO_LZ4 CRYPTO_LZ4HC CRYPTO_LZO CRYPTO_NHPOLY1305 CRYPTO_PCBC CRYPTO_PCRYPT CRYPTO_POLY1305 CRYPTO_POLY1305_NEON CRYPTO_POLYVAL CRYPTO_RMD160 CRYPTO_SEED CRYPTO_SEQIV CRYPTO_SM2 CRYPTO_SM4_ARM64_CE CRYPTO_SM4_ARM64_CE_BLK CRYPTO_SM4_ARM64_NEON_BLK CRYPTO_STREEBOG CRYPTO_TEA CRYPTO_TWOFISH CRYPTO_TWOFISH_COMMON CRYPTO_USER CRYPTO_USER_API_AEAD CRYPTO_USER_API_HASH CRYPTO_USER_API_SKCIPHER CRYPTO_VMAC CRYPTO_WP512 CRYPTO_XCBC CRYPTO_XCTR CRYPTO_ZSTD CYPRESS_FIRMWARE DAMON DAMON_DBGFS DAMON_PADDR DAMON_RECLAIM DAMON_VADDR DAX DCB DEFAULT_CUBIC DEFAULT_PFIFO_FAST DEVICE_MIGRATION DEVICE_PRIVATE DLM DLN2_ADC DMABUF_HEAPS DMABUF_HEAPS_CMA DMABUF_HEAPS_SYSTEM DMABUF_MOVE_NOTIFY DM_AUDIT DM_BIO_PRISON DM_BUFIO DM_CACHE DM_CACHE_SMQ DM_CLONE DM_CRYPT DM_FLAKEY DM_INTEGRITY DM_MULTIPATH DM_MULTIPATH_QL DM_MULTIPATH_ST DM_PERSISTENT_DATA DM_RAID DM_SNAPSHOT DM_THIN_PROVISIONING DM_UEVENT DM_VERITY DM_VERITY_FEC DM_WRITECACHE DM_ZONED DRAGONRISE_FF DRM DRM_ANALOGIX_DP DRM_BOCHS DRM_BRIDGE DRM_CDNS_MHDP8546 DRM_CDNS_MHDP8546_J721E DRM_CIRRUS_QEMU DRM_DEBUG_MM DRM_DISPLAY_CONNECTOR DRM_DISPLAY_DP_HELPER DRM_DISPLAY_HDCP_HELPER DRM_DISPLAY_HDMI_HELPER DRM_DISPLAY_HELPER DRM_DP_AUX_BUS DRM_DW_HDMI DRM_DW_HDMI_AHB_AUDIO DRM_DW_HDMI_CEC DRM_DW_HDMI_I2S_AUDIO DRM_DW_MIPI_DSI DRM_ETNAVIV DRM_ETNAVIV_THERMAL DRM_EXYNOS DRM_EXYNOS5433_DECON DRM_EXYNOS7_DECON DRM_EXYNOS_DSI DRM_EXYNOS_HDMI DRM_EXYNOS_MIC DRM_FBDEV_EMULATION DRM_GEM_DMA_HELPER DRM_GEM_SHMEM_HELPER DRM_GM12U320 DRM_GUD DRM_HDLCD DRM_HISI_HIBMC DRM_HISI_KIRIN DRM_I2C_ADV7511 DRM_I2C_ADV7511_AUDIO DRM_I2C_ADV7511_CEC DRM_I2C_CH7006 DRM_I2C_NXP_TDA998X DRM_I2C_SIL164 DRM_IMX_DCSS DRM_KMS_HELPER DRM_KOMEDA DRM_LEGACY DRM_LIMA DRM_LONTIUM_LT8912B DRM_LONTIUM_LT9611 DRM_LONTIUM_LT9611UXC DRM_MALI_DISPLAY DRM_MEDIATEK DRM_MEDIATEK_HDMI DRM_MESON DRM_MESON_DW_HDMI DRM_MIPI_DSI DRM_MSM DRM_MSM_DP DRM_MSM_DPU DRM_MSM_DSI DRM_MSM_DSI_10NM_PHY DRM_MSM_DSI_14NM_PHY DRM_MSM_DSI_20NM_PHY DRM_MSM_DSI_28NM_8960_PHY DRM_MSM_DSI_28NM_PHY DRM_MSM_DSI_7NM_PHY DRM_MSM_GPU_STATE DRM_MSM_HDMI DRM_MSM_HDMI_HDCP DRM_MSM_MDP4 DRM_MSM_MDP5 DRM_MSM_MDSS DRM_MXS DRM_MXSFB DRM_NOMODESET DRM_NOUVEAU DRM_NOUVEAU_BACKLIGHT DRM_NWL_MIPI_DSI DRM_PANEL DRM_PANEL_BOE_TV101WUM_NL6 DRM_PANEL_BRIDGE DRM_PANEL_EDP DRM_PANEL_LVDS DRM_PANEL_MANTIX_MLAF057WE51 DRM_PANEL_RAYDIUM_RM67191 DRM_PANEL_SIMPLE DRM_PANEL_SITRONIX_ST7703 DRM_PANEL_TRULY_NT35597_WQXGA DRM_PANFROST DRM_PARADE_PS8640 DRM_PL111 DRM_RCAR_CMM DRM_RCAR_DU DRM_RCAR_DW_HDMI DRM_RCAR_LVDS DRM_RCAR_MIPI_DSI DRM_RCAR_USE_CMM DRM_RCAR_USE_LVDS DRM_RCAR_USE_MIPI_DSI DRM_RCAR_VSP DRM_RCAR_WRITEBACK DRM_SCHED DRM_SII902X DRM_SIMPLEDRM DRM_SIMPLE_BRIDGE DRM_SUN4I DRM_SUN6I_DSI DRM_SUN8I_DW_HDMI DRM_SUN8I_MIXER DRM_SUN8I_TCON_TOP DRM_TEGRA DRM_THINE_THC63LVD1024 ENCRYPTED_KEYS FSCACHE HAMRADIO HID_DRAGONRISE HID_NINTENDO HID_ZEROPLUS HSR INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_RTRS_CLIENT INFINIBAND_USER_ACCESS INPUT_JOYSTICK INPUT_MOUSE INPUT_TOUCHSCREEN IOSCHED_BFQ IP6_NF_RAW IPV6_MULTIPLE_TABLES IP_ADVANCED_ROUTER IP_MULTIPLE_TABLES IP_NF_RAW IP_SET ISDN ISDN_CAPI ISO9660_FS JFFS2_FS JFFS2_RTIME JFFS2_RUBIN JFFS2_SUMMARY JFFS2_ZLIB JFS_DEBUG JFS_FS JFS_POSIX_ACL JFS_SECURITY JOLIET JOYSTICK_IFORCE JOYSTICK_IFORCE_USB JOYSTICK_PXRC JOYSTICK_XPAD JOYSTICK_XPAD_FF JOYSTICK_XPAD_LEDS KARMA_PARTITION KCOV KCOV_ENABLE_COMPARISONS KCOV_INSTRUMENT_ALL KEYS_REQUEST_CACHE KEY_DH_OPERATIONS KEY_NOTIFICATIONS L2TP L2TP_ETH L2TP_IP L2TP_V3 LAPB LAPBETHER LDM_PARTITION LEDS_TRIGGER_AUDIO LLC2 LOGIG940_FF LOGIRUMBLEPAD2_FF LOGITECH_FF LOGIWHEELS_FF LOGO_LINUX_MONO LOGO_LINUX_VGA16 LPC_ICH LWTUNNEL LWTUNNEL_BPF LZ4HC_COMPRESS LZ4_COMPRESS MAC80211 MAC80211_DEBUGFS MAC80211_HAS_RC MAC80211_HWSIM MAC80211_LEDS MAC80211_MESH MAC80211_RC_DEFAULT_MINSTREL MAC80211_RC_MINSTREL MACSEC MAC_PARTITION MDIO_MVUSB MD_LINEAR MD_MULTIPATH MD_RAID0 MD_RAID1 MD_RAID10 MD_RAID456 MEDIA_CEC_SUPPORT MEDIA_CONTROLLER_DVB MEDIA_RADIO_SUPPORT MEDIA_TEST_SUPPORT MEDIA_TUNER_MSI001 MEMORY_HOTPLUG_DEFAULT_ONLINE MEMSTICK MEMSTICK_REALTEK_USB MFD_DLN2 MFD_MT6370 MFD_VIPERBOARD MHI_WWAN_CTRL MINIX_FS MINIX_SUBPARTITION MISC_RTSX MISC_RTSX_USB MISDN MISDN_DSP MISDN_HFCUSB MISDN_L1OIP MKISS MLX4_INFINIBAND MMC_REALTEK_USB MMC_USHC MMC_VUB300 MODULE_FORCE_UNLOAD MODULE_SRCVERSION_ALL MODVERSIONS MOST MOST_USB_HDM MOUSE_APPLETOUCH MOUSE_BCM5974 MOUSE_PS2 MOUSE_PS2_ALPS MOUSE_PS2_BYD MOUSE_PS2_CYPRESS MOUSE_PS2_FOCALTECH MOUSE_PS2_LOGIPS2PP MOUSE_PS2_SMBUS MOUSE_PS2_SYNAPTICS MOUSE_PS2_SYNAPTICS_SMBUS MOUSE_PS2_TRACKPOINT MOUSE_SYNAPTICS_USB MPLS MPLS_IPTUNNEL MPLS_ROUTING MPTCP MPTCP_IPV6 MSDOS_FS MTD_BLOCK2MTD MTD_MTDRAM MTD_PHRAM MTD_SLRAM MTD_UBI MUSB_PIO_ONLY NETCONSOLE NETDEVSIM NETFILTER_FAMILY_ARP NETFILTER_NETLINK NETFILTER_NETLINK_ACCT NETFILTER_NETLINK_GLUE_CT NETFILTER_NETLINK_LOG NETFILTER_NETLINK_OSF NETFILTER_NETLINK_QUEUE NETFILTER_SYNPROXY NETFILTER_XT_CONNMARK NETFILTER_XT_MATCH_BPF NETFILTER_XT_MATCH_CGROUP NETFILTER_XT_MATCH_CLUSTER NETFILTER_XT_MATCH_COMMENT NETFILTER_XT_MATCH_CONNBYTES NETFILTER_XT_MATCH_CONNLABEL NETFILTER_XT_MATCH_CONNLIMIT NETFILTER_XT_MATCH_CONNMARK NETFILTER_XT_MATCH_CPU NETFILTER_XT_MATCH_DCCP NETFILTER_XT_MATCH_DEVGROUP NETFILTER_XT_MATCH_DSCP NETFILTER_XT_MATCH_ECN NETFILTER_XT_MATCH_ESP NETFILTER_XT_MATCH_HASHLIMIT NETFILTER_XT_MATCH_HELPER NETFILTER_XT_MATCH_HL NETFILTER_XT_MATCH_IPCOMP NETFILTER_XT_MATCH_IPRANGE NETFILTER_XT_MATCH_L2TP NETFILTER_XT_MATCH_LENGTH NETFILTER_XT_MATCH_LIMIT NETFILTER_XT_MATCH_MAC NETFILTER_XT_MATCH_MARK NETFILTER_XT_MATCH_MULTIPORT NETFILTER_XT_MATCH_NFACCT NETFILTER_XT_MATCH_OSF NETFILTER_XT_MATCH_OWNER NETFILTER_XT_MATCH_PHYSDEV NETFILTER_XT_MATCH_PKTTYPE NETFILTER_XT_MATCH_POLICY NETFILTER_XT_MATCH_QUOTA NETFILTER_XT_MATCH_RATEEST NETFILTER_XT_MATCH_REALM NETFILTER_XT_MATCH_RECENT NETFILTER_XT_MATCH_SCTP NETFILTER_XT_MATCH_SOCKET NETFILTER_XT_MATCH_STATE NETFILTER_XT_MATCH_STATISTIC NETFILTER_XT_MATCH_STRING NETFILTER_XT_MATCH_TCPMSS NETFILTER_XT_MATCH_TIME NETFILTER_XT_MATCH_U32 NETFILTER_XT_SET NETFILTER_XT_TARGET_AUDIT NETFILTER_XT_TARGET_CLASSIFY NETFILTER_XT_TARGET_CONNMARK NETFILTER_XT_TARGET_CONNSECMARK NETFILTER_XT_TARGET_CT NETFILTER_XT_TARGET_DSCP NETFILTER_XT_TARGET_HL NETFILTER_XT_TARGET_HMARK NETFILTER_XT_TARGET_IDLETIMER NETFILTER_XT_TARGET_LED NETFILTER_XT_TARGET_MARK NETFILTER_XT_TARGET_NETMAP NETFILTER_XT_TARGET_NFLOG NETFILTER_XT_TARGET_NFQUEUE NETFILTER_XT_TARGET_NOTRACK NETFILTER_XT_TARGET_RATEEST NETFILTER_XT_TARGET_REDIRECT NETFILTER_XT_TARGET_SECMARK NETFILTER_XT_TARGET_TCPMSS NETFILTER_XT_TARGET_TCPOPTSTRIP NETFILTER_XT_TARGET_TEE NETFILTER_XT_TARGET_TPROXY NETFILTER_XT_TARGET_TRACE NETLABEL NETLINK_DIAG NETPOLL NETROM NETWORK_SECMARK NET_9P_RDMA NET_ACT_BPF NET_ACT_CONNMARK NET_ACT_CSUM NET_ACT_CT NET_ACT_CTINFO NET_ACT_IFE NET_ACT_IPT NET_ACT_MPLS NET_ACT_NAT NET_ACT_PEDIT NET_ACT_POLICE NET_ACT_SAMPLE NET_ACT_SIMP NET_ACT_SKBEDIT NET_ACT_SKBMOD NET_ACT_TUNNEL_KEY NET_ACT_VLAN NET_CLS_BPF NET_CLS_CGROUP NET_CLS_FLOW NET_CLS_FW NET_CLS_MATCHALL NET_CLS_ROUTE4 NET_CLS_U32 NET_DSA_TAG_MTK NET_DSA_TAG_QCA NET_DSA_TAG_RTL4_A NET_EMATCH NET_EMATCH_CANID NET_EMATCH_CMP NET_EMATCH_IPSET NET_EMATCH_IPT NET_EMATCH_META NET_EMATCH_NBYTE NET_EMATCH_TEXT NET_EMATCH_U32 NET_FC NET_FOU NET_FOU_IP_TUNNELS NET_IFE NET_IFE_SKBMARK NET_IFE_SKBPRIO NET_IFE_SKBTCINDEX NET_IPGRE NET_IPGRE_BROADCAST NET_IPGRE_DEMUX NET_IPIP NET_IPVTI NET_KEY NET_KEY_MIGRATE NET_L3_MASTER_DEV NET_MPLS_GSO NET_NCSI NET_NSH NET_POLL_CONTROLLER NET_REDIRECT NET_SCH_CAKE NET_SCH_CHOKE NET_SCH_CODEL NET_SCH_DEFAULT NET_SCH_DRR NET_SCH_ETS NET_SCH_FQ NET_SCH_FQ_CODEL NET_SCH_FQ_PIE NET_SCH_GRED NET_SCH_HFSC NET_SCH_HHF NET_SCH_HTB NET_SCH_MULTIQ NET_SCH_NETEM NET_SCH_PIE NET_SCH_PLUG NET_SCH_PRIO NET_SCH_QFQ NET_SCH_RED NET_SCH_SFB NET_SCH_SFQ NET_SCH_SKBPRIO NET_SCH_TBF NET_SCH_TEQL NET_TC_SKB_EXT NET_TEAM NET_TEAM_MODE_ACTIVEBACKUP NET_TEAM_MODE_BROADCAST NET_TEAM_MODE_LOADBALANCE NET_TEAM_MODE_RANDOM NET_TEAM_MODE_ROUNDROBIN NET_UDP_TUNNEL NET_VRF NFC_DIGITAL NFC_FDP NFC_HCI NFC_MRVL NFC_MRVL_USB NFC_NCI_UART NFC_PN533 NFC_PN533_USB NFC_PORT100 NFC_SHDLC NFC_SIM NFC_VIRTUAL_NCI NFSD NFSD_BLOCKLAYOUT NFSD_FLEXFILELAYOUT NFSD_PNFS NFSD_SCSILAYOUT NFSD_V3_ACL NFSD_V4 NFSD_V4_2_INTER_SSC NFSD_V4_SECURITY_LABEL NFS_ACL_SUPPORT NFS_FSCACHE NFS_V3_ACL NFS_V4_2_READ_PLUS NFT_BRIDGE_META NFT_BRIDGE_REJECT NFT_COMPAT NFT_CONNLIMIT NFT_CT NFT_DUP_IPV4 NFT_DUP_IPV6 NFT_DUP_NETDEV NFT_FIB NFT_FIB_INET NFT_FIB_IPV4 NFT_FIB_IPV6 NFT_FIB_NETDEV NFT_FLOW_OFFLOAD NFT_HASH NFT_LIMIT NFT_LOG NFT_MASQ NFT_NAT NFT_NUMGEN NFT_OSF NFT_QUEUE NFT_QUOTA NFT_REDIR NFT_REJECT NFT_REJECT_INET NFT_REJECT_IPV4 NFT_REJECT_IPV6 NFT_REJECT_NETDEV NFT_SOCKET NFT_SYNPROXY NFT_TPROXY NFT_TUNNEL NFT_XFRM NF_CONNTRACK_AMANDA NF_CONNTRACK_BRIDGE NF_CONNTRACK_BROADCAST NF_CONNTRACK_H323 NF_CONNTRACK_IRC NF_CONNTRACK_LABELS NF_CONNTRACK_MARK NF_CONNTRACK_NETBIOS_NS NF_CONNTRACK_PPTP NF_CONNTRACK_SANE NF_CONNTRACK_SECMARK NF_CONNTRACK_SNMP NF_CONNTRACK_TFTP NF_CONNTRACK_TIMEOUT NF_CONNTRACK_TIMESTAMP NF_CONNTRACK_ZONES NF_CT_NETLINK NF_CT_NETLINK_HELPER NF_CT_NETLINK_TIMEOUT NF_CT_PROTO_GRE NF_DUP_IPV4 NF_DUP_IPV6 NF_DUP_NETDEV NF_FLOW_TABLE NF_FLOW_TABLE_INET NF_LOG_ARP NF_NAT_AMANDA NF_NAT_FTP NF_NAT_H323 NF_NAT_IRC NF_NAT_PPTP NF_NAT_REDIRECT NF_NAT_SIP NF_NAT_SNMP_BASIC NF_NAT_TFTP NF_SOCKET_IPV4 NF_SOCKET_IPV6 NF_TABLES NF_TABLES_ARP NF_TABLES_BRIDGE NF_TABLES_INET NF_TABLES_IPV4 NF_TABLES_IPV6 NF_TABLES_NETDEV NF_TPROXY_IPV4 NF_TPROXY_IPV6 NILFS2_FS NINTENDO_FF NLMON NLS_ASCII NLS_CODEPAGE_1250 NLS_CODEPAGE_1251 NLS_CODEPAGE_737 NLS_CODEPAGE_775 NLS_CODEPAGE_850 NLS_CODEPAGE_852 NLS_CODEPAGE_855 NLS_CODEPAGE_857 NLS_CODEPAGE_860 NLS_CODEPAGE_861 NLS_CODEPAGE_862 NLS_CODEPAGE_863 NLS_CODEPAGE_864 NLS_CODEPAGE_865 NLS_CODEPAGE_866 NLS_CODEPAGE_869 NLS_CODEPAGE_874 NLS_CODEPAGE_932 NLS_CODEPAGE_936 NLS_CODEPAGE_949 NLS_CODEPAGE_950 NLS_ISO8859_13 NLS_ISO8859_14 NLS_ISO8859_15 NLS_ISO8859_2 NLS_ISO8859_3 NLS_ISO8859_4 NLS_ISO8859_5 NLS_ISO8859_6 NLS_ISO8859_7 NLS_ISO8859_8 NLS_ISO8859_9 NLS_KOI8_R NLS_KOI8_U NLS_MAC_CELTIC NLS_MAC_CENTEURO NLS_MAC_CROATIAN NLS_MAC_CYRILLIC NLS_MAC_GAELIC NLS_MAC_GREEK NLS_MAC_ICELAND NLS_MAC_INUIT NLS_MAC_ROMAN NLS_MAC_ROMANIAN NLS_MAC_TURKISH NLS_UTF8 NOUVEAU_LEGACY_CTX_SUPPORT NOUVEAU_PLATFORM_DRIVER NOZOMI NO_HZ NTFS3_FS NTFS3_FS_POSIX_ACL NTFS3_LZX_XPRESS NTFS_FS NTFS_RW NULL_TTY NVME_FABRICS NVME_FC NVME_MULTIPATH NVME_RDMA NVME_TARGET NVME_TARGET_FC NVME_TARGET_FCLOOP NVME_TARGET_LOOP NVME_TARGET_RDMA NVME_TARGET_TCP NVME_TCP N_GSM N_HDLC OCFS2_DEBUG_FS OCFS2_FS OCFS2_FS_O2CB OCFS2_FS_STATS OCFS2_FS_USERSPACE_CLUSTER PARPORT PARTITION_ADVANCED PCCARD PCMCIA PHONET PSAMPLE RADIO_ADAPTERS RADIO_SI470X RADIO_SI4713 RFKILL SERIAL_NONSTANDARD SND SND_SOC SOUND SSB TARGET_CORE TCP_CONG_ADVANCED TLS TLS_DEVICE TLS_TOE TOOLS_SUPPORT_RELR TOUCHSCREEN_ATMEL_MXT TOUCHSCREEN_EDT_FT5X06 TOUCHSCREEN_GOODIX TOUCHSCREEN_SUR40 TOUCHSCREEN_USB_3M TOUCHSCREEN_USB_COMPOSITE TOUCHSCREEN_USB_DMC_TSC10 TOUCHSCREEN_USB_E2I TOUCHSCREEN_USB_EASYTOUCH TOUCHSCREEN_USB_EGALAX TOUCHSCREEN_USB_ELO TOUCHSCREEN_USB_ETT_TC45USB TOUCHSCREEN_USB_ETURBO TOUCHSCREEN_USB_GENERAL_TOUCH TOUCHSCREEN_USB_GOTOP TOUCHSCREEN_USB_GUNZE TOUCHSCREEN_USB_IDEALTEK TOUCHSCREEN_USB_IRTOUCH TOUCHSCREEN_USB_ITM TOUCHSCREEN_USB_JASTEC TOUCHSCREEN_USB_NEXIO TOUCHSCREEN_USB_PANJIT TOUCHSCREEN_USB_ZYTRONIC TRANSPARENT_HUGEPAGE_MADVISE TRUSTED_KEYS TTPCI_EEPROM TTY_PRINTK TUN_VNET_CROSS_LE TYPEC_ANX7411 TYPEC_DP_ALTMODE TYPEC_MT6360 TYPEC_MUX_FSA4480 TYPEC_MUX_PI3USB30532 TYPEC_NVIDIA_ALTMODE TYPEC_RT1711H TYPEC_RT1719 TYPEC_STUSB160X TYPEC_TCPCI_MAXIM TYPEC_TCPCI_MT6370 TYPEC_UCSI TYPEC_WUSB3801 UBIFS_ATIME_SUPPORT UBIFS_FS UBIFS_FS_ADVANCED_COMPR UBIFS_FS_LZO UBIFS_FS_SECURITY UBIFS_FS_XATTR UBIFS_FS_ZLIB UBIFS_FS_ZSTD UCSI_ACPI UCSI_CCG UCSI_STM32G0 UDF_FS UDMABUF UFS_FS UFS_FS_WRITE UHID ULTRIX_PARTITION UNICODE UNIXWARE_DISKLABEL UNIX_DIAG USB4 USB4_NET USBIP_CORE USBIP_HOST USBIP_VHCI_HCD USBIP_VUDC USBPCWATCHDOG USB_ADUTUX USB_AIRSPY USB_ALI_M5632 USB_AMD5536UDC USB_AN2720 USB_ANNOUNCE_NEW_DEVICES USB_APPLEDISPLAY USB_ATM USB_C67X00_HCD USB_CATC USB_CDC_PHONET USB_CDNSP_GADGET USB_CDNSP_HOST USB_CDNSP_PCI USB_CHAOSKEY USB_CONFIGFS_F_HID USB_CONFIGFS_F_LB_SS USB_CONFIGFS_F_MIDI USB_CONFIGFS_F_PRINTER USB_CONFIGFS_F_TCM USB_CONFIGFS_F_UAC1 USB_CONFIGFS_F_UAC1_LEGACY USB_CONFIGFS_F_UAC2 USB_CONFIGFS_F_UVC USB_CONFIGFS_PHONET USB_CXACRU USB_CYPRESS_CY7C63 USB_CYTHERM USB_DSBR USB_DUMMY_HCD USB_DWC2_PCI USB_DWC3_GADGET USB_DWC3_ULPI USB_DYNAMIC_MINORS USB_EG20T USB_EHCI_FSL USB_EHSET_TEST_FIXTURE USB_EMI26 USB_EMI62 USB_EPSON2888 USB_EZUSB_FX2 USB_FEW_INIT_RETRIES USB_FOTG210_HCD USB_FOTG210_UDC USB_FTDI_ELAN USB_F_HID USB_F_MIDI USB_F_PHONET USB_F_PRINTER USB_F_SS_LB USB_F_TCM USB_F_UAC1 USB_F_UAC1_LEGACY USB_F_UAC2 USB_F_UVC USB_GADGETFS USB_GADGET_DEBUG_FILES USB_GADGET_DEBUG_FS USB_GL860 USB_GOKU USB_GPIO_VBUS USB_GR_UDC USB_GSPCA USB_GSPCA_BENQ USB_GSPCA_CONEX USB_GSPCA_CPIA1 USB_GSPCA_DTCS033 USB_GSPCA_ETOMS USB_GSPCA_FINEPIX USB_GSPCA_JEILINJ USB_GSPCA_JL2005BCD USB_GSPCA_KINECT USB_GSPCA_KONICA USB_GSPCA_MARS USB_GSPCA_MR97310A USB_GSPCA_NW80X USB_GSPCA_OV519 USB_GSPCA_OV534 USB_GSPCA_OV534_9 USB_GSPCA_PAC207 USB_GSPCA_PAC7302 USB_GSPCA_PAC7311 USB_GSPCA_SE401 USB_GSPCA_SN9C2028 USB_GSPCA_SN9C20X USB_GSPCA_SONIXB USB_GSPCA_SONIXJ USB_GSPCA_SPCA1528 USB_GSPCA_SPCA500 USB_GSPCA_SPCA501 USB_GSPCA_SPCA505 USB_GSPCA_SPCA506 USB_GSPCA_SPCA508 USB_GSPCA_SPCA561 USB_GSPCA_SQ905 USB_GSPCA_SQ905C USB_GSPCA_SQ930X USB_GSPCA_STK014 USB_GSPCA_STK1135 USB_GSPCA_STV0680 USB_GSPCA_SUNPLUS USB_GSPCA_T613 USB_GSPCA_TOPRO USB_GSPCA_TOUPTEK USB_GSPCA_TV8532 USB_GSPCA_VC032X USB_GSPCA_VICAM USB_GSPCA_XIRLINK_CIT USB_GSPCA_ZC3XX USB_HACKRF USB_HCD_BCMA USB_HCD_SSB USB_HIDDEV USB_HSIC_USB4604 USB_HSO USB_HUB_USB251XB USB_IDMOUSE USB_IOWARRIOR USB_IPHETH USB_ISIGHTFW USB_ISP116X_HCD USB_ISP1301 USB_KAWETH USB_KC2190 USB_KEENE USB_LCD USB_LD USB_LEDS_TRIGGER_USBPORT USB_LED_TRIG USB_LEGOTOWER USB_LINK_LAYER_TEST USB_M5602 USB_MA901 USB_MAX3420_UDC USB_MAX3421_HCD USB_MDC800 USB_MICROTEK USB_MON USB_MR800 USB_MSI2500 USB_MV_U3D USB_MV_UDC USB_NET2272 USB_NET2272_DMA USB_NET2280 USB_NET_AQC111 USB_NET_CDC_EEM USB_NET_CDC_MBIM USB_NET_CH9200 USB_NET_CX82310_ETH USB_NET_GL620A USB_NET_HUAWEI_CDC_NCM USB_NET_INT51X1 USB_NET_KALMIA USB_NET_QMI_WWAN USB_NET_RNDIS_HOST USB_NET_RNDIS_WLAN USB_NET_SR9700 USB_OTG_FSM USB_OXU210HP_HCD USB_PRINTER USB_PULSE8_CEC USB_PWC USB_PWC_INPUT_EVDEV USB_PXA27X USB_R8A66597 USB_R8A66597_HCD USB_RAINSHADOW_CEC USB_RAREMONO USB_RAW_GADGET USB_S2255 USB_SERIAL_AIRCABLE USB_SERIAL_ARK3116 USB_SERIAL_BELKIN USB_SERIAL_CH341 USB_SERIAL_CONSOLE USB_SERIAL_CYBERJACK USB_SERIAL_CYPRESS_M8 USB_SERIAL_DEBUG USB_SERIAL_DIGI_ACCELEPORT USB_SERIAL_EDGEPORT USB_SERIAL_EDGEPORT_TI USB_SERIAL_EMPEG USB_SERIAL_F81232 USB_SERIAL_F8153X USB_SERIAL_GARMIN USB_SERIAL_GENERIC USB_SERIAL_IPAQ USB_SERIAL_IPW USB_SERIAL_IR USB_SERIAL_IUU USB_SERIAL_KEYSPAN USB_SERIAL_KEYSPAN_PDA USB_SERIAL_KLSI USB_SERIAL_KOBIL_SCT USB_SERIAL_MCT_U232 USB_SERIAL_METRO USB_SERIAL_MOS7715_PARPORT USB_SERIAL_MOS7720 USB_SERIAL_MOS7840 USB_SERIAL_MXUPORT USB_SERIAL_NAVMAN USB_SERIAL_OMNINET USB_SERIAL_OPTICON USB_SERIAL_OTI6858 USB_SERIAL_PL2303 USB_SERIAL_QCAUX USB_SERIAL_QT2 USB_SERIAL_QUALCOMM USB_SERIAL_SAFE USB_SERIAL_SIERRAWIRELESS USB_SERIAL_SIMPLE USB_SERIAL_SPCP8X5 USB_SERIAL_SSU100 USB_SERIAL_SYMBOL USB_SERIAL_TI USB_SERIAL_UPD78F0730 USB_SERIAL_VISOR USB_SERIAL_WHITEHEAT USB_SERIAL_WISHBONE USB_SERIAL_XR USB_SERIAL_XSENS_MT USB_SEVSEG USB_SI470X USB_SI4713 USB_SIERRA_NET USB_SISUSBVGA USB_SL811_CS USB_SL811_HCD USB_SL811_HCD_ISO USB_SPEEDTOUCH USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_ENE_UB6250 USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_STV06XX USB_TEST USB_TMC USB_TRANCEVIBRATOR USB_U132_HCD USB_UAS USB_UEAGLEATM USB_UHCI_HCD USB_USS720 USB_U_AUDIO USB_VL600 USB_WDM USB_XHCI_DBGCAP USB_XUSBATM USB_YUREX USERFAULTFD USERIO U_SERIAL_CONSOLE V4L_TEST_DRIVERS VALIDATE_FS_PARSER VDPA VDPA_SIM VDPA_SIM_BLOCK VDPA_SIM_NET VDPA_USER VHOST VHOST_CROSS_ENDIAN_LEGACY VHOST_IOTLB VHOST_NET VHOST_RING VHOST_VDPA VHOST_VSOCK VIDEOMODE_HELPERS VIDEO_AU0828 VIDEO_AU0828_RC VIDEO_AU0828_V4L2 VIDEO_CS53L32A VIDEO_CX231XX VIDEO_CX231XX_ALSA VIDEO_CX231XX_DVB VIDEO_CX231XX_RC VIDEO_CX2341X VIDEO_CX25840 VIDEO_EM28XX VIDEO_EM28XX_ALSA VIDEO_EM28XX_DVB VIDEO_EM28XX_RC VIDEO_EM28XX_V4L2 VIDEO_GO7007 VIDEO_GO7007_LOADER VIDEO_GO7007_USB VIDEO_GO7007_USB_S2250_BOARD VIDEO_HDPVR VIDEO_MSP3400 VIDEO_PVRUSB2 VIDEO_PVRUSB2_DVB VIDEO_PVRUSB2_SYSFS VIDEO_SAA711X VIDEO_STK1160 VIDEO_STK1160_COMMON VIDEO_TUNER VIDEO_TVEEPROM VIDEO_USBTV VIDEO_V4L2_TPG VIDEO_VICODEC VIDEO_VIM2M VIDEO_VIMC VIDEO_VIVID VIDEO_VIVID_CEC VIDEO_WM8775 VIPERBOARD_ADC VIRTIO_DMA_SHARED_BUFFER VIRTIO_FS VIRTIO_MMIO_CMDLINE_DEVICES VIRTIO_VDPA VIRTIO_VSOCKETS VIRTIO_VSOCKETS_COMMON VIRT_WIFI VMXNET3 VP_VDPA VSOCKETS VSOCKETS_DIAG VSOCKETS_LOOPBACK VSOCKMON VXFS_FS WAN WATCH_QUEUE WCN36XX WEXT_CORE WEXT_PRIV WEXT_PROC WIREGUARD WIRELESS WIRELESS_EXT WLAN WLAN_VENDOR_ADMTEK WLAN_VENDOR_ATH WLAN_VENDOR_SILABS WWAN X25 XDP_SOCKETS XDP_SOCKETS_DIAG XFRM XFRM_AH XFRM_ALGO XFRM_ESP XFRM_ESPINTCP XFRM_INTERFACE XFRM_IPCOMP XFRM_MIGRATE XFRM_OFFLOAD XFRM_STATISTICS XFRM_SUB_POLICY XFRM_USER XFS_FS XFS_POSIX_ACL XFS_QUOTA XFS_RT XILLYBUS_CLASS XILLYUSB ZBUD ZEROPLUS_FF ZISOFS ZONEFS_FS ZONE_DEVICE ZPOOL ZRAM ZRAM_DEF_COMP_LZORLE ZSMALLOC ZSWAP ZSWAP_COMPRESSOR_DEFAULT_LZO ZSWAP_DEFAULT_ON ZSWAP_ZPOOL_DEFAULT_ZBUD] disabling configs for [bug_or_warning locking atomic_sleep hang memleak ubsan], they are not needed testing current HEAD 8e6e2188d949ddc4d8f613fd115ac7177f7e3b2b testing commit 8e6e2188d949ddc4d8f613fd115ac7177f7e3b2b gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 49cba810bbec80a1286de9e6ceb4cbaf91f81472544c4bce54f727441b2daaef all runs: crashed: KASAN: use-after-free Read in nr_add_node representative crash: KASAN: use-after-free Read in nr_add_node, types: [KASAN-USE-AFTER-FREE-READ] crash still not fixed/happens on the oldest tested release revisions tested: 8, total time: 2h24m2.343514469s (build: 1h1m49.200931764s, test: 1h19m3.965373191s) crash still not fixed or there were kernel test errors commit msg: Linux 6.1.157 crash: KASAN: use-after-free Read in nr_add_node ================================================================== BUG: KASAN: use-after-free in nr_add_node+0x1938/0x1ab0 net/netrom/nr_route.c:248 Read of size 2 at addr ffff0000da1e8532 by task syz.0.585/6764 CPU: 1 PID: 6764 Comm: syz.0.585 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 Call trace: dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xb0/0xf4 lib/dump_stack.c:106 print_address_description+0x88/0x218 mm/kasan/report.c:316 print_report+0x50/0x68 mm/kasan/report.c:420 kasan_report+0xa8/0xfc mm/kasan/report.c:524 __asan_report_load2_noabort+0x2c/0x38 mm/kasan/report_generic.c:349 nr_add_node+0x1938/0x1ab0 net/netrom/nr_route.c:248 nr_rt_ioctl+0xb48/0xc84 net/netrom/nr_route.c:651 nr_ioctl+0x1c4/0x4c4 net/netrom/af_netrom.c:1254 sock_do_ioctl+0xf8/0x240 net/socket.c:1204 sock_ioctl+0x5a0/0x81c net/socket.c:1321 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:856 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x134/0x24c arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x34/0xd4 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Allocated by task 6763: kasan_save_stack mm/kasan/common.c:45 [inline] kasan_set_track+0x4c/0x80 mm/kasan/common.c:52 kasan_save_alloc_info+0x28/0x34 mm/kasan/generic.c:505 ____kasan_kmalloc mm/kasan/common.c:374 [inline] __kasan_kmalloc+0xa0/0xb8 mm/kasan/common.c:383 kasan_kmalloc include/linux/kasan.h:211 [inline] kmalloc_trace+0x54/0x68 mm/slab_common.c:1031 kmalloc include/linux/slab.h:563 [inline] nr_add_node+0x430/0x1ab0 net/netrom/nr_route.c:146 nr_rt_ioctl+0xb48/0xc84 net/netrom/nr_route.c:651 nr_ioctl+0x1c4/0x4c4 net/netrom/af_netrom.c:1254 sock_do_ioctl+0xf8/0x240 net/socket.c:1204 sock_ioctl+0x5a0/0x81c net/socket.c:1321 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:856 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x134/0x24c arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x34/0xd4 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Freed by task 6764: kasan_save_stack mm/kasan/common.c:45 [inline] kasan_set_track+0x4c/0x80 mm/kasan/common.c:52 kasan_save_free_info+0x3c/0x60 mm/kasan/generic.c:516 ____kasan_slab_free+0x148/0x1b0 mm/kasan/common.c:236 __kasan_slab_free+0x18/0x28 mm/kasan/common.c:244 kasan_slab_free include/linux/kasan.h:177 [inline] slab_free_hook mm/slub.c:1729 [inline] slab_free_freelist_hook+0x16c/0x1ec mm/slub.c:1755 slab_free mm/slub.c:3687 [inline] __kmem_cache_free+0xc0/0x224 mm/slub.c:3700 kfree+0x88/0xb8 mm/slab_common.c:988 nr_neigh_put+0x144/0x1cc include/net/netrom.h:143 nr_add_node+0xe90/0x1ab0 net/netrom/nr_route.c:246 nr_rt_ioctl+0xb48/0xc84 net/netrom/nr_route.c:651 nr_ioctl+0x1c4/0x4c4 net/netrom/af_netrom.c:1254 sock_do_ioctl+0xf8/0x240 net/socket.c:1204 sock_ioctl+0x5a0/0x81c net/socket.c:1321 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:856 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x134/0x24c arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x34/0xd4 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 The buggy address belongs to the object at ffff0000da1e8500 which belongs to the cache kmalloc-128 of size 128 The buggy address is located 50 bytes inside of 128-byte region [ffff0000da1e8500, ffff0000da1e8580) The buggy address belongs to the physical page: page:0000000041c99d98 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a1e8 flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000000200 fffffc000354df80 dead000000000002 ffff0000c0002300 raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff0000da1e8400: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc ffff0000da1e8480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc >ffff0000da1e8500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff0000da1e8580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff0000da1e8600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ================================================================== Unable to handle kernel paging request at virtual address e0aae06f6000034d KASAN: maybe wild-memory-access in range [0x055b037b00001a68-0x055b037b00001a6f] Mem abort info: ESR = 0x0000000096000004 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x04: level 0 translation fault Data abort info: ISV = 0, ISS = 0x00000004 CM = 0, WnR = 0 [e0aae06f6000034d] address between user and kernel address ranges Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 6764 Comm: syz.0.585 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 02400005 (nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : __hlist_del include/linux/list.h:884 [inline] pc : hlist_del_init include/linux/list.h:912 [inline] pc : __nr_remove_neigh net/netrom/nr_route.c:298 [inline] pc : nr_remove_neigh+0x6c/0xec net/netrom/nr_route.c:308 lr : __hlist_del include/linux/list.h:881 [inline] lr : hlist_del_init include/linux/list.h:912 [inline] lr : __nr_remove_neigh net/netrom/nr_route.c:298 [inline] lr : nr_remove_neigh+0x64/0xec net/netrom/nr_route.c:308 sp : ffff80001d9577f0 x29: ffff80001d9577f0 x28: 1fffe000186f06c3 x27: ffff0000c3783650 x26: ffff0000c3783640 x25: ffff0000c3783648 x24: ffff0000c378361f x23: ffff0000db5d6200 x22: dfff800000000000 x21: 0000000000000000 x20: 055b037b00001a6c x19: ffff0000da1e8500 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 00000000ffffffff x13: 0000000000000001 x12: ffff700003b2aee4 x11: 1ffff00003b2aee4 x10: 0000000000000004 x9 : ffff8000183a4a10 x8 : 00ab606f6000034d x7 : 0000000000000001 x6 : ffff80000f3364d0 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80000f336504 x2 : 0000000000000000 x1 : 0000000000000008 x0 : 0000000000000000 Call trace: __hlist_del include/linux/list.h:881 [inline] hlist_del_init include/linux/list.h:912 [inline] __nr_remove_neigh net/netrom/nr_route.c:298 [inline] nr_remove_neigh+0x6c/0xec net/netrom/nr_route.c:308 nr_add_node+0x136c/0x1ab0 net/netrom/nr_route.c:249 nr_rt_ioctl+0xb48/0xc84 net/netrom/nr_route.c:651 nr_ioctl+0x1c4/0x4c4 net/netrom/af_netrom.c:1254 sock_do_ioctl+0xf8/0x240 net/socket.c:1204 sock_ioctl+0x5a0/0x81c net/socket.c:1321 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:856 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x134/0x24c arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x34/0xd4 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Code: aa1303e0 96500174 d343fe88 f9400275 (38766908) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: aa1303e0 mov x0, x19 4: 96500174 bl 0xfffffffff94005d4 8: d343fe88 lsr x8, x20, #3 c: f9400275 ldr x21, [x19] * 10: 38766908 ldrb w8, [x8, x22] <-- trapping instruction