ci2 starts bisection 2026-08-10 08:21:17.034401819 +0000 UTC m=+188676.287006913 bisecting fixing commit since 6bd9ed02871f22beb0e50690b0c3caf457104f7c building syzkaller on 6df4c87aea53e125680d309de1b6f7306e0d2e62 ensuring issue is reproducible on original commit 6bd9ed02871f22beb0e50690b0c3caf457104f7c testing commit 6bd9ed02871f22beb0e50690b0c3caf457104f7c gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 44ad48fd85f144258161de525d1b69f97908f1d02564bf172e73fe65d6ad4eeb run #0: crashed: KASAN: slab-use-after-free Read in blk_update_request run #1: crashed: KASAN: slab-use-after-free Read in blk_update_request run #2: crashed: KASAN: slab-use-after-free Read in blk_update_request run #3: OK run #4: OK run #5: OK run #6: OK run #7: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: KASAN: slab-use-after-free Read in blk_update_request, types: [KASAN-USE-AFTER-FREE-READ] check whether we can drop unnecessary instrumentation disabling configs for [locking atomic_sleep hang memleak ubsan bug_or_warning], they are not needed testing commit 6bd9ed02871f22beb0e50690b0c3caf457104f7c gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 6cf4cd59fd4df52a007a0ae08ba11444d160665155a4b65e8cae1b62023693cf run #0: OK run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #17: OK run #18: OK run #19: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked representative crash: KASAN: slab-use-after-free Read in rtlock_slowlock_locked, types: [KASAN-USE-AFTER-FREE-READ] unable to determine the verdict: 18 good runs (wanted 15), for bad wanted 10 in total, got 20 kconfig minimization: base=4167 full=8386 leaves diff=2137 split chunks (needed=false): <2137> split chunk #0 of len 2137 into 5 parts testing without sub-chunk 1/5 testing commit 6bd9ed02871f22beb0e50690b0c3caf457104f7c gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 140dbe627504171695f2fb53abcc5e6b91516ac74fb0128916a787fc114a6b26 run #0: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #1: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #2: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: crashed: KASAN: slab-use-after-free Read in blk_update_request run #19: OK representative crash: KASAN: slab-use-after-free Read in rtlock_slowlock_locked, types: [KASAN-USE-AFTER-FREE-READ] the chunk can be dropped testing without sub-chunk 2/5 testing commit 6bd9ed02871f22beb0e50690b0c3caf457104f7c gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: d60a358c8f62f32877b4365708d7181794e9223fcb81eda9e44a71c3e4c8d946 run #0: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #1: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #2: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked representative crash: KASAN: slab-use-after-free Read in rtlock_slowlock_locked, types: [KASAN-USE-AFTER-FREE-READ] the chunk can be dropped testing without sub-chunk 3/5 testing commit 6bd9ed02871f22beb0e50690b0c3caf457104f7c gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: fc5d0f74f1d57bb635c395191c1931d52b9f04911ab1a1b6e12344677d266590 all runs: OK false negative chance: 0.012 testing without sub-chunk 4/5 testing commit 6bd9ed02871f22beb0e50690b0c3caf457104f7c gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 1a9a8fab273161dd90e33516acb7ece093ef4ac0770e9ac02a6970797058b968 all runs: OK false negative chance: 0.012 testing without sub-chunk 5/5 testing commit 6bd9ed02871f22beb0e50690b0c3caf457104f7c gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: ea5f8c8b57b6020c8ac67f3f775f1500e82022d27d42352041856c77645b9111 run #0: OK run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: crashed: no output from test machine run #7: crashed: no output from test machine run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: crashed: no output from test machine run #15: OK run #16: OK run #17: boot failed: can't ssh into the instance run #18: OK run #19: OK representative crash: no output from test machine, types: [UNKNOWN] minimized to 1281 configs; suspects: [AF_RXRPC ARCH_ENABLE_MEMORY_HOTREMOVE ATM AX25 BCMA BLK_DEV_ZONED BPF_SYSCALL BRIDGE BRIDGE_NETFILTER BT BT_BREDR BT_HIDP BXT_WC_PMIC_OPREGION CAN CARDBUS CFG80211 CFG80211_WEXT CHECKPOINT_RESTORE CMA COMMON_CLK CONTIG_ALLOC DIBS DLM DMABUF_HEAPS DRM DVB_CORE ENCRYPTED_KEYS EXTCON FB_CORE GENEVE GPIOLIB HAMRADIO HAVE_CLK HID_LOGITECH HID_NINTENDO HID_NVIDIA_SHIELD HID_PLAYSTATION HID_SENSOR_HUB HID_SMARTJOYPLUS HID_STEAM HID_THRUSTMASTER HID_ZEROPLUS HSR I2C_MUX IIO IMA IMA_APPRAISE IMA_APPRAISE_MODSIG INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_IPOIB INFINIBAND_USER_ACCESS INFINIBAND_VIRT_DMA INPUT_JOYSTICK INPUT_MOUSE INPUT_TABLET INPUT_TOUCHSCREEN INTEGRITY INTEGRITY_ASYMMETRIC_KEYS INTEGRITY_SIGNATURE INTEL_SCU_IPC INTEL_SOC_PMIC_BXTWC IOMMUFD IPV6_MULTIPLE_TABLES IP_NF_MATCH_AH IP_NF_MATCH_ECN IP_NF_MATCH_RPFILTER IP_NF_MATCH_TTL IP_NF_TARGET_ECN IP_NF_TARGET_REJECT IP_NF_TARGET_SYNPROXY IP_ROUTE_CLASSID IP_SCTP IP_SET IP_SET_BITMAP_IP IP_SET_BITMAP_IPMAC IP_SET_BITMAP_PORT IP_SET_HASH_IP IP_SET_HASH_IPMAC IP_SET_HASH_IPMARK IP_SET_HASH_IPPORT IP_SET_HASH_IPPORTIP IP_SET_HASH_IPPORTNET IP_SET_HASH_MAC IP_SET_HASH_NET IP_SET_HASH_NETIFACE IP_SET_HASH_NETNET IP_SET_HASH_NETPORT IP_SET_HASH_NETPORTNET IP_SET_LIST_SET IP_VS IP_VS_DH IP_VS_FO IP_VS_FTP IP_VS_IPV6 IP_VS_LBLC IP_VS_LBLCR IP_VS_LC IP_VS_MH IP_VS_NFCT IP_VS_NQ IP_VS_OVF IP_VS_PE_SIP IP_VS_PROTO_AH IP_VS_PROTO_AH_ESP IP_VS_PROTO_ESP IP_VS_PROTO_SCTP IP_VS_PROTO_TCP IP_VS_PROTO_UDP IP_VS_RR IP_VS_SED IP_VS_SH IP_VS_TWOS IP_VS_WLC IP_VS_WRR IRQ_BYPASS_MANAGER IRQ_POLL IR_IGORPLUGUSB IR_IGUANA IR_IMON IR_IMON_RAW IR_MCEUSB IR_REDRAT3 IR_STREAMZAP IR_TOY IR_TTUSBIR ISDN ISDN_CAPI JFFS2_CMODE_PRIORITY JFFS2_COMPRESSION_OPTIONS JFFS2_FS JFFS2_FS_POSIX_ACL JFFS2_FS_SECURITY JFFS2_FS_WRITEBUFFER JFFS2_FS_XATTR JFFS2_LZO JFFS2_RTIME JFFS2_RUBIN JFFS2_SUMMARY JFFS2_ZLIB JFS_DEBUG JFS_FS JFS_POSIX_ACL JFS_SECURITY JOYSTICK_IFORCE JOYSTICK_IFORCE_USB JOYSTICK_PXRC JOYSTICK_XPAD JOYSTICK_XPAD_FF JOYSTICK_XPAD_LEDS KARMA_PARTITION KCOV KCOV_ENABLE_COMPARISONS KCOV_INSTRUMENT_ALL KEYS_REQUEST_CACHE KEY_DH_OPERATIONS KEY_NOTIFICATIONS KSM KVM KVM_AMD KVM_ASYNC_PF KVM_COMMON KVM_COMPAT KVM_ELIDE_TLB_FLUSH_IF_YOUNG KVM_GENERIC_DIRTYLOG_READ_PROTECT KVM_GENERIC_HARDWARE_ENABLING KVM_GENERIC_MEMORY_ATTRIBUTES KVM_GENERIC_MMU_NOTIFIER KVM_GENERIC_PRE_FAULT_MEMORY KVM_GUEST_MEMFD KVM_HYPERV KVM_INTEL KVM_IOAPIC KVM_MMIO KVM_MMU_LOCKLESS_AGING KVM_PROVE_MMU KVM_SW_PROTECTED_VM KVM_VFIO KVM_X86 KVM_XEN L2TP L2TP_ETH L2TP_IP L2TP_V3 LAPB LAPBETHER LDM_PARTITION LEDS_CLASS_MULTICOLOR LEGACY_PTYS LIBNVDIMM LINEAR_RANGES LLC LLC2 LOCALVERSION_AUTO LOGIG940_FF LOGIRUMBLEPAD2_FF LOGITECH_FF LOGIWHEELS_FF LOGO LOGO_LINUX_MONO LOGO_LINUX_VGA16 LPC_ICH LWTUNNEL LWTUNNEL_BPF LZ4HC_COMPRESS MAC80211 MAC80211_HAS_RC MAC80211_HWSIM MAC80211_MESH MAC80211_RC_DEFAULT_MINSTREL MAC80211_RC_MINSTREL MACSEC MACVLAN MACVTAP MAC_PARTITION MAPPING_DIRTY_HELPERS MCTP MDIO_BUS MDIO_MVUSB MD_RAID0 MD_RAID1 MD_RAID10 MD_RAID456 MEDIA_ANALOG_TV_SUPPORT MEDIA_ATTACH MEDIA_CAMERA_SUPPORT MEDIA_CEC_SUPPORT MEDIA_COMMON_OPTIONS MEDIA_CONTROLLER MEDIA_CONTROLLER_DVB MEDIA_DIGITAL_TV_SUPPORT MEDIA_PLATFORM_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_SUPPORT_FILTER MEDIA_TEST_SUPPORT MEDIA_TUNER MEDIA_TUNER_MSI001 MEDIA_USB_SUPPORT MEMORY_BALLOON MEMORY_HOTPLUG MEMORY_HOTREMOVE MEMORY_ISOLATION MEMREGION MEMSTICK MEMSTICK_REALTEK_USB MEM_SOFT_DIRTY MFD_CORE MFD_DLN2 MFD_INTEL_PMC_BXT MFD_MT6360 MFD_MT6370 MFD_RETU MFD_SYSCON MFD_VIPERBOARD MHI_BUS MHI_WWAN_CTRL MHP_DEFAULT_ONLINE_TYPE_ONLINE_AUTO MHP_MEMMAP_ON_MEMORY MICROCHIP_PHY MINIX_FS MINIX_SUBPARTITION MISC_RTSX MISC_RTSX_USB MISDN MISDN_DSP MISDN_HFCUSB MISDN_L1OIP MKISS MLX4_CORE MLX4_INFINIBAND MMC MMC_REALTEK_USB MMC_USHC MMC_VUB300 MODULE_SIG_KEY_TYPE_RSA MODULE_SRCVERSION_ALL MOST MOST_USB_HDM MOUSE_APPLETOUCH MOUSE_BCM5974 MOUSE_PS2 MOUSE_PS2_ALPS MOUSE_PS2_BYD MOUSE_PS2_CYPRESS MOUSE_PS2_FOCALTECH MOUSE_PS2_LIFEBOOK MOUSE_PS2_LOGIPS2PP MOUSE_PS2_SMBUS MOUSE_PS2_SYNAPTICS MOUSE_PS2_SYNAPTICS_SMBUS MOUSE_PS2_TRACKPOINT MOUSE_SYNAPTICS_USB MPLS MPLS_IPTUNNEL MPLS_ROUTING MPTCP MPTCP_IPV6 MRP MTD MTD_BLKDEVS MTD_BLOCK MTD_BLOCK2MTD MTD_CFI_I1 MTD_CFI_I2 MTD_MAP_BANK_WIDTH_1 MTD_MAP_BANK_WIDTH_2 MTD_MAP_BANK_WIDTH_4 MTD_MTDRAM MTD_PHRAM MTD_SLRAM MTD_UBI MUSB_PIO_ONLY ND_BTT ND_CLAIM ND_PFN NETDEVSIM NETFILTER_ADVANCED NETFILTER_BPF_LINK NETFILTER_CONNCOUNT NETFILTER_FAMILY_ARP NETFILTER_FAMILY_BRIDGE NETFILTER_NETLINK_ACCT NETFILTER_NETLINK_GLUE_CT NETFILTER_NETLINK_OSF NETFILTER_NETLINK_QUEUE NETFILTER_SYNPROXY NETFILTER_XTABLES_COMPAT NETFILTER_XT_CONNMARK NETFILTER_XT_MATCH_BPF NETFILTER_XT_MATCH_CGROUP NETFILTER_XT_MATCH_CLUSTER NETFILTER_XT_MATCH_COMMENT NETFILTER_XT_MATCH_CONNBYTES NETFILTER_XT_MATCH_CONNLABEL NETFILTER_XT_MATCH_CONNLIMIT NETFILTER_XT_MATCH_CONNMARK NETFILTER_XT_MATCH_CPU NETFILTER_XT_MATCH_DCCP NETFILTER_XT_MATCH_DEVGROUP NETFILTER_XT_MATCH_DSCP NETFILTER_XT_MATCH_ECN NETFILTER_XT_MATCH_ESP NETFILTER_XT_MATCH_HASHLIMIT NETFILTER_XT_MATCH_HELPER NETFILTER_XT_MATCH_HL NETFILTER_XT_MATCH_IPCOMP NETFILTER_XT_MATCH_IPRANGE NETFILTER_XT_MATCH_IPVS NETFILTER_XT_MATCH_L2TP NETFILTER_XT_MATCH_LENGTH NETFILTER_XT_MATCH_LIMIT NETFILTER_XT_MATCH_MAC NETFILTER_XT_MATCH_MARK NETFILTER_XT_MATCH_MULTIPORT NETFILTER_XT_MATCH_NFACCT NETFILTER_XT_MATCH_OSF NETFILTER_XT_MATCH_OWNER NETFILTER_XT_MATCH_PHYSDEV NETFILTER_XT_MATCH_PKTTYPE NETFILTER_XT_MATCH_QUOTA NETFILTER_XT_MATCH_RATEEST NETFILTER_XT_MATCH_REALM NETFILTER_XT_MATCH_RECENT NETFILTER_XT_MATCH_SCTP NETFILTER_XT_MATCH_SOCKET NETFILTER_XT_MATCH_STATISTIC NETFILTER_XT_MATCH_STRING NETFILTER_XT_MATCH_TCPMSS NETFILTER_XT_MATCH_TIME NETFILTER_XT_MATCH_U32 NETFILTER_XT_NAT NETFILTER_XT_SET NETFILTER_XT_TARGET_AUDIT NETFILTER_XT_TARGET_CHECKSUM NETFILTER_XT_TARGET_CLASSIFY NETFILTER_XT_TARGET_CONNMARK NETFILTER_XT_TARGET_DSCP NETFILTER_XT_TARGET_HMARK NETFILTER_XT_TARGET_IDLETIMER NETFILTER_XT_TARGET_LED NETFILTER_XT_TARGET_MARK NETFILTER_XT_TARGET_NFQUEUE NETFILTER_XT_TARGET_RATEEST NETFILTER_XT_TARGET_TCPOPTSTRIP NETFILTER_XT_TARGET_TEE NETFILTER_XT_TARGET_TPROXY NETLINK_DIAG NETROM NET_9P_RDMA NET_ACT_BPF NET_ACT_CONNMARK NET_ACT_CSUM NET_ACT_CT NET_ACT_CTINFO NET_ACT_GATE NET_ACT_IFE NET_ACT_MPLS NET_ACT_NAT NET_ACT_PEDIT NET_ACT_POLICE NET_ACT_SAMPLE NET_ACT_SIMP NET_ACT_SKBEDIT NET_ACT_SKBMOD NET_ACT_TUNNEL_KEY NET_ACT_VLAN NET_CLS_BASIC NET_CLS_BPF NET_CLS_FLOW NET_CLS_FLOWER NET_CLS_FW NET_CLS_MATCHALL NET_CLS_ROUTE4 NET_CRC32C NET_DEVLINK NET_DROP_MONITOR NET_DSA NET_DSA_TAG_BRCM NET_DSA_TAG_BRCM_COMMON NET_DSA_TAG_BRCM_PREPEND NET_DSA_TAG_MTK NET_DSA_TAG_QCA NET_DSA_TAG_RTL4_A NET_EMATCH_CANID NET_EMATCH_CMP NET_EMATCH_IPSET NET_EMATCH_IPT NET_EMATCH_META NET_EMATCH_NBYTE NET_EMATCH_TEXT NET_EMATCH_U32 NET_FC NET_FOU NET_FOU_IP_TUNNELS NET_IFE NET_IFE_SKBMARK NET_IFE_SKBPRIO NET_IFE_SKBTCINDEX NET_IPGRE NET_IPGRE_BROADCAST NET_IPGRE_DEMUX NET_IPIP NET_IPVTI NET_KEY NET_KEY_MIGRATE NET_L3_MASTER_DEV NET_MPLS_GSO NET_NCSI NET_NSH NET_REDIRECT NET_SCH_CAKE NET_SCH_CBS NET_SCH_CHOKE NET_SCH_CODEL NET_SCH_DRR NET_SCH_ETF NET_SCH_ETS NET_SCH_FQ NET_SCH_FQ_CODEL NET_SCH_FQ_PIE NET_SCH_GRED NET_SCH_HFSC NET_SCH_HHF NET_SCH_HTB NET_SCH_INGRESS NET_SCH_MQPRIO NET_SCH_MQPRIO_LIB NET_SCH_MULTIQ NET_SCH_NETEM NET_SCH_PIE NET_SCH_PLUG NET_SCH_PRIO NET_SCH_QFQ NET_SCH_RED NET_SCH_SFB NET_SCH_SFQ NET_SCH_SKBPRIO NET_SCH_TAPRIO NET_SCH_TBF NET_SCH_TEQL NET_SHAPER NET_SOCK_MSG NET_SWITCHDEV NET_TC_SKB_EXT NET_TEAM NET_TEAM_MODE_ACTIVEBACKUP NET_TEAM_MODE_BROADCAST NET_TEAM_MODE_LOADBALANCE NET_TEAM_MODE_RANDOM NET_TEAM_MODE_ROUNDROBIN NET_UDP_TUNNEL NET_VENDOR_ALTEON NET_VRF NFC NFC_DIGITAL NFC_FDP NFC_HCI NFC_MRVL NFC_MRVL_USB NFC_NCI NFC_NCI_UART NFC_PN533 NFC_PN533_USB NFC_PORT100 NFC_SHDLC NFC_SIM NFC_VIRTUAL_NCI NFSD NFSD_BLOCKLAYOUT NFSD_FLEXFILELAYOUT NFSD_PNFS NFSD_SCSILAYOUT NFSD_V3_ACL NFSD_V4 NFSD_V4_2_INTER_SSC NFSD_V4_SECURITY_LABEL NFS_FSCACHE NFS_V4_1 NFS_V4_2 NFS_V4_2_READ_PLUS NFS_V4_2_SSC_HELPER NFS_V4_SECURITY_LABEL NFT_BRIDGE_META NFT_BRIDGE_REJECT NFT_COMPAT NFT_CONNLIMIT NFT_CT NFT_DUP_IPV4 NFT_DUP_IPV6 NFT_DUP_NETDEV NFT_EXTHDR_DCCP NFT_FIB NFT_FIB_INET NFT_FIB_IPV4 NFT_FIB_IPV6 NFT_FIB_NETDEV NFT_FLOW_OFFLOAD NFT_HASH NFT_LIMIT NFT_LOG NFT_MASQ NFT_NAT NFT_NUMGEN NFT_OSF NFT_QUEUE NFT_QUOTA NFT_REDIR NFT_REJECT NFT_REJECT_INET NFT_REJECT_IPV4 NFT_REJECT_IPV6 NFT_REJECT_NETDEV NFT_SOCKET NFT_SYNPROXY NFT_TPROXY NFT_TUNNEL NFT_XFRM NF_CONNTRACK_AMANDA NF_CONNTRACK_BRIDGE NF_CONNTRACK_BROADCAST NF_CONNTRACK_EVENTS NF_CONNTRACK_H323 NF_CONNTRACK_LABELS NF_CONNTRACK_MARK NF_CONNTRACK_NETBIOS_NS NF_CONNTRACK_OVS NF_CONNTRACK_PPTP NF_CONNTRACK_SANE NF_CONNTRACK_SNMP NF_CONNTRACK_TFTP NF_CONNTRACK_TIMEOUT NF_CONNTRACK_TIMESTAMP NF_CONNTRACK_ZONES NF_CT_NETLINK_HELPER NF_CT_NETLINK_TIMEOUT NF_CT_PROTO_GRE NF_CT_PROTO_SCTP NF_CT_PROTO_UDPLITE NF_DUP_IPV4 NF_DUP_IPV6 NF_DUP_NETDEV NF_FLOW_TABLE NF_FLOW_TABLE_INET NF_NAT_AMANDA NF_NAT_H323 NF_NAT_OVS NF_NAT_PPTP NF_NAT_REDIRECT NF_NAT_SNMP_BASIC NF_NAT_TFTP NF_SOCKET_IPV4 NF_SOCKET_IPV6 NF_TABLES NF_TABLES_BRIDGE NF_TABLES_INET NF_TABLES_IPV4 NF_TABLES_IPV6 NF_TABLES_NETDEV NF_TPROXY_IPV4 NF_TPROXY_IPV6 NILFS2_FS NINTENDO_FF NLMON NLS_CODEPAGE_1250 NLS_CODEPAGE_1251 NLS_CODEPAGE_737 NLS_CODEPAGE_775 NLS_CODEPAGE_850 NLS_CODEPAGE_852 NLS_CODEPAGE_855 NLS_CODEPAGE_857 NLS_CODEPAGE_860 NLS_CODEPAGE_861 NLS_CODEPAGE_862 NLS_CODEPAGE_863 NLS_CODEPAGE_864 NLS_CODEPAGE_865 NLS_CODEPAGE_866 NLS_CODEPAGE_869 NLS_CODEPAGE_874 NLS_CODEPAGE_932 NLS_CODEPAGE_936 NLS_CODEPAGE_949 NLS_CODEPAGE_950 NLS_ISO8859_13 NLS_ISO8859_14 NLS_ISO8859_15 NLS_ISO8859_2 NLS_ISO8859_3 NLS_ISO8859_4 NLS_ISO8859_5 NLS_ISO8859_6 NLS_ISO8859_7 NLS_ISO8859_8 NLS_ISO8859_9 NLS_KOI8_R NLS_KOI8_U NLS_MAC_CELTIC NLS_MAC_CENTEURO NLS_MAC_CROATIAN NLS_MAC_CYRILLIC NLS_MAC_GAELIC NLS_MAC_GREEK NLS_MAC_ICELAND NLS_MAC_INUIT NLS_MAC_ROMAN NLS_MAC_ROMANIAN NLS_MAC_TURKISH NLS_UCS2_UTILS NOP_USB_XCEIV NOZOMI NTFS3_FS NTFS3_FS_POSIX_ACL NTFS3_LZX_XPRESS NULL_TTY NUMA_EMU NUMA_KEEP_MEMINFO NVDIMM_DAX NVDIMM_KEYS NVDIMM_PFN NVIDIA_SHIELD_FF NVME_CORE NVME_FABRICS NVME_FC NVME_MULTIPATH NVME_RDMA NVME_TARGET NVME_TARGET_FC NVME_TARGET_FCLOOP NVME_TARGET_LOOP NVME_TARGET_RDMA NVME_TARGET_TCP NVME_TCP N_GSM N_HDLC OCFS2_DEBUG_FS OCFS2_FS OCFS2_FS_O2CB OCFS2_FS_STATS OCFS2_FS_USERSPACE_CLUSTER OF_GPIO OF_PMEM OMFS_FS OPENVSWITCH OPENVSWITCH_GENEVE OPENVSWITCH_GRE OPENVSWITCH_VXLAN OPTEE_STATIC_PROTMEM_POOL ORANGEFS_FS OSF_PARTITION OVERLAY_FS OVERLAY_FS_DEBUG OVERLAY_FS_INDEX OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW OVERLAY_FS_REDIRECT_DIR PACKET_DIAG PAGE_IDLE_FLAG PAGE_REPORTING PAHOLE_HAS_BTF_TAG PAHOLE_HAS_LANG_EXCLUDE PAHOLE_HAS_SPLIT_BTF PARPORT PARPORT_NOT_PC PARTITION_ADVANCED PCCARD PCCARD_NONSTATIC PCIEAER PCIE_BUS_DEFAULT PCI_ENDPOINT PCI_IOV PCMCIA PCMCIA_LOAD_CIS PERCPU_STATS PERSISTENT_KEYRINGS PHONET PHYLINK PHY_CPCAP_USB PHY_QCOM_USB_HS PHY_QCOM_USB_HSIC PHY_SAMSUNG_USB2 PHY_TUSB1210 PKCS7_TEST_KEY PKCS8_PRIVATE_KEY_PARSER PLAYSTATION_FF PLFXLC PMIC_OPREGION PM_CLK POSIX_AUX_CLOCKS PPP PPPOATM PPPOE PPPOE_HASH_BITS_1 PPPOL2TP PPP_ASYNC PPP_BSDCOMP PPP_DEFLATE PPP_FILTER PPP_MPPE PPP_MULTILINK PPP_SYNC_TTY PPTP PREEMPT PREEMPT_NOTIFIERS PREEMPT_RT PREFIX_SYMBOLS PROC_CHILDREN PROC_MEM_ALWAYS_FORCE PROC_SYSCTL PSAMPLE PSI PSTORE PSTORE_COMPRESS QCOM_QMI_HELPERS QNX4FS_FS QNX6FS_FS QRTR QRTR_TUN RADIO_ADAPTERS RADIO_SHARK RADIO_SHARK2 RADIO_SI470X RADIO_SI4713 RADIO_TEA575X RAID6_PQ RAID_ATTRS RC_ATI_REMOTE RC_CORE RC_DEVICES RC_XBOX_DVD RDMA_RXE RDMA_SIW RDS RDS_RDMA RDS_TCP REALTEK_AUTOPM REED_SOLOMON REED_SOLOMON_DEC8 REGMAP REGMAP_I2C REGMAP_IRQ REGMAP_MMIO REGMAP_SPI REGULATOR REGULATOR_FIXED_VOLTAGE REGULATOR_TWL4030 RESET_CONTROLLER RFKILL RFKILL_INPUT RFKILL_LEDS RMI4_2D_SENSOR RMI4_CORE RMI4_F03 RMI4_F03_SERIO RMI4_F11 RMI4_F12 RMI4_F30 RMI4_F3A ROMFS_BACKED_BY_BOTH ROMFS_FS ROMFS_ON_BLOCK ROMFS_ON_MTD ROSE RTC_DRV_HID_SENSOR_TIME RUSTC_HAS_COERCE_POINTEE RUSTC_HAS_SLICE_AS_FLATTENED RXKAD SCHED_CORE SCSI_FC_ATTRS SCSI_HPSA SCSI_ISCSI_ATTRS SCSI_LOGGING SCSI_NETLINK SCSI_SAS_ATA SCSI_SAS_ATTRS SCSI_SAS_LIBSAS SCSI_SCAN_ASYNC SCSI_SRP_ATTRS SCTP_DEFAULT_COOKIE_HMAC_SHA256 SECONDARY_TRUSTED_KEYRING SECURITY_INFINIBAND SECURITY_NETWORK_XFRM SECURITY_SMACK_NETFILTER SENSORS_AQUACOMPUTER_D5NEXT SENSORS_CORSAIR_CPRO SENSORS_CORSAIR_PSU SENSORS_GIGABYTE_WATERFORCE SENSORS_NZXT_KRAKEN2 SENSORS_NZXT_SMART2 SENSORS_POWERZ SERIAL_DEV_BUS SERIAL_DEV_CTRL_TTYPORT SERIAL_MCTRL_GPIO SGI_PARTITION SIGNATURE SIGNED_PE_FILE_VERIFICATION SKB_DECRYPTED SLHC SLIP SLIP_COMPRESSED SLIP_MODE_SLIP6 SLIP_SMART SLUB_CPU_PARTIAL SMARTJOYPLUS_FF SMBFS SMB_SERVER SMC SMC_DIAG SMSC_PHY SMS_SDIO_DRV SMS_SIANO_DEBUGFS SMS_SIANO_MDTV SMS_SIANO_RC SMS_USB_DRV SND SND_ALOOP SND_BCD2000 SND_CTL_FAST_LOOKUP SND_CTL_LED SND_DEBUG SND_DMA_SGBUF SND_DRIVERS SND_DUMMY SND_HDA SND_HDA_CODEC_ANALOG SND_HDA_CODEC_CA0110 SND_HDA_CODEC_CA0132 SND_HDA_CODEC_CIRRUS SND_HDA_CODEC_CMEDIA SND_HDA_CODEC_CONEXANT SND_HDA_CODEC_HDMI SND_HDA_CODEC_REALTEK SND_HDA_CODEC_SI3054 SND_HDA_CODEC_SIGMATEL SND_HDA_CODEC_VIA SND_HDA_CORE SND_HDA_GENERIC SND_HDA_GENERIC_LEDS SND_HDA_HWDEP SND_HDA_INPUT_BEEP SND_HDA_INTEL SND_HDA_PATCH_LOADER SND_HDA_RECONFIG SND_HRTIMER SND_HWDEP SND_INTEL_DSP_CONFIG SND_INTEL_NHLT SND_INTEL_SOUNDWIRE_ACPI SND_JACK SND_JACK_INPUT_DEV SND_MIXER_OSS SND_OSSEMUL SND_PCI SND_PCM SND_PCMCIA SND_PCM_OSS SND_PCM_OSS_PLUGINS SND_PCM_TIMER SND_PCM_XRUN_DEBUG SND_PROC_FS SND_RAWMIDI SND_SEQUENCER SND_SEQUENCER_OSS SND_SEQ_DEVICE SND_SEQ_DUMMY SND_SEQ_HRTIMER_DEFAULT SND_SEQ_MIDI SND_SEQ_MIDI_EVENT SND_SEQ_VIRMIDI SND_SOC SND_SOC_I2C_AND_SPI SND_SOC_SDCA_OPTIONAL SND_TIMER SND_UMP SND_UMP_LEGACY_RAWMIDI SND_USB SND_USB_6FIRE SND_USB_AUDIO SND_USB_AUDIO_MIDI_V2 SND_USB_AUDIO_USE_MEDIA_CONTROLLER SND_USB_CAIAQ SND_USB_CAIAQ_INPUT SND_USB_HIFACE SND_USB_LINE6 SND_USB_POD SND_USB_PODHD SND_USB_TONEPORT SND_USB_UA101 SND_USB_US122L SND_USB_USX2Y SND_USB_VARIAX SND_VERBOSE_PROCFS SND_VIRMIDI SND_VIRTIO SND_VMASTER SND_X86 SOCK_VALIDATE_XMIT SOLARIS_X86_PARTITION SONY_FF SOUND SOUNDWIRE SOUND_OSS_CORE SOUND_OSS_CORE_PRECLAIM SPI SPI_DLN2 SPI_DYNAMIC SPI_LJCA SPI_MASTER SQUASHFS SQUASHFS_4K_DEVBLK_SIZE SQUASHFS_COMPILE_DECOMP_MULTI SQUASHFS_DECOMP_MULTI SQUASHFS_FILE_DIRECT SQUASHFS_LZ4 SQUASHFS_LZO SQUASHFS_XATTR SQUASHFS_XZ SQUASHFS_ZLIB SQUASHFS_ZSTD SSB SSB_PCIHOST_POSSIBLE SSB_PCMCIAHOST_POSSIBLE SSB_SDIOHOST_POSSIBLE STEAM_FF STP STREAM_PARSER SUN_PARTITION SURFACE_AGGREGATOR SURFACE_AGGREGATOR_BUS SURFACE_AGGREGATOR_REGISTRY SURFACE_HID SURFACE_HID_CORE SURFACE_KBD SW_SYNC SYSFB SYSFS_SYSCALL SYSV68_PARTITION TABLET_USB_ACECAD TABLET_USB_AIPTEK TABLET_USB_HANWANG TABLET_USB_KBTAB TABLET_USB_PEGASUS TAHVO_USB TAHVO_USB_HOST_BY_DEFAULT TAP TARGET_CORE TCG_CRB TCG_TIS TCG_TIS_CORE TCG_TPM TCP_CONG_BBR TCP_CONG_BIC TCP_CONG_CDG TCP_CONG_DCTCP TCP_CONG_HSTCP TCP_CONG_HTCP TCP_CONG_HYBLA TCP_CONG_ILLINOIS TCP_CONG_LP TCP_CONG_NV TCP_CONG_SCALABLE TCP_CONG_VEGAS TCP_CONG_VENO TCP_CONG_WESTWOOD TCP_CONG_YEAH TEE TEE_DMABUF_HEAPS TEXTSEARCH TEXTSEARCH_BM TEXTSEARCH_FSM TEXTSEARCH_KMP THRUSTMASTER_FF TIPC TIPC_CRYPTO TIPC_DIAG TIPC_MEDIA_IB TIPC_MEDIA_UDP TLS TLS_TOE TMPFS_QUOTA TOOLS_SUPPORT_RELR TOUCHSCREEN_SUR40 TOUCHSCREEN_USB_3M TOUCHSCREEN_USB_COMPOSITE TOUCHSCREEN_USB_DMC_TSC10 TOUCHSCREEN_USB_E2I TOUCHSCREEN_USB_EASYTOUCH TOUCHSCREEN_USB_EGALAX TOUCHSCREEN_USB_ELO TOUCHSCREEN_USB_ETT_TC45USB TOUCHSCREEN_USB_ETURBO TOUCHSCREEN_USB_GENERAL_TOUCH TOUCHSCREEN_USB_GOTOP TOUCHSCREEN_USB_GUNZE TOUCHSCREEN_USB_IDEALTEK TOUCHSCREEN_USB_IRTOUCH TOUCHSCREEN_USB_ITM TOUCHSCREEN_USB_JASTEC TOUCHSCREEN_USB_NEXIO TOUCHSCREEN_USB_PANJIT TOUCHSCREEN_USB_ZYTRONIC TTPCI_EEPROM TTY_PRINTK TUN TUN_VNET_CROSS_LE TWL4030_CORE TYPEC TYPEC_ANX7411 TYPEC_DP_ALTMODE TYPEC_FUSB302 TYPEC_HD3SS3220 TYPEC_MT6360 TYPEC_MUX_FSA4480 TYPEC_MUX_GPIO_SBU TYPEC_MUX_INTEL_PMC TYPEC_MUX_NB7VPQ904M TYPEC_MUX_PTN36502 TYPEC_MUX_WCD939X_USBSS TYPEC_NVIDIA_ALTMODE TYPEC_RT1711H TYPEC_RT1719 TYPEC_STUSB160X TYPEC_TCPCI TYPEC_TCPCI_MAXIM TYPEC_TCPCI_MT6370 TYPEC_TCPM TYPEC_TPS6598X TYPEC_UCSI TYPEC_WCOVE TYPEC_WUSB3801 UBIFS_ATIME_SUPPORT UBIFS_FS UBIFS_FS_ADVANCED_COMPR UBIFS_FS_LZO UBIFS_FS_SECURITY UBIFS_FS_XATTR UBIFS_FS_ZLIB UBIFS_FS_ZSTD UCSI_ACPI UCSI_CCG UCSI_STM32G0 UDF_FS UDMABUF UFS_FS UFS_FS_WRITE UHID ULTRIX_PARTITION UNICODE UNIXWARE_DISKLABEL UNIX_DIAG USB4 USB4_NET USBIP_CORE USBIP_HOST USBIP_VHCI_HCD USBIP_VUDC USBPCWATCHDOG USB_ACM USB_ADUTUX USB_AIRSPY USB_ALI_M5632 USB_AMD5536UDC USB_AN2720 USB_APPLEDISPLAY USB_ARMLINUX USB_ATM USB_BDC_UDC USB_BELKIN USB_C67X00_HCD USB_CATC USB_CDC_PHONET USB_CDNS2_UDC USB_CDNS3 USB_CDNS3_GADGET USB_CDNS3_HOST USB_CDNS3_PCI_WRAP USB_CDNSP_GADGET USB_CDNSP_HOST USB_CDNSP_PCI USB_CDNS_HOST USB_CDNS_SUPPORT USB_CHAOSKEY USB_CHIPIDEA USB_CHIPIDEA_GENERIC USB_CHIPIDEA_HOST USB_CHIPIDEA_MSM USB_CHIPIDEA_NPCM USB_CHIPIDEA_PCI USB_CHIPIDEA_UDC USB_CONFIGFS USB_CONFIGFS_ACM USB_CONFIGFS_ECM USB_CONFIGFS_ECM_SUBSET USB_CONFIGFS_EEM USB_CONFIGFS_F_FS USB_CONFIGFS_F_HID USB_CONFIGFS_F_LB_SS USB_CONFIGFS_F_MIDI USB_CONFIGFS_F_MIDI2 USB_CONFIGFS_F_PRINTER USB_CONFIGFS_F_TCM USB_CONFIGFS_F_UAC1 USB_CONFIGFS_F_UAC1_LEGACY USB_CONFIGFS_F_UAC2 USB_CONFIGFS_F_UVC USB_CONFIGFS_MASS_STORAGE USB_CONFIGFS_NCM USB_CONFIGFS_OBEX USB_CONFIGFS_PHONET USB_CONFIGFS_RNDIS USB_CONFIGFS_SERIAL USB_CONN_GPIO USB_CXACRU USB_CYPRESS_CY7C63 USB_CYTHERM USB_DSBR USB_DUMMY_HCD USB_DWC2 USB_DWC2_HOST USB_DWC2_PCI USB_DWC3 USB_DWC3_GADGET USB_DWC3_GENERIC_PLAT USB_DWC3_HAPS USB_DWC3_OF_SIMPLE USB_DWC3_PCI USB_DWC3_ULPI USB_DYNAMIC_MINORS USB_EG20T USB_EHCI_FSL USB_EHCI_HCD_PLATFORM USB_EHCI_ROOT_HUB_TT USB_EHSET_TEST_FIXTURE USB_EMI26 USB_EMI62 USB_EPSON2888 USB_EZUSB_FX2 USB_FEW_INIT_RETRIES USB_F_ACM USB_F_ECM USB_F_EEM USB_F_FS USB_F_HID USB_F_MASS_STORAGE USB_F_MIDI USB_F_MIDI2 USB_F_NCM USB_F_OBEX USB_F_PHONET USB_F_PRINTER USB_F_RNDIS USB_F_SERIAL USB_F_SS_LB USB_F_SUBSET USB_F_TCM USB_F_UAC1 USB_F_UAC1_LEGACY USB_F_UAC2 USB_F_UVC USB_GADGET USB_GADGETFS USB_GADGET_DEBUG_FILES USB_GADGET_DEBUG_FS USB_GL860 USB_GOKU USB_GR_UDC USB_GSPCA USB_GSPCA_BENQ USB_GSPCA_CONEX USB_GSPCA_CPIA1 USB_GSPCA_DTCS033 USB_GSPCA_ETOMS USB_GSPCA_FINEPIX USB_GSPCA_JEILINJ USB_GSPCA_JL2005BCD USB_GSPCA_KINECT USB_GSPCA_KONICA USB_GSPCA_MARS USB_GSPCA_MR97310A USB_GSPCA_NW80X USB_GSPCA_OV519 USB_GSPCA_OV534 USB_GSPCA_OV534_9 USB_GSPCA_PAC207 USB_GSPCA_PAC7302 USB_GSPCA_PAC7311 USB_GSPCA_SE401 USB_GSPCA_SN9C2028 USB_GSPCA_SN9C20X USB_GSPCA_SONIXB USB_GSPCA_SONIXJ USB_GSPCA_SPCA1528 USB_GSPCA_SPCA500 USB_GSPCA_SPCA501 USB_GSPCA_SPCA505 USB_GSPCA_SPCA506 USB_GSPCA_SPCA508 USB_GSPCA_SPCA561 USB_GSPCA_SQ905 USB_GSPCA_SQ905C USB_GSPCA_SQ930X USB_GSPCA_STK014 USB_GSPCA_STK1135 USB_GSPCA_STV0680 USB_GSPCA_SUNPLUS USB_GSPCA_T613 USB_GSPCA_TOPRO USB_GSPCA_TOUPTEK USB_GSPCA_TV8532 USB_GSPCA_VC032X USB_GSPCA_VICAM USB_GSPCA_XIRLINK_CIT USB_GSPCA_ZC3XX USB_HACKRF USB_HCD_BCMA USB_HCD_SSB USB_HSIC_USB3503 USB_HSIC_USB4604 USB_HSO USB_HUB_USB251XB USB_IDMOUSE USB_IOWARRIOR USB_IPHETH USB_ISIGHTFW USB_ISP116X_HCD USB_ISP1301 USB_ISP1760 USB_ISP1760_DUAL_ROLE USB_ISP1760_HCD USB_ISP1761_UDC USB_KAWETH USB_KC2190 USB_KEENE USB_LAN78XX USB_LCD USB_LD USB_LEDS_TRIGGER_USBPORT USB_LED_TRIG USB_LEGOTOWER USB_LGM_PHY USB_LIBCOMPOSITE USB_LINK_LAYER_TEST USB_LJCA USB_M5602 USB_MA901 USB_MAX3420_UDC USB_MAX3421_HCD USB_MDC800 USB_MICROTEK USB_MR800 USB_MSI2500 USB_MUSB_DUAL_ROLE USB_MUSB_HDRC USB_NET2280 USB_NET_AQC111 USB_NET_AX88179_178A USB_NET_AX8817X USB_NET_CDCETHER USB_NET_CDC_EEM USB_NET_CDC_MBIM USB_NET_CDC_NCM USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_CH9200 USB_NET_CX82310_ETH USB_NET_DM9601 USB_NET_GL620A USB_NET_HUAWEI_CDC_NCM USB_NET_INT51X1 USB_NET_KALMIA USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_QMI_WWAN USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_OXU210HP_HCD USB_PEGASUS USB_PULSE8_CEC USB_PWC USB_PWC_INPUT_EVDEV USB_PXA27X USB_R8A66597 USB_R8A66597_HCD USB_RAINSHADOW_CEC USB_RAREMONO USB_RAW_GADGET USB_ROLE_SWITCH USB_RTL8150 USB_RTL8152 USB_RTL8153_ECM USB_S2255 USB_SERIAL USB_SERIAL_AIRCABLE USB_SERIAL_ARK3116 USB_SERIAL_BELKIN USB_SERIAL_CH341 USB_SERIAL_CONSOLE USB_SERIAL_CP210X USB_SERIAL_CYBERJACK USB_SERIAL_CYPRESS_M8 USB_SERIAL_DEBUG USB_SERIAL_DIGI_ACCELEPORT USB_SERIAL_EDGEPORT USB_SERIAL_EDGEPORT_TI USB_SERIAL_EMPEG USB_SERIAL_F81232 USB_SERIAL_F8153X USB_SERIAL_FTDI_SIO USB_SERIAL_GARMIN USB_SERIAL_GENERIC USB_SERIAL_IPAQ USB_SERIAL_IPW USB_SERIAL_IR USB_SERIAL_IUU USB_SERIAL_KEYSPAN USB_SERIAL_KEYSPAN_PDA USB_SERIAL_KLSI USB_SERIAL_KOBIL_SCT USB_SERIAL_MCT_U232 USB_SERIAL_METRO USB_SERIAL_MOS7715_PARPORT USB_SERIAL_MOS7720 USB_SERIAL_MOS7840 USB_SERIAL_MXUPORT USB_SERIAL_NAVMAN USB_SERIAL_OMNINET USB_SERIAL_OPTICON USB_SERIAL_OPTION USB_SERIAL_OTI6858 USB_SERIAL_PL2303 USB_SERIAL_QCAUX USB_SERIAL_QT2 USB_SERIAL_QUALCOMM USB_SERIAL_SAFE USB_SERIAL_SIERRAWIRELESS USB_SERIAL_SIMPLE USB_SERIAL_SPCP8X5 USB_SERIAL_SSU100 USB_SERIAL_SYMBOL USB_SERIAL_TI USB_SERIAL_UPD78F0730 USB_SERIAL_VISOR USB_SERIAL_WHITEHEAT USB_SERIAL_WISHBONE USB_SERIAL_WWAN USB_SERIAL_XR USB_SERIAL_XSENS_MT USB_SEVSEG USB_SI470X USB_SI4713 USB_SIERRA_NET USB_SISUSBVGA USB_SL811_CS USB_SL811_HCD USB_SL811_HCD_ISO USB_SNP_CORE USB_SPEEDTOUCH USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_ENE_UB6250 USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_REALTEK USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_STV06XX USB_TEST USB_TMC USB_TRANCEVIBRATOR USB_UAS USB_UEAGLEATM USB_ULPI_BUS USB_USBNET USB_USS720 USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_VIDEO_CLASS USB_VIDEO_CLASS_INPUT_EVDEV USB_VL600 USB_WDM USB_XHCI_DBGCAP USB_XHCI_PCI_RENESAS USB_XHCI_PLATFORM USB_XUSBATM USB_YUREX USERFAULTFD USERIO USER_RETURN_NOTIFIER UVC_COMMON U_SERIAL_CONSOLE V4L2_MEM2MEM_DEV V4L_TEST_DRIVERS VALIDATE_FS_PARSER VDPA VDPA_SIM VDPA_SIM_BLOCK VDPA_SIM_NET VETH VFIO VFIO_DEVICE_CDEV VFIO_PCI VFIO_PCI_CORE VFIO_PCI_INTX VFIO_VIRQFD VGASTATE VHOST VHOST_CROSS_ENDIAN_LEGACY VHOST_IOTLB VHOST_NET VHOST_RING VHOST_TASK VHOST_VDPA VHOST_VSOCK VIDEO VIDEOBUF2_CORE VIDEOBUF2_DMA_CONTIG VIDEOBUF2_DMA_SG VIDEOBUF2_MEMOPS VIDEOBUF2_V4L2 VIDEOBUF2_VMALLOC VIDEOMODE_HELPERS VIDEO_AU0828 VIDEO_AU0828_RC VIDEO_AU0828_V4L2 VIDEO_CS53L32A VIDEO_CX231XX VIDEO_CX231XX_ALSA VIDEO_CX231XX_DVB VIDEO_CX231XX_RC VIDEO_CX2341X VIDEO_CX25840 VIDEO_DEV VIDEO_EM28XX VIDEO_EM28XX_ALSA VIDEO_EM28XX_DVB VIDEO_EM28XX_RC VIDEO_EM28XX_V4L2 VIDEO_GO7007 VIDEO_GO7007_LOADER VIDEO_GO7007_USB VIDEO_GO7007_USB_S2250_BOARD VIDEO_HDPVR VIDEO_MSP3400 VIDEO_PVRUSB2 VIDEO_PVRUSB2_DVB VIDEO_PVRUSB2_SYSFS VIDEO_SAA711X VIDEO_STK1160 VIDEO_TUNER VIDEO_TVEEPROM VIDEO_USBTV VIDEO_V4L2_I2C VIDEO_V4L2_SUBDEV_API VIDEO_V4L2_TPG VIDEO_VICODEC VIDEO_VIM2M VIDEO_VIMC VIDEO_VIVID VIDEO_VIVID_CEC VIDEO_WM8775 VIPERBOARD_ADC VIRTIO_BALLOON VIRTIO_DMA_SHARED_BUFFER VIRTIO_MEM VIRTIO_MMIO VIRTIO_MMIO_CMDLINE_DEVICES VIRTIO_PMEM VIRTIO_VDPA VIRTIO_VSOCKETS VIRTIO_VSOCKETS_COMMON VIRT_WIFI VIRT_XFER_TO_GUEST_WORK VLAN_8021Q VLAN_8021Q_GVRP VLAN_8021Q_MVRP VMWARE_VMCI VMXNET3 VP_VDPA VSOCKETS VSOCKETS_DIAG VSOCKETS_LOOPBACK VSOCKMON VT_HW_CONSOLE_BINDING VXFS_FS VXLAN WAN WANT_DEV_COREDUMP WATCH_QUEUE WEXT_CORE WEXT_PROC WIREGUARD WIRELESS WLAN WLAN_VENDOR_ADMTEK WLAN_VENDOR_PURELIFI WLAN_VENDOR_SILABS WWAN X25 X86_FRED X86_SGX X86_SGX_KVM X86_USER_SHADOW_STACK XDP_SOCKETS XDP_SOCKETS_DIAG XFRM_ESPINTCP XFRM_INTERFACE XFRM_IPCOMP XFRM_MIGRATE XFRM_OFFLOAD XFRM_STATISTICS XFRM_SUB_POLICY XFRM_USER_COMPAT XFS_FS XFS_POSIX_ACL XFS_QUOTA XFS_RT XILLYBUS_CLASS XILLYUSB XOR_BLOCKS YENTA YENTA_ENE_TUNE YENTA_O2 YENTA_RICOH YENTA_TI YENTA_TOSHIBA ZEROPLUS_FF ZLIB_DEFLATE ZONEFS_FS ZONE_DEVICE ZRAM ZRAM_BACKEND_FORCE_LZO ZRAM_BACKEND_LZO ZRAM_DEF_COMP_LZO ZSMALLOC ZSTD_COMPRESS ZSWAP ZSWAP_COMPRESSOR_DEFAULT_842 ZSWAP_DEFAULT_ON ZSWAP_SHRINKER_DEFAULT_ON] testing current HEAD db2ddb87143519e20a95aa36c60b36107b736a58 testing commit db2ddb87143519e20a95aa36c60b36107b736a58 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 7f706c332c47e86d9679d40daa651621c4768e032b1f845cfecb5600dafe6d09 all runs: OK false negative chance: 0.012 # git bisect start db2ddb87143519e20a95aa36c60b36107b736a58 6bd9ed02871f22beb0e50690b0c3caf457104f7c Bisecting: 25255 revisions left to test after this (roughly 15 steps) [e65f4718a577fcc84d40431f022985898b6dbf2e] Merge tag 'soc-dt-7.1' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc determine whether the revision contains the guilty commit revision 6bd9ed02871f22beb0e50690b0c3caf457104f7c crashed and is reachable testing commit e65f4718a577fcc84d40431f022985898b6dbf2e gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: e6ce302f5c2f49ea7b4eda16902908a7ad2d838eac03a9af53a1cd66a3d3107e all runs: OK false negative chance: 0.012 # git bisect bad e65f4718a577fcc84d40431f022985898b6dbf2e Bisecting: 12730 revisions left to test after this (roughly 14 steps) [5e061aac4c0c9d26dffb81aec6c8d70bed048f2d] Merge tag 'drm-misc-fixes-2026-02-26' of https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes determine whether the revision contains the guilty commit revision 6bd9ed02871f22beb0e50690b0c3caf457104f7c crashed and is reachable testing commit 5e061aac4c0c9d26dffb81aec6c8d70bed048f2d gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: ff25cbfaf4cd8cb3ab17231ac686dd2c8586ffcb8755567e728636c9660130a6 run #0: crashed: KASAN: slab-use-after-free Read in blk_update_request run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: crashed: KASAN: slab-use-after-free Read in blk_update_request run #18: OK run #19: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked representative crash: KASAN: slab-use-after-free Read in blk_update_request, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good 5e061aac4c0c9d26dffb81aec6c8d70bed048f2d Bisecting: 7131 revisions left to test after this (roughly 13 steps) [f5ad4101009e7f5f5984ffea6923d4fcd470932a] Merge tag 'bpf-next-7.1' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next determine whether the revision contains the guilty commit revision 6bd9ed02871f22beb0e50690b0c3caf457104f7c crashed and is reachable testing commit f5ad4101009e7f5f5984ffea6923d4fcd470932a gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 24930ce6c257a8a89719584163d97cb6fde5574afcc97d651996fa7170136902 run #0: basic kernel testing failed: failed to copy syz-executor to VM: failed to run ["ssh" "-p" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "root@10.128.10.27" "mkdir" "-p" "ci2-upstream-fs-bisect-job"]: exit status 255 run #1: crashed: KASAN: slab-use-after-free Read in blk_update_request run #2: crashed: KASAN: slab-use-after-free Read in blk_update_request run #3: crashed: no output from test machine run #4: crashed: no output from test machine run #5: crashed: no output from test machine run #6: OK run #7: OK run #8: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #9: OK run #10: OK run #11: crashed: no output from test machine run #12: crashed: no output from test machine run #13: OK run #14: OK run #15: crashed: no output from test machine run #16: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #17: OK run #18: crashed: no output from test machine run #19: OK representative crash: no output from test machine, types: [UNKNOWN KASAN-USE-AFTER-FREE-READ] # git bisect good f5ad4101009e7f5f5984ffea6923d4fcd470932a Bisecting: 3293 revisions left to test after this (roughly 12 steps) [4a57e0913e8c7fff407e97909f4ae48caa84d612] Merge tag 'drm-next-2026-04-15' of https://gitlab.freedesktop.org/drm/kernel determine whether the revision contains the guilty commit revision 6bd9ed02871f22beb0e50690b0c3caf457104f7c crashed and is reachable testing commit 4a57e0913e8c7fff407e97909f4ae48caa84d612 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 8c953e6bb3e4a308046a5c60459957b32ade11cf9f199e945bab9847e0069ebb run #0: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #1: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #2: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #3: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #4: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #18: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #19: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked representative crash: KASAN: slab-use-after-free Read in rtlock_slowlock_locked, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good 4a57e0913e8c7fff407e97909f4ae48caa84d612 Bisecting: 1655 revisions left to test after this (roughly 11 steps) [5a69195686d5b874ac5a4c7f809ecb75fbc535ef] Merge tag 'ata-7.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/libata/linux determine whether the revision contains the guilty commit revision 6bd9ed02871f22beb0e50690b0c3caf457104f7c crashed and is reachable testing commit 5a69195686d5b874ac5a4c7f809ecb75fbc535ef gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 82a1f5f477071d012efc658ace84f5114a37b06ab4cd42895843e4c73be2c551 run #0: crashed: KASAN: slab-use-after-free Read in blk_update_request run #1: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #2: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #3: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #4: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #5: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #17: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #18: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #19: OK representative crash: KASAN: slab-use-after-free Read in blk_update_request, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good 5a69195686d5b874ac5a4c7f809ecb75fbc535ef Bisecting: 818 revisions left to test after this (roughly 10 steps) [17ed8fd2fa714bb06c53c5bd88a3948d23fba8f2] Merge tag 'imx-dt-7.1' of https://git.kernel.org/pub/scm/linux/kernel/git/frank.li/linux into soc/dt determine whether the revision contains the guilty commit revision 6bd9ed02871f22beb0e50690b0c3caf457104f7c crashed and is reachable testing commit 17ed8fd2fa714bb06c53c5bd88a3948d23fba8f2 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 3e93587d7a03fe1a42f1eb555693c8b79f50d6220d99cc2a88d4ca9834bc582d run #0: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #1: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: KASAN: slab-use-after-free Read in rtlock_slowlock_locked, types: [KASAN-USE-AFTER-FREE-READ] unable to determine the verdict: 18 good runs (wanted 15), for bad wanted 10 in total, got 20 # git bisect skip 17ed8fd2fa714bb06c53c5bd88a3948d23fba8f2 Bisecting: 818 revisions left to test after this (roughly 10 steps) [a69ba865a7c12bdbec6f4d9c346da31d5f577d4b] arm64: dts: imx91-var-dart: Add support for Variscite Sonata board determine whether the revision contains the guilty commit revision 6bd9ed02871f22beb0e50690b0c3caf457104f7c crashed and is reachable testing commit a69ba865a7c12bdbec6f4d9c346da31d5f577d4b gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 2e20a14fc9152538a25e16d8d269b70cd2d03a875ab7df495b1885dbe07fa920 run #0: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #1: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #19: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked representative crash: KASAN: slab-use-after-free Read in rtlock_slowlock_locked, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good a69ba865a7c12bdbec6f4d9c346da31d5f577d4b Bisecting: 777 revisions left to test after this (roughly 10 steps) [b7e1557eb6ce7e71788b41e211ceb47b72c4850a] Merge tag 'qcom-arm64-for-7.1-2' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/qcom/linux into soc/dt determine whether the revision contains the guilty commit revision 17ed8fd2fa714bb06c53c5bd88a3948d23fba8f2 crashed and is reachable testing commit b7e1557eb6ce7e71788b41e211ceb47b72c4850a gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: d6f0329e763d951c70478ae175f6f8a2ad13b48b2671e0a5c42d9d6c0967b163 run #0: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #1: crashed: KASAN: slab-use-after-free Read in blk_update_request run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: KASAN: slab-use-after-free Read in rtlock_slowlock_locked, types: [KASAN-USE-AFTER-FREE-READ] unable to determine the verdict: 18 good runs (wanted 15), for bad wanted 10 in total, got 20 # git bisect skip b7e1557eb6ce7e71788b41e211ceb47b72c4850a Bisecting: 777 revisions left to test after this (roughly 10 steps) [b7cce3e2cca9cd78418f3c3784474b778e7996fe] dm: don't report warning when doing deferred remove determine whether the revision contains the guilty commit revision 6bd9ed02871f22beb0e50690b0c3caf457104f7c crashed and is reachable testing commit b7cce3e2cca9cd78418f3c3784474b778e7996fe gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 2522ed73c62e94274324e340a24b2ae2706355308b7444a8a95329115343b9ee run #0: ignore: lost connection to test machine run #1: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #2: crashed: KASAN: slab-use-after-free Read in blk_update_request run #3: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #4: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: crashed: KASAN: slab-use-after-free Read in blk_update_request run #14: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #15: OK run #16: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #17: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #18: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #19: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked representative crash: KASAN: slab-use-after-free Read in rtlock_slowlock_locked, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good b7cce3e2cca9cd78418f3c3784474b778e7996fe Bisecting: 768 revisions left to test after this (roughly 10 steps) [746e195d439a17e0dbe6b6eef080cce66b5aa4ee] Merge tag 'riscv-dt-for-v7.1' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/conor/linux into soc/dt determine whether the revision contains the guilty commit revision 17ed8fd2fa714bb06c53c5bd88a3948d23fba8f2 crashed and is reachable testing commit 746e195d439a17e0dbe6b6eef080cce66b5aa4ee gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 805a50a5bfb48be6c623b773252b364ef814efbbfc47dfc4f7eb7f83d10fdf66 run #0: ignore: lost connection to test machine run #1: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #2: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #3: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #4: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #18: OK run #19: OK representative crash: KASAN: slab-use-after-free Read in rtlock_slowlock_locked, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good 746e195d439a17e0dbe6b6eef080cce66b5aa4ee Bisecting: 383 revisions left to test after this (roughly 9 steps) [1be83fad0c74b288d3664ff0677da19a997bcbf3] smb: smbdirect: introduce smbdirect_socket_cleanup_work() determine whether the revision contains the guilty commit revision 6bd9ed02871f22beb0e50690b0c3caf457104f7c crashed and is reachable testing commit 1be83fad0c74b288d3664ff0677da19a997bcbf3 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: fc5d485fd7edf8639a7a1f2ab7c69c44e3821deb9998ada2cfc43bbcb032748f run #0: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #1: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #2: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #3: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #4: crashed: KASAN: slab-use-after-free Read in blk_update_request run #5: crashed: KASAN: slab-use-after-free Read in blk_update_request run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #16: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #17: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #18: crashed: KASAN: slab-use-after-free Read in blk_update_request run #19: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked representative crash: KASAN: slab-use-after-free Read in rtlock_slowlock_locked, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good 1be83fad0c74b288d3664ff0677da19a997bcbf3 Bisecting: 176 revisions left to test after this (roughly 8 steps) [3cd8b194bf3428dfa53120fee47e827a7c495815] Merge tag 'v7.1-rc-part1-smbdirect-fixes' of git://git.samba.org/ksmbd determine whether the revision contains the guilty commit revision 5e061aac4c0c9d26dffb81aec6c8d70bed048f2d crashed and is reachable testing commit 3cd8b194bf3428dfa53120fee47e827a7c495815 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: ad9927cc2e03fc633a645b3b1404a9c864f5c735860150ea48b1348681c94a26 all runs: OK false negative chance: 0.012 # git bisect bad 3cd8b194bf3428dfa53120fee47e827a7c495815 Bisecting: 103 revisions left to test after this (roughly 7 steps) [62782820e85250bc9919621aa242510d300e9093] smb: server: make use of smbdirect_connection_post_recv_io() determine whether the revision contains the guilty commit revision 6bd9ed02871f22beb0e50690b0c3caf457104f7c crashed and is reachable testing commit 62782820e85250bc9919621aa242510d300e9093 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: fec8cfeec8238b8c886930310747fe25936f8504f4ae0ad44a4f8921e310555c run #0: crashed: KASAN: slab-use-after-free Read in blk_update_request run #1: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #2: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #3: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #4: crashed: KASAN: slab-use-after-free Read in blk_update_request run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #17: OK run #18: OK run #19: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked representative crash: KASAN: slab-use-after-free Read in blk_update_request, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good 62782820e85250bc9919621aa242510d300e9093 Bisecting: 54 revisions left to test after this (roughly 6 steps) [f0bf3eac92b2be5f34b944cb82f1c23db642c7f5] Merge tag 'vfio-v7.1-rc1' of https://github.com/awilliam/linux-vfio determine whether the revision contains the guilty commit revision 5a69195686d5b874ac5a4c7f809ecb75fbc535ef crashed and is reachable testing commit f0bf3eac92b2be5f34b944cb82f1c23db642c7f5 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 687e6dda165741f56e2f0857847b7b2dffec983a575d77431463897c9429cfc1 all runs: OK false negative chance: 0.012 # git bisect bad f0bf3eac92b2be5f34b944cb82f1c23db642c7f5 Bisecting: 23 revisions left to test after this (roughly 5 steps) [1d51b370a0f8f642f4fc84c795fbedac0fcdbbd2] Merge tag 'jfs-7.1' of github.com:kleikamp/linux-shaggy determine whether the revision contains the guilty commit revision 5e061aac4c0c9d26dffb81aec6c8d70bed048f2d crashed and is reachable testing commit 1d51b370a0f8f642f4fc84c795fbedac0fcdbbd2 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 490a72f38ce81b3f52eed5a47b8a4bb941087fa3c58bc9cd8c74f8b886213b34 run #0: OK run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: boot failed: can't ssh into the instance false negative chance: 0.014 # git bisect bad 1d51b370a0f8f642f4fc84c795fbedac0fcdbbd2 Bisecting: 15 revisions left to test after this (roughly 4 steps) [25947cc5b2374cd5bf627fe3141496444260d04f] ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() determine whether the revision contains the guilty commit revision 6bd9ed02871f22beb0e50690b0c3caf457104f7c crashed and is reachable testing commit 25947cc5b2374cd5bf627fe3141496444260d04f gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 56672957e5f46bf6b415fc655f7ddc0dcdabe39322b234d2a201c7650a649f2d run #0: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #19: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked representative crash: KASAN: slab-use-after-free Read in rtlock_slowlock_locked, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good 25947cc5b2374cd5bf627fe3141496444260d04f Bisecting: 7 revisions left to test after this (roughly 3 steps) [dad98c5b2a05ef744af4c884c97066a3c8cdad61] jfs: avoid -Wtautological-constant-out-of-range-compare warning again determine whether the revision contains the guilty commit revision 6bd9ed02871f22beb0e50690b0c3caf457104f7c crashed and is reachable testing commit dad98c5b2a05ef744af4c884c97066a3c8cdad61 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 796c57593868c277cd37c2288b9f644d978a5a7b3116f47beee9a58486db45b0 all runs: OK false negative chance: 0.012 # git bisect bad dad98c5b2a05ef744af4c884c97066a3c8cdad61 Bisecting: 3 revisions left to test after this (roughly 2 steps) [3c778ec882084626ac915d6c6ec88aff87b82221] jfs: fix corrupted list in dbUpdatePMap determine whether the revision contains the guilty commit revision 6bd9ed02871f22beb0e50690b0c3caf457104f7c crashed and is reachable testing commit 3c778ec882084626ac915d6c6ec88aff87b82221 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 9ffc83ebcb00d04b38da36f294def48eca483bbb76c64975f0744c80160f7202 run #0: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #1: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #2: crashed: KASAN: slab-use-after-free Read in blk_update_request run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: crashed: KASAN: slab-use-after-free Read in rtlock_slowlock_locked run #16: OK run #17: OK run #18: OK run #19: crashed: KASAN: slab-use-after-free Read in blk_update_request representative crash: KASAN: slab-use-after-free Read in rtlock_slowlock_locked, types: [KASAN-USE-AFTER-FREE-READ] # git bisect good 3c778ec882084626ac915d6c6ec88aff87b82221 Bisecting: 1 revision left to test after this (roughly 1 step) [ca5848ae87d24886a7886f5a22278bd4045c15f8] jfs: hold LOG_LOCK on umount to avoid null-ptr-deref determine whether the revision contains the guilty commit revision 3c778ec882084626ac915d6c6ec88aff87b82221 crashed and is reachable testing commit ca5848ae87d24886a7886f5a22278bd4045c15f8 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 00f6addce308e6431769b9171d666ee8de2ec793776bf65f1c56a1bf4c38e5fa all runs: OK false negative chance: 0.012 # git bisect bad ca5848ae87d24886a7886f5a22278bd4045c15f8 Bisecting: 0 revisions left to test after this (roughly 0 steps) [b15e4310633f90072d66cc9b6692acbf6b4d7d00] jfs: Set the lbmDone flag at the end of lbmIODone determine whether the revision contains the guilty commit revision 5e061aac4c0c9d26dffb81aec6c8d70bed048f2d crashed and is reachable testing commit b15e4310633f90072d66cc9b6692acbf6b4d7d00 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 981a2366ea46b1527a51f37c757abebb32ac82562805bee3e24e5ccb670d9d6d all runs: OK false negative chance: 0.012 # git bisect bad b15e4310633f90072d66cc9b6692acbf6b4d7d00 b15e4310633f90072d66cc9b6692acbf6b4d7d00 is the first bad commit commit b15e4310633f90072d66cc9b6692acbf6b4d7d00 Author: Edward Adam Davis Date: Tue Dec 16 21:57:51 2025 +0800 jfs: Set the lbmDone flag at the end of lbmIODone In lbmRead(), the I/O event waited for by wait_event() finishes before it goes to sleep, and the lbmIODone() prematurely sets the flag to lbmDONE, thus ending the wait. This causes wait_event() to return before lbmREAD is cleared (because lbmDONE was set first), the premature return of wait_event() leads to the release of lbuf before lbmIODone() returns, thus triggering the use-after-free vulnerability reported in [1]. Moving the operation of setting the lbmDONE flag to after clearing lbmREAD in lbmIODone() avoids the use-after-free vulnerability reported in [1]. [1] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x88/0x3e0 kernel/locking/spinlock_rt.c:56 Call Trace: blk_update_request+0x57e/0xe60 block/blk-mq.c:1007 blk_mq_end_request+0x3e/0x70 block/blk-mq.c:1169 blk_complete_reqs block/blk-mq.c:1244 [inline] blk_done_softirq+0x10a/0x160 block/blk-mq.c:1249 Allocated by task 6101: lbmLogInit fs/jfs/jfs_logmgr.c:1821 [inline] lmLogInit+0x3d0/0x19e0 fs/jfs/jfs_logmgr.c:1269 open_inline_log fs/jfs/jfs_logmgr.c:1175 [inline] lmLogOpen+0x4e1/0xfa0 fs/jfs/jfs_logmgr.c:1069 jfs_mount_rw+0xe9/0x670 fs/jfs/jfs_mount.c:257 jfs_fill_super+0x754/0xd80 fs/jfs/super.c:532 Freed by task 6101: kfree+0x1bd/0x900 mm/slub.c:6876 lbmLogShutdown fs/jfs/jfs_logmgr.c:1864 [inline] lmLogInit+0x1137/0x19e0 fs/jfs/jfs_logmgr.c:1415 open_inline_log fs/jfs/jfs_logmgr.c:1175 [inline] lmLogOpen+0x4e1/0xfa0 fs/jfs/jfs_logmgr.c:1069 jfs_mount_rw+0xe9/0x670 fs/jfs/jfs_mount.c:257 jfs_fill_super+0x754/0xd80 fs/jfs/super.c:532 Reported-by: syzbot+1d38eedcb25a3b5686a7@syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=1d38eedcb25a3b5686a7 Signed-off-by: Edward Adam Davis Signed-off-by: Dave Kleikamp fs/jfs/jfs_logmgr.c | 18 +++++++----------- 1 file changed, 7 insertions(+), 11 deletions(-) accumulated error probability: 0.08 culprit signature: 981a2366ea46b1527a51f37c757abebb32ac82562805bee3e24e5ccb670d9d6d parent signature: 9ffc83ebcb00d04b38da36f294def48eca483bbb76c64975f0744c80160f7202 reproducer is flaky (0.20 repro chance estimate) revisions tested: 28, total time: 10h13m2.612883226s (build: 3h43m39.587656935s, test: 5h30m29.916550021s) first good commit: b15e4310633f90072d66cc9b6692acbf6b4d7d00 jfs: Set the lbmDone flag at the end of lbmIODone recipients (to): ["dave.kleikamp@oracle.com" "eadavis@qq.com"] recipients (cc): []