ci2 starts bisection 2024-12-21 08:28:09.555279801 +0000 UTC m=+35951.697230517 bisecting cause commit starting from e9b8ffafd20ad21357a789cc58ffaa162b3ad074 building syzkaller on d7f584ee3c24504bb07d04526a23b7d8df38b8ed ensuring issue is reproducible on original commit e9b8ffafd20ad21357a789cc58ffaa162b3ad074 testing commit e9b8ffafd20ad21357a789cc58ffaa162b3ad074 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3361ceb3dac4692f3f4caadc111cc82490d00619dc5e30d8177319b7681b8f56 run #0: crashed: KASAN: slab-out-of-bounds Read in scatterwalk_copychunks run #1: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #2: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #3: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #4: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #5: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #6: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #7: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #8: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #9: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #10: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #11: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #12: crashed: KASAN: slab-use-after-free Read in scatterwalk_copychunks run #13: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #14: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #15: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #16: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #17: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #18: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #19: crashed: kernel BUG in bch2_btree_node_iter_init_from_start representative crash: kernel BUG in bch2_btree_node_iter_init_from_start, types: [BUG KASAN] check whether we can drop unnecessary instrumentation disabling configs for [HANG LEAK UBSAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit e9b8ffafd20ad21357a789cc58ffaa162b3ad074 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1113b8b2e40f1f396f7772201bf196d7f19d55de47bf203729f100dbd4419526 run #0: crashed: KASAN: slab-use-after-free Read in scatterwalk_copychunks run #1: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #2: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #3: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #4: crashed: KASAN: slab-out-of-bounds Read in scatterwalk_copychunks run #5: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #6: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #7: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #8: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #9: crashed: KASAN: use-after-free Read in poly1305_update_arch representative crash: KASAN: slab-use-after-free Read in scatterwalk_copychunks, types: [KASAN BUG] the bug reproduces without the instrumentation disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed kconfig minimization: base=4037 full=8236 leaves diff=2125 split chunks (needed=false): <2125> split chunk #0 of len 2125 into 5 parts testing without sub-chunk 1/5 disabling configs for [UBSAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit e9b8ffafd20ad21357a789cc58ffaa162b3ad074 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a8f8090219174426c25dcb8a2a407972302bfc0368402ef90086f220944744f8 all runs: OK false negative chance: 0.000 testing without sub-chunk 2/5 disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit e9b8ffafd20ad21357a789cc58ffaa162b3ad074 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 77501c38f12a183deb10462ee238767e72163d4950a10a0a3c669875273c6bde run #0: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #1: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #2: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #3: crashed: KASAN: slab-out-of-bounds Read in poly1305_update_arch run #4: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #5: crashed: KASAN: slab-use-after-free Read in scatterwalk_copychunks run #6: crashed: KASAN: slab-use-after-free Read in scatterwalk_copychunks run #7: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #8: crashed: KASAN: slab-use-after-free Read in scatterwalk_copychunks run #9: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch representative crash: KASAN: slab-use-after-free Read in poly1305_update_arch, types: [KASAN] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit e9b8ffafd20ad21357a789cc58ffaa162b3ad074 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2d77c7de9471245cd6a3f616a103a977d07f4284ffdda7181dcdaa7ff7bb71ca run #0: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #1: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #2: crashed: KASAN: slab-use-after-free Read in scatterwalk_copychunks run #3: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #4: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #5: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #6: crashed: KASAN: use-after-free Read in poly1305_update_arch run #7: crashed: KASAN: slab-out-of-bounds Read in scatterwalk_copychunks run #8: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #9: crashed: kernel BUG in bch2_btree_node_iter_init_from_start representative crash: kernel BUG in bch2_btree_node_iter_init_from_start, types: [BUG KASAN] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit e9b8ffafd20ad21357a789cc58ffaa162b3ad074 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ee293247f857209f113ca3edf9a13659e053746d1e0aa601b95089c07e861770 run #0: crashed: KASAN: slab-out-of-bounds Read in scatterwalk_copychunks run #1: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #2: crashed: KASAN: slab-out-of-bounds Read in scatterwalk_copychunks run #3: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #4: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #5: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #6: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #7: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #8: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #9: crashed: KASAN: slab-out-of-bounds Read in scatterwalk_copychunks representative crash: KASAN: slab-out-of-bounds Read in scatterwalk_copychunks, types: [KASAN] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit e9b8ffafd20ad21357a789cc58ffaa162b3ad074 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d626654028839f9e6949cb0c09c83828cebc79cdad8ae6e0feb67b3614d43cc6 run #0: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #1: crashed: KASAN: slab-use-after-free Read in scatterwalk_copychunks run #2: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #3: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #4: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #5: crashed: KASAN: use-after-free Read in scatterwalk_copychunks run #6: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #7: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #8: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #9: crashed: KASAN: use-after-free Read in poly1305_update_arch representative crash: kernel BUG in bch2_btree_node_iter_init_from_start, types: [BUG KASAN] the chunk can be dropped minimized to 425 configs; suspects: [6LOWPAN 6LOWPAN_GHC_EXT_HDR_DEST 6LOWPAN_GHC_EXT_HDR_FRAG 6LOWPAN_GHC_EXT_HDR_HOP 6LOWPAN_GHC_EXT_HDR_ROUTE 6LOWPAN_GHC_ICMPV6 6LOWPAN_GHC_UDP 6LOWPAN_NHC 6LOWPAN_NHC_DEST 6LOWPAN_NHC_FRAGMENT 6LOWPAN_NHC_HOP 6LOWPAN_NHC_IPV6 6LOWPAN_NHC_MOBILITY 6LOWPAN_NHC_ROUTING 6LOWPAN_NHC_UDP 6PACK 842_COMPRESS 842_DECOMPRESS 9P_FSCACHE 9P_FS_POSIX_ACL 9P_FS_SECURITY ACORN_PARTITION ACORN_PARTITION_ADFS ACORN_PARTITION_CUMANA ACORN_PARTITION_EESOX ACORN_PARTITION_ICS ACORN_PARTITION_POWERTEC ACORN_PARTITION_RISCIX ACPI_EC ACPI_NFIT ACPI_NHLT ACPI_PLATFORM_PROFILE ADFS_FS AFFS_FS AFS_FS AFS_FSCACHE AF_KCM AF_RXRPC AF_RXRPC_IPV6 AIX_PARTITION AMD_SFH_HID AMIGA_PARTITION ANDROID_BINDERFS ANDROID_BINDER_IPC ANON_VMA_NAME APERTURE_HELPERS APPLE_MFI_FASTCHARGE AR5523 ARCH_DEFAULT_CRASH_DUMP ARCH_ENABLE_MEMORY_HOTREMOVE ARCH_ENABLE_THP_MIGRATION ARCH_HAS_EXECMEM_ROX ARCH_HAS_PREEMPT_LAZY ARCH_HAS_USER_SHADOW_STACK ARCH_SUPPORTS_AUTOFDO_CLANG ARCH_SUPPORTS_HUGE_PFNMAP ARCH_SUPPORTS_PMD_PFNMAP ARCH_SUPPORTS_PROPELLER_CLANG ARCH_SUPPORTS_PUD_PFNMAP ARCH_SUPPORTS_RT ARCH_WANT_PMD_MKWRITE ASM_MODVERSIONS ASUS_TF103C_DOCK ASYNC_CORE ASYNC_MEMCPY ASYNC_PQ ASYNC_RAID6_RECOV ASYNC_TX_DMA ASYNC_XOR ATARI_PARTITION ATA_GENERIC ATA_OVER_ETH ATH10K ATH10K_CE ATH10K_LEDS ATH10K_PCI ATH10K_USB ATH11K ATH6KL ATH6KL_USB ATH9K ATH9K_AHB ATH9K_BTCOEX_SUPPORT ATH9K_CHANNEL_CONTEXT ATH9K_COMMON ATH9K_COMMON_DEBUG ATH9K_COMMON_SPECTRAL ATH9K_DEBUGFS ATH9K_DYNACK ATH9K_HTC ATH9K_HTC_DEBUGFS ATH9K_HW ATH9K_PCI ATH9K_PCOEM ATH9K_RFKILL ATH_COMMON ATM ATM_BR2684 ATM_CLIP ATM_DRIVERS ATM_LANE ATM_MPOA ATM_TCP AUXILIARY_BUS AX25 AX25_DAMA_SLAVE AX88796B_PHY BAREUDP BATMAN_ADV BATMAN_ADV_BATMAN_V BATMAN_ADV_BLA BATMAN_ADV_DAT BATMAN_ADV_MCAST BATMAN_ADV_NC BCACHE BCACHEFS_DEBUG BCACHEFS_ERASURE_CODING BCACHEFS_FS BCACHEFS_POSIX_ACL BCACHEFS_QUOTA BCACHEFS_SIX_OPTIMISTIC_SPIN BCMA BCMA_HOST_PCI_POSSIBLE BEFS_FS BFQ_CGROUP_DEBUG BFQ_GROUP_IOSCHED BFS_FS BIG_KEYS BLK_CGROUP_PUNT_BIO BLK_CGROUP_RWSTAT BLK_DEV_BSGLIB BLK_DEV_INTEGRITY BLK_DEV_NBD BLK_DEV_NULL_BLK BLK_DEV_NULL_BLK_FAULT_INJECTION BLK_DEV_NVME BLK_DEV_PMEM BLK_DEV_RAM BLK_DEV_RNBD BLK_DEV_RNBD_CLIENT BLK_DEV_THROTTLING BLK_DEV_ZONED BLK_ICQ BLK_INLINE_ENCRYPTION BLK_INLINE_ENCRYPTION_FALLBACK BLK_WBT BLK_WBT_MQ BONDING BOOT_VESA_SUPPORT BPF_EVENTS BPF_JIT BPF_JIT_ALWAYS_ON BPF_JIT_DEFAULT_ON BPF_LSM BPF_PRELOAD BPF_PRELOAD_UMD BPF_STREAM_PARSER BPF_SYSCALL BPQETHER BRIDGE BRIDGE_CFM BRIDGE_EBT_802_3 BRIDGE_EBT_AMONG BRIDGE_EBT_ARP BRIDGE_EBT_ARPREPLY BRIDGE_EBT_BROUTE BRIDGE_EBT_DNAT BRIDGE_EBT_IP BRIDGE_EBT_IP6 BRIDGE_EBT_LIMIT BRIDGE_EBT_LOG BRIDGE_EBT_MARK BRIDGE_EBT_MARK_T BRIDGE_EBT_NFLOG BRIDGE_EBT_PKTTYPE BRIDGE_EBT_REDIRECT BRIDGE_EBT_SNAT BRIDGE_EBT_STP BRIDGE_EBT_T_FILTER BRIDGE_EBT_T_NAT BRIDGE_EBT_VLAN BRIDGE_IGMP_SNOOPING BRIDGE_MRP BRIDGE_NF_EBTABLES BRIDGE_NF_EBTABLES_LEGACY BRIDGE_VLAN_FILTERING BSD_DISKLABEL BSD_PROCESS_ACCT_V3 BT BTRFS_ASSERT BTRFS_FS BTRFS_FS_POSIX_ACL BTRFS_FS_REF_VERIFY BTT BT_6LOWPAN BT_ATH3K BT_BCM BT_BNEP BT_BNEP_MC_FILTER BT_BNEP_PROTO_FILTER BT_BREDR BT_HCIBCM203X BT_HCIBFUSB BT_HCIBPA10X BT_HCIBTUSB BT_HCIBTUSB_AUTOSUSPEND BT_HCIBTUSB_BCM BT_HCIBTUSB_MTK BT_HCIBTUSB_POLL_SYNC BT_HCIBTUSB_RTL BT_HCIUART BT_HCIUART_3WIRE BT_HCIUART_AG6XX BT_HCIUART_BCSP BT_HCIUART_H4 BT_HCIUART_LL BT_HCIUART_MRVL BT_HCIUART_QCA BT_HCIUART_SERDEV BT_HCIVHCI BT_INTEL BT_LE BT_LEDS BT_LE_L2CAP_ECRED BT_MRVL BT_MRVL_SDIO BT_MSFTEXT BT_MTK BT_MTKSDIO BT_MTKUART BT_QCA BT_RFCOMM BT_RFCOMM_TTY BT_RTL CACHEFILES CAIF CAIF_DEBUG CAIF_DRIVERS CAIF_NETDEV CAIF_TTY CAIF_USB CAIF_VIRTIO CAN CAN_8DEV_USB CAN_BCM CAN_CALC_BITTIMING CAN_DEV CAN_EMS_USB CAN_ESD_USB CAN_ETAS_ES58X CAN_F81604 CAN_GS_USB CAN_GW CAN_IFI_CANFD CAN_ISOTP CAN_J1939 CAN_KVASER_USB CAN_MCBA_USB CAN_NETLINK CAN_PEAK_USB CAN_RAW CAN_RX_OFFLOAD CAN_SLCAN CAN_UCAN CAN_VCAN CAN_VXCAN CARL9170 CARL9170_HWRNG CARL9170_LEDS CARL9170_WPC CEC_CORE CEPH_FS CEPH_FSCACHE CEPH_FS_POSIX_ACL CEPH_LIB CEPH_LIB_USE_DNS_RESOLVER CFG80211 CFG80211_CRDA_SUPPORT CFG80211_DEBUGFS CFG80211_DEFAULT_PS CFG80211_REQUIRE_SIGNED_REGDB CFG80211_USE_KERNEL_REGDB_KEYS CFG80211_WEXT CFS_BANDWIDTH CGROUP_BPF CHARGER_ISP1704 CHR_DEV_ST CIFS CIFS_ALLOW_INSECURE_LEGACY CIFS_DEBUG CIFS_DFS_UPCALL CIFS_FSCACHE CIFS_POSIX CIFS_SMB_DIRECT CIFS_SWN_UPCALL CIFS_UPCALL CIFS_XATTR CLOSURES CLS_U32_MARK CLS_U32_PERF CMA CMA_SIZE_SEL_MAX CMDLINE_PARTITION COMEDI COMEDI_DT9812 COMEDI_NI_USB6501 COMEDI_USBDUX COMEDI_USBDUXFAST COMEDI_USBDUXSIGMA COMEDI_USB_DRIVERS COMEDI_VMK80XX COMPAT_NETLINK_MESSAGES COUNTER CRAMFS CRAMFS_BLOCKDEV CRAMFS_MTD CRC4 CRC64 CRC64_ROCKSOFT CRC7 CRC8 CRC_ITU_T CRC_T10DIF CRYPTO_842 CRYPTO_ADIANTUM CRYPTO_AEGIS128 CRYPTO_AEGIS128_AESNI_SSE2 CRYPTO_AES_NI_INTEL CRYPTO_AES_TI CRYPTO_ANSI_CPRNG CRYPTO_ANUBIS CRYPTO_ARC4 CRYPTO_ARCH_HAVE_LIB_BLAKE2S CRYPTO_ARCH_HAVE_LIB_CHACHA CRYPTO_ARCH_HAVE_LIB_CURVE25519 CRYPTO_ARCH_HAVE_LIB_POLY1305 CRYPTO_ARIA CRYPTO_ARIA_AESNI_AVX_X86_64 CRYPTO_BLAKE2B CRYPTO_BLAKE2S_X86 CRYPTO_BLOWFISH CRYPTO_BLOWFISH_COMMON CRYPTO_BLOWFISH_X86_64 CRYPTO_CAMELLIA CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 CRYPTO_CAMELLIA_AESNI_AVX_X86_64 CRYPTO_CAMELLIA_X86_64 CRYPTO_CAST5 CRYPTO_CAST5_AVX_X86_64 CRYPTO_CAST6 CRYPTO_CAST6_AVX_X86_64 CRYPTO_CAST_COMMON CRYPTO_CHACHA20POLY1305 CRYPTO_CHACHA20_X86_64 CRYPTO_CRC32 CRYPTO_CRC32C_INTEL CRYPTO_CRC32_PCLMUL CRYPTO_CRC64_ROCKSOFT CRYPTO_CRCT10DIF CRYPTO_CRCT10DIF_PCLMUL CRYPTO_CRYPTD CRYPTO_CURVE25519 CRYPTO_CURVE25519_X86 CRYPTO_DEFLATE CRYPTO_DES CRYPTO_DES3_EDE_X86_64 CRYPTO_DEV_CCP CRYPTO_DEV_CCP_DD CRYPTO_DEV_PADLOCK CRYPTO_DEV_PADLOCK_AES CRYPTO_DEV_PADLOCK_SHA CRYPTO_DEV_QAT CRYPTO_DEV_QAT_C3XXX CRYPTO_DEV_QAT_C3XXXVF CRYPTO_DEV_QAT_C62X CRYPTO_DEV_QAT_C62XVF CRYPTO_DEV_QAT_DH895xCC CRYPTO_DEV_QAT_DH895xCCVF CRYPTO_DEV_VIRTIO CRYPTO_DH CRYPTO_DRBG_CTR CRYPTO_DRBG_HASH CRYPTO_ECDH CRYPTO_ECRDSA CRYPTO_ENGINE CRYPTO_ESSIV CRYPTO_FCRYPT CRYPTO_GHASH_CLMUL_NI_INTEL CRYPTO_HCTR2 CRYPTO_KDF800108_CTR CRYPTO_KEYWRAP CRYPTO_KHAZAD CRYPTO_KPP CRYPTO_LIB_ARC4 CRYPTO_LIB_CHACHA CRYPTO_LIB_CHACHA20POLY1305 CRYPTO_LIB_CURVE25519 CRYPTO_LIB_CURVE25519_GENERIC CRYPTO_LIB_POLY1305 CRYPTO_LIB_POLY1305_GENERIC CRYPTO_LRW CRYPTO_LZ4 CRYPTO_LZ4HC CRYPTO_NHPOLY1305 CRYPTO_NHPOLY1305_AVX2 CRYPTO_NHPOLY1305_SSE2 CRYPTO_PCBC CRYPTO_PCRYPT CRYPTO_POLY1305 CRYPTO_POLY1305_X86_64 CRYPTO_POLYVAL CRYPTO_POLYVAL_CLMUL_NI CRYPTO_RMD160 CRYPTO_SEED CRYPTO_SERPENT CRYPTO_SERPENT_AVX2_X86_64 CRYPTO_SERPENT_AVX_X86_64 CRYPTO_SERPENT_SSE2_X86_64 CRYPTO_SHA1_SSSE3 CRYPTO_SHA256_SSSE3 CRYPTO_SHA512_SSSE3 CRYPTO_SIMD CRYPTO_SM3_AVX_X86_64 CRYPTO_SM4_AESNI_AVX2_X86_64 CRYPTO_SM4_AESNI_AVX_X86_64 CRYPTO_STREEBOG CRYPTO_TEA CRYPTO_TWOFISH CRYPTO_TWOFISH_AVX_X86_64 CRYPTO_TWOFISH_COMMON CRYPTO_TWOFISH_X86_64 CRYPTO_TWOFISH_X86_64_3WAY CRYPTO_USER CRYPTO_USER_API CRYPTO_USER_API_AEAD CRYPTO_USER_API_ENABLE_OBSOLETE CRYPTO_USER_API_HASH CRYPTO_USER_API_RNG CRYPTO_USER_API_SKCIPHER CRYPTO_VMAC CRYPTO_WP512 CRYPTO_XCTR CRYPTO_XXHASH CRYPTO_ZSTD CUSE CYPRESS_FIRMWARE DAMON DAMON_PADDR DAMON_RECLAIM DAMON_VADDR DAX DCA DCB DEFAULT_CODEL DEVICE_MIGRATION DEVICE_PRIVATE DEV_COREDUMP DEV_DAX DLN2_ADC DMABUF_HEAPS DMABUF_HEAPS_CMA DMABUF_HEAPS_SYSTEM DMABUF_MOVE_NOTIFY DMA_CMA DMA_ENGINE_RAID DM_AUDIT DM_BIO_PRISON DM_BUFIO DM_CACHE DM_CACHE_SMQ DM_CLONE DM_CRYPT DM_FLAKEY DM_INTEGRITY DM_MULTIPATH DM_MULTIPATH_QL DM_MULTIPATH_ST DM_PERSISTENT_DATA DM_RAID DM_SNAPSHOT DM_THIN_PROVISIONING DM_UEVENT DM_VERITY DM_VERITY_FEC DM_WRITECACHE DM_ZONED DRAGONRISE_FF DRM DRM_AUX_BRIDGE DRM_BOCHS DRM_BRIDGE DRM_BUDDY DRM_CIRRUS_QEMU DRM_CLIENT DRM_CLIENT_LIB DRM_CLIENT_SELECTION DRM_CLIENT_SETUP DRM_DEBUG_MM DRM_DISPLAY_DP_AUX_BUS DRM_DISPLAY_DP_HELPER DRM_DISPLAY_DSC_HELPER DRM_DISPLAY_HDCP_HELPER DRM_DISPLAY_HDMI_HELPER DRM_DISPLAY_HELPER DRM_FBDEV_EMULATION DRM_GEM_SHMEM_HELPER DRM_GM12U320 DRM_GUD DRM_I915 DRM_I915_CAPTURE_ERROR DRM_I915_COMPRESS_ERROR ENCRYPTED_KEYS FSCACHE FUSE_FS GPIOLIB HAMRADIO HID_DRAGONRISE IIO INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_RTRS_CLIENT IOSCHED_BFQ LIBNVDIMM MAC80211 MAC80211_DEBUGFS MAC80211_LEDS MEDIA_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MMC MTD NET_CLS_U32 NET_SCH_DEFAULT PARTITION_ADVANCED RFKILL SERIAL_DEV_BUS TLS TLS_DEVICE TRANSPARENT_HUGEPAGE TRUSTED_KEYS USB_GADGET USB_PHY VLAN_8021Q WANT_COMPAT_NETLINK_MESSAGES WEXT_CORE WIRELESS WLAN WLAN_VENDOR_ATH X86_X32_ABI ZONE_DEVICE] disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed picked [v6.12 v6.11 v6.10 v6.8 v6.6 v6.4 v6.2 v6.0 v5.17 v5.14 v5.11 v5.8 v5.5 v5.2 v4.20 v4.19] out of 35 release tags testing release v6.12 testing commit adc218676eef25575469234709c2d87185ca223a gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3304edfb6222c57f5957ccc9f8f39412790655def985f35b835904d21d78fb71 run #0: crashed: KASAN: slab-out-of-bounds Read in bkey_packed_valid run #1: crashed: kernel BUG in bch2_btree_path_level_init run #2: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #3: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #4: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #5: crashed: kernel BUG in bch2_btree_node_iter_init_from_start run #6: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #7: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #8: crashed: KASAN: slab-use-after-free Read in scatterwalk_copychunks run #9: crashed: kernel BUG in bch2_btree_node_iter_init_from_start representative crash: KASAN: slab-out-of-bounds Read in bkey_packed_valid, types: [KASAN BUG] testing release v6.11 testing commit 98f7e32f20d28ec452afb208f9cffc08448a2652 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c1e4d9480f0c9f05a6d7ec0d6bff152dd62cfaf7ea05945218950f8d51dc828c run #0: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #1: crashed: KASAN: use-after-free Read in poly1305_update_arch run #2: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #3: crashed: KASAN: use-after-free Read in poly1305_update_arch run #4: crashed: KASAN: slab-use-after-free Read in scatterwalk_copychunks run #5: crashed: WARNING: refcount bug in __free_pages_ok run #6: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #7: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #8: crashed: kernel BUG in bch2_btree_path_level_init run #9: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch representative crash: KASAN: slab-use-after-free Read in poly1305_update_arch, types: [KASAN] testing release v6.10 testing commit 0c3836482481200ead7b416ca80c68a29cfdaabd gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 56a4883355fda29f6a318e0bba00acf3529b47b99268ee4ae34007a496fde478 run #0: crashed: general protection fault in bch2_bkey_ptrs_to_text run #1: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #2: crashed: general protection fault in bch2_bkey_ptrs_to_text run #3: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #4: crashed: general protection fault in bch2_bkey_ptrs_to_text run #5: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #6: crashed: KASAN: use-after-free Read in poly1305_update_arch run #7: crashed: KASAN: slab-use-after-free Read in scatterwalk_copychunks run #8: crashed: KASAN: slab-use-after-free Read in poly1305_update_arch run #9: crashed: KASAN: slab-use-after-free Read in scatterwalk_copychunks representative crash: KASAN: slab-use-after-free Read in poly1305_update_arch, types: [KASAN UNKNOWN] testing release v6.8 testing commit e8f897f4afef0031fe618a8e94127a0934896aba gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7f2563550bd5da5b101ee38ad04f78a76b33b3e8d025030d19bc2cd3e022d68b all runs: crashed: kernel BUG in __bch2_bkey_unpack_key representative crash: kernel BUG in __bch2_bkey_unpack_key, types: [BUG] testing release v6.6 testing commit ffc253263a1375a65fa6c9f62a893e9767fbebfa gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 73f3ce3c6aec64e2f4de73f4cbfebad6e7683486775f9f384f691672d97ac827 all runs: OK false negative chance: 0.000 # git bisect start e8f897f4afef0031fe618a8e94127a0934896aba ffc253263a1375a65fa6c9f62a893e9767fbebfa Bisecting: 17028 revisions left to test after this (roughly 14 steps) [cae0de45c8fd62612e1ee429134fd82c2c0e335e] Merge branch 'net-phylink-improve-phy-validation' testing commit cae0de45c8fd62612e1ee429134fd82c2c0e335e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4b02ed12bdcdcf6134ee774a1f9baa6ac36d204b4c2a6c00493a356de625a0b6 run #0: crashed: WARNING in bch2_trans_put run #1: crashed: WARNING in bch2_trans_put run #2: crashed: WARNING in bch2_trans_put run #3: crashed: WARNING in bch2_trans_put run #4: crashed: WARNING in bch2_trans_put run #5: crashed: WARNING in bch2_trans_put run #6: crashed: WARNING in bch2_trans_put run #7: crashed: WARNING in bch2_trans_put run #8: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #9: crashed: WARNING in bch2_trans_put representative crash: WARNING in bch2_trans_put, types: [WARNING] # git bisect bad cae0de45c8fd62612e1ee429134fd82c2c0e335e Bisecting: 8364 revisions left to test after this (roughly 13 steps) [7d461b291e65938f15f56fe58da2303b07578a76] Merge tag 'drm-next-2023-10-31-1' of git://anongit.freedesktop.org/drm/drm testing commit 7d461b291e65938f15f56fe58da2303b07578a76 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2aacd693bf597bac9ecd31d57256f71c323998c59b5b58bbece5e85ef36bb5fe run #0: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #1: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK representative crash: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit, types: [UNKNOWN] # git bisect bad 7d461b291e65938f15f56fe58da2303b07578a76 Bisecting: 4788 revisions left to test after this (roughly 12 steps) [5a6a09e97199d6600d31383055f9d43fbbcbe86f] Merge tag 'cgroup-for-6.7' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup testing commit 5a6a09e97199d6600d31383055f9d43fbbcbe86f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8f582466cbc390e12f3c6b42d5da1fbf61f7a9874a52c82fc80628d729da681f run #0: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #1: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #2: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #3: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #4: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #5: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #6: OK run #7: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit, types: [UNKNOWN] # git bisect bad 5a6a09e97199d6600d31383055f9d43fbbcbe86f Bisecting: 1930 revisions left to test after this (roughly 11 steps) [17047fbced563cf5abe5aa546f6a92af48900b69] bcachefs: Fix incorrectly freeing btree_path in alloc path testing commit 17047fbced563cf5abe5aa546f6a92af48900b69 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 622a6d9bc8cdff376ea8cf396d85f455716c7f6e362dbf1ec172acf77afe7734 all runs: OK false negative chance: 0.000 # git bisect good 17047fbced563cf5abe5aa546f6a92af48900b69 Bisecting: 1078 revisions left to test after this (roughly 10 steps) [b827ac419721a106ae2fccaa40576b0594edad92] exportfs: Change bcachefs fid_type enum to avoid conflicts testing commit b827ac419721a106ae2fccaa40576b0594edad92 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b2049be930f87ccf601841181c25367e35a497c85e8117fa4afa03c704c85a98 run #0: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #1: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #2: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #3: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #4: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #5: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #6: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "/tmp/syz-executor1189617795" "root@10.128.15.204:./syz-executor1189617795"]: exit status 255 Executing: program /usr/bin/ssh host 10.128.15.204, user root, command sftp OpenSSH_9.2p1 Debian-2+deb12u3, OpenSSL 3.0.15 3 Sep 2024 debug1: Reading configuration data /dev/null debug1: Connecting to 10.128.15.204 [10.128.15.204] port 22. debug1: fd 3 clearing O_NONBLOCK debug1: Connection established. debug1: identity file /root/.ssh/id_rsa type -1 debug1: identity file /root/.ssh/id_rsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa type -1 debug1: identity file /root/.ssh/id_ecdsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa_sk type -1 debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1 debug1: identity file /root/.ssh/id_ed25519 type -1 debug1: identity file /root/.ssh/id_ed25519-cert type -1 debug1: identity file /root/.ssh/id_ed25519_sk type -1 debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1 debug1: identity file /root/.ssh/id_xmss type -1 debug1: identity file /root/.ssh/id_xmss-cert type -1 debug1: identity file /root/.ssh/id_dsa type -1 debug1: identity file /root/.ssh/id_dsa-cert type -1 debug1: Local version string SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u3 Connection timed out during banner exchange Connection to 10.128.15.204 port 22 timed out scp: Connection closed run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit, types: [UNKNOWN] # git bisect bad b827ac419721a106ae2fccaa40576b0594edad92 Bisecting: 425 revisions left to test after this (roughly 9 steps) [46e14854fca4a262a823079c1958a204f983fa4e] bcachefs: Fix next_bucket() testing commit 46e14854fca4a262a823079c1958a204f983fa4e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d3d5287186c552f638fae7fecd4a18e60c9cbdeb09e92efa5e4a9d731f264c8a all runs: OK false negative chance: 0.000 # git bisect good 46e14854fca4a262a823079c1958a204f983fa4e Bisecting: 212 revisions left to test after this (roughly 8 steps) [ca630f1d3767c20026b33ba1603017e5c8e9da5a] bcachefs: Kill bch2_xattr_get() testing commit ca630f1d3767c20026b33ba1603017e5c8e9da5a gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 595ebbefb6ae9af8e23699d587c07c023fee8236d1f5d0f329db81231dc3a68b all runs: OK false negative chance: 0.000 # git bisect good ca630f1d3767c20026b33ba1603017e5c8e9da5a Bisecting: 106 revisions left to test after this (roughly 7 steps) [adc0e9509184da7204397f4d0410b61f75bac706] bcachefs: Delete a faulty assertion testing commit adc0e9509184da7204397f4d0410b61f75bac706 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f71bc37ceb8300353301382b5df897d4df2e91f1768681913652560b06076c6a all runs: OK false negative chance: 0.000 # git bisect good adc0e9509184da7204397f4d0410b61f75bac706 Bisecting: 53 revisions left to test after this (roughly 6 steps) [301e0237cadfc7c446e16eab6df38073ade3631d] bcachefs: chardev: return -EFAULT if copy_to_user() fails testing commit 301e0237cadfc7c446e16eab6df38073ade3631d gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1e9a10bc8be1b3fdde5768fd14cd4c4e331b868b07b01cf7f8cc90387dce2376 all runs: OK false negative chance: 0.000 # git bisect good 301e0237cadfc7c446e16eab6df38073ade3631d Bisecting: 26 revisions left to test after this (roughly 5 steps) [793a06d984511593c6375d219b38cc84f5a71aff] bcachefs: Fixes for building in userspace testing commit 793a06d984511593c6375d219b38cc84f5a71aff gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5650debacf3baeec5af64089a4832818f7b353af6265accb7a2ff9ab9c52dad0 all runs: OK false negative chance: 0.000 # git bisect good 793a06d984511593c6375d219b38cc84f5a71aff Bisecting: 13 revisions left to test after this (roughly 4 steps) [9af26120f06e03ee8cdd0f7d9f767f537f5148bd] bcachefs: Rename bch_sb_field_members -> bch_sb_field_members_v1 testing commit 9af26120f06e03ee8cdd0f7d9f767f537f5148bd gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c41754853440e8713936b38681878d11c4d30323da68c30937ffaa565da6ffa1 run #0: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #1: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #2: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #3: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #4: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit, types: [UNKNOWN] # git bisect bad 9af26120f06e03ee8cdd0f7d9f767f537f5148bd Bisecting: 6 revisions left to test after this (roughly 3 steps) [1ee608c65d652af30cf69eaca425d8a5c06712d7] bcachefs: Fall back to requesting passphrase directly testing commit 1ee608c65d652af30cf69eaca425d8a5c06712d7 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 05a08c72d9203d348729d7ae1f917a01c5bec74f9fe0ec9d44e75b0812a0f31d run #0: basic kernel testing failed: failed to copy binary to VM: timedout after 1m0s ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "/tmp/syz-executor178876619" "root@10.128.10.43:./syz-executor178876619"] Executing: program /usr/bin/ssh host 10.128.10.43, user root, command sftp OpenSSH_9.2p1 Debian-2+deb12u3, OpenSSL 3.0.15 3 Sep 2024 debug1: Reading configuration data /dev/null debug1: Connecting to 10.128.10.43 [10.128.10.43] port 22. debug1: fd 3 clearing O_NONBLOCK debug1: Connection established. debug1: identity file /root/.ssh/id_rsa type -1 debug1: identity file /root/.ssh/id_rsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa type -1 debug1: identity file /root/.ssh/id_ecdsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa_sk type -1 debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1 debug1: identity file /root/.ssh/id_ed25519 type -1 debug1: identity file /root/.ssh/id_ed25519-cert type -1 debug1: identity file /root/.ssh/id_ed25519_sk type -1 debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1 debug1: identity file /root/.ssh/id_xmss type -1 debug1: identity file /root/.ssh/id_xmss-cert type -1 debug1: identity file /root/.ssh/id_dsa type -1 debug1: identity file /root/.ssh/id_dsa-cert type -1 debug1: Local version string SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u3 debug1: Remote protocol version 2.0, remote software version OpenSSH_9.1 debug1: compat_banner: match: OpenSSH_9.1 pat OpenSSH* compat 0x04000000 debug1: Authenticating to 10.128.10.43:22 as 'root' debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug1: kex: algorithm: sntrup761x25519-sha512@openssh.com debug1: kex: host key algorithm: ssh-ed25519 debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: compression: none debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: compression: none debug1: expecting SSH2_MSG_KEX_ECDH_REPLY debug1: SSH2_MSG_KEX_ECDH_REPLY received debug1: Server host key: ssh-ed25519 SHA256:g5LT3corcdQiP3+7S3QNYL7lzLWO1gp/6X86Qtf82jk debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory Warning: Permanently added '10.128.10.43' (ED25519) to the list of known hosts. debug1: rekey out after 134217728 blocks debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug1: SSH2_MSG_NEWKEYS received debug1: rekey in after 134217728 blocks debug1: Will attempt key: /root/.ssh/id_rsa debug1: Will attempt key: /root/.ssh/id_ecdsa debug1: Will attempt key: /root/.ssh/id_ecdsa_sk debug1: Will attempt key: /root/.ssh/id_ed25519 debug1: Will attempt key: /root/.ssh/id_ed25519_sk debug1: Will attempt key: /root/.ssh/id_xmss debug1: Will attempt key: /root/.ssh/id_dsa debug1: SSH2_MSG_EXT_INFO received debug1: kex_input_ext_info: server-sig-algs= debug1: kex_input_ext_info: publickey-hostbound@openssh.com=<0> run #1: basic kernel testing failed: failed to copy binary to VM: timedout after 1m0s ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "/tmp/syz-executor2095753685" "root@10.128.15.194:./syz-executor2095753685"] Executing: program /usr/bin/ssh host 10.128.15.194, user root, command sftp OpenSSH_9.2p1 Debian-2+deb12u3, OpenSSL 3.0.15 3 Sep 2024 debug1: Reading configuration data /dev/null debug1: Connecting to 10.128.15.194 [10.128.15.194] port 22. debug1: fd 3 clearing O_NONBLOCK debug1: Connection established. debug1: identity file /root/.ssh/id_rsa type -1 debug1: identity file /root/.ssh/id_rsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa type -1 debug1: identity file /root/.ssh/id_ecdsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa_sk type -1 debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1 debug1: identity file /root/.ssh/id_ed25519 type -1 debug1: identity file /root/.ssh/id_ed25519-cert type -1 debug1: identity file /root/.ssh/id_ed25519_sk type -1 debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1 debug1: identity file /root/.ssh/id_xmss type -1 debug1: identity file /root/.ssh/id_xmss-cert type -1 debug1: identity file /root/.ssh/id_dsa type -1 debug1: identity file /root/.ssh/id_dsa-cert type -1 debug1: Local version string SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u3 debug1: Remote protocol version 2.0, remote software version OpenSSH_9.1 debug1: compat_banner: match: OpenSSH_9.1 pat OpenSSH* compat 0x04000000 debug1: Authenticating to 10.128.15.194:22 as 'root' debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug1: kex: algorithm: sntrup761x25519-sha512@openssh.com debug1: kex: host key algorithm: ssh-ed25519 debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: compression: none debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: compression: none debug1: expecting SSH2_MSG_KEX_ECDH_REPLY debug1: SSH2_MSG_KEX_ECDH_REPLY received debug1: Server host key: ssh-ed25519 SHA256:g5LT3corcdQiP3+7S3QNYL7lzLWO1gp/6X86Qtf82jk debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory Warning: Permanently added '10.128.15.194' (ED25519) to the list of known hosts. debug1: rekey out after 134217728 blocks debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug1: SSH2_MSG_NEWKEYS received debug1: rekey in after 134217728 blocks debug1: Will attempt key: /root/.ssh/id_rsa debug1: Will attempt key: /root/.ssh/id_ecdsa debug1: Will attempt key: /root/.ssh/id_ecdsa_sk debug1: Will attempt key: /root/.ssh/id_ed25519 debug1: Will attempt key: /root/.ssh/id_ed25519_sk debug1: Will attempt key: /root/.ssh/id_xmss debug1: Will attempt key: /root/.ssh/id_dsa debug1: SSH2_MSG_EXT_INFO received debug1: kex_input_ext_info: server-sig-algs= debug1: kex_input_ext_info: publickey-hostbound@openssh.com=<0> debug1: SSH2_MSG_SERVICE_ACCEPT received Authenticated to 10.128.15.194 ([10.128.15.194]:22) using "none". debug1: channel 0: new session [client-session] (inactive timeout: 0) debug1: Requesting no-more-sessions@openssh.com debug1: Entering interactive session. debug1: pledge: network debug1: client_input_global_request: rtype hostkeys-00@openssh.com want_reply 0 debug1: Sending subsystem: sftp debug1: pledge: fork scp: debug1: stat remote: No such file or directory scp: debug1: truncating at 987592 run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK false negative chance: 0.001 # git bisect good 1ee608c65d652af30cf69eaca425d8a5c06712d7 Bisecting: 3 revisions left to test after this (roughly 2 steps) [3c40841cdcf374d661ff14e7a707681342565166] bcachefs: fix crc32c checksum merge byte order problem testing commit 3c40841cdcf374d661ff14e7a707681342565166 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9e834f031e9679239a425532f8f3dcd8bdc8667c0464db1e0c29b93fa337818d run #0: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #1: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #2: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #3: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #4: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #5: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #6: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit, types: [UNKNOWN] # git bisect bad 3c40841cdcf374d661ff14e7a707681342565166 Bisecting: 0 revisions left to test after this (roughly 1 step) [4220666398de7f5127bab5437b5276b3eb155282] bcachefs: Fix bch2_inode_delete_keys() testing commit 4220666398de7f5127bab5437b5276b3eb155282 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5d80c49d55c8f7b0a08e0bb3b29db99fa4ba01011bc10e8eb42b2b495b3a2b2f run #0: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #1: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #2: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #3: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #4: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit, types: [UNKNOWN] # git bisect bad 4220666398de7f5127bab5437b5276b3eb155282 Bisecting: 0 revisions left to test after this (roughly 0 steps) [7dcf62c06d11195e8caecd7b2236aa5b07e3ef8c] bcachefs: Make btree root read errors recoverable testing commit 7dcf62c06d11195e8caecd7b2236aa5b07e3ef8c gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c1dad7b2eef0bd92b6fb7499d9bb86715f21e89a28a6a69f4008cf478d0ba68c run #0: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #1: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #2: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #3: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #4: crashed: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit, types: [UNKNOWN] # git bisect bad 7dcf62c06d11195e8caecd7b2236aa5b07e3ef8c 7dcf62c06d11195e8caecd7b2236aa5b07e3ef8c is the first bad commit commit 7dcf62c06d11195e8caecd7b2236aa5b07e3ef8c Author: Kent Overstreet Date: Tue Sep 26 17:21:21 2023 -0400 bcachefs: Make btree root read errors recoverable The entire btree will be lost, but that is better than the entire filesystem not being recoverable. Signed-off-by: Kent Overstreet fs/bcachefs/recovery.c | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) accumulated error probability: 0.00 culprit signature: c1dad7b2eef0bd92b6fb7499d9bb86715f21e89a28a6a69f4008cf478d0ba68c parent signature: 05a08c72d9203d348729d7ae1f917a01c5bec74f9fe0ec9d44e75b0812a0f31d reproducer is flaky (0.27 repro chance estimate) revisions tested: 27, total time: 8h35m41.331692535s (build: 3h52m48.557093562s, test: 4h27m33.993228064s) first bad commit: 7dcf62c06d11195e8caecd7b2236aa5b07e3ef8c bcachefs: Make btree root read errors recoverable recipients (to): ["kent.overstreet@linux.dev"] recipients (cc): [] crash: BUG: unable to handle kernel paging request in bch2_fs_btree_iter_exit workqueue: Failed to create a rescuer kthread for wq "bcachefs": -EINTR bcachefs (baafa011-d992-4344-aaf9-4ff0e0bec0ff): shutdown complete BUG: unable to handle page fault for address: ffffffffffffffa0 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 7c80067 P4D 7c80067 PUD 7c82067 PMD 0 Oops: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 1 PID: 3763 Comm: syz.3.17 Not tainted 6.6.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:bch2_fs_btree_iter_exit+0x242/0x260 fs/bcachefs/btree_iter.c:3168 Code: e1 07 38 c1 7c bd 48 89 df e8 7a ac 2d ff eb b3 49 83 c7 a0 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 ee ac 2d ff <49> 8b 1f e8 f6 9f 2d ff 48 c7 c7 00 1e a7 86 48 89 de e8 d7 69 c9 RSP: 0018:ffffc900042ff520 EFLAGS: 00010246 RAX: 1ffffffffffffff4 RBX: ffff888160b83e48 RCX: 1ffff1102c170760 RDX: 0000000000000000 RSI: ffffffff86b1e460 RDI: ffff888160b80000 RBP: ffff888160b80000 R08: ffff888160bc7177 R09: 1ffff1102c178e2e R10: dffffc0000000000 R11: ffffed102c178e2f R12: dffffc0000000000 R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffa0 FS: 00007fae062de6c0(0000) GS:ffff8881f6300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffa0 CR3: 0000000171a2e000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __bch2_fs_free fs/bcachefs/super.c:492 [inline] bch2_fs_release+0x17a/0x430 fs/bcachefs/super.c:539 kobject_cleanup lib/kobject.c:682 [inline] kobject_release lib/kobject.c:716 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x18c/0x350 lib/kobject.c:733 bch2_fs_alloc fs/bcachefs/super.c:886 [inline] bch2_fs_open+0x1c9f/0x2bb0 fs/bcachefs/super.c:1927 bch2_mount+0x564/0x1140 fs/bcachefs/fs.c:1829 legacy_get_tree+0xe9/0x180 fs/fs_context.c:638 vfs_get_tree+0x82/0x250 fs/super.c:1750 do_new_mount+0x1e5/0x940 fs/namespace.c:3335 do_mount fs/namespace.c:3675 [inline] __do_sys_mount fs/namespace.c:3884 [inline] __se_sys_mount+0x242/0x2e0 fs/namespace.c:3861 do_syscall_64+0x46/0xc0 entry_SYSCALL_64_after_hwframe+0x6f/0xd9 RIP: 0033:0x7fae055874ca Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fae062dde68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fae062ddef0 RCX: 00007fae055874ca RDX: 000000002000f640 RSI: 000000002000f680 RDI: 00007fae062ddeb0 RBP: 000000002000f640 R08: 00007fae062ddef0 R09: 0000000000000084 R10: 0000000000000084 R11: 0000000000000246 R12: 000000002000f680 R13: 00007fae062ddeb0 R14: 000000000000f62b R15: 0000000020000240 Modules linked in: CR2: ffffffffffffffa0 ---[ end trace 0000000000000000 ]--- RIP: 0010:bch2_fs_btree_iter_exit+0x242/0x260 fs/bcachefs/btree_iter.c:3168 Code: e1 07 38 c1 7c bd 48 89 df e8 7a ac 2d ff eb b3 49 83 c7 a0 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 ee ac 2d ff <49> 8b 1f e8 f6 9f 2d ff 48 c7 c7 00 1e a7 86 48 89 de e8 d7 69 c9 RSP: 0018:ffffc900042ff520 EFLAGS: 00010246 RAX: 1ffffffffffffff4 RBX: ffff888160b83e48 RCX: 1ffff1102c170760 RDX: 0000000000000000 RSI: ffffffff86b1e460 RDI: ffff888160b80000 RBP: ffff888160b80000 R08: ffff888160bc7177 R09: 1ffff1102c178e2e R10: dffffc0000000000 R11: ffffed102c178e2f R12: dffffc0000000000 R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffa0 FS: 00007fae062de6c0(0000) GS:ffff8881f6300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffa0 CR3: 0000000171a2e000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: e1 07 loope 0x9 2: 38 c1 cmp %al,%cl 4: 7c bd jl 0xffffffc3 6: 48 89 df mov %rbx,%rdi 9: e8 7a ac 2d ff call 0xff2dac88 e: eb b3 jmp 0xffffffc3 10: 49 83 c7 a0 add $0xffffffffffffffa0,%r15 14: 4c 89 f8 mov %r15,%rax 17: 48 c1 e8 03 shr $0x3,%rax 1b: 42 80 3c 30 00 cmpb $0x0,(%rax,%r14,1) 20: 74 08 je 0x2a 22: 4c 89 ff mov %r15,%rdi 25: e8 ee ac 2d ff call 0xff2dad18 * 2a: 49 8b 1f mov (%r15),%rbx <-- trapping instruction 2d: e8 f6 9f 2d ff call 0xff2da028 32: 48 c7 c7 00 1e a7 86 mov $0xffffffff86a71e00,%rdi 39: 48 89 de mov %rbx,%rsi 3c: e8 .byte 0xe8 3d: d7 xlat %ds:(%rbx) 3e: 69 .byte 0x69 3f: c9 leave