ci2 starts bisection 2023-06-11 22:05:57.861128774 +0000 UTC m=+128133.310460622 bisecting cause commit starting from 7641ff0a300a1b4891a18e19cfcf302bef928d30 building syzkaller on 49519f067f7fc9bfbf869e6851a4d398a9f7863f ensuring issue is reproducible on original commit 7641ff0a300a1b4891a18e19cfcf302bef928d30 testing commit 7641ff0a300a1b4891a18e19cfcf302bef928d30 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: acf3b00262c022bc442c332c0858cba36de2386bf10419907e7d8fd821ff8c57 all runs: crashed: kernel BUG in mmap_region testing release v6.1.25 testing commit f17b0ab65d17988d5e6d6fe22f708ef3721080bf gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d5cf2d7e2da1e54df04fe547afb8c8ba1da5e599fd0db7b43fb930ac7a2cfafd all runs: OK # git bisect start 7641ff0a300a1b4891a18e19cfcf302bef928d30 f17b0ab65d17988d5e6d6fe22f708ef3721080bf Bisecting: 2938 revisions left to test after this (roughly 12 steps) [d1a7e1ba6c43b81563222c3fec400efd65991c59] Revert "FROMLIST: irqchip: irq-meson-gpio: make it possible to build as a module" testing commit d1a7e1ba6c43b81563222c3fec400efd65991c59 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 39631cd78a762c5f71c511607b50bb05d5e17cc2292d097470e0028208e48e57 all runs: OK # git bisect good d1a7e1ba6c43b81563222c3fec400efd65991c59 Bisecting: 1468 revisions left to test after this (roughly 11 steps) [602558500f8f0f2fb07cb0da8773c0903dc45611] Merge "Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-6.1.y' into android14-6.1" into android14-6.1 testing commit 602558500f8f0f2fb07cb0da8773c0903dc45611 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: dc0636c87a550091dbb2f0efbf9b1be533cc4815ad4c1aa595ca347f90631658 all runs: OK # git bisect good 602558500f8f0f2fb07cb0da8773c0903dc45611 Bisecting: 734 revisions left to test after this (roughly 10 steps) [a789a7ef1a5b6bf4cc51bfa131c43005787ab691] UPSTREAM: iommu: Add max_pasids field in struct iommu_device testing commit a789a7ef1a5b6bf4cc51bfa131c43005787ab691 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: ebc22d60e91c8c7dcb3a4e3e614e9cb55f7f9f0a5455b9eaf8465ec5a43900cf all runs: OK # git bisect good a789a7ef1a5b6bf4cc51bfa131c43005787ab691 Bisecting: 367 revisions left to test after this (roughly 9 steps) [102b4685b37ec01fa9025eb4ea236f97f3c3a6c7] ANDROID: vendor_hooks: export get_wchan testing commit 102b4685b37ec01fa9025eb4ea236f97f3c3a6c7 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 2c4dd11bc667057f7b70a8cb2cc47480cdd7976b76a1eeb9e076ea6dffd82197 all runs: OK # git bisect good 102b4685b37ec01fa9025eb4ea236f97f3c3a6c7 Bisecting: 183 revisions left to test after this (roughly 8 steps) [8e6a28c81501df2b834bfd50b0466381616519b5] UPSTREAM: kcsan: Avoid READ_ONCE() in read_instrumented_memory() testing commit 8e6a28c81501df2b834bfd50b0466381616519b5 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: a92e1adb874bc6436963bfa930f88fdcec3657edbdbd0184c3a05651d3ddcb62 all runs: OK # git bisect good 8e6a28c81501df2b834bfd50b0466381616519b5 Bisecting: 91 revisions left to test after this (roughly 7 steps) [5dd0547a3e11360d08dadce8e9fc46df0288ab80] UPSTREAM: mm: replace vma->vm_flags direct modifications with modifier calls testing commit 5dd0547a3e11360d08dadce8e9fc46df0288ab80 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 7512c1bfb1735e11b8fe7c578ae2416860ea63cf283ad3a1debf6b55b442da70 all runs: crashed: kernel BUG in mmap_region # git bisect bad 5dd0547a3e11360d08dadce8e9fc46df0288ab80 Bisecting: 45 revisions left to test after this (roughly 6 steps) [7c8500869b9eb619f7c4f2edc7fadff4de1321ce] UPSTREAM: sched/fair: Consider capacity inversion in util_fits_cpu() testing commit 7c8500869b9eb619f7c4f2edc7fadff4de1321ce gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 497c3d92b2397fba6b9018b9381f00dea061eda23cf2c2a4e673ff43a01bc043 all runs: crashed: kernel BUG in mmap_region # git bisect bad 7c8500869b9eb619f7c4f2edc7fadff4de1321ce Bisecting: 22 revisions left to test after this (roughly 5 steps) [5ff9438fe11a81c9374e163d0be895acddc58685] FROMGIT: BACKPORT: mm/mmap: change do_vmi_align_munmap() for maple tree iterator changes testing commit 5ff9438fe11a81c9374e163d0be895acddc58685 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d00ff4068795df1e6ce4cb1714b10067036310c125c5127afc87e88e1438ec2e all runs: OK # git bisect good 5ff9438fe11a81c9374e163d0be895acddc58685 Bisecting: 11 revisions left to test after this (roughly 4 steps) [c959a3fc91922601a179922057ef36e8394e22c0] ANDROID: f2fs: enable cleancache testing commit c959a3fc91922601a179922057ef36e8394e22c0 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 1b7b0a264508dc9d86f3281c1a28da592714bdfc08ad1ffbe6a658d4a22eff66 all runs: crashed: kernel BUG in mmap_region # git bisect bad c959a3fc91922601a179922057ef36e8394e22c0 Bisecting: 5 revisions left to test after this (roughly 3 steps) [dbc16cc86a0d28e16afe18507fb11ae2e8b4f2bf] FROMGIT: maple_tree: relocate mas_rewalk() and mas_rewalk_if_dead() testing commit dbc16cc86a0d28e16afe18507fb11ae2e8b4f2bf gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d398795fd9213fe71b66df0b91f2b4f70cda3ab31e96fa37a37299dba854b195 all runs: OK # git bisect good dbc16cc86a0d28e16afe18507fb11ae2e8b4f2bf Bisecting: 2 revisions left to test after this (roughly 2 steps) [86d9de0898908aebc6b97a38c5dbf0f5b376643e] FROMGIT: maple_tree: clear up index and last setting in single entry tree testing commit 86d9de0898908aebc6b97a38c5dbf0f5b376643e gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: c7e9994f02a1725d7fb9a47fa26770d7e671ce14c815c569001b0fdc53bcccff all runs: OK # git bisect good 86d9de0898908aebc6b97a38c5dbf0f5b376643e Bisecting: 0 revisions left to test after this (roughly 1 step) [2ea053d31750f1be2b92d0d4ceece2504b9fc3ba] FROMGIT: userfaultfd: fix regression in userfaultfd_unmap_prep() testing commit 2ea053d31750f1be2b92d0d4ceece2504b9fc3ba gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 2a2f600eda70ad3a4b4bd8b26a0380f5abca96c27f9c8e30240b9e36149496fc all runs: crashed: kernel BUG in mmap_region # git bisect bad 2ea053d31750f1be2b92d0d4ceece2504b9fc3ba Bisecting: 0 revisions left to test after this (roughly 0 steps) [2f5f352e6ab38f361d615b0ca691ccc69d094818] FROMGIT: BACKPORT: mm: avoid rewalk in mmap_region testing commit 2f5f352e6ab38f361d615b0ca691ccc69d094818 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f660f3211a35f21ce69a7e1d028362f5f116c9cab8d958fb68ba2d76e10f7170 all runs: crashed: kernel BUG in mmap_region # git bisect bad 2f5f352e6ab38f361d615b0ca691ccc69d094818 2f5f352e6ab38f361d615b0ca691ccc69d094818 is the first bad commit commit 2f5f352e6ab38f361d615b0ca691ccc69d094818 Author: Liam R. Howlett Date: Thu May 18 10:55:44 2023 -0400 FROMGIT: BACKPORT: mm: avoid rewalk in mmap_region If the iterator has moved to the previous entry, then step forward one range, back to the gap. Link: https://lkml.kernel.org/r/20230518145544.1722059-36-Liam.Howlett@oracle.com Signed-off-by: Liam R. Howlett Cc: David Binderman Cc: Peng Zhang Cc: Sergey Senozhatsky Cc: Vernon Yang Cc: Wei Yang Signed-off-by: Andrew Morton (cherry picked from commit d3f028c7599ea2297dd630e1a6acaf4915c769d3 git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm mm-unstable) Bug: 274059236 Change-Id: Ic45e095c728095d41647a704a287596d03489cdf Signed-off-by: Suren Baghdasaryan mm/mmap.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) culprit signature: f660f3211a35f21ce69a7e1d028362f5f116c9cab8d958fb68ba2d76e10f7170 parent signature: c7e9994f02a1725d7fb9a47fa26770d7e671ce14c815c569001b0fdc53bcccff revisions tested: 15, total time: 4h5m24.872958931s (build: 2h26m4.466030456s, test: 1h37m29.523018541s) first bad commit: 2f5f352e6ab38f361d615b0ca691ccc69d094818 FROMGIT: BACKPORT: mm: avoid rewalk in mmap_region recipients (to): ["akpm@linux-foundation.org" "liam.howlett@oracle.com" "surenb@google.com"] recipients (cc): [] crash: kernel BUG in mmap_region Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f40c6100168 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 00007f40c55abf80 RCX: 00007f40c548c169 RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 RBP: 00007f40c61001d0 R08: 0000000000000003 R09: 0000000000000000 R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fff8a54f9ef R14: 00007f40c6100300 R15: 0000000000022000 ------------[ cut here ]------------ kernel BUG at mm/mmap.c:2618! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 528 Comm: syz-executor.0 Not tainted 6.1.25-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 RIP: 0010:mmap_region+0x1a9c/0x1b60 mm/mmap.c:2618 Code: 00 e9 d1 fc ff ff e8 a3 26 00 03 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 fd ff ff 48 89 df e8 ab d2 07 00 e9 59 fd ff ff 0f 0b <0f> 0b 65 8b 05 03 d5 66 7e 89 c3 48 89 d8 48 c1 e8 06 48 8d 3c c5 RSP: 0018:ffffc900011d7a60 EFLAGS: 00010212 RAX: 0000000020ffffff RBX: ffffc900011d7bc8 RCX: ffffffffffffff00 RDX: ffff8881116b0e00 RSI: ffffffffffffffff RDI: ffffc900011d7bc0 RBP: ffffc900011d7c70 R08: dffffc0000000000 R09: fffffbfff0c4a3fb R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900011d7bd0 R13: ffff888125717440 R14: 0000000021000000 R15: dffffc0000000000 FS: 00007f40c6100700(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f40c60ffff8 CR3: 0000000125867000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: do_mmap+0x856/0xa20 mm/mmap.c:1420 vm_mmap_pgoff+0x287/0x340 mm/util.c:524 ksys_mmap_pgoff+0xbc/0x140 mm/mmap.c:1466 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:93 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:86 [inline] __x64_sys_mmap+0x103/0x120 arch/x86/kernel/sys_x86_64.c:86 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f40c548c169 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f40c6100168 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 00007f40c55abf80 RCX: 00007f40c548c169 RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 RBP: 00007f40c61001d0 R08: 0000000000000003 R09: 0000000000000000 R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fff8a54f9ef R14: 00007f40c6100300 R15: 0000000000022000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:mmap_region+0x1a9c/0x1b60 mm/mmap.c:2618 Code: 00 e9 d1 fc ff ff e8 a3 26 00 03 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 fd ff ff 48 89 df e8 ab d2 07 00 e9 59 fd ff ff 0f 0b <0f> 0b 65 8b 05 03 d5 66 7e 89 c3 48 89 d8 48 c1 e8 06 48 8d 3c c5 RSP: 0018:ffffc900011d7a60 EFLAGS: 00010212 RAX: 0000000020ffffff RBX: ffffc900011d7bc8 RCX: ffffffffffffff00 RDX: ffff8881116b0e00 RSI: ffffffffffffffff RDI: ffffc900011d7bc0 RBP: ffffc900011d7c70 R08: dffffc0000000000 R09: fffffbfff0c4a3fb R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900011d7bd0 R13: ffff888125717440 R14: 0000000021000000 R15: dffffc0000000000 FS: 00007f40c6100700(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f40c55a80c0 CR3: 0000000125867000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 28 00 sub %al,(%rax) 2: 00 00 add %al,(%rax) 4: 75 05 jne 0xb 6: 48 83 c4 28 add $0x28,%rsp a: c3 retq b: e8 f1 19 00 00 callq 0x1a01 10: 90 nop 11: 48 89 f8 mov %rdi,%rax 14: 48 89 f7 mov %rsi,%rdi 17: 48 89 d6 mov %rdx,%rsi 1a: 48 89 ca mov %rcx,%rdx 1d: 4d 89 c2 mov %r8,%r10 20: 4d 89 c8 mov %r9,%r8 23: 4c 8b 4c 24 08 mov 0x8(%rsp),%r9 28: 0f 05 syscall * 2a: 48 3d 01 f0 ff ff cmp $0xfffffffffffff001,%rax <-- trapping instruction 30: 73 01 jae 0x33 32: c3 retq 33: 48 c7 c1 b8 ff ff ff mov $0xffffffffffffffb8,%rcx 3a: f7 d8 neg %eax 3c: 64 89 01 mov %eax,%fs:(%rcx) 3f: 48 rex.W