ci2 starts bisection 2023-04-22 06:24:28.344675691 +0000 UTC m=+75409.459503052 bisecting fixing commit since 7eaef76fbc4621ced374c85dbc000dd80dc681d7 building syzkaller on 7939252e4ddf50bbb9912069a40d32f6c83c4f8e ensuring issue is reproducible on original commit 7eaef76fbc4621ced374c85dbc000dd80dc681d7 testing commit 7eaef76fbc4621ced374c85dbc000dd80dc681d7 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 7f14ee37a79ae4317d56138be1d2ac373f98335a04ff18ed953b6dab1af64a15 run #0: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000c1e370] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #1: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000646b40] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #2: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000646c80] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #3: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000647220] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #4: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0006472c0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #5: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000ba5270] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #6: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000ba5360] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #7: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000ba5450] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #8: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000ba5630] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #9: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000c1ea00] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #10: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000c1ee10] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #11: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000647c70] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #12: crashed: BUG: unable to handle kernel paging request in txBegin run #13: crashed: BUG: unable to handle kernel paging request in txBegin run #14: crashed: BUG: unable to handle kernel paging request in txBegin run #15: crashed: BUG: unable to handle kernel paging request in txBegin run #16: crashed: BUG: unable to handle kernel paging request in txBegin run #17: crashed: BUG: unable to handle kernel paging request in txBegin run #18: crashed: BUG: unable to handle kernel paging request in txBegin run #19: crashed: BUG: unable to handle kernel paging request in txBegin testing current HEAD f17b0ab65d17988d5e6d6fe22f708ef3721080bf testing commit f17b0ab65d17988d5e6d6fe22f708ef3721080bf gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 0b4a8da45153a78644fdf0c57564184fb66d4d85ca646b8dee9451302424155e run #0: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000647310] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #1: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc003b2edc0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #2: crashed: BUG: unable to handle kernel paging request in txBegin run #3: crashed: BUG: unable to handle kernel paging request in txBegin run #4: crashed: BUG: unable to handle kernel paging request in txBegin run #5: crashed: BUG: unable to handle kernel paging request in txBegin run #6: crashed: BUG: unable to handle kernel paging request in txBegin run #7: crashed: BUG: unable to handle kernel paging request in txBegin run #8: crashed: BUG: unable to handle kernel paging request in txBegin run #9: crashed: BUG: unable to handle kernel paging request in txBegin revisions tested: 2, total time: 1h4m19.767853906s (build: 57m43.350955447s, test: 6m1.518656435s) the crash still happens on HEAD commit msg: Linux 6.1.25 crash: BUG: unable to handle kernel paging request in txBegin loop0: detected capacity change from 0 to 32768 find_entry called with index = 0 read_mapping_page failed! ERROR: (device loop0): txAbort: Unable to handle kernel paging request at virtual address dfff800000000008 KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] Mem abort info: ESR = 0x0000000096000006 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x06: level 2 translation fault Data abort info: ISV = 0, ISS = 0x00000006 CM = 0, WnR = 0 [dfff800000000008] address between user and kernel address ranges Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 4888 Comm: syz-executor.0 Not tainted 6.1.25-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : generic_test_bit include/asm-generic/bitops/generic-non-atomic.h:128 [inline] pc : txBegin+0x114/0x508 fs/jfs/jfs_txnmgr.c:366 lr : spin_lock include/linux/spinlock.h:350 [inline] lr : txBegin+0xc4/0x508 fs/jfs/jfs_txnmgr.c:357 sp : ffff80001c397840 x29: ffff80001c397860 x28: 0000000000000008 x27: 0000000000000150 x26: ffff0000e3c83bb0 x25: 0000000000000000 x24: 0000000000000040 x23: ffff80001477efe0 x22: ffff800018247368 x21: 0000000000000000 x20: 0000000000000000 x19: dfff800000000000 x18: 00000000000000ff x17: 0000000000000001 x16: ffff8000082c0038 x15: 0000000000000001 x14: 1ffff000028420b0 x13: dfff800000000000 x12: ffff700003872ef0 x11: 1ffff00003872ef0 x10: 0000000000000004 x9 : e3a206bc6eff7900 x8 : 1ffff000028ee888 x7 : ffff800009637274 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082c0168 x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: txBegin+0x114/0x508 fs/jfs/jfs_txnmgr.c:362 jfs_link+0x18c/0x4f4 fs/jfs/namei.c:802 vfs_link+0x3fc/0x57c fs/namei.c:4529 do_linkat+0x2a8/0x720 fs/namei.c:4600 __do_sys_linkat fs/namei.c:4628 [inline] __se_sys_linkat fs/namei.c:4625 [inline] __arm64_sys_linkat+0xe0/0xfc fs/namei.c:4625 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x7c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x160/0x1e4 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x54/0x178 arch/arm64/kernel/syscall.c:206 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581 Code: 94000101 aa1703e0 95e352a7 370802f5 (38736b88) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: 94000101 bl 0x404 4: aa1703e0 mov x0, x23 8: 95e352a7 bl 0x78d4aa4 c: 370802f5 tbnz w21, #1, 0x68 * 10: 38736b88 ldrb w8, [x28, x19] <-- trapping instruction