ci2 starts bisection 2023-05-27 10:12:39.954628861 +0000 UTC m=+60452.916067824 bisecting fixing commit since 521a547ced6477c54b4b0cc206000406c221b4d6 building syzkaller on dd9a85ff356d74a765888403f1b70faece9e642b ensuring issue is reproducible on original commit 521a547ced6477c54b4b0cc206000406c221b4d6 testing commit 521a547ced6477c54b4b0cc206000406c221b4d6 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d8c1e6449d561a06812b2415d77245a8d16b8f0c483c07cb2dd0498869dfbcc3 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #1: crashed: INFO: rcu detected stall in corrupted run #2: crashed: INFO: rcu detected stall in corrupted run #3: crashed: INFO: rcu detected stall in corrupted run #4: crashed: INFO: rcu detected stall in corrupted run #5: crashed: INFO: rcu detected stall in corrupted run #6: crashed: KASAN: out-of-bounds Write in end_buffer_read_sync run #7: crashed: KASAN: out-of-bounds Write in end_buffer_read_sync run #8: crashed: KASAN: out-of-bounds Write in end_buffer_read_sync run #9: crashed: KASAN: out-of-bounds Write in end_buffer_read_sync run #10: crashed: WARNING: locking bug in writeback_single_inode run #11: crashed: BUG: unable to handle kernel paging request in inode_wait_for_writeback run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing current HEAD 49572d5361298711207ab387a6c318407deb963a testing commit 49572d5361298711207ab387a6c318407deb963a gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: bb8a117d12ab73cc21f14e06a28beba2805b8072ada099500db530be737a9d1d run #0: crashed: BUG: unable to handle kernel paging request in ___ratelimit run #1: crashed: WARNING: bad unlock balance in corrupted run #2: crashed: BUG: unable to handle kernel paging request in ___ratelimit run #3: crashed: BUG: unable to handle kernel paging request in ___ratelimit run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK reproducer seems to be flaky crash still not fixed/happens on the oldest tested release Reproducer flagged being flaky revisions tested: 2, total time: 57m42.975212602s (build: 32m53.581655896s, test: 23m34.211059567s) crash still not fixed on HEAD or HEAD had kernel test errors commit msg: Merge tag 'cxl-fixes-6.4-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/cxl/cxl crash: BUG: unable to handle kernel paging request in ___ratelimit BUG: unable to handle page fault for address: ffffed110f40a127 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 23ffee067 P4D 23ffee067 PUD 0 Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 15366 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/16/2023 RIP: 0010:___ratelimit+0x136/0x4d0 Code: 00 e8 1e 2a 48 f8 4c 89 ef e8 06 4e 0f 00 85 c0 0f 84 e5 01 00 00 89 5c 24 14 49 8d 5d 50 48 89 d8 48 c1 e8 03 48 89 44 24 20 <42> 80 3c 30 00 74 08 48 89 df e8 3b 7f 8a f8 48 83 3b 00 75 46 48 RSP: 0018:ffffc90005257860 EFLAGS: 00010806 RAX: 1ffff1100f40a128 RBX: ffff88807a050940 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: ffffffff898a72c0 RDI: ffffc90005257740 RBP: ffffc90005257950 R08: dffffc0000000000 R09: fffffbfff1d2e03d R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000000001f4 R13: ffff88807a0508f0 R14: dffffc00ffffffff R15: 1ffff92000a4af14 FS: 00007f08dc955700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffed110f40a127 CR3: 000000007ac10000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ntfs_printk+0xc3/0x2c0 ntfs_fill_super+0x1c1b/0x3fa0 get_tree_bdev+0x3da/0x620 vfs_get_tree+0x7f/0x220 do_new_mount+0x1e5/0x930 __se_sys_mount+0x20d/0x2a0 do_syscall_64+0x41/0xc0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f08db88a93a Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f08dc954f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f08db88a93a RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f08dc954fe0 RBP: 00007f08dc955020 R08: 00007f08dc955020 R09: 0000000020000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 R13: 0000000020000100 R14: 00007f08dc954fe0 R15: 0000000020003580 Modules linked in: CR2: ffffed110f40a127 ---[ end trace 0000000000000000 ]--- RIP: 0010:___ratelimit+0x136/0x4d0 Code: 00 e8 1e 2a 48 f8 4c 89 ef e8 06 4e 0f 00 85 c0 0f 84 e5 01 00 00 89 5c 24 14 49 8d 5d 50 48 89 d8 48 c1 e8 03 48 89 44 24 20 <42> 80 3c 30 00 74 08 48 89 df e8 3b 7f 8a f8 48 83 3b 00 75 46 48 RSP: 0018:ffffc90005257860 EFLAGS: 00010806 RAX: 1ffff1100f40a128 RBX: ffff88807a050940 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: ffffffff898a72c0 RDI: ffffc90005257740 RBP: ffffc90005257950 R08: dffffc0000000000 R09: fffffbfff1d2e03d R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000000001f4 R13: ffff88807a0508f0 R14: dffffc00ffffffff R15: 1ffff92000a4af14 FS: 00007f08dc955700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffed110f40a127 CR3: 000000007ac10000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: e8 1e 2a 48 f8 callq 0xf8482a23 5: 4c 89 ef mov %r13,%rdi 8: e8 06 4e 0f 00 callq 0xf4e13 d: 85 c0 test %eax,%eax f: 0f 84 e5 01 00 00 je 0x1fa 15: 89 5c 24 14 mov %ebx,0x14(%rsp) 19: 49 8d 5d 50 lea 0x50(%r13),%rbx 1d: 48 89 d8 mov %rbx,%rax 20: 48 c1 e8 03 shr $0x3,%rax 24: 48 89 44 24 20 mov %rax,0x20(%rsp) * 29: 42 80 3c 30 00 cmpb $0x0,(%rax,%r14,1) <-- trapping instruction 2e: 74 08 je 0x38 30: 48 89 df mov %rbx,%rdi 33: e8 3b 7f 8a f8 callq 0xf88a7f73 38: 48 83 3b 00 cmpq $0x0,(%rbx) 3c: 75 46 jne 0x84 3e: 48 rex.W