ci starts bisection 2023-03-31 22:17:42.280783118 +0000 UTC m=+208402.727131099 bisecting fixing commit since ab072681eabe1ce0a9a32d4baa1a27a2d046bc4a building syzkaller on 9dfcf09cf38eb123a007af28c5ee2562718893a0 ensuring issue is reproducible on original commit ab072681eabe1ce0a9a32d4baa1a27a2d046bc4a testing commit ab072681eabe1ce0a9a32d4baa1a27a2d046bc4a gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 13ae16adeaa5f0ac6fff3ff287421ab7a367a3e091342a5d5d769913e5845432 run #0: crashed: INFO: rcu detected stall in corrupted run #1: crashed: INFO: rcu detected stall in corrupted run #2: crashed: INFO: rcu detected stall in corrupted run #3: crashed: INFO: rcu detected stall in corrupted run #4: crashed: INFO: rcu detected stall in corrupted run #5: crashed: INFO: rcu detected stall in corrupted run #6: crashed: INFO: rcu detected stall in corrupted run #7: crashed: INFO: rcu detected stall in corrupted run #8: crashed: INFO: rcu detected stall in corrupted run #9: crashed: INFO: rcu detected stall in corrupted run #10: crashed: INFO: rcu detected stall in corrupted run #11: crashed: BUG: unable to handle kernel paging request in clear_user_rep_good run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing current HEAD 5a57b48fdfcb1e196292665d87fac46180344f8a testing commit 5a57b48fdfcb1e196292665d87fac46180344f8a gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: da2419688f6d8c388a073324081ded95ba8e3749d6dbb43d3dff5cba85202c75 run #0: crashed: BUG: unable to handle kernel paging request in clear_user_rep_good run #1: crashed: BUG: unable to handle kernel paging request in clear_user_rep_good run #2: crashed: BUG: unable to handle kernel paging request in clear_user_rep_good run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK reproducer seems to be flaky Reproducer flagged being flaky revisions tested: 2, total time: 38m50.971511503s (build: 20m42.010071079s, test: 17m13.985146271s) the crash still happens on HEAD commit msg: Merge tag 'platform-drivers-x86-v6.3-4' of git://git.kernel.org/pub/scm/linux/kernel/git/pdx86/platform-drivers-x86 crash: BUG: unable to handle kernel paging request in clear_user_rep_good BUG: unable to handle page fault for address: 0000000020081000 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 1ff9a067 P4D 1ff9a067 PUD 6d440067 PMD 6d5d2067 PTE 0 Oops: 0002 [#1] PREEMPT SMP KASAN CPU: 1 PID: 16674 Comm: syz-executor.5 Not tainted 6.3.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 RIP: 0010:clear_user_rep_good+0x1c/0x30 arch/x86/lib/clear_page_64.S:147 Code: 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 83 f9 40 72 a6 89 ca 48 c1 e9 03 74 03 f3 48 ab 83 e2 07 74 04 89 d1 aa 31 c0 c3 48 c1 e1 03 83 e2 07 48 01 d1 eb f1 0f 1f 00 f3 0f RSP: 0018:ffffc9000a9d7768 EFLAGS: 00050202 RAX: 0000000000000000 RBX: ffffc9000a9d7db0 RCX: 0000000000000002 RDX: 0000000000000002 RSI: ffffffff896b9220 RDI: 0000000020081000 RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffff8d6547d7 R10: fffffbfff1aca8fa R11: 0000000000086001 R12: 0000000000081002 R13: ffffc9000a9d7da8 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f5c841d6700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020081000 CR3: 0000000021c2c000 CR4: 0000000000350ee0 Call Trace: __clear_user arch/x86/include/asm/uaccess_64.h:103 [inline] clear_user arch/x86/include/asm/uaccess_64.h:124 [inline] iov_iter_zero+0x55f/0x1080 lib/iov_iter.c:794 iomap_dio_hole_iter fs/iomap/direct-io.c:383 [inline] iomap_dio_iter fs/iomap/direct-io.c:434 [inline] __iomap_dio_rw+0xb64/0x18d0 fs/iomap/direct-io.c:595 iomap_dio_rw+0xd/0x30 fs/iomap/direct-io.c:683 ext4_dio_read_iter fs/ext4/file.c:94 [inline] ext4_file_read_iter+0x3c8/0x570 fs/ext4/file.c:145 call_read_iter include/linux/fs.h:1845 [inline] do_iter_readv_writev+0x235/0x2e0 fs/read_write.c:733 do_iter_read+0x25f/0x690 fs/read_write.c:796 vfs_readv+0xc3/0x130 fs/read_write.c:916 do_preadv+0x151/0x1f0 fs/read_write.c:1008 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f5c8348c0c9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5c841d6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 RAX: ffffffffffffffda RBX: 00007f5c835abf80 RCX: 00007f5c8348c0c9 RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000003 RBP: 00007f5c834e7ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 000000000007fffe R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc92dd179f R14: 00007f5c841d6300 R15: 0000000000022000 Modules linked in: CR2: 0000000020081000 ---[ end trace 0000000000000000 ]--- RIP: 0010:clear_user_rep_good+0x1c/0x30 arch/x86/lib/clear_page_64.S:147 Code: 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 83 f9 40 72 a6 89 ca 48 c1 e9 03 74 03 f3 48 ab 83 e2 07 74 04 89 d1 aa 31 c0 c3 48 c1 e1 03 83 e2 07 48 01 d1 eb f1 0f 1f 00 f3 0f RSP: 0018:ffffc9000a9d7768 EFLAGS: 00050202 RAX: 0000000000000000 RBX: ffffc9000a9d7db0 RCX: 0000000000000002 RDX: 0000000000000002 RSI: ffffffff896b9220 RDI: 0000000020081000 RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffff8d6547d7 R10: fffffbfff1aca8fa R11: 0000000000086001 R12: 0000000000081002 R13: ffffc9000a9d7da8 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f5c841d6700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5eb01dd000 CR3: 0000000021c2c000 CR4: 0000000000350ee0 ---------------- Code disassembly (best guess): 0: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1) 7: 00 00 00 00 b: 0f 1f 00 nopl (%rax) e: f3 0f 1e fa endbr64 12: 48 83 f9 40 cmp $0x40,%rcx 16: 72 a6 jb 0xffffffbe 18: 89 ca mov %ecx,%edx 1a: 48 c1 e9 03 shr $0x3,%rcx 1e: 74 03 je 0x23 20: f3 48 ab rep stos %rax,%es:(%rdi) 23: 83 e2 07 and $0x7,%edx 26: 74 04 je 0x2c 28: 89 d1 mov %edx,%ecx * 2a: f3 aa rep stos %al,%es:(%rdi) <-- trapping instruction 2c: 31 c0 xor %eax,%eax 2e: c3 retq 2f: 48 c1 e1 03 shl $0x3,%rcx 33: 83 e2 07 and $0x7,%edx 36: 48 01 d1 add %rdx,%rcx 39: eb f1 jmp 0x2c 3b: 0f 1f 00 nopl (%rax) 3e: f3 repz 3f: 0f .byte 0xf