ci2 starts bisection 2023-06-27 11:32:24.043000363 +0000 UTC m=+74763.133348240 bisecting fixing commit since 521a547ced6477c54b4b0cc206000406c221b4d6 building syzkaller on dd9a85ff356d74a765888403f1b70faece9e642b ensuring issue is reproducible on original commit 521a547ced6477c54b4b0cc206000406c221b4d6 testing commit 521a547ced6477c54b4b0cc206000406c221b4d6 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: bdb0107436b2d97cc8310a223b1aeff346b53e9a7040fb72ebfb2d6edaa31859 run #0: crashed: INFO: rcu detected stall in corrupted run #1: crashed: INFO: rcu detected stall in corrupted run #2: crashed: INFO: rcu detected stall in corrupted run #3: crashed: INFO: rcu detected stall in corrupted run #4: crashed: INFO: rcu detected stall in corrupted run #5: crashed: INFO: rcu detected stall in corrupted run #6: crashed: INFO: rcu detected stall in corrupted run #7: crashed: INFO: rcu detected stall in corrupted run #8: crashed: INFO: rcu detected stall in corrupted run #9: crashed: INFO: rcu detected stall in corrupted run #10: crashed: INFO: rcu detected stall in corrupted run #11: crashed: INFO: rcu detected stall in corrupted run #12: crashed: INFO: rcu detected stall in corrupted run #13: crashed: BUG: unable to handle kernel paging request in inode_wait_for_writeback run #14: crashed: KASAN: out-of-bounds Write in end_buffer_read_sync run #15: crashed: KASAN: out-of-bounds Write in end_buffer_read_sync run #16: OK run #17: OK run #18: OK run #19: OK testing current HEAD 1ef6663a587ba3e57dc5065a477db1c64481eedd testing commit 1ef6663a587ba3e57dc5065a477db1c64481eedd gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: acf49f0e09cccbe1c0a27f8002b7d3ddcc815848e179e2ee5c600c0f5f580526 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #1: crashed: BUG: unable to handle kernel paging request in ___ratelimit run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK reproducer seems to be flaky crash still not fixed/happens on the oldest tested release Reproducer flagged being flaky revisions tested: 2, total time: 1h4m53.72758516s (build: 39m54.328804192s, test: 23m23.321638762s) crash still not fixed on HEAD or HEAD had kernel test errors commit msg: Merge tag 'tag-chrome-platform-for-v6.5' of git://git.kernel.org/pub/scm/linux/kernel/git/chrome-platform/linux crash: BUG: unable to handle kernel paging request in ___ratelimit loop3: detected capacity change from 0 to 4095 ntfs3: loop3: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only. BUG: unable to handle page fault for address: ffffed110f0a5527 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 23ffee067 P4D 23ffee067 PUD 0 Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 20996 Comm: syz-executor323 Not tainted 6.4.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 RIP: 0010:___ratelimit+0x136/0x4d0 Code: 00 e8 ee b7 46 f8 4c 89 ef e8 a6 6a 0f 00 85 c0 0f 84 e5 01 00 00 89 5c 24 14 49 8d 5d 50 48 89 d8 48 c1 e8 03 48 89 44 24 20 <42> 80 3c 30 00 74 08 48 89 df e8 cb 2f 89 f8 48 83 3b 00 75 46 48 RSP: 0018:ffffc9000c92f860 EFLAGS: 00010806 RAX: 1ffff1100f0a5528 RBX: ffff88807852a940 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: ffffffff898a7060 RDI: ffffc9000c92f740 RBP: ffffc9000c92f950 R08: dffffc0000000000 R09: fffffbfff1d3043d R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000000001f4 R13: ffff88807852a8f0 R14: dffffc00ffffffff R15: 1ffff92001925f14 FS: 00007f7433d87700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffed110f0a5527 CR3: 000000007b710000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ntfs_printk+0xc3/0x2c0 ntfs_fill_super+0x1c1b/0x3fa0 get_tree_bdev+0x422/0x680 vfs_get_tree+0x7f/0x220 do_new_mount+0x1e5/0x940 __se_sys_mount+0x20d/0x2a0 do_syscall_64+0x41/0xc0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f7433ddcd6a Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 d8 00 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f7433d87078 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f7433d870d0 RCX: 00007f7433ddcd6a RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f7433d87090 RBP: 000000000000000e R08: 00007f7433d870d0 R09: 00007f7433d876b8 R10: 0000000000000000 R11: 0000000000000286 R12: 00007f7433d87090 R13: 0000000020000350 R14: 0000000000000003 R15: 0000000000000004 Modules linked in: CR2: ffffed110f0a5527 ---[ end trace 0000000000000000 ]--- RIP: 0010:___ratelimit+0x136/0x4d0 Code: 00 e8 ee b7 46 f8 4c 89 ef e8 a6 6a 0f 00 85 c0 0f 84 e5 01 00 00 89 5c 24 14 49 8d 5d 50 48 89 d8 48 c1 e8 03 48 89 44 24 20 <42> 80 3c 30 00 74 08 48 89 df e8 cb 2f 89 f8 48 83 3b 00 75 46 48 RSP: 0018:ffffc9000c92f860 EFLAGS: 00010806 RAX: 1ffff1100f0a5528 RBX: ffff88807852a940 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: ffffffff898a7060 RDI: ffffc9000c92f740 RBP: ffffc9000c92f950 R08: dffffc0000000000 R09: fffffbfff1d3043d R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000000001f4 R13: ffff88807852a8f0 R14: dffffc00ffffffff R15: 1ffff92001925f14 FS: 00007f7433d87700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffed110f0a5527 CR3: 000000007b710000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 00 e8 add %ch,%al 2: ee out %al,(%dx) 3: b7 46 mov $0x46,%bh 5: f8 clc 6: 4c 89 ef mov %r13,%rdi 9: e8 a6 6a 0f 00 callq 0xf6ab4 e: 85 c0 test %eax,%eax 10: 0f 84 e5 01 00 00 je 0x1fb 16: 89 5c 24 14 mov %ebx,0x14(%rsp) 1a: 49 8d 5d 50 lea 0x50(%r13),%rbx 1e: 48 89 d8 mov %rbx,%rax 21: 48 c1 e8 03 shr $0x3,%rax 25: 48 89 44 24 20 mov %rax,0x20(%rsp) * 2a: 42 80 3c 30 00 cmpb $0x0,(%rax,%r14,1) <-- trapping instruction 2f: 74 08 je 0x39 31: 48 89 df mov %rbx,%rdi 34: e8 cb 2f 89 f8 callq 0xf8893004 39: 48 83 3b 00 cmpq $0x0,(%rbx) 3d: 75 46 jne 0x85 3f: 48 rex.W