ci2 starts bisection 2025-03-10 00:55:09.105759517 +0000 UTC m=+87715.634849887
bisecting cause commit starting from b7c90e3e717abff6fe06445b98be306b732bbd2b
building syzkaller on 163f510d99dcf7239e56cef53bbca39db1f2fd9b
ensuring issue is reproducible on original commit b7c90e3e717abff6fe06445b98be306b732bbd2b
testing commit b7c90e3e717abff6fe06445b98be306b732bbd2b gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 6d88a7ab3003c0350639c95dc8fa302f7515c6897836a4ee9c356a0927d8b258
run #0: crashed: kernel BUG in qlist_free_all
run #1: crashed: general protection fault in tomoyo_socket_sendmsg_permission
run #2: crashed: kernel BUG in bch2_btree_node_iter_init
run #3: crashed: kernel BUG in bch2_btree_node_iter_init
run #4: crashed: kernel BUG in qlist_free_all
run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in bioset_exit
run #6: crashed: KASAN: slab-out-of-bounds Read in folio_try_get
run #7: crashed: BUG: unable to handle kernel NULL pointer dereference in bioset_exit
run #8: crashed: possible deadlock in get_partial_node
run #9: crashed: WARNING: locking bug in simple_recursive_removal
run #10: crashed: INFO: trying to register non-static key in try_to_wake_up
run #11: crashed: kernel BUG in qlist_free_all
run #12: crashed: possible deadlock in get_partial_node
run #13: crashed: WARNING in workingset_update_node
run #14: crashed: KASAN: user-memory-access Read in folio_try_get
run #15: crashed: KASAN: slab-use-after-free Read in folio_try_get
run #16: crashed: BUG: corrupted list in list_lru_del
run #17: crashed: BUG: corrupted list in evict
run #18: crashed: WARNING in delete_node
run #19: crashed: general protection fault in inode_permission
representative crash: kernel BUG in qlist_free_all, types: [BUG UNKNOWN KASAN]
check whether we can drop unnecessary instrumentation
disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit b7c90e3e717abff6fe06445b98be306b732bbd2b gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 458ce8b4a3e43dd7be7aec9cfc23a608a426cc66d5447dcffe5684bba938be29
run #0: crashed: BUG: corrupted list in new_inode
run #1: crashed: KASAN: wild-memory-access Read in lockref_get
run #2: crashed: KASAN: slab-use-after-free Read in folio_try_get
run #3: crashed: general protection fault in shmem_undo_range
run #4: crashed: kernel BUG in __bkey_unpack_pos
run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in qlist_free_all
run #6: crashed: WARNING in bioset_exit
run #7: crashed: WARNING in bioset_exit
run #8: crashed: BUG: corrupted list in list_lru_del
run #9: crashed: WARNING in bioset_exit
representative crash: BUG: corrupted list in new_inode, types: [BUG WARNING KASAN]
the bug reproduces without the instrumentation
disabling configs for [UBSAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed
kconfig minimization: base=4054 full=8254 leaves diff=2116
split chunks (needed=false): <2116>
split chunk #0 of len 2116 into 5 parts
testing without sub-chunk 1/5
disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit b7c90e3e717abff6fe06445b98be306b732bbd2b gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 29c0a8ca6cb611b26ffa4e7b973459b99fcd80b67602c90377c46af583df1faf
all runs: OK
false negative chance: 0.000
testing without sub-chunk 2/5
disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit b7c90e3e717abff6fe06445b98be306b732bbd2b gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: bd25a733e8d359a7ecddd5cf916b49f5c10d5cccb84c0111bf514425eaf6ade2
run #0: crashed: KASAN: null-ptr-deref Write in setup_udp_tunnel_sock
run #1: crashed: kernel BUG in bch2_btree_node_iter_init
run #2: crashed: BUG: unable to handle kernel paging request in bioset_exit
run #3: crashed: WARNING in bioset_exit
run #4: crashed: KASAN: wild-memory-access Read in fsnotify_detach_mark
run #5: crashed: KASAN: slab-use-after-free Write in btree_key_cache_fill
run #6: crashed: WARNING in bioset_exit
run #7: crashed: KASAN: slab-use-after-free Read in folio_try_get
run #8: crashed: general protection fault in shmem_undo_range
run #9: crashed: kernel BUG in qlist_free_all
representative crash: KASAN: null-ptr-deref Write in setup_udp_tunnel_sock, types: [KASAN BUG UNKNOWN]
the chunk can be dropped
testing without sub-chunk 3/5
disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN LOCKDEP], they are not needed
testing commit b7c90e3e717abff6fe06445b98be306b732bbd2b gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 08bf53f5ef3424e9ed03e5a1cb9cc615156720fa68365397b05b6be222e337b8
run #0: crashed: KASAN: slab-out-of-bounds Read in folio_try_get
run #1: crashed: stack segment fault in inode_permission
run #2: crashed: general protection fault in mempool_alloc_slab
run #3: crashed: BUG: corrupted list in evict
run #4: crashed: KASAN: user-memory-access Read in folio_try_get
run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in bioset_exit
run #6: crashed: WARNING in bioset_exit
run #7: crashed: KASAN: slab-use-after-free Read in folio_try_get
run #8: crashed: KASAN: slab-use-after-free Read in folio_try_get
run #9: crashed: WARNING in bioset_exit
representative crash: KASAN: slab-out-of-bounds Read in folio_try_get, types: [KASAN UNKNOWN WARNING]
the chunk can be dropped
testing without sub-chunk 4/5
disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit b7c90e3e717abff6fe06445b98be306b732bbd2b gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: aa42c5fddd67a641d253ffef705c7fb86d18c2fdc9a6edabcf5c8e96d91f8051
run #0: crashed: INFO: trying to register non-static key in sock_wfree
run #1: crashed: KASAN: slab-out-of-bounds Read in folio_try_get
run #2: crashed: stack segment fault in inode_permission
run #3: crashed: INFO: trying to register non-static key in sock_wfree
run #4: crashed: BUG: corrupted list in iget_locked
run #5: crashed: KASAN: wild-memory-access Read in folio_try_get
run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in bioset_exit
run #7: crashed: BUG: corrupted list in list_lru_del
run #8: crashed: KASAN: null-ptr-deref Write in jbd2_journal_commit_transaction
run #9: crashed: BUG: unable to handle kernel paging request in lockref_get
representative crash: INFO: trying to register non-static key in sock_wfree, types: [UNKNOWN KASAN]
the chunk can be dropped
testing without sub-chunk 5/5
disabling configs for [UBSAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed
testing commit b7c90e3e717abff6fe06445b98be306b732bbd2b gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 649af7268ffaeafd2f0e0cf9f643485db1ee59a6f94c9be6d6aedc8d3599602c
run #0: crashed: general protection fault in kernfs_dop_revalidate
run #1: crashed: general protection fault in kernfs_dop_revalidate
run #2: crashed: BUG: corrupted list in list_lru_del
run #3: crashed: kernel BUG in qlist_free_all
run #4: crashed: KASAN: wild-memory-access Read in page_cache_ra_unbounded
run #5: crashed: KASAN: slab-use-after-free Read in folio_try_get
run #6: crashed: WARNING in bioset_exit
run #7: crashed: WARNING in bioset_exit
run #8: crashed: WARNING in bioset_exit
run #9: crashed: WARNING in bioset_exit
representative crash: WARNING in bioset_exit, types: [WARNING UNKNOWN BUG]
the chunk can be dropped
minimized to 424 configs; suspects: [6LOWPAN 6LOWPAN_GHC_EXT_HDR_DEST 6LOWPAN_GHC_EXT_HDR_FRAG 6LOWPAN_GHC_EXT_HDR_HOP 6LOWPAN_GHC_EXT_HDR_ROUTE 6LOWPAN_GHC_ICMPV6 6LOWPAN_GHC_UDP 6LOWPAN_NHC 6LOWPAN_NHC_DEST 6LOWPAN_NHC_FRAGMENT 6LOWPAN_NHC_HOP 6LOWPAN_NHC_IPV6 6LOWPAN_NHC_MOBILITY 6LOWPAN_NHC_ROUTING 6LOWPAN_NHC_UDP 6PACK 842_COMPRESS 842_DECOMPRESS 9P_FSCACHE 9P_FS_POSIX_ACL 9P_FS_SECURITY ACORN_PARTITION ACORN_PARTITION_ADFS ACORN_PARTITION_CUMANA ACORN_PARTITION_EESOX ACORN_PARTITION_ICS ACORN_PARTITION_POWERTEC ACORN_PARTITION_RISCIX ACPI_NFIT ACPI_NHLT ACPI_PLATFORM_PROFILE ADFS_FS AFFS_FS AFS_FS AFS_FSCACHE AF_KCM AF_RXRPC AF_RXRPC_IPV6 AIX_PARTITION AMD_SFH_HID AMIGA_PARTITION ANDROID_BINDER_IPC ANON_VMA_NAME APERTURE_HELPERS APPLE_MFI_FASTCHARGE AR5523 ARCH_ENABLE_MEMORY_HOTREMOVE ARCH_ENABLE_THP_MIGRATION ARCH_HAS_USER_SHADOW_STACK ARCH_SUPPORTS_HUGE_PFNMAP ARCH_SUPPORTS_PMD_PFNMAP ARCH_SUPPORTS_PUD_PFNMAP ARCH_WANT_PMD_MKWRITE ASM_MODVERSIONS ASUS_TF103C_DOCK ASYNC_CORE ASYNC_MEMCPY ASYNC_PQ ASYNC_RAID6_RECOV ASYNC_TX_DMA ASYNC_XOR ATARI_PARTITION ATA_GENERIC ATA_OVER_ETH ATH10K ATH10K_CE ATH10K_LEDS ATH10K_PCI ATH10K_USB ATH11K ATH6KL ATH6KL_USB ATH9K ATH9K_AHB ATH9K_BTCOEX_SUPPORT ATH9K_CHANNEL_CONTEXT ATH9K_COMMON ATH9K_COMMON_DEBUG ATH9K_COMMON_SPECTRAL ATH9K_DEBUGFS ATH9K_DYNACK ATH9K_HTC ATH9K_HTC_DEBUGFS ATH9K_HW ATH9K_PCI ATH9K_PCOEM ATH9K_RFKILL ATH_COMMON ATM ATM_BR2684 ATM_CLIP ATM_DRIVERS ATM_LANE ATM_MPOA ATM_TCP AUXILIARY_BUS AX25 AX25_DAMA_SLAVE AX88796B_PHY BAREUDP BATMAN_ADV BATMAN_ADV_BATMAN_V BATMAN_ADV_BLA BATMAN_ADV_DAT BATMAN_ADV_MCAST BATMAN_ADV_NC BCACHE BCACHEFS_DEBUG BCACHEFS_ERASURE_CODING BCACHEFS_FS BCACHEFS_POSIX_ACL BCACHEFS_QUOTA BCACHEFS_SIX_OPTIMISTIC_SPIN BCMA BCMA_HOST_PCI_POSSIBLE BEFS_FS BFQ_CGROUP_DEBUG BFQ_GROUP_IOSCHED BFS_FS BIG_KEYS BLK_CGROUP_PUNT_BIO BLK_CGROUP_RWSTAT BLK_DEV_BSGLIB BLK_DEV_INTEGRITY BLK_DEV_NBD BLK_DEV_NULL_BLK BLK_DEV_NULL_BLK_FAULT_INJECTION BLK_DEV_NVME BLK_DEV_PMEM BLK_DEV_RAM BLK_DEV_RNBD BLK_DEV_RNBD_CLIENT BLK_DEV_THROTTLING BLK_DEV_ZONED BLK_ICQ BLK_INLINE_ENCRYPTION BLK_INLINE_ENCRYPTION_FALLBACK BLK_WBT BLK_WBT_MQ BONDING BOOT_VESA_SUPPORT BPF_EVENTS BPF_JIT BPF_JIT_ALWAYS_ON BPF_JIT_DEFAULT_ON BPF_LSM BPF_PRELOAD BPF_PRELOAD_UMD BPF_STREAM_PARSER BPF_SYSCALL BPQETHER BRIDGE BRIDGE_CFM BRIDGE_EBT_802_3 BRIDGE_EBT_AMONG BRIDGE_EBT_ARP BRIDGE_EBT_ARPREPLY BRIDGE_EBT_BROUTE BRIDGE_EBT_DNAT BRIDGE_EBT_IP BRIDGE_EBT_IP6 BRIDGE_EBT_LIMIT BRIDGE_EBT_LOG BRIDGE_EBT_MARK BRIDGE_EBT_MARK_T BRIDGE_EBT_NFLOG BRIDGE_EBT_PKTTYPE BRIDGE_EBT_REDIRECT BRIDGE_EBT_SNAT BRIDGE_EBT_STP BRIDGE_EBT_T_FILTER BRIDGE_EBT_T_NAT BRIDGE_EBT_VLAN BRIDGE_IGMP_SNOOPING BRIDGE_MRP BRIDGE_NF_EBTABLES BRIDGE_NF_EBTABLES_LEGACY BRIDGE_VLAN_FILTERING BSD_DISKLABEL BSD_PROCESS_ACCT_V3 BT BTRFS_ASSERT BTRFS_FS BTRFS_FS_POSIX_ACL BTRFS_FS_REF_VERIFY BTT BT_6LOWPAN BT_ATH3K BT_BCM BT_BNEP BT_BNEP_MC_FILTER BT_BNEP_PROTO_FILTER BT_BREDR BT_HCIBCM203X BT_HCIBFUSB BT_HCIBPA10X BT_HCIBTUSB BT_HCIBTUSB_AUTOSUSPEND BT_HCIBTUSB_BCM BT_HCIBTUSB_MTK BT_HCIBTUSB_POLL_SYNC BT_HCIBTUSB_RTL BT_HCIUART BT_HCIUART_3WIRE BT_HCIUART_AG6XX BT_HCIUART_BCSP BT_HCIUART_H4 BT_HCIUART_LL BT_HCIUART_MRVL BT_HCIUART_QCA BT_HCIUART_SERDEV BT_HCIVHCI BT_INTEL BT_LE BT_LEDS BT_LE_L2CAP_ECRED BT_MRVL BT_MRVL_SDIO BT_MSFTEXT BT_MTK BT_MTKSDIO BT_MTKUART BT_QCA BT_RFCOMM BT_RFCOMM_TTY BT_RTL CACHEFILES CAIF CAIF_DEBUG CAIF_DRIVERS CAIF_NETDEV CAIF_TTY CAIF_USB CAIF_VIRTIO CAN CAN_8DEV_USB CAN_BCM CAN_CALC_BITTIMING CAN_DEV CAN_EMS_USB CAN_ESD_USB CAN_ETAS_ES58X CAN_F81604 CAN_GS_USB CAN_GW CAN_IFI_CANFD CAN_ISOTP CAN_J1939 CAN_KVASER_USB CAN_MCBA_USB CAN_NETLINK CAN_PEAK_USB CAN_RAW CAN_RX_OFFLOAD CAN_SLCAN CAN_UCAN CAN_VCAN CAN_VXCAN CARL9170 CARL9170_HWRNG CARL9170_LEDS CARL9170_WPC CEC_CORE CEPH_FS CEPH_FSCACHE CEPH_FS_POSIX_ACL CEPH_LIB CEPH_LIB_USE_DNS_RESOLVER CFG80211 CFG80211_CRDA_SUPPORT CFG80211_DEBUGFS CFG80211_DEFAULT_PS CFG80211_REQUIRE_SIGNED_REGDB CFG80211_USE_KERNEL_REGDB_KEYS CFG80211_WEXT CFS_BANDWIDTH CGROUP_BPF CHARGER_ISP1704 CHR_DEV_ST CIFS CIFS_ALLOW_INSECURE_LEGACY CIFS_DEBUG CIFS_DFS_UPCALL CIFS_FSCACHE CIFS_POSIX CIFS_SMB_DIRECT CIFS_SWN_UPCALL CIFS_UPCALL CIFS_XATTR CLOSURES CLS_U32_MARK CLS_U32_PERF CMA CMA_SIZE_SEL_MAX CMDLINE_PARTITION COMEDI COMEDI_DT9812 COMEDI_NI_USB6501 COMEDI_USBDUX COMEDI_USBDUXFAST COMEDI_USBDUXSIGMA COMEDI_USB_DRIVERS COMEDI_VMK80XX COMPAT_NETLINK_MESSAGES COUNTER CRAMFS CRAMFS_BLOCKDEV CRAMFS_MTD CRC4 CRC64 CRC64_ROCKSOFT CRC7 CRC8 CRC_ITU_T CRC_T10DIF CRC_T10DIF_ARCH CRYPTO_842 CRYPTO_ADIANTUM CRYPTO_AEGIS128 CRYPTO_AEGIS128_AESNI_SSE2 CRYPTO_AES_NI_INTEL CRYPTO_AES_TI CRYPTO_ANSI_CPRNG CRYPTO_ANUBIS CRYPTO_ARC4 CRYPTO_ARCH_HAVE_LIB_BLAKE2S CRYPTO_ARCH_HAVE_LIB_CHACHA CRYPTO_ARCH_HAVE_LIB_CURVE25519 CRYPTO_ARCH_HAVE_LIB_POLY1305 CRYPTO_ARIA CRYPTO_ARIA_AESNI_AVX_X86_64 CRYPTO_BLAKE2B CRYPTO_BLAKE2S_X86 CRYPTO_BLOWFISH CRYPTO_BLOWFISH_COMMON CRYPTO_BLOWFISH_X86_64 CRYPTO_CAMELLIA CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 CRYPTO_CAMELLIA_AESNI_AVX_X86_64 CRYPTO_CAMELLIA_X86_64 CRYPTO_CAST5 CRYPTO_CAST5_AVX_X86_64 CRYPTO_CAST6 CRYPTO_CAST6_AVX_X86_64 CRYPTO_CAST_COMMON CRYPTO_CHACHA20 CRYPTO_CHACHA20POLY1305 CRYPTO_CHACHA20_X86_64 CRYPTO_CRC32 CRYPTO_CRC32C CRYPTO_CRC64_ROCKSOFT CRYPTO_CRYPTD CRYPTO_CTS CRYPTO_CURVE25519 CRYPTO_CURVE25519_X86 CRYPTO_DEFLATE CRYPTO_DES CRYPTO_DES3_EDE_X86_64 CRYPTO_DEV_CCP CRYPTO_DEV_CCP_DD CRYPTO_DEV_PADLOCK CRYPTO_DEV_PADLOCK_AES CRYPTO_DEV_PADLOCK_SHA CRYPTO_DEV_QAT CRYPTO_DEV_QAT_C3XXX CRYPTO_DEV_QAT_C3XXXVF CRYPTO_DEV_QAT_C62X CRYPTO_DEV_QAT_C62XVF CRYPTO_DEV_QAT_DH895xCC CRYPTO_DEV_QAT_DH895xCCVF CRYPTO_DEV_VIRTIO CRYPTO_DH CRYPTO_DRBG_CTR CRYPTO_DRBG_HASH CRYPTO_ECDH CRYPTO_ECRDSA CRYPTO_ENGINE CRYPTO_ESSIV CRYPTO_FCRYPT CRYPTO_GHASH_CLMUL_NI_INTEL CRYPTO_HCTR2 CRYPTO_KDF800108_CTR CRYPTO_KHAZAD CRYPTO_KPP CRYPTO_LIB_ARC4 CRYPTO_LIB_CHACHA CRYPTO_LIB_CHACHA20POLY1305 CRYPTO_LIB_CHACHA_GENERIC CRYPTO_LIB_CURVE25519 CRYPTO_LIB_CURVE25519_GENERIC CRYPTO_LIB_DES CRYPTO_LIB_POLY1305 CRYPTO_LIB_POLY1305_GENERIC CRYPTO_LRW CRYPTO_LZ4 CRYPTO_LZ4HC CRYPTO_MICHAEL_MIC CRYPTO_NHPOLY1305 CRYPTO_NHPOLY1305_AVX2 CRYPTO_NHPOLY1305_SSE2 CRYPTO_PCBC CRYPTO_PCRYPT CRYPTO_POLY1305 CRYPTO_POLY1305_X86_64 CRYPTO_POLYVAL CRYPTO_POLYVAL_CLMUL_NI CRYPTO_RMD160 CRYPTO_SEED CRYPTO_SERPENT CRYPTO_SERPENT_AVX2_X86_64 CRYPTO_SERPENT_AVX_X86_64 CRYPTO_SERPENT_SSE2_X86_64 CRYPTO_SHA1_SSSE3 CRYPTO_SHA256_SSSE3 CRYPTO_SHA512_SSSE3 CRYPTO_SIMD CRYPTO_SM3 CRYPTO_SM3_AVX_X86_64 CRYPTO_SM4 CRYPTO_SM4_AESNI_AVX2_X86_64 CRYPTO_SM4_AESNI_AVX_X86_64 CRYPTO_SM4_GENERIC CRYPTO_STREEBOG CRYPTO_TEA CRYPTO_TWOFISH CRYPTO_TWOFISH_AVX_X86_64 CRYPTO_TWOFISH_COMMON CRYPTO_TWOFISH_X86_64 CRYPTO_TWOFISH_X86_64_3WAY CRYPTO_USER CRYPTO_USER_API CRYPTO_USER_API_AEAD CRYPTO_USER_API_ENABLE_OBSOLETE CRYPTO_USER_API_HASH CRYPTO_USER_API_RNG CRYPTO_USER_API_SKCIPHER CRYPTO_WP512 CRYPTO_XCBC CRYPTO_XCTR CRYPTO_XTS CRYPTO_XXHASH CRYPTO_ZSTD CUSE CYPRESS_FIRMWARE DAMON DAMON_PADDR DAMON_RECLAIM DAMON_VADDR DAX DCA DCB DEFAULT_CODEL DEVICE_MIGRATION DEVICE_PRIVATE DEV_COREDUMP DEV_DAX DLN2_ADC DMABUF_HEAPS DMABUF_HEAPS_CMA DMABUF_HEAPS_SYSTEM DMABUF_MOVE_NOTIFY DMA_CMA DMA_ENGINE_RAID DM_AUDIT DM_BIO_PRISON DM_BUFIO DM_CACHE DM_CACHE_SMQ DM_CLONE DM_CRYPT DM_FLAKEY DM_INTEGRITY DM_MULTIPATH DM_MULTIPATH_QL DM_MULTIPATH_ST DM_PERSISTENT_DATA DM_RAID DM_SNAPSHOT DM_THIN_PROVISIONING DM_UEVENT DM_VERITY DM_VERITY_FEC DM_WRITECACHE DM_ZONED DRAGONRISE_FF DRM DRM_AUX_BRIDGE DRM_BOCHS DRM_BRIDGE DRM_BUDDY DRM_CIRRUS_QEMU DRM_CLIENT DRM_CLIENT_DEFAULT_FBDEV DRM_CLIENT_LIB DRM_CLIENT_SELECTION DRM_CLIENT_SETUP DRM_DEBUG_MM DRM_DISPLAY_DP_AUX_BUS DRM_DISPLAY_DP_HELPER DRM_DISPLAY_DSC_HELPER DRM_DISPLAY_HDCP_HELPER DRM_DISPLAY_HDMI_HELPER DRM_DISPLAY_HELPER DRM_FBDEV_EMULATION DRM_GEM_SHMEM_HELPER DRM_GM12U320 DRM_GUD ENCRYPTED_KEYS FSCACHE FUSE_FS GPIOLIB HAMRADIO HID_DRAGONRISE IIO INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_RTRS_CLIENT IOSCHED_BFQ LIBNVDIMM MAC80211 MAC80211_DEBUGFS MAC80211_LEDS MEDIA_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MMC MTD NET_CLS_U32 NET_SCH_DEFAULT PARTITION_ADVANCED RFKILL SERIAL_DEV_BUS TLS TLS_DEVICE TRANSPARENT_HUGEPAGE TRUSTED_KEYS USB_GADGET USB_PHY VLAN_8021Q WANT_COMPAT_NETLINK_MESSAGES WEXT_CORE WIRELESS WLAN WLAN_VENDOR_ATH X86_X32_ABI ZONE_DEVICE]
disabling configs for [LEAK UBSAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed
picked [v6.13 v6.12 v6.11 v6.9 v6.7 v6.5 v6.3 v6.1 v5.18 v5.15 v5.12 v5.9 v5.6 v5.3 v5.0 v4.19] out of 36 release tags
testing release v6.13
testing commit ffd294d346d185b70e28b1a28abe367bbfe53c04 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 923388f5ef5f410c872515cc6321a0d49b5549666ae974e79e42d16eb17f81a6
all runs: OK
false negative chance: 0.000
# git bisect start b7c90e3e717abff6fe06445b98be306b732bbd2b ffd294d346d185b70e28b1a28abe367bbfe53c04
Bisecting: 5798 revisions left to test after this (roughly 13 steps)
[ae2d4fc540cd27d667d10597b6ad8cc4c6ce622a] Merge tag 'tpmdd-next-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd
testing commit ae2d4fc540cd27d667d10597b6ad8cc4c6ce622a gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: a0667255cc906b2a87932cf33ad39baf187321012f44b067efe05716459ac877
run #0: crashed: BUG: unable to handle kernel paging request in proc_invalidate_siblings_dcache
run #1: crashed: general protection fault in kernfs_dop_revalidate
run #2: crashed: WARNING in bioset_exit
run #3: crashed: kernel BUG in shmem_undo_range
run #4: crashed: general protection fault in __d_alloc
run #5: crashed: kernel BUG in __bkey_unpack_pos
run #6: crashed: kernel BUG in bch2_btree_path_level_init
run #7: crashed: KASAN: slab-use-after-free Read in folio_try_get
run #8: crashed: BUG: corrupted list in evict
run #9: crashed: BUG: workqueue lockup
representative crash: BUG: unable to handle kernel paging request in proc_invalidate_siblings_dcache, types: [UNKNOWN BUG]
# git bisect bad ae2d4fc540cd27d667d10597b6ad8cc4c6ce622a
Bisecting: 3205 revisions left to test after this (roughly 12 steps)
[5f537664e705b0bf8b7e329861f20128534f6a83] cachestat: fix page cache statistics permission checking
testing commit 5f537664e705b0bf8b7e329861f20128534f6a83 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 7d02f24e572ebe59faefb545124b1167cb96830b39d80cb157fc666ef610e00d
run #0: crashed: KASAN: wild-memory-access Read in __radix_tree_delete
run #1: crashed: kernel BUG in bch2_btree_path_level_init
run #2: crashed: general protection fault in bioset_exit
run #3: crashed: BUG: unable to handle kernel paging request in proc_invalidate_siblings_dcache
run #4: crashed: kernel BUG in shmem_undo_range
run #5: crashed: BUG: corrupted list in __es_insert_extent
run #6: crashed: general protection fault in locks_remove_posix
run #7: crashed: WARNING in bioset_exit
run #8: crashed: kernel BUG in bch2_btree_path_level_init
run #9: crashed: WARNING: locking bug in fast_dput
representative crash: kernel BUG in bch2_btree_path_level_init, types: [BUG UNKNOWN KASAN]
# git bisect bad 5f537664e705b0bf8b7e329861f20128534f6a83
Bisecting: 1258 revisions left to test after this (roughly 10 steps)
[c0e75905caf368e19aab585d20151500e750de89] Merge tag 'trace-sorttable-v6.14' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace
testing commit c0e75905caf368e19aab585d20151500e750de89 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 215d627b5a8f3c03f3ea12a2ba92c0dc53a85e523739de69e97aead0788a8f08
run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in rcu_core
run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in bch2_prt_vprintf
run #2: crashed: kernel BUG in bch2_btree_path_level_init
run #3: crashed: WARNING in bioset_init
run #4: crashed: kernel BUG in bch2_btree_path_level_init
run #5: crashed: KASAN: wild-memory-access Read in sock_wfree
run #6: crashed: KASAN: slab-out-of-bounds Read in folio_try_get
run #7: crashed: BUG: corrupted list in evict
run #8: crashed: WARNING in bioset_exit
run #9: crashed: KASAN: wild-memory-access Read in d_walk
representative crash: kernel BUG in bch2_btree_path_level_init, types: [BUG KASAN UNKNOWN]
# git bisect bad c0e75905caf368e19aab585d20151500e750de89
Bisecting: 664 revisions left to test after this (roughly 9 steps)
[3d3a9c8b89d4f8a3785e06ffd15405c670696f02] Merge tag 'dlm-6.14' of git://git.kernel.org/pub/scm/linux/kernel/git/teigland/linux-dlm
testing commit 3d3a9c8b89d4f8a3785e06ffd15405c670696f02 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: b2650c80b8852c3b418860637b2ed92d58c34f0e5d4622f8ea77910cfe6d4834
run #0: crashed: KASAN: slab-out-of-bounds Read in folio_try_get
run #1: crashed: KASAN: wild-memory-access Read in __radix_tree_delete
run #2: crashed: kernel BUG in bch2_btree_path_level_init
run #3: crashed: kernel BUG in bch2_btree_path_level_init
run #4: crashed: kernel BUG in bch2_btree_path_level_init
run #5: crashed: general protection fault in kernfs_dop_revalidate
run #6: crashed: general protection fault in locks_remove_posix
run #7: crashed: kernel BUG in shmem_undo_range
run #8: crashed: BUG: corrupted list in evict
run #9: crashed: WARNING in bioset_exit
representative crash: kernel BUG in bch2_btree_path_level_init, types: [BUG KASAN UNKNOWN]
# git bisect bad 3d3a9c8b89d4f8a3785e06ffd15405c670696f02
Bisecting: 287 revisions left to test after this (roughly 8 steps)
[0eb4aaa230d725fa9b1cd758c0f17abca5597af6] Merge tag 'for-6.14-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux
testing commit 0eb4aaa230d725fa9b1cd758c0f17abca5597af6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 7d783abc8ac5d18bcea164569a8a130d44f4c8b5019a22f23326cb4dbbc25406
all runs: OK
false negative chance: 0.000
# git bisect good 0eb4aaa230d725fa9b1cd758c0f17abca5597af6
Bisecting: 143 revisions left to test after this (roughly 7 steps)
[4746ee182a76bbe4dd847180b0c8b575756b0d0d] bcachefs: Check for inode journal seq in the future
testing commit 4746ee182a76bbe4dd847180b0c8b575756b0d0d gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 9478d50bd2965e76ff632206223c67c1b5e42329e8c672aeca76bd089abef70a
run #0: crashed: kernel BUG in shmem_undo_range
run #1: crashed: kernel BUG in __bkey_unpack_pos
run #2: crashed: kernel BUG in bch2_btree_path_level_init
run #3: crashed: general protection fault in kernfs_dop_revalidate
run #4: crashed: BUG: unable to handle kernel paging request in proc_invalidate_siblings_dcache
run #5: crashed: WARNING in workingset_update_node
run #6: crashed: BUG: unable to handle kernel paging request in sock_def_readable
run #7: crashed: WARNING in bioset_exit
run #8: crashed: kernel BUG in bch2_btree_path_level_init
run #9: crashed: BUG: unable to handle kernel NULL pointer dereference in bioset_exit
representative crash: kernel BUG in shmem_undo_range, types: [BUG UNKNOWN]
# git bisect bad 4746ee182a76bbe4dd847180b0c8b575756b0d0d
Bisecting: 71 revisions left to test after this (roughly 6 steps)
[5abd7ac19ddac6dd7e9ef872e92b76e200d99531] bcachefs: Removes NULL pointer checks for __filemap_get_folio return values
testing commit 5abd7ac19ddac6dd7e9ef872e92b76e200d99531 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: c9f4b72fee64106584823cc061cc8a9d643643048507722c8d373425b398781e
all runs: OK
false negative chance: 0.000
# git bisect good 5abd7ac19ddac6dd7e9ef872e92b76e200d99531
Bisecting: 35 revisions left to test after this (roughly 5 steps)
[e48fda6cdc2799ef4a63692f0f11240613067b38] bcachefs: Fix check_backpointers_to_extents range limiting
testing commit e48fda6cdc2799ef4a63692f0f11240613067b38 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: e16344c10ef4023e8d77fd0011035d927395ca29ea3d9208ee502b1315f99077
all runs: OK
false negative chance: 0.000
# git bisect good e48fda6cdc2799ef4a63692f0f11240613067b38
Bisecting: 17 revisions left to test after this (roughly 4 steps)
[dba8243f3b466dd39ef05ff63890d5acab30c852] bcachefs: Don't try to en/decrypt when encryption not available
testing commit dba8243f3b466dd39ef05ff63890d5acab30c852 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: c98f824daf6787033042c017d235f7e1d68c41a859b03b7677615c103ac944a4
run #0: crashed: BUG: corrupted list in evict
run #1: crashed: general protection fault in locks_remove_posix
run #2: crashed: WARNING in bioset_exit
run #3: crashed: KASAN: slab-out-of-bounds Read in filemap_get_folios_tag
run #4: crashed: BUG: corrupted list in list_lru_del
run #5: crashed: general protection fault in locks_remove_posix
run #6: crashed: general protection fault in proc_alloc_inode
run #7: crashed: KASAN: slab-out-of-bounds Read in folio_try_get
run #8: crashed: kernel BUG in shmem_undo_range
run #9: crashed: BUG: unable to handle kernel paging request in sock_wfree
representative crash: general protection fault in locks_remove_posix, types: [UNKNOWN BUG KASAN]
# git bisect bad dba8243f3b466dd39ef05ff63890d5acab30c852
Bisecting: 8 revisions left to test after this (roughly 3 steps)
[525be09e63cc9ff4bee0b0f480551a4dc2e7b276] bcachefs: Use separate rhltable for bch2_inode_or_descendents_is_open()
testing commit 525be09e63cc9ff4bee0b0f480551a4dc2e7b276 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 9e786e9d9a23dd788a67d36a4b8aa1b03659cfaad39db99f08a9f3f6cfce3875
all runs: OK
false negative chance: 0.000
# git bisect good 525be09e63cc9ff4bee0b0f480551a4dc2e7b276
Bisecting: 4 revisions left to test after this (roughly 2 steps)
[427db7ffe9a91bcad00a7bac4edcd74d75007a11] bcachefs: backpointer_to_missing_ptr is now autofix
testing commit 427db7ffe9a91bcad00a7bac4edcd74d75007a11 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: f4a7f7d71d3c5c7ab8e5463020e5300842303a2e6a00eaddab9fca14d3330f5c
all runs: OK
false negative chance: 0.000
# git bisect good 427db7ffe9a91bcad00a7bac4edcd74d75007a11
Bisecting: 2 revisions left to test after this (roughly 1 step)
[828552ca74a45877dbf139b34c47d0f600a1e852] bcachefs: Kill bch2_bucket_alloc_new_fs()
testing commit 828552ca74a45877dbf139b34c47d0f600a1e852 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 9aed54c9956942fbbccc6702f719505e4c7414a14b9726b2668bd0cbd6af7715
all runs: OK
false negative chance: 0.000
# git bisect good 828552ca74a45877dbf139b34c47d0f600a1e852
Bisecting: 0 revisions left to test after this (roughly 1 step)
[75eabea6988e4ef587c8d90425918fdc58a8f1c9] bcachefs: Fix dup/misordered check in btree node read
testing commit 75eabea6988e4ef587c8d90425918fdc58a8f1c9 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: e8a7974725215a1eaa4fd16f2dbed3ac96ca78d47f413e1bfbcd12d7cacb3a8f
run #0: crashed: kernel BUG in shmem_undo_range
run #1: crashed: general protection fault in kernfs_next_descendant_post
run #2: crashed: KASAN: wild-memory-access Read in simple_recursive_removal
run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in rcu_core
run #4: crashed: WARNING in bioset_exit
run #5: crashed: KASAN: wild-memory-access Read in simple_recursive_removal
run #6: crashed: kernel BUG in shmem_undo_range
run #7: crashed: kernel BUG in shmem_undo_range
run #8: crashed: KASAN: wild-memory-access Read in simple_recursive_removal
run #9: crashed: WARNING in bioset_exit
representative crash: kernel BUG in shmem_undo_range, types: [BUG KASAN UNKNOWN]
# git bisect bad 75eabea6988e4ef587c8d90425918fdc58a8f1c9
Bisecting: 0 revisions left to test after this (roughly 0 steps)
[14152654805256d760315ec24e414363bfa19a06] bcachefs: Bad btree roots are now autofix
testing commit 14152654805256d760315ec24e414363bfa19a06 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 5205ac3836d05a6e40dd7ea32a760eb1a8c2d26bdf1308537d335a8af9652090
run #0: crashed: general protection fault in bioset_exit
run #1: crashed: WARNING: refcount bug in put_fs_context
run #2: crashed: general protection fault in locks_remove_posix
run #3: crashed: WARNING in bioset_exit
run #4: crashed: general protection fault in bioset_exit
run #5: crashed: WARNING in bioset_exit
run #6: crashed: general protection fault in filemap_get_folios_tag
run #7: crashed: WARNING in bioset_exit
run #8: crashed: KASAN: wild-memory-access Read in copy_mm
run #9: crashed: BUG: unable to handle kernel paging request in proc_invalidate_siblings_dcache
representative crash: general protection fault in bioset_exit, types: [UNKNOWN WARNING]
# git bisect bad 14152654805256d760315ec24e414363bfa19a06
14152654805256d760315ec24e414363bfa19a06 is the first bad commit
commit 14152654805256d760315ec24e414363bfa19a06
Author: Kent Overstreet <kent.overstreet@linux.dev>
Date: Mon Nov 25 00:21:27 2024 -0500
bcachefs: Bad btree roots are now autofix
Signed-off-by: Kent Overstreet <kent.overstreet@linux.dev>
fs/bcachefs/sb-errors_format.h | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
accumulated error probability: 0.00
culprit signature: 5205ac3836d05a6e40dd7ea32a760eb1a8c2d26bdf1308537d335a8af9652090
parent signature: 9aed54c9956942fbbccc6702f719505e4c7414a14b9726b2668bd0cbd6af7715
revisions tested: 22, total time: 7h20m24.816590638s (build: 4h23m57.798179537s, test: 2h41m13.723309468s)
first bad commit: 14152654805256d760315ec24e414363bfa19a06 bcachefs: Bad btree roots are now autofix
recipients (to): ["kent.overstreet@linux.dev"]
recipients (cc): []
crash: general protection fault in bioset_exit
bcachefs (loop1): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed
bcachefs (loop1): shutting down
bcachefs (loop1): shutdown complete
Oops: general protection fault, probably for non-canonical address 0x2e646c2f6374652f: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 1 UID: 0 PID: 4944 Comm: syz.1.17 Not tainted 6.13.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:qlist_move_cache+0x6a/0x140 mm/kasan/quarantine.c:302
Code: 00 00 00 00 48 8d 47 08 48 89 44 24 18 48 8d 47 10 48 89 44 24 10 48 8d 46 08 48 89 44 24 08 48 8d 46 10 48 89 04 24 4c 89 eb <4d> 8b 6d 00 48 89 df e8 fa 50 6a ff 48 c1 e8 06 48 83 e0 c0 48 8b
RSP: 0018:ffffc900046bf7a0 EFLAGS: 00010002
RAX: 0000000000001100 RBX: 2e646c2f6374652f RCX: ffffffff8dc07e48
RDX: ffffffff8dc07e50 RSI: ffff88817543c400 RDI: ffff888175408000
RBP: ffffea0000000000 R08: 0000000000000003 R09: fffff520008d7edc
R10: dffffc0000000000 R11: fffff520008d7edc R12: ffffffff8dc07e40
R13: 2e646c2f6374652f R14: ffffc900046bf7f8 R15: ffff88810d3cfb40
FS: 00007f48495ad6c0(0000) GS:ffff8881f6300000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7798200010 CR3: 0000000164fc8000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
kasan_quarantine_remove_cache+0x10b/0x170 mm/kasan/quarantine.c:370
kmem_cache_destroy+0x6e/0x160 mm/slab_common.c:526
bio_put_slab block/bio.c:155 [inline]
bioset_exit+0x2db/0x3c0 block/bio.c:1755
bch2_fs_fs_io_direct_exit+0x14/0x30 fs/bcachefs/fs-io-direct.c:676
__bch2_fs_free fs/bcachefs/super.c:547 [inline]
bch2_fs_release+0x1a2/0x6d0 fs/bcachefs/super.c:613
kobject_cleanup lib/kobject.c:689 [inline]
kobject_release lib/kobject.c:720 [inline]
kref_put include/linux/kref.h:65 [inline]
kobject_put+0x1ce/0x3a0 lib/kobject.c:737
bch2_fs_get_tree+0x820/0x14d0 fs/bcachefs/fs.c:2297
vfs_get_tree+0x82/0x250 fs/super.c:1814
do_new_mount+0x21e/0x9b0 fs/namespace.c:3507
do_mount fs/namespace.c:3847 [inline]
__do_sys_mount fs/namespace.c:4057 [inline]
__se_sys_mount+0x23c/0x2d0 fs/namespace.c:4034
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xe0/0x220 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f484878e90a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f48495ace68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f48495acef0 RCX: 00007f484878e90a
RDX: 00004000000000c0 RSI: 0000400000000000 RDI: 00007f48495aceb0
RBP: 00004000000000c0 R08: 00007f48495acef0 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000400000000000
R13: 00007f48495aceb0 R14: 000000000000597f R15: 0000400000000140
</TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:qlist_move_cache+0x6a/0x140 mm/kasan/quarantine.c:302
Code: 00 00 00 00 48 8d 47 08 48 89 44 24 18 48 8d 47 10 48 89 44 24 10 48 8d 46 08 48 89 44 24 08 48 8d 46 10 48 89 04 24 4c 89 eb <4d> 8b 6d 00 48 89 df e8 fa 50 6a ff 48 c1 e8 06 48 83 e0 c0 48 8b
RSP: 0018:ffffc900046bf7a0 EFLAGS: 00010002
RAX: 0000000000001100 RBX: 2e646c2f6374652f RCX: ffffffff8dc07e48
RDX: ffffffff8dc07e50 RSI: ffff88817543c400 RDI: ffff888175408000
RBP: ffffea0000000000 R08: 0000000000000003 R09: fffff520008d7edc
R10: dffffc0000000000 R11: fffff520008d7edc R12: ffffffff8dc07e40
R13: 2e646c2f6374652f R14: ffffc900046bf7f8 R15: ffff88810d3cfb40
FS: 00007f48495ad6c0(0000) GS:ffff8881f6300000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7798200010 CR3: 0000000164fc8000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
0: 00 00 add %al,(%rax)
2: 00 00 add %al,(%rax)
4: 48 8d 47 08 lea 0x8(%rdi),%rax
8: 48 89 44 24 18 mov %rax,0x18(%rsp)
d: 48 8d 47 10 lea 0x10(%rdi),%rax
11: 48 89 44 24 10 mov %rax,0x10(%rsp)
16: 48 8d 46 08 lea 0x8(%rsi),%rax
1a: 48 89 44 24 08 mov %rax,0x8(%rsp)
1f: 48 8d 46 10 lea 0x10(%rsi),%rax
23: 48 89 04 24 mov %rax,(%rsp)
27: 4c 89 eb mov %r13,%rbx
* 2a: 4d 8b 6d 00 mov 0x0(%r13),%r13 <-- trapping instruction
2e: 48 89 df mov %rbx,%rdi
31: e8 fa 50 6a ff call 0xff6a5130
36: 48 c1 e8 06 shr $0x6,%rax
3a: 48 83 e0 c0 and $0xffffffffffffffc0,%rax
3e: 48 rex.W
3f: 8b .byte 0x8b