ci2 starts bisection 2023-06-02 15:42:39.738117808 +0000 UTC m=+67983.385025475 bisecting fixing commit since 0a924817d2ed9396401e0557c6134276d2e26382 building syzkaller on 9da18ae8fa827d046ef8da48cc23c97418553c23 ensuring issue is reproducible on original commit 0a924817d2ed9396401e0557c6134276d2e26382 testing commit 0a924817d2ed9396401e0557c6134276d2e26382 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 84b263cc9fb1f27187a0e5530371d71053d6c6f16ceaa2916a72b33dbc6c17e9 all runs: crashed: general protection fault in gfs2_rindex_update testing current HEAD 921bdc72a0d68977092d6a64855a1b8967acc1d9 testing commit 921bdc72a0d68977092d6a64855a1b8967acc1d9 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b598416d66245db960301531a05fe8562aee8f16cdc5b7cdd2825baccbf85673 all runs: crashed: general protection fault in gfs2_rindex_update crash still not fixed/happens on the oldest tested release revisions tested: 2, total time: 44m8.340192253s (build: 36m16.135327489s, test: 7m6.690163205s) crash still not fixed on HEAD or HEAD had kernel test errors commit msg: Merge tag 'mmc-v6.4-rc1-2' of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/mmc crash: general protection fault in gfs2_rindex_update loop0: detected capacity change from 0 to 32768 gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" gfs2: fsid=syz:syz: Now mounting FS (format 1801)... gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms general protection fault, probably for non-canonical address 0xdffffc0000000097: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x00000000000004b8-0x00000000000004bf] CPU: 1 PID: 5411 Comm: syz-executor.0 Not tainted 6.4.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 RIP: 0010:gfs2_rindex_update+0xa8/0x2e0 Code: f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 8e 19 69 fe 49 8b 06 48 89 44 24 38 4c 8d b0 b8 04 00 00 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 69 19 69 fe 49 8b 06 48 89 44 24 RSP: 0018:ffffc9000487f180 EFLAGS: 00010202 RAX: 0000000000000097 RBX: 1ffff9200090fe38 RCX: 1ffff1100ee435d0 RDX: 0000000000000000 RSI: ffffc9000487f4a0 RDI: ffff88801ec28000 RBP: ffffc9000487f290 R08: dffffc0000000000 R09: ffffed100e796523 R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801ec28000 R13: dffffc0000000000 R14: 00000000000004b8 R15: 1ffff9200090fe8c FS: 00007f290d625700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f290d626000 CR3: 000000001e366000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: punch_hole+0x981/0x2d90 gfs2_truncatei_resume+0x36/0x50 gfs2_glock_wait+0x163/0x200 init_journal+0x14c5/0x20d0 init_inodes+0xcd/0x2e0 gfs2_fill_super+0x17fe/0x22b0 get_tree_bdev+0x3da/0x620 gfs2_get_tree+0x4b/0x1a0 vfs_get_tree+0x7f/0x220 do_new_mount+0x1e5/0x930 __se_sys_mount+0x20d/0x2a0 do_syscall_64+0x41/0xc0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f290c88d5da Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f290d624f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000000012551 RCX: 00007f290c88d5da RDX: 00000000200124c0 RSI: 0000000020000040 RDI: 00007f290d624fe0 RBP: 00007f290d625020 R08: 00007f290d625020 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200124c0 R13: 0000000020000040 R14: 00007f290d624fe0 R15: 0000000020000080 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:gfs2_rindex_update+0xa8/0x2e0 Code: f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 8e 19 69 fe 49 8b 06 48 89 44 24 38 4c 8d b0 b8 04 00 00 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 69 19 69 fe 49 8b 06 48 89 44 24 RSP: 0018:ffffc9000487f180 EFLAGS: 00010202 RAX: 0000000000000097 RBX: 1ffff9200090fe38 RCX: 1ffff1100ee435d0 RDX: 0000000000000000 RSI: ffffc9000487f4a0 RDI: ffff88801ec28000 RBP: ffffc9000487f290 R08: dffffc0000000000 R09: ffffed100e796523 R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801ec28000 R13: dffffc0000000000 R14: 00000000000004b8 R15: 1ffff9200090fe8c FS: 00007f290d625700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f05465b05e8 CR3: 000000001e366000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: f0 48 c1 e8 03 lock shr $0x3,%rax 5: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1) a: 74 08 je 0x14 c: 4c 89 f7 mov %r14,%rdi f: e8 8e 19 69 fe callq 0xfe6919a2 14: 49 8b 06 mov (%r14),%rax 17: 48 89 44 24 38 mov %rax,0x38(%rsp) 1c: 4c 8d b0 b8 04 00 00 lea 0x4b8(%rax),%r14 23: 4c 89 f0 mov %r14,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1) <-- trapping instruction 2f: 74 08 je 0x39 31: 4c 89 f7 mov %r14,%rdi 34: e8 69 19 69 fe callq 0xfe6919a2 39: 49 8b 06 mov (%r14),%rax 3c: 48 rex.W 3d: 89 .byte 0x89 3e: 44 rex.R 3f: 24 .byte 0x24