ci2 starts bisection 2023-10-11 11:17:04.317910863 +0000 UTC m=+48205.851869094
bisecting fixing commit since 3ad342cf5b2cadf6408597d0cf086c31ab7ef383
building syzkaller on de870ca5ea0b42afdf670fa407254dc617342cc3
ensuring issue is reproducible on original commit 3ad342cf5b2cadf6408597d0cf086c31ab7ef383

testing commit 3ad342cf5b2cadf6408597d0cf086c31ab7ef383 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 220700f70c985ff68e9727838ed476c1dfb8f189300462ecd788f8df1fab0bf2
all runs: crashed: kernel BUG in ext4_mb_load_buddy_gfp
representative crash: kernel BUG in ext4_mb_load_buddy_gfp, types: [BUG]
check whether we can drop unnecessary instrumentation
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit 3ad342cf5b2cadf6408597d0cf086c31ab7ef383 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 13f55b4a1cf35f3c3e63008333e055b45e31bbe2347a53c1c7a07ac0839c3c01
all runs: crashed: kernel BUG in ext4_mb_load_buddy_gfp
representative crash: kernel BUG in ext4_mb_load_buddy_gfp, types: [BUG]
the bug reproduces without the instrumentation
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
kconfig minimization: base=4789 full=6024 leaves diff=237
split chunks (needed=false): <237>
split chunk #0 of len 237 into 5 parts
testing without sub-chunk 1/5
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit 3ad342cf5b2cadf6408597d0cf086c31ab7ef383 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 4825a002746837173997b05e37148260ca56f61e19d9252978147bbac44c7949
all runs: crashed: kernel BUG in ext4_mb_load_buddy_gfp
representative crash: kernel BUG in ext4_mb_load_buddy_gfp, types: [BUG]
the chunk can be dropped
testing without sub-chunk 2/5
disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing commit 3ad342cf5b2cadf6408597d0cf086c31ab7ef383 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 361d2d44366485bbd65ad76a0794ecd9a2ac895395e8745053f6f94741b2ef3b
all runs: crashed: kernel BUG in ext4_mb_load_buddy_gfp
representative crash: kernel BUG in ext4_mb_load_buddy_gfp, types: [BUG]
the chunk can be dropped
testing without sub-chunk 3/5
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit 3ad342cf5b2cadf6408597d0cf086c31ab7ef383 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 53bd07f4b05ea7b47d1be43890a6b66578c5c87783785962d9e1b695832ee9fb
run #0: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #1: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #2: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #3: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #4: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #5: crashed: kernel BUG in ext4_mb_find_by_goal
run #6: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #7: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #8: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #9: crashed: kernel BUG in ext4_mb_load_buddy_gfp
representative crash: kernel BUG in ext4_mb_load_buddy_gfp, types: [BUG]
the chunk can be dropped
testing without sub-chunk 4/5
disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing commit 3ad342cf5b2cadf6408597d0cf086c31ab7ef383 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: a6eed458d2a74b53756ea3f05e19d859dae3160c67aa62f3930633041a97f4b3
all runs: crashed: kernel BUG in ext4_mb_load_buddy_gfp
representative crash: kernel BUG in ext4_mb_load_buddy_gfp, types: [BUG]
the chunk can be dropped
testing without sub-chunk 5/5
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit 3ad342cf5b2cadf6408597d0cf086c31ab7ef383 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
failed building 3ad342cf5b2cadf6408597d0cf086c31ab7ef383: net/socket.c:1109: undefined reference to `wext_handle_ioctl'
net/socket.c:3378: undefined reference to `compat_wext_handle_ioctl'
net/core/net-procfs.c:346: undefined reference to `wext_proc_exit'
net/core/net-procfs.c:330: undefined reference to `wext_proc_init'
minimized to 45 configs; suspects: [HID_ZEROPLUS USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL USB_SERIAL_FTDI_SIO USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_ZYDAS X86_X32 ZEROPLUS_FF]
disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing current HEAD a27512601c2d65569fdd5a843246dc8da96b6408
testing commit a27512601c2d65569fdd5a843246dc8da96b6408 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: ec6cf5b9adb626ad79d78e88b3c906b54051b09390734d601caf860aa99870c1
run #0: crashed: kernel BUG in ext4_mb_release_inode_pa
run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in ext4_mb_new_blocks
run #2: crashed: kernel BUG in ext4_mb_release_inode_pa
run #3: crashed: kernel BUG in ext4_mb_release_inode_pa
run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in ext4_mb_new_blocks
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
representative crash: kernel BUG in ext4_mb_release_inode_pa, types: [BUG UNKNOWN]
crash still not fixed/happens on the oldest tested release
revisions tested: 7, total time: 40m39.107535995s (build: 11m44.341267977s, test: 27m25.017066627s)
crash still not fixed or there were kernel test errors
commit msg: Merge 5.10.194 into android13-5.10-lts
crash: kernel BUG in ext4_mb_release_inode_pa
------------[ cut here ]------------
kernel BUG at fs/ext4/mballoc.c:4304!
invalid opcode: 0000 [#1] PREEMPT SMP
CPU: 1 PID: 5709 Comm: syz-executor.0 Not tainted 5.10.194-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
RIP: 0010:ext4_mb_release_inode_pa.isra.0+0x29e/0x2b0 fs/ext4/mballoc.c:4304
Code: b0 e8 c6 0e 03 00 48 83 c4 20 e9 be fe ff ff e8 2f 0d be ff eb 89 e8 28 0d be ff e9 2d ff ff ff 0f 0b 85 db 0f 84 ef fd ff ff <0f> 0b e8 2b 96 95 00 66 66 2e 0f 1f 84 00 00 00 00 00 55 41 89 d2
RSP: 0018:ffffc90000546f10 EFLAGS: 00010202
RAX: 0000000000003b3a RBX: 0000000000000016 RCX: 0000000000000004
RDX: 000000000003b3a0 RSI: 00000000fffff01a RDI: ffffc90000546f30
RBP: ffffc90000546f68 R08: ffffc90000546f34 R09: 0000000000040000
R10: 0000000000000000 R11: 0000000000000009 R12: ffff888109e90340
R13: ffff88810ecc5270 R14: ffff88810ecc5270 R15: dead000000000100
FS:  00007f8f112f66c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000001ffffec0 CR3: 0000000112a8b000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ext4_mb_discard_group_preallocations+0x31b/0x410 fs/ext4/mballoc.c:4450
 ext4_mb_discard_preallocations fs/ext4/mballoc.c:5016 [inline]
 ext4_mb_discard_preallocations_should_retry fs/ext4/mballoc.c:5037 [inline]
 ext4_mb_new_blocks+0xe2c/0x1020 fs/ext4/mballoc.c:5175
 ext4_new_meta_blocks+0xbc/0x100 fs/ext4/balloc.c:732
 ext4_ext_grow_indepth fs/ext4/extents.c:1320 [inline]
 ext4_ext_create_new_leaf fs/ext4/extents.c:1424 [inline]
 ext4_ext_insert_extent+0x5b4/0x1530 fs/ext4/extents.c:2094
 ext4_ext_map_blocks+0x581/0x19a0 fs/ext4/extents.c:4302
 ext4_map_blocks+0x19a/0x5b0 fs/ext4/inode.c:646
 _ext4_get_block+0x8e/0x110 fs/ext4/inode.c:793
 ext4_get_block+0x11/0x20 fs/ext4/inode.c:810
 ext4_block_write_begin+0x178/0x510 fs/ext4/inode.c:1077
 ext4_write_begin+0x1f5/0x6d0 fs/ext4/inode.c:1219
 ext4_da_write_begin+0x234/0x580 fs/ext4/inode.c:3021
 generic_perform_write+0xbe/0x1b0 mm/filemap.c:3506
 ext4_buffered_write_iter+0x9f/0x150 fs/ext4/file.c:271
 ext4_file_write_iter+0x5b/0x840 fs/ext4/file.c:685
 __kernel_write+0x13e/0x2c0 fs/read_write.c:550
 dump_emit+0x79/0xa0 fs/coredump.c:849
 dump_user_range+0x60/0x100 fs/coredump.c:902
 elf_core_dump+0xdf1/0xee0 fs/binfmt_elf.c:2287
 do_coredump+0xcd3/0x1090 fs/coredump.c:811
 get_signal+0x489/0x8a0 kernel/signal.c:2768
 arch_do_signal_or_restart+0xeb/0x7d0 arch/x86/kernel/signal.c:805
 handle_signal_work kernel/entry/common.c:145 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:169 [inline]
 exit_to_user_mode_prepare+0xd1/0x120 kernel/entry/common.c:199
 irqentry_exit_to_user_mode+0x9/0x20 kernel/entry/common.c:287
 irqentry_exit+0x3c/0x60 kernel/entry/common.c:375
 exc_page_fault+0x27f/0x5b0 arch/x86/mm/fault.c:1521
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:571
RIP: 0033:0x0
Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6.
RSP: 002b:0000000020000473 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f8f11773959
RDX: 00007f8f112f5fb0 RSI: 0000000000000058 RDI: 00007f8f112f5fb0
RBP: 00007f8f117cfc88 R08: 0000000000000000 R09: 0000000000000058
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f8f11892f80 R15: 00007fff7561b6a8
Modules linked in:
---[ end trace e2fba0b1204992af ]---
RIP: 0010:ext4_mb_release_inode_pa.isra.0+0x29e/0x2b0 fs/ext4/mballoc.c:4304
Code: b0 e8 c6 0e 03 00 48 83 c4 20 e9 be fe ff ff e8 2f 0d be ff eb 89 e8 28 0d be ff e9 2d ff ff ff 0f 0b 85 db 0f 84 ef fd ff ff <0f> 0b e8 2b 96 95 00 66 66 2e 0f 1f 84 00 00 00 00 00 55 41 89 d2
RSP: 0018:ffffc90000546f10 EFLAGS: 00010202
RAX: 0000000000003b3a RBX: 0000000000000016 RCX: 0000000000000004
RDX: 000000000003b3a0 RSI: 00000000fffff01a RDI: ffffc90000546f30
RBP: ffffc90000546f68 R08: ffffc90000546f34 R09: 0000000000040000
R10: 0000000000000000 R11: 0000000000000009 R12: ffff888109e90340
R13: ffff88810ecc5270 R14: ffff88810ecc5270 R15: dead000000000100
FS:  00007f8f112f66c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000001ffffec0 CR3: 0000000112a8b000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400