ci2 starts bisection 2025-09-24 00:23:16.867999192 +0000 UTC m=+29672.263926979 bisecting fixing commit since efda22f3484c75674a2c4f22e4540e8289ead901 building syzkaller on a95239b10464c498ac06b56698a6996643680b86 ensuring issue is reproducible on original commit efda22f3484c75674a2c4f22e4540e8289ead901 testing commit efda22f3484c75674a2c4f22e4540e8289ead901 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 7251f3896e205ea78ee13d7018827117a80eafe02bee6b919710c2d29a3cd40b all runs: crashed: UBSAN: shift-out-of-bounds in exfat_fill_super representative crash: UBSAN: shift-out-of-bounds in exfat_fill_super, types: [UBSAN] check whether we can drop unnecessary instrumentation disabling configs for [memleak bug_or_warning kasan locking atomic_sleep hang], they are not needed testing commit efda22f3484c75674a2c4f22e4540e8289ead901 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 0393ebfc0c4e0202e0c8f72ae9f1b4343375c945a36c1a0668e52ab1ed450dda all runs: crashed: UBSAN: shift-out-of-bounds in exfat_fill_super representative crash: UBSAN: shift-out-of-bounds in exfat_fill_super, types: [UBSAN] the bug reproduces without the instrumentation disabling configs for [locking atomic_sleep hang memleak bug_or_warning kasan], they are not needed kconfig minimization: base=5186 full=6549 leaves diff=266 split chunks (needed=false): <266> split chunk #0 of len 266 into 5 parts testing without sub-chunk 1/5 disabling configs for [memleak bug_or_warning kasan locking atomic_sleep hang], they are not needed testing commit efda22f3484c75674a2c4f22e4540e8289ead901 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 3700b1b0be865d335cf77c2693e6254de378966be1474afeecb4197e505d38f7 all runs: crashed: UBSAN: shift-out-of-bounds in exfat_fill_super representative crash: UBSAN: shift-out-of-bounds in exfat_fill_super, types: [UBSAN] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [hang memleak bug_or_warning kasan locking atomic_sleep], they are not needed testing commit efda22f3484c75674a2c4f22e4540e8289ead901 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 903a8f1f1a16c1b22c40cdbbb71d3d6a79c832c7ba06996d441018375a931f50 all runs: crashed: UBSAN: shift-out-of-bounds in exfat_fill_super representative crash: UBSAN: shift-out-of-bounds in exfat_fill_super, types: [UBSAN] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [kasan locking atomic_sleep hang memleak bug_or_warning], they are not needed testing commit efda22f3484c75674a2c4f22e4540e8289ead901 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: bac9e530121c541e795c70847668a41c38ef1adbfe310fa34b7e12940d43b693 all runs: crashed: UBSAN: shift-out-of-bounds in exfat_fill_super representative crash: UBSAN: shift-out-of-bounds in exfat_fill_super, types: [UBSAN] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [kasan locking atomic_sleep hang memleak bug_or_warning], they are not needed testing commit efda22f3484c75674a2c4f22e4540e8289ead901 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: b3ac4616791490c5e67d9dacec76c86d07eb36270aa086c816eb41f2ac9ea7f7 all runs: crashed: UBSAN: shift-out-of-bounds in exfat_fill_super representative crash: UBSAN: shift-out-of-bounds in exfat_fill_super, types: [UBSAN] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [hang memleak bug_or_warning kasan locking atomic_sleep], they are not needed testing commit efda22f3484c75674a2c4f22e4540e8289ead901 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 failed building efda22f3484c75674a2c4f22e4540e8289ead901: ld.lld: error: undefined symbol: wext_handle_ioctl ld.lld: error: undefined symbol: compat_wext_handle_ioctl ld.lld: error: undefined symbol: wext_proc_init ld.lld: error: undefined symbol: wext_proc_exit minimized to 50 configs; suspects: [HID_ZEROPLUS USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM V4L2_ASYNC V4L2_FWNODE VIDEO_CAMERA_SENSOR WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_PURELIFI WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_SILABS WLAN_VENDOR_ZYDAS X86_X32_ABI ZEROPLUS_FF] disabling configs for [memleak bug_or_warning kasan locking atomic_sleep hang], they are not needed testing current HEAD f8638596656f07c98ff01f23703519c247d3f54d testing commit f8638596656f07c98ff01f23703519c247d3f54d gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 6887942a193c895d874c4c321e718ac2499c81045db0f773208579ed6a718e16 all runs: crashed: UBSAN: shift-out-of-bounds in exfat_fill_super representative crash: UBSAN: shift-out-of-bounds in exfat_fill_super, types: [UBSAN] crash still not fixed/happens on the oldest tested release revisions tested: 7, total time: 1h16m23.345949124s (build: 31m33.535235011s, test: 41m20.607521558s) crash still not fixed or there were kernel test errors commit msg: Merge tag 'android14-6.1.151_r00' into android14-6.1 crash: UBSAN: shift-out-of-bounds in exfat_fill_super loop2: detected capacity change from 0 to 256 exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. exFAT-fs (loop2): Medium has reported failures. Some data may be lost. ================================================================================ UBSAN: shift-out-of-bounds in fs/exfat/super.c:529:38 shift exponent 185 is too large for 32-bit type 'int' CPU: 1 PID: 533 Comm: syz.2.28 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 Call Trace: __dump_stack+0x19/0x1c lib/dump_stack.c:88 dump_stack_lvl+0x5d/0x8c lib/dump_stack.c:106 dump_stack+0x10/0x1c lib/dump_stack.c:113 ubsan_epilogue+0x9/0x40 lib/ubsan.c:151 __ubsan_handle_shift_out_of_bounds+0x1f8/0x200 lib/ubsan.c:321 exfat_read_boot_sector fs/exfat/super.c:529 [inline] __exfat_fill_super fs/exfat/super.c:585 [inline] exfat_fill_super+0xaef/0xb10 fs/exfat/super.c:649 get_tree_bdev+0x1d0/0x260 fs/super.c:1368 exfat_get_tree+0x10/0x20 fs/exfat/super.c:721 vfs_get_tree+0x2f/0x90 fs/super.c:1575 do_new_mount+0x14a/0x360 fs/namespace.c:3069 path_mount+0x324/0x550 fs/namespace.c:3399 do_mount fs/namespace.c:3412 [inline] __do_sys_mount fs/namespace.c:3620 [inline] __se_sys_mount+0x141/0x1a0 fs/namespace.c:3597 __x64_sys_mount+0x20/0x30 fs/namespace.c:3597 x64_sys_call+0x65d/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:166 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f0a9d18f90a Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f0a9dff1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f0a9dff1ef0 RCX: 00007f0a9d18f90a RDX: 0000200000000000 RSI: 0000200000000240 RDI: 00007f0a9dff1eb0 RBP: 0000200000000000 R08: 00007f0a9dff1ef0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000240 R13: 00007f0a9dff1eb0 R14: 00000000000014fe R15: 0000200000000600 ================================================================================ exFAT-fs (loop2): unable to set blocksize 33554432 exFAT-fs (loop2): failed to read boot sector exFAT-fs (loop2): failed to recognize exfat type