ci2 starts bisection 2023-11-11 20:36:36.468993357 +0000 UTC m=+35956.245374035
bisecting fixing commit since 3ad342cf5b2cadf6408597d0cf086c31ab7ef383
building syzkaller on de870ca5ea0b42afdf670fa407254dc617342cc3
ensuring issue is reproducible on original commit 3ad342cf5b2cadf6408597d0cf086c31ab7ef383

testing commit 3ad342cf5b2cadf6408597d0cf086c31ab7ef383 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 89ab9c5f50e86718acbe1adff51ed91041e06282f107808b6ed84a1d303eae01
run #0: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #1: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #2: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #3: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #4: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #5: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #6: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #7: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #8: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #9: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #10: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #11: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #12: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #13: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #14: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #15: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #16: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #17: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #18: crashed: kernel BUG in ext4_mb_load_buddy_gfp
run #19: crashed: kernel BUG in ext4_mb_release_group_pa
representative crash: kernel BUG in ext4_mb_load_buddy_gfp, types: [BUG]
check whether we can drop unnecessary instrumentation
disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed
testing commit 3ad342cf5b2cadf6408597d0cf086c31ab7ef383 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 584aab4b6959cbef570a7a9f8888e3d529420f951e84d11ba23350eaf861608f
all runs: crashed: kernel BUG in ext4_mb_load_buddy_gfp
representative crash: kernel BUG in ext4_mb_load_buddy_gfp, types: [BUG]
the bug reproduces without the instrumentation
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
kconfig minimization: base=4789 full=6024 leaves diff=237
split chunks (needed=false): <237>
split chunk #0 of len 237 into 5 parts
testing without sub-chunk 1/5
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit 3ad342cf5b2cadf6408597d0cf086c31ab7ef383 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 43f540c43c45261aa5d0f811c2ae90a1efb3fa8bf3c6f4d2c75c468aa394e9f8
all runs: crashed: kernel BUG in ext4_mb_load_buddy_gfp
representative crash: kernel BUG in ext4_mb_load_buddy_gfp, types: [BUG]
the chunk can be dropped
testing without sub-chunk 2/5
disabling configs for [LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed
testing commit 3ad342cf5b2cadf6408597d0cf086c31ab7ef383 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: e0c55f574dc293bca3ad051314d9235a434c1890bdea19e9639fb902b3779adc
all runs: crashed: kernel BUG in ext4_mb_load_buddy_gfp
representative crash: kernel BUG in ext4_mb_load_buddy_gfp, types: [BUG]
the chunk can be dropped
testing without sub-chunk 3/5
disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed
testing commit 3ad342cf5b2cadf6408597d0cf086c31ab7ef383 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 2722f36a4af53e08cf08f4ca3c99e6127715e33804b8a7cf9813fa92fc5c4404
all runs: crashed: kernel BUG in ext4_mb_load_buddy_gfp
representative crash: kernel BUG in ext4_mb_load_buddy_gfp, types: [BUG]
the chunk can be dropped
testing without sub-chunk 4/5
disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing commit 3ad342cf5b2cadf6408597d0cf086c31ab7ef383 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 888cc72559bde7deee276893202bc831cd549590b1f7483666be6e28c1857b82
all runs: crashed: kernel BUG in ext4_mb_load_buddy_gfp
representative crash: kernel BUG in ext4_mb_load_buddy_gfp, types: [BUG]
the chunk can be dropped
testing without sub-chunk 5/5
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit 3ad342cf5b2cadf6408597d0cf086c31ab7ef383 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
failed building 3ad342cf5b2cadf6408597d0cf086c31ab7ef383: net/socket.c:1109: undefined reference to `wext_handle_ioctl'
net/socket.c:3378: undefined reference to `compat_wext_handle_ioctl'
net/core/net-procfs.c:346: undefined reference to `wext_proc_exit'
net/core/net-procfs.c:330: undefined reference to `wext_proc_init'
minimized to 45 configs; suspects: [HID_ZEROPLUS USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL USB_SERIAL_FTDI_SIO USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_ZYDAS X86_X32 ZEROPLUS_FF]
disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN KASAN LOCKDEP], they are not needed
testing current HEAD d30b996835c08018a70dd52c588ba15de1c8378b
testing commit d30b996835c08018a70dd52c588ba15de1c8378b gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: e46a8bd6cfffa8307627506f2f979d68b93b180f9da147d0c0c1738bd9d3d2a8
run #0: crashed: kernel BUG in ext4_mb_release_inode_pa
run #1: crashed: kernel panic: corrupted stack end in corrupted
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
representative crash: kernel BUG in ext4_mb_release_inode_pa, types: [BUG UNKNOWN]
crash still not fixed/happens on the oldest tested release
reproducer is flaky (1.00 repro chance estimate)
revisions tested: 7, total time: 1h8m59.109769341s (build: 37m47.745568361s, test: 29m36.993610859s)
crash still not fixed or there were kernel test errors
commit msg: Merge branch 'android13-5.10' into branch `android13-5.10-lts`
crash: kernel BUG in ext4_mb_release_inode_pa
------------[ cut here ]------------
kernel BUG at fs/ext4/mballoc.c:4305!
invalid opcode: 0000 [#1] PREEMPT SMP
CPU: 1 PID: 5513 Comm: syz-executor.0 Not tainted 5.10.199-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023
RIP: 0010:ext4_mb_release_inode_pa.isra.0+0x29e/0x2b0 fs/ext4/mballoc.c:4305
Code: b0 e8 16 0f 03 00 48 83 c4 20 e9 be fe ff ff e8 8f 04 be ff eb 89 e8 88 04 be ff e9 2d ff ff ff 0f 0b 85 db 0f 84 ef fd ff ff <0f> 0b e8 cb ad 95 00 66 66 2e 0f 1f 84 00 00 00 00 00 55 41 89 d2
RSP: 0018:ffffc9000496ef10 EFLAGS: 00010202
RAX: 0000000000003b3a RBX: 0000000000000016 RCX: 0000000000000004
RDX: 000000000003b3a0 RSI: 00000000fffff01a RDI: ffffc9000496ef30
RBP: ffffc9000496ef68 R08: ffffc9000496ef34 R09: 0000000000040000
R10: 0000000000000000 R11: 0000000000000009 R12: ffff888109e0d680
R13: ffff88811083f000 R14: ffff88811083f000 R15: dead000000000100
FS:  00007f3c1c7056c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000001ffffec0 CR3: 00000001141ef000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ext4_mb_discard_group_preallocations+0x31b/0x410 fs/ext4/mballoc.c:4451
 ext4_mb_discard_preallocations fs/ext4/mballoc.c:5017 [inline]
 ext4_mb_discard_preallocations_should_retry fs/ext4/mballoc.c:5038 [inline]
 ext4_mb_new_blocks+0xe2c/0x1020 fs/ext4/mballoc.c:5176
 ext4_new_meta_blocks+0xbc/0x100 fs/ext4/balloc.c:732
 ext4_ext_grow_indepth fs/ext4/extents.c:1320 [inline]
 ext4_ext_create_new_leaf fs/ext4/extents.c:1424 [inline]
 ext4_ext_insert_extent+0x5b4/0x1530 fs/ext4/extents.c:2094
 ext4_ext_map_blocks+0x581/0x19a0 fs/ext4/extents.c:4302
 ext4_map_blocks+0x19a/0x5b0 fs/ext4/inode.c:646
 _ext4_get_block+0x8e/0x110 fs/ext4/inode.c:793
 ext4_get_block+0x11/0x20 fs/ext4/inode.c:810
 ext4_block_write_begin+0x178/0x510 fs/ext4/inode.c:1077
 ext4_write_begin+0x1f5/0x6d0 fs/ext4/inode.c:1219
 ext4_da_write_begin+0x234/0x580 fs/ext4/inode.c:3021
 generic_perform_write+0xbe/0x1b0 mm/filemap.c:3509
 ext4_buffered_write_iter+0x9f/0x150 fs/ext4/file.c:271
 ext4_file_write_iter+0x5b/0x840 fs/ext4/file.c:685
 __kernel_write+0x13e/0x2c0 fs/read_write.c:550
 dump_emit+0x79/0xa0 fs/coredump.c:849
 dump_user_range+0x60/0x100 fs/coredump.c:902
 elf_core_dump+0xdf1/0xee0 fs/binfmt_elf.c:2287
 do_coredump+0xcd3/0x1090 fs/coredump.c:811
 get_signal+0x489/0x8a0 kernel/signal.c:2768
 arch_do_signal_or_restart+0xeb/0x7d0 arch/x86/kernel/signal.c:805
 handle_signal_work kernel/entry/common.c:145 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:169 [inline]
 exit_to_user_mode_prepare+0xd1/0x120 kernel/entry/common.c:199
 irqentry_exit_to_user_mode+0x9/0x20 kernel/entry/common.c:287
 irqentry_exit+0x3c/0x60 kernel/entry/common.c:375
 exc_page_fault+0x27f/0x5b0 arch/x86/mm/fault.c:1521
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:571
RIP: 0033:0x0
Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6.
RSP: 002b:0000000020000473 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f3c1cb82959
RDX: 00007f3c1c704fb0 RSI: 0000000000000058 RDI: 00007f3c1c704fb0
RBP: 00007f3c1cbdec88 R08: 0000000000000000 R09: 0000000000000058
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f3c1cca1f80 R15: 00007ffc1c524e18
Modules linked in:
---[ end trace 7d695800e1dfe372 ]---
RIP: 0010:ext4_mb_release_inode_pa.isra.0+0x29e/0x2b0 fs/ext4/mballoc.c:4305
Code: b0 e8 16 0f 03 00 48 83 c4 20 e9 be fe ff ff e8 8f 04 be ff eb 89 e8 88 04 be ff e9 2d ff ff ff 0f 0b 85 db 0f 84 ef fd ff ff <0f> 0b e8 cb ad 95 00 66 66 2e 0f 1f 84 00 00 00 00 00 55 41 89 d2
RSP: 0018:ffffc9000496ef10 EFLAGS: 00010202
RAX: 0000000000003b3a RBX: 0000000000000016 RCX: 0000000000000004
RDX: 000000000003b3a0 RSI: 00000000fffff01a RDI: ffffc9000496ef30
RBP: ffffc9000496ef68 R08: ffffc9000496ef34 R09: 0000000000040000
R10: 0000000000000000 R11: 0000000000000009 R12: ffff888109e0d680
R13: ffff88811083f000 R14: ffff88811083f000 R15: dead000000000100
FS:  00007f3c1c7056c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000001ffffec0 CR3: 00000001141ef000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400