ci2 starts bisection 2024-09-12 07:10:52.88222345 +0000 UTC m=+44342.801308276 bisecting fixing commit since f73aafc29bee0c1674374fd22e8f90f95c91ed3f building syzkaller on 058b3a5a6a945a55767811552eb7b9f4a20307f8 ensuring issue is reproducible on original commit f73aafc29bee0c1674374fd22e8f90f95c91ed3f testing commit f73aafc29bee0c1674374fd22e8f90f95c91ed3f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8c04ee909db1321a9df1cdc1cdb97b3e0c81231e440e10bf88e06e94ac565646 all runs: crashed: kernel BUG in ext4_split_extent_at representative crash: kernel BUG in ext4_split_extent_at, types: [BUG] check whether we can drop unnecessary instrumentation disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN KASAN], they are not needed testing commit f73aafc29bee0c1674374fd22e8f90f95c91ed3f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6d08dd699cf76476aa2d3e2624f06817602e52ccc549889b4b56a8293852ad5d all runs: crashed: kernel BUG in ext4_split_extent_at representative crash: kernel BUG in ext4_split_extent_at, types: [BUG] the bug reproduces without the instrumentation disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN KASAN], they are not needed kconfig minimization: base=5179 full=6523 leaves diff=250 split chunks (needed=false): <250> split chunk #0 of len 250 into 5 parts testing without sub-chunk 1/5 disabling configs for [LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed testing commit f73aafc29bee0c1674374fd22e8f90f95c91ed3f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 77d8aecd690af093c731fe6d436be6fb9a6ebf9ad4e5c4c7a8a79760579dd1c8 all runs: crashed: kernel BUG in ext4_split_extent_at representative crash: kernel BUG in ext4_split_extent_at, types: [BUG] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit f73aafc29bee0c1674374fd22e8f90f95c91ed3f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a4ca1e394b4220a8cf45a5038bd3c99a4629697daadbfa19ad3eb39b7169f142 run #0: crashed: kernel BUG in ext4_split_extent_at run #1: crashed: kernel BUG in ext4_split_extent_at run #2: crashed: kernel BUG in ext4_split_extent_at run #3: crashed: kernel BUG in ext4_split_extent_at run #4: crashed: kernel BUG in ext4_split_extent_at run #5: crashed: kernel BUG in ext4_split_extent_at run #6: crashed: kernel BUG in ext4_split_extent_at run #7: OK run #8: OK run #9: OK representative crash: kernel BUG in ext4_split_extent_at, types: [BUG] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit f73aafc29bee0c1674374fd22e8f90f95c91ed3f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: cee266d17da97c83edf84803d194049c7ac337e173a325ad61be33d9ec4f6f8a all runs: crashed: kernel BUG in ext4_split_extent_at representative crash: kernel BUG in ext4_split_extent_at, types: [BUG] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit f73aafc29bee0c1674374fd22e8f90f95c91ed3f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 494c321374d586d9cff366ca3c7d5f120de6e42efe02cbdd2a528d369173ca3a run #0: crashed: kernel BUG in ext4_split_extent_at run #1: crashed: kernel BUG in ext4_split_extent_at run #2: crashed: kernel BUG in ext4_split_extent_at run #3: crashed: kernel BUG in ext4_split_extent_at run #4: crashed: kernel BUG in ext4_split_extent_at run #5: crashed: kernel BUG in ext4_split_extent_at run #6: OK run #7: OK run #8: OK run #9: OK representative crash: kernel BUG in ext4_split_extent_at, types: [BUG] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit f73aafc29bee0c1674374fd22e8f90f95c91ed3f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 failed building f73aafc29bee0c1674374fd22e8f90f95c91ed3f: net/socket.c:1225: undefined reference to `wext_handle_ioctl' net/socket.c:3420: undefined reference to `compat_wext_handle_ioctl' net/core/net-procfs.c:329: undefined reference to `wext_proc_init' net/core/net-procfs.c:345: undefined reference to `wext_proc_exit' minimized to 50 configs; suspects: [HID_ZEROPLUS USB_NET_CDC_MBIM USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_PURELIFI WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_SILABS WLAN_VENDOR_ZYDAS X86_X32_ABI ZEROPLUS_FF] disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing current HEAD b18f8bbc044f476aea4146be141bb9c5430b2a12 testing commit b18f8bbc044f476aea4146be141bb9c5430b2a12 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 88a0134affe1c86556571f9f53c67e030e9e29880dd5ae7b3a12449e99c6ae79 run #0: crashed: kernel BUG in ext4_split_extent_at run #1: crashed: kernel BUG in ext4_split_extent_at run #2: crashed: kernel BUG in ext4_split_extent_at run #3: crashed: kernel BUG in ext4_split_extent_at run #4: crashed: kernel BUG in ext4_split_extent_at run #5: crashed: kernel BUG in ext4_split_extent_at run #6: crashed: kernel BUG in ext4_split_extent_at run #7: OK run #8: OK run #9: OK representative crash: kernel BUG in ext4_split_extent_at, types: [BUG] crash still not fixed/happens on the oldest tested release revisions tested: 7, total time: 2h0m35.942265909s (build: 50m48.15968968s, test: 1h2m10.002443278s) crash still not fixed or there were kernel test errors commit msg: ANDROID: GKI: Update symbol list for BCMSTB crash: kernel BUG in ext4_split_extent_at ------------[ cut here ]------------ kernel BUG at fs/ext4/ext4_extents.h:200! invalid opcode: 0000 [#1] PREEMPT SMP CPU: 1 PID: 1188 Comm: syz-executor.2 Not tainted 6.1.93-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:ext4_ext_mark_unwritten fs/ext4/ext4_extents.h:200 [inline] RIP: 0010:ext4_split_extent_at+0x657/0x660 fs/ext4/extents.c:3198 Code: ff b3 01 e9 83 fa ff ff 0f 0b e9 ad fb ff ff 0f 0b e9 5d fc ff ff 0f 0b e9 d9 fe ff ff 0f 0b 0f 0b 0f 0b e8 3b 34 af 00 0f 0b <0f> 0b 0f 0b 0f 1f 44 00 00 55 48 89 e5 0f b7 46 04 8d 88 00 80 ff RSP: 0018:ffffc90001d6f848 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff88810c1746a8 RCX: 0000000000000000 RDX: ffff8881114f1058 RSI: 0000000000000000 RDI: ffff8881132c600c RBP: ffffc90001d6f908 R08: ffff88810d147820 R09: 000000000000003b R10: 0000000000000010 R11: ffff8881114f1000 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88810c1746a8 FS: 00007f0f5c41f6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000002003f000 CR3: 0000000110db3000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ext4_split_extent+0x136/0x180 fs/ext4/extents.c:3361 ext4_split_convert_extents fs/ext4/extents.c:3690 [inline] ext4_ext_handle_unwritten_extents fs/ext4/extents.c:3852 [inline] ext4_ext_map_blocks+0xa4d/0x1d50 fs/ext4/extents.c:4207 ext4_map_blocks+0x2eb/0x660 fs/ext4/inode.c:651 ext4_iomap_alloc fs/ext4/inode.c:3427 [inline] ext4_iomap_begin+0x22d/0x2f0 fs/ext4/inode.c:3477 iomap_iter+0x1e5/0x350 fs/iomap/iter.c:74 __iomap_dio_rw+0x40a/0x7e0 fs/iomap/direct-io.c:601 iomap_dio_rw+0xc/0x40 fs/iomap/direct-io.c:690 ext4_dio_write_iter fs/ext4/file.c:557 [inline] ext4_file_write_iter+0x4c5/0x6a0 fs/ext4/file.c:677 call_write_iter include/linux/fs.h:2274 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x331/0x3f0 fs/read_write.c:584 ksys_write+0x6c/0xd0 fs/read_write.c:637 __do_sys_write fs/read_write.c:649 [inline] __se_sys_write fs/read_write.c:646 [inline] __x64_sys_write+0x16/0x20 fs/read_write.c:646 x64_sys_call+0x2f/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:2 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f0f5b67c959 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f0f5c41f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f0f5b79c050 RCX: 00007f0f5b67c959 RDX: 0000000000000012 RSI: 0000000020000000 RDI: 0000000000000004 RBP: 00007f0f5b6d8c88 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f0f5b79c050 R15: 00007fffd5071ff8 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:ext4_ext_mark_unwritten fs/ext4/ext4_extents.h:200 [inline] RIP: 0010:ext4_split_extent_at+0x657/0x660 fs/ext4/extents.c:3198 Code: ff b3 01 e9 83 fa ff ff 0f 0b e9 ad fb ff ff 0f 0b e9 5d fc ff ff 0f 0b e9 d9 fe ff ff 0f 0b 0f 0b 0f 0b e8 3b 34 af 00 0f 0b <0f> 0b 0f 0b 0f 1f 44 00 00 55 48 89 e5 0f b7 46 04 8d 88 00 80 ff RSP: 0018:ffffc90001d6f848 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff88810c1746a8 RCX: 0000000000000000 RDX: ffff8881114f1058 RSI: 0000000000000000 RDI: ffff8881132c600c RBP: ffffc90001d6f908 R08: ffff88810d147820 R09: 000000000000003b R10: 0000000000000010 R11: ffff8881114f1000 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88810c1746a8 FS: 00007f0f5c41f6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe06e90638e CR3: 0000000110db3000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400