ci2 starts bisection 2025-10-02 10:45:49.710442288 +0000 UTC m=+40533.400242022 bisecting fixing commit since c750dc582629811994978507b7055b679be149f0 building syzkaller on 32a0e5edfeef60e894c453dc9e9ae45528626ef1 ensuring issue is reproducible on original commit c750dc582629811994978507b7055b679be149f0 testing commit c750dc582629811994978507b7055b679be149f0 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 969079fa337b95d0c33a4367e221b4840eeec2d4eb9e324949ccd9cac8d217eb all runs: crashed: invalid opcode in __traceiter_virtio_transport_alloc_pkt representative crash: invalid opcode in __traceiter_virtio_transport_alloc_pkt, types: [DoS] check whether we can drop unnecessary instrumentation disabling configs for [hang memleak ubsan bug_or_warning kasan locking atomic_sleep], they are not needed testing commit c750dc582629811994978507b7055b679be149f0 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 6d6dadd165ac3c8693c6d412bbc155aa99d25a0fa6622115ac8bb8c40f8e75f1 all runs: crashed: invalid opcode in __traceiter_virtio_transport_alloc_pkt representative crash: invalid opcode in __traceiter_virtio_transport_alloc_pkt, types: [DoS] the bug reproduces without the instrumentation disabling configs for [kasan locking atomic_sleep hang memleak ubsan bug_or_warning], they are not needed kconfig minimization: base=5186 full=6556 leaves diff=265 split chunks (needed=false): <265> split chunk #0 of len 265 into 5 parts testing without sub-chunk 1/5 disabling configs for [ubsan bug_or_warning kasan locking atomic_sleep hang memleak], they are not needed testing commit c750dc582629811994978507b7055b679be149f0 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: cabb6647d84a6acbfec77070639596e3d8e658eaaa4e946f92cf8ca6e6fc6672 all runs: crashed: invalid opcode in __traceiter_virtio_transport_alloc_pkt representative crash: invalid opcode in __traceiter_virtio_transport_alloc_pkt, types: [DoS] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [ubsan bug_or_warning kasan locking atomic_sleep hang memleak], they are not needed testing commit c750dc582629811994978507b7055b679be149f0 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 700962af666abecf1259cfb54ebd56208fe5d9d87545a5974cc62a2d19c8fac3 all runs: crashed: invalid opcode in __traceiter_virtio_transport_alloc_pkt representative crash: invalid opcode in __traceiter_virtio_transport_alloc_pkt, types: [DoS] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [ubsan bug_or_warning kasan locking atomic_sleep hang memleak], they are not needed testing commit c750dc582629811994978507b7055b679be149f0 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 1f6a15cc91fd3b4722c7d5d0f255882d04cdc67aec76fa62bfb879292734e495 all runs: crashed: invalid opcode in __traceiter_virtio_transport_alloc_pkt representative crash: invalid opcode in __traceiter_virtio_transport_alloc_pkt, types: [DoS] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [memleak ubsan bug_or_warning kasan locking atomic_sleep hang], they are not needed testing commit c750dc582629811994978507b7055b679be149f0 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: a6269963230b136d84d96e4ab32f6c15b4d127eded765234854667cdcd00a7d0 all runs: crashed: invalid opcode in __traceiter_virtio_transport_alloc_pkt representative crash: invalid opcode in __traceiter_virtio_transport_alloc_pkt, types: [DoS] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [hang memleak ubsan bug_or_warning kasan locking atomic_sleep], they are not needed testing commit c750dc582629811994978507b7055b679be149f0 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 failed building c750dc582629811994978507b7055b679be149f0: ld.lld: error: undefined symbol: wext_proc_init ld.lld: error: undefined symbol: wext_proc_exit ld.lld: error: undefined symbol: wext_handle_ioctl ld.lld: error: undefined symbol: compat_wext_handle_ioctl minimized to 53 configs; suspects: [HID_ZEROPLUS USB_MON USB_NET_CDC_MBIM USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM V4L2_ASYNC V4L2_FWNODE VIDEO_CAMERA_SENSOR WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_PURELIFI WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_SILABS WLAN_VENDOR_ZYDAS ZEROPLUS_FF] disabling configs for [atomic_sleep hang memleak ubsan bug_or_warning kasan locking], they are not needed testing current HEAD f6787ec80e171530bdd83fa0d3b6b89ad8891e71 testing commit f6787ec80e171530bdd83fa0d3b6b89ad8891e71 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 76f6e527e1a9b8f44a3dcd53e753ced3f9b19d69dcc7624180c304749b8a19d7 all runs: crashed: invalid opcode in __traceiter_virtio_transport_alloc_pkt representative crash: invalid opcode in __traceiter_virtio_transport_alloc_pkt, types: [DoS] crash still not fixed/happens on the oldest tested release revisions tested: 7, total time: 53m12.777053932s (build: 25m35.536929745s, test: 24m41.571545149s) crash still not fixed or there were kernel test errors commit msg: ANDROID: GKI: Honor add symbols to symbol list crash: invalid opcode in __traceiter_virtio_transport_alloc_pkt RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000 RBP: 00007f4f3ca57090 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007f4f3bdb6038 R14: 00007f4f3bdb5fa0 R15: 00007ffccedb1ed8 CFI failure at __traceiter_virtio_transport_alloc_pkt+0x6a/0x90 include/trace/events/vsock_virtio_transport_common.h:39 (target: tp_stub_func+0x0/0x10; expected type: 0x7d8401ab) invalid opcode: 0000 [#1] PREEMPT SMP CPU: 0 PID: 523 Comm: syz.6.27 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 RIP: 0010:__traceiter_virtio_transport_alloc_pkt+0x6a/0x90 include/trace/events/vsock_virtio_transport_common.h:39 Code: 8b 7b 08 8b 75 d4 44 89 fa 44 89 f1 45 89 e8 45 89 e1 44 8b 55 20 41 52 ff 75 c0 ff 75 c8 41 ba 55 fe 7b 82 44 03 50 fc 74 02 <0f> 0b ff d0 48 83 c4 18 48 83 7b 18 00 48 8d 5b 18 75 bf 31 c0 48 RSP: 0018:ffffc90000bb3be0 EFLAGS: 00010a13 RAX: ffffffff8129c080 RBX: ffff88810a44f6d0 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffc90000cf3000 RBP: ffffc90000bb3c38 R08: 0000000003643fee R09: 0000000000000000 R10: 0000000027bc6561 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000003643fee R14: 0000000000000001 R15: 0000000000000000 FS: 00007f4f3ca576c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b30e63fff CR3: 000000011b0c7000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: trace_virtio_transport_alloc_pkt include/trace/events/vsock_virtio_transport_common.h:39 [inline] virtio_transport_alloc_pkt+0x1c2/0x220 net/vmw_vsock/virtio_transport_common.c:94 virtio_transport_send_pkt_info+0xfb/0x180 net/vmw_vsock/virtio_transport_common.c:234 virtio_transport_reset net/vmw_vsock/virtio_transport_common.c:838 [inline] virtio_transport_close net/vmw_vsock/virtio_transport_common.c:970 [inline] virtio_transport_release+0x8a/0x330 net/vmw_vsock/virtio_transport_common.c:998 __vsock_release+0x3f/0x1c0 net/vmw_vsock/af_vsock.c:869 __vsock_release+0x13b/0x1c0 net/vmw_vsock/af_vsock.c:880 vsock_release+0x3a/0x50 net/vmw_vsock/af_vsock.c:977 __sock_release net/socket.c:652 [inline] sock_close+0x4f/0xe0 net/socket.c:1390 __fput+0x89/0x250 fs/file_table.c:320 ____fput+0x9/0x10 fs/file_table.c:348 task_work_run+0x90/0xb0 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] exit_to_user_mode_loop+0x9b/0xb0 kernel/entry/common.c:177 exit_to_user_mode_prepare+0x5a/0xa0 kernel/entry/common.c:210 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline] syscall_exit_to_user_mode+0x1a/0x30 kernel/entry/common.c:303 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:87 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f4f3bb8ebe9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f4f3ca57038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00007f4f3bdb5fa0 RCX: 00007f4f3bb8ebe9 RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000 RBP: 00007f4f3ca57090 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007f4f3bdb6038 R14: 00007f4f3bdb5fa0 R15: 00007ffccedb1ed8 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__traceiter_virtio_transport_alloc_pkt+0x6a/0x90 include/trace/events/vsock_virtio_transport_common.h:39 Code: 8b 7b 08 8b 75 d4 44 89 fa 44 89 f1 45 89 e8 45 89 e1 44 8b 55 20 41 52 ff 75 c0 ff 75 c8 41 ba 55 fe 7b 82 44 03 50 fc 74 02 <0f> 0b ff d0 48 83 c4 18 48 83 7b 18 00 48 8d 5b 18 75 bf 31 c0 48 RSP: 0018:ffffc90000bb3be0 EFLAGS: 00010a13 RAX: ffffffff8129c080 RBX: ffff88810a44f6d0 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffc90000cf3000 RBP: ffffc90000bb3c38 R08: 0000000003643fee R09: 0000000000000000 R10: 0000000027bc6561 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000003643fee R14: 0000000000000001 R15: 0000000000000000 FS: 00007f4f3ca576c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b30e63fff CR3: 000000011b0c7000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400