ci2 starts bisection 2025-12-28 17:59:25.670154625 +0000 UTC m=+2780977.847277702
bisecting fixing commit since 1257aa4519ee5d49e465b0dcc85cc7e4a24619d5
building syzkaller on ff1712fe925b6acf5dec3cd7616cf03effc97f62
ensuring issue is reproducible on original commit 1257aa4519ee5d49e465b0dcc85cc7e4a24619d5

testing commit 1257aa4519ee5d49e465b0dcc85cc7e4a24619d5 gcc
compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8
kernel signature: a48066836d5789de8c410017ff5a73ac0a3618e3462958dbb97e0c6d2f337a86
all runs: crashed: kernel BUG in ext4_alloc_file_blocks
representative crash: kernel BUG in ext4_alloc_file_blocks, types: [BUG]
check whether we can drop unnecessary instrumentation
disabling configs for [memleak ubsan kasan locking atomic_sleep hang], they are not needed
testing commit 1257aa4519ee5d49e465b0dcc85cc7e4a24619d5 gcc
compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8
kernel signature: 50286120b3cc61a6fdd14c5d2c3ee2d31dabe0bd44e2b0e7138e7a22cb8eb103
all runs: crashed: kernel BUG in ext4_alloc_file_blocks
representative crash: kernel BUG in ext4_alloc_file_blocks, types: [BUG]
the bug reproduces without the instrumentation
disabling configs for [atomic_sleep hang memleak ubsan kasan locking], they are not needed
kconfig minimization: base=5186 full=6556 leaves diff=265
split chunks (needed=false): <265>
split chunk #0 of len 265 into 5 parts
testing without sub-chunk 1/5
disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed
testing commit 1257aa4519ee5d49e465b0dcc85cc7e4a24619d5 gcc
compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8
kernel signature: 0e08e2503321cea889c2d762deccd7f6812f2cee4373e9db5d61b13a160fe9b6
run #0: crashed: kernel BUG in ext4_alloc_file_blocks
run #1: crashed: kernel BUG in ext4_alloc_file_blocks
run #2: crashed: kernel BUG in ext4_alloc_file_blocks
run #3: crashed: kernel BUG in ext4_alloc_file_blocks
run #4: crashed: kernel BUG in ext4_alloc_file_blocks
run #5: crashed: kernel BUG in ext4_alloc_file_blocks
run #6: crashed: kernel BUG in ext4_alloc_file_blocks
run #7: crashed: kernel BUG in ext4_alloc_file_blocks
run #8: crashed: kernel BUG in kernfs_put
run #9: crashed: kernel BUG in ext4_alloc_file_blocks
representative crash: kernel BUG in ext4_alloc_file_blocks, types: [BUG]
the chunk can be dropped
testing without sub-chunk 2/5
disabling configs for [memleak ubsan kasan locking atomic_sleep hang], they are not needed
testing commit 1257aa4519ee5d49e465b0dcc85cc7e4a24619d5 gcc
compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8
kernel signature: 5f3e67e58fb0c9e419d1a0e3ea69b4cd4913703896a30cf09ff96054e0c813ce
all runs: crashed: kernel BUG in ext4_alloc_file_blocks
representative crash: kernel BUG in ext4_alloc_file_blocks, types: [BUG]
the chunk can be dropped
testing without sub-chunk 3/5
disabling configs for [ubsan kasan locking atomic_sleep hang memleak], they are not needed
testing commit 1257aa4519ee5d49e465b0dcc85cc7e4a24619d5 gcc
compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8
kernel signature: 0fffc3b60cc20f838690abccb470803d6f49c8879dfa3c559f4944fd5ce1584e
all runs: crashed: kernel BUG in ext4_alloc_file_blocks
representative crash: kernel BUG in ext4_alloc_file_blocks, types: [BUG]
the chunk can be dropped
testing without sub-chunk 4/5
disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed
testing commit 1257aa4519ee5d49e465b0dcc85cc7e4a24619d5 gcc
compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8
kernel signature: 068a3efc86b17118fa4b79dc8a3ed5879d160a32320533bff5f7ba53bd650105
all runs: crashed: kernel BUG in ext4_alloc_file_blocks
representative crash: kernel BUG in ext4_alloc_file_blocks, types: [BUG]
the chunk can be dropped
testing without sub-chunk 5/5
disabling configs for [atomic_sleep hang memleak ubsan kasan locking], they are not needed
testing commit 1257aa4519ee5d49e465b0dcc85cc7e4a24619d5 gcc
compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8
failed building 1257aa4519ee5d49e465b0dcc85cc7e4a24619d5: ld.lld: error: undefined symbol: wext_proc_init
ld.lld: error: undefined symbol: wext_proc_exit
ld.lld: error: undefined symbol: wext_handle_ioctl
ld.lld: error: undefined symbol: compat_wext_handle_ioctl
minimized to 53 configs; suspects: [HID_ZEROPLUS USB_MON USB_NET_CDC_MBIM USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM V4L2_ASYNC V4L2_FWNODE VIDEO_CAMERA_SENSOR WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_PURELIFI WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_SILABS WLAN_VENDOR_ZYDAS ZEROPLUS_FF]
disabling configs for [locking atomic_sleep hang memleak ubsan kasan], they are not needed
testing current HEAD 5e6db704570401cf7c881129fa38842ddce8f945
testing commit 5e6db704570401cf7c881129fa38842ddce8f945 gcc
compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8
kernel signature: c0f4ab2925706fbec3c2bd096044d9fe8fc92b81ae382e81b8947a39b5a77905
all runs: crashed: kernel BUG in ext4_alloc_file_blocks
representative crash: kernel BUG in ext4_alloc_file_blocks, types: [BUG]
crash still not fixed/happens on the oldest tested release
revisions tested: 7, total time: 2h1m14.615369865s (build: 50m39.29763142s, test: 1h3m35.031571172s)
crash still not fixed or there were kernel test errors
commit msg: ANDROID: oplus add symbols to symbol list
crash: kernel BUG in ext4_alloc_file_blocks
------------[ cut here ]------------
kernel BUG at fs/ext4/extents.c:4491!
invalid opcode: 0000 [#1] PREEMPT SMP
CPU: 1 PID: 874 Comm: syz.6.105 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:ext4_alloc_file_blocks+0x307/0x310 fs/ext4/extents.c:4491
Code: c1 f8 1f 21 c3 65 48 8b 04 25 28 00 00 00 48 3b 45 d0 75 11 89 d8 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d9 10 bc 00 <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 66 90 5d c3 65 8b 05 81 ab
RSP: 0018:ffffc90001477d00 EFLAGS: 00010246
RAX: 3eff0ad0607f8f00 RBX: 00000000000007ff RCX: 0000000000008001
RDX: 0000000000000011 RSI: 0000000000000000 RDI: ffff88811c9e7c80
RBP: ffffc90001477d80 R08: 0000000000000003 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000004 R12: 0000000000000000
R13: 000000000000000b R14: ffff88810db5dba8 R15: ffff88810db5dba8
FS:  00007f5f170066c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f24a0be7dac CR3: 00000001130e2000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ext4_zero_range+0x198/0x420 fs/ext4/extents.c:4641
 ext4_fallocate+0x44e/0x960 fs/ext4/extents.c:4776
 vfs_fallocate+0x1b3/0x1d0 fs/open.c:324
 ksys_fallocate fs/open.c:347 [inline]
 __do_sys_fallocate fs/open.c:355 [inline]
 __se_sys_fallocate fs/open.c:353 [inline]
 __x64_sys_fallocate+0x40/0x70 fs/open.c:353
 x64_sys_call+0x7fa/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:286
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f5f1618eec9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5f17006038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
RAX: ffffffffffffffda RBX: 00007f5f163e6090 RCX: 00007f5f1618eec9
RDX: 0000000000000002 RSI: 0000000000000010 RDI: 0000000000000004
RBP: 00007f5f16211f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000000
R13: 00007f5f163e6128 R14: 00007f5f163e6090 R15: 00007ffd912909c8
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:ext4_alloc_file_blocks+0x307/0x310 fs/ext4/extents.c:4491
Code: c1 f8 1f 21 c3 65 48 8b 04 25 28 00 00 00 48 3b 45 d0 75 11 89 d8 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d9 10 bc 00 <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 66 90 5d c3 65 8b 05 81 ab
RSP: 0018:ffffc90001477d00 EFLAGS: 00010246
RAX: 3eff0ad0607f8f00 RBX: 00000000000007ff RCX: 0000000000008001
RDX: 0000000000000011 RSI: 0000000000000000 RDI: ffff88811c9e7c80
RBP: ffffc90001477d80 R08: 0000000000000003 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000004 R12: 0000000000000000
R13: 000000000000000b R14: ffff88810db5dba8 R15: ffff88810db5dba8
FS:  00007f5f170066c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f24a0be7dac CR3: 00000001130e2000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400