ci2 starts bisection 2024-07-13 05:36:06.005521206 +0000 UTC m=+128290.553152661
bisecting fixing commit since 899194d7e9095594e35bb0097dc0e3e2c7d8a0e6
building syzkaller on 239abf840427841c91a546737fdcb9a1ed18bd39
ensuring issue is reproducible on original commit 899194d7e9095594e35bb0097dc0e3e2c7d8a0e6

testing commit 899194d7e9095594e35bb0097dc0e3e2c7d8a0e6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 453f2b87947bd1b052edb1a586c6cf5b78c81570c42b9f6925ebf74f37dfd4f3
all runs: crashed: kernel BUG in mmap_region
representative crash: kernel BUG in mmap_region, types: [BUG]
check whether we can drop unnecessary instrumentation
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit 899194d7e9095594e35bb0097dc0e3e2c7d8a0e6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: a9d19dc7f59af9a460e5222ef4ec63ad1eb9dfb66837d5d44adb21ce6e321fba
all runs: crashed: kernel BUG in mmap_region
representative crash: kernel BUG in mmap_region, types: [BUG]
the bug reproduces without the instrumentation
disabling configs for [LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed
kconfig minimization: base=5179 full=6491 leaves diff=255
split chunks (needed=false): <255>
split chunk #0 of len 255 into 5 parts
testing without sub-chunk 1/5
disabling configs for [LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed
testing commit 899194d7e9095594e35bb0097dc0e3e2c7d8a0e6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 067dce09327fc85ce701675cfc7b3f1d0be07833892017e3ed19773fb9944616
run #0: crashed: kernel BUG in mmap_region
run #1: crashed: kernel BUG in mmap_region
run #2: crashed: kernel BUG in mmap_region
run #3: crashed: kernel BUG in mmap_region
run #4: crashed: kernel BUG in mmap_region
run #5: crashed: kernel BUG in mmap_region
run #6: crashed: kernel BUG in mmap_region
run #7: crashed: kernel BUG in mmap_region
run #8: crashed: kernel BUG in mmap_region
run #9: OK
representative crash: kernel BUG in mmap_region, types: [BUG]
the chunk can be dropped
testing without sub-chunk 2/5
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit 899194d7e9095594e35bb0097dc0e3e2c7d8a0e6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: c6678ac4646fa641768311df85c48f63d2fb325669361de9e29e56036a7587fa
all runs: crashed: kernel BUG in mmap_region
representative crash: kernel BUG in mmap_region, types: [BUG]
the chunk can be dropped
testing without sub-chunk 3/5
disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing commit 899194d7e9095594e35bb0097dc0e3e2c7d8a0e6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 255165640d3b05ba053f79941ff434e5f8b0d0ecb454e4bf1354e15bd73347f7
run #0: crashed: kernel BUG in mmap_region
run #1: crashed: kernel BUG in mmap_region
run #2: crashed: kernel BUG in mmap_region
run #3: crashed: kernel BUG in mmap_region
run #4: crashed: kernel BUG in mmap_region
run #5: crashed: kernel BUG in mmap_region
run #6: crashed: kernel BUG in mmap_region
run #7: crashed: kernel BUG in mmap_region
run #8: crashed: kernel BUG in mmap_region
run #9: OK
representative crash: kernel BUG in mmap_region, types: [BUG]
the chunk can be dropped
testing without sub-chunk 4/5
disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing commit 899194d7e9095594e35bb0097dc0e3e2c7d8a0e6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 2ee0ac44ac3560516615398fa7818fd4f9ffbe39c666d0eef83cb3a373c63398
all runs: crashed: kernel BUG in mmap_region
representative crash: kernel BUG in mmap_region, types: [BUG]
the chunk can be dropped
testing without sub-chunk 5/5
disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing commit 899194d7e9095594e35bb0097dc0e3e2c7d8a0e6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
failed building 899194d7e9095594e35bb0097dc0e3e2c7d8a0e6: net/socket.c:1242: undefined reference to `wext_handle_ioctl'
net/socket.c:3437: undefined reference to `compat_wext_handle_ioctl'
net/core/net-procfs.c:329: undefined reference to `wext_proc_init'
net/core/net-procfs.c:345: undefined reference to `wext_proc_exit'
minimized to 51 configs; suspects: [HID_ZEROPLUS USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM V4L2_ASYNC V4L2_FWNODE VIDEO_CAMERA_SENSOR WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_PURELIFI WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_SILABS WLAN_VENDOR_ZYDAS X86_X32_ABI ZEROPLUS_FF]
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing current HEAD 96d66062d0767aeafb690ce014ec91785820d62b
testing commit 96d66062d0767aeafb690ce014ec91785820d62b gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: cf91f8013733fbd632743ddd2a1da66b7108a046abdc95fa56dbd8ac4dd64504
run #0: crashed: kernel BUG in mmap_region
run #1: crashed: kernel BUG in mmap_region
run #2: crashed: kernel BUG in mmap_region
run #3: crashed: kernel BUG in mmap_region
run #4: crashed: kernel BUG in mmap_region
run #5: crashed: kernel BUG in mmap_region
run #6: crashed: kernel BUG in mmap_region
run #7: crashed: kernel BUG in mmap_region
run #8: crashed: kernel BUG in mmap_region
run #9: OK
representative crash: kernel BUG in mmap_region, types: [BUG]
crash still not fixed/happens on the oldest tested release
revisions tested: 7, total time: 1h17m0.830861258s (build: 29m43.856831828s, test: 44m21.736481318s)
crash still not fixed or there were kernel test errors
commit msg: ANDROID: GKI: Add initialization for mutex oem_data.
crash: kernel BUG in mmap_region
RSP: 002b:00007f327922e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00007f32785abf80 RCX: 00007f327847cda9
RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000
RBP: 00007f327922e120 R08: 0000000000000003 R09: 0000000008000000
R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001
R13: 000000000000000b R14: 00007f32785abf80 R15: 00007ffff1556438
 </TASK>
------------[ cut here ]------------
kernel BUG at mm/mmap.c:2833!
invalid opcode: 0000 [#1] PREEMPT SMP
CPU: 0 PID: 363 Comm: syz-executor.0 Not tainted 6.1.84-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
RIP: 0010:mmap_region+0xc1b/0xc70 mm/mmap.c:2833
Code: 4c 8b ad 20 ff ff ff e9 cb fc ff ff 49 8b 46 20 48 89 85 48 ff ff ff 4c 8b ad 20 ff ff ff e9 d1 fb ff ff e8 47 a1 c1 00 0f 0b <0f> 0b 65 8b 05 1c 41 c8 7e 89 c0 48 0f a3 05 da 1f e6 01 0f 83 73
RSP: 0018:ffffc900007cbcb0 EFLAGS: 00010212
RAX: ffff8881154cced8 RBX: ffff88810b895001 RCX: 0000000000000001
RDX: ffff8881127e9508 RSI: ffff8881127e9500 RDI: ffff888108be6880
RBP: ffffc900007cbdb8 R08: ffffffffffffff00 R09: 0000000000000002
R10: ffff8881127e9508 R11: 0000000000000000 R12: 0000000020ffefff
R13: 0000000020fff000 R14: ffff8881154cced8 R15: 0000000020ffd000
FS:  00007f327922e6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f327922dff8 CR3: 0000000112d02000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 do_mmap+0x37a/0x4d0 mm/mmap.c:1475
 vm_mmap_pgoff+0x148/0x1e0 mm/util.c:525
 ksys_mmap_pgoff+0x72/0xe0 mm/mmap.c:1521
 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:93 [inline]
 __se_sys_mmap arch/x86/kernel/sys_x86_64.c:86 [inline]
 __x64_sys_mmap+0x37/0x40 arch/x86/kernel/sys_x86_64.c:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f327847cda9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f327922e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00007f32785abf80 RCX: 00007f327847cda9
RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000
RBP: 00007f327922e120 R08: 0000000000000003 R09: 0000000008000000
R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001
R13: 000000000000000b R14: 00007f32785abf80 R15: 00007ffff1556438
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:mmap_region+0xc1b/0xc70 mm/mmap.c:2833
Code: 4c 8b ad 20 ff ff ff e9 cb fc ff ff 49 8b 46 20 48 89 85 48 ff ff ff 4c 8b ad 20 ff ff ff e9 d1 fb ff ff e8 47 a1 c1 00 0f 0b <0f> 0b 65 8b 05 1c 41 c8 7e 89 c0 48 0f a3 05 da 1f e6 01 0f 83 73
RSP: 0018:ffffc900007cbcb0 EFLAGS: 00010212
RAX: ffff8881154cced8 RBX: ffff88810b895001 RCX: 0000000000000001
RDX: ffff8881127e9508 RSI: ffff8881127e9500 RDI: ffff888108be6880
RBP: ffffc900007cbdb8 R08: ffffffffffffff00 R09: 0000000000000002
R10: ffff8881127e9508 R11: 0000000000000000 R12: 0000000020ffefff
R13: 0000000020fff000 R14: ffff8881154cced8 R15: 0000000020ffd000
FS:  00007f327922e6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f327922dff8 CR3: 0000000112d02000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400