ci2 starts bisection 2025-07-13 18:13:40.022866072 +0000 UTC m=+264729.259115967
bisecting fixing commit since db710ea87c32d5f806ffaaccbf98ecd3108314e4
building syzkaller on 874a1386706482fe473dfe96f8a3acc52c1b2ba1
ensuring issue is reproducible on original commit db710ea87c32d5f806ffaaccbf98ecd3108314e4

testing commit db710ea87c32d5f806ffaaccbf98ecd3108314e4 gcc
compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
kernel signature: 71a68f7044dce3db73c1995465b92d88f228cd54183035ae3820bb9645244847
all runs: crashed: invalid opcode in __traceiter_percpu_free_percpu
representative crash: invalid opcode in __traceiter_percpu_free_percpu, types: [DoS]
check whether we can drop unnecessary instrumentation
disabling configs for [atomic_sleep hang memleak ubsan bug_or_warning kasan locking], they are not needed
testing commit db710ea87c32d5f806ffaaccbf98ecd3108314e4 gcc
compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
kernel signature: 64f1fe2b50731c50d0cdb93f1b1bcf333ef9dcc8a837995331c2003af5108004
all runs: crashed: invalid opcode in __traceiter_percpu_free_percpu
representative crash: invalid opcode in __traceiter_percpu_free_percpu, types: [DoS]
the bug reproduces without the instrumentation
disabling configs for [hang memleak ubsan bug_or_warning kasan locking atomic_sleep], they are not needed
kconfig minimization: base=5186 full=6555 leaves diff=264
split chunks (needed=false): <264>
split chunk #0 of len 264 into 5 parts
testing without sub-chunk 1/5
disabling configs for [hang memleak ubsan bug_or_warning kasan locking atomic_sleep], they are not needed
testing commit db710ea87c32d5f806ffaaccbf98ecd3108314e4 gcc
compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
kernel signature: cd8fd647226f519f04cfcc977c916295afd53b03472ae7a3982eb37dad824622
all runs: crashed: invalid opcode in __traceiter_percpu_free_percpu
representative crash: invalid opcode in __traceiter_percpu_free_percpu, types: [DoS]
the chunk can be dropped
testing without sub-chunk 2/5
disabling configs for [locking atomic_sleep hang memleak ubsan bug_or_warning kasan], they are not needed
testing commit db710ea87c32d5f806ffaaccbf98ecd3108314e4 gcc
compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
kernel signature: 6cc20f226ff6fc6ea8db157b229bc4cfde629624bad49a0f60ad38697fdc4142
all runs: crashed: invalid opcode in __traceiter_percpu_free_percpu
representative crash: invalid opcode in __traceiter_percpu_free_percpu, types: [DoS]
the chunk can be dropped
testing without sub-chunk 3/5
disabling configs for [bug_or_warning kasan locking atomic_sleep hang memleak ubsan], they are not needed
testing commit db710ea87c32d5f806ffaaccbf98ecd3108314e4 gcc
compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
kernel signature: f50372210dcc8cde1605467e39dd903625d96bcca74cb71dc5b3fd317bce02d0
all runs: crashed: invalid opcode in __traceiter_percpu_free_percpu
representative crash: invalid opcode in __traceiter_percpu_free_percpu, types: [DoS]
the chunk can be dropped
testing without sub-chunk 4/5
disabling configs for [locking atomic_sleep hang memleak ubsan bug_or_warning kasan], they are not needed
testing commit db710ea87c32d5f806ffaaccbf98ecd3108314e4 gcc
compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
kernel signature: f0f89dd385778bdbb791bb85d1f1795c9bbb4e8fec320b09aca09e8ccdb8c909
all runs: crashed: invalid opcode in __traceiter_percpu_free_percpu
representative crash: invalid opcode in __traceiter_percpu_free_percpu, types: [DoS]
the chunk can be dropped
testing without sub-chunk 5/5
disabling configs for [memleak ubsan bug_or_warning kasan locking atomic_sleep hang], they are not needed
testing commit db710ea87c32d5f806ffaaccbf98ecd3108314e4 gcc
compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
failed building db710ea87c32d5f806ffaaccbf98ecd3108314e4: ld.lld: error: undefined symbol: wext_proc_init
ld.lld: error: undefined symbol: wext_proc_exit
ld.lld: error: undefined symbol: wext_handle_ioctl
ld.lld: error: undefined symbol: compat_wext_handle_ioctl
minimized to 52 configs; suspects: [HID_ZEROPLUS USB_NET_CDC_MBIM USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM V4L2_ASYNC V4L2_FWNODE VIDEO_CAMERA_SENSOR WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_PURELIFI WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_SILABS WLAN_VENDOR_ZYDAS ZEROPLUS_FF]
disabling configs for [memleak ubsan bug_or_warning kasan locking atomic_sleep hang], they are not needed
testing current HEAD e2deb0b42a3a8a994fd301a89fcf70ff0896ccb6
testing commit e2deb0b42a3a8a994fd301a89fcf70ff0896ccb6 gcc
compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
kernel signature: 6af6dd985705bc4640800d2cf1f891736cd0c44d2cb1c5f1ef5df514035d0baa
all runs: crashed: invalid opcode in __traceiter_percpu_free_percpu
representative crash: invalid opcode in __traceiter_percpu_free_percpu, types: [DoS]
crash still not fixed/happens on the oldest tested release
revisions tested: 7, total time: 3h20m55.329362672s (build: 1h45m54.688597481s, test: 1h11m15.518788929s)
crash still not fixed or there were kernel test errors
commit msg: ANDROID: GKI: Update rockchip symbols for drm driver.
crash: invalid opcode in __traceiter_percpu_free_percpu
CFI failure at __traceiter_percpu_free_percpu+0x3e/0x60 include/trace/events/percpu.h:54 (target: tp_stub_func+0x0/0x10; expected type: 0xc88d2a22)
invalid opcode: 0000 [#1] PREEMPT SMP
CPU: 0 PID: 455 Comm: kworker/0:4 Not tainted 6.1.141-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: events bpf_prog_free_deferred
RIP: 0010:__traceiter_percpu_free_percpu+0x3e/0x60 include/trace/events/percpu.h:54
Code: e4 74 38 48 89 cb 41 89 d6 49 89 f7 49 8b 04 24 49 8b 7c 24 08 4c 89 fe 44 89 f2 48 89 d9 41 ba de d5 72 37 44 03 50 fc 74 02 <0f> 0b ff d0 49 83 7c 24 18 00 4d 8d 64 24 18 75 d1 31 c0 5b 41 5c
RSP: 0018:ffffc900009cbd70 EFLAGS: 00010092
RAX: ffffffff8129b270 RBX: 0000607dc8039110 RCX: 0000607dc8039110
RDX: 0000000000039110 RSI: ffffe8ffffc00000 RDI: ffffc90000ac5000
RBP: ffffc900009cbd90 R08: ffff8881008a0000 R09: 000000008010000f
R10: 00000000dcb33cea R11: ffffffff811e11c0 R12: ffff88823ffe4fd0
R13: 0000000000000000 R14: 0000000000039110 R15: ffffe8ffffc00000
FS:  0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fdafac65760 CR3: 000000000320b000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 trace_percpu_free_percpu include/trace/events/percpu.h:54 [inline]
 free_percpu+0x477/0x4f0 mm/percpu.c:2304
 __bpf_prog_free+0x2f/0x50 kernel/bpf/core.c:269
 bpf_prog_unlock_free include/linux/filter.h:903 [inline]
 bpf_jit_free+0x65/0x70 arch/x86/net/bpf_jit_comp.c:2648
 bpf_prog_free_deferred+0x1ba/0x1d0 kernel/bpf/core.c:2584
 process_one_work+0x1bf/0x390 kernel/workqueue.c:2299
 worker_thread+0x231/0x390 kernel/workqueue.c:2446
 kthread+0xe5/0x100 kernel/kthread.c:386
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__traceiter_percpu_free_percpu+0x3e/0x60 include/trace/events/percpu.h:54
Code: e4 74 38 48 89 cb 41 89 d6 49 89 f7 49 8b 04 24 49 8b 7c 24 08 4c 89 fe 44 89 f2 48 89 d9 41 ba de d5 72 37 44 03 50 fc 74 02 <0f> 0b ff d0 49 83 7c 24 18 00 4d 8d 64 24 18 75 d1 31 c0 5b 41 5c
RSP: 0018:ffffc900009cbd70 EFLAGS: 00010092
RAX: ffffffff8129b270 RBX: 0000607dc8039110 RCX: 0000607dc8039110
RDX: 0000000000039110 RSI: ffffe8ffffc00000 RDI: ffffc90000ac5000
RBP: ffffc900009cbd90 R08: ffff8881008a0000 R09: 000000008010000f
R10: 00000000dcb33cea R11: ffffffff811e11c0 R12: ffff88823ffe4fd0
R13: 0000000000000000 R14: 0000000000039110 R15: ffffe8ffffc00000
FS:  0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fdafac65760 CR3: 000000000320b000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400