ci2 starts bisection 2026-08-11 00:22:27.115814001 +0000 UTC m=+20592.731550313 bisecting fixing commit since dad37bbb13a8cb34a50620b396e22db5eff2dfdd building syzkaller on 4180d91913899c7394d15307c52f8ec0b228f6cc ensuring issue is reproducible on original commit dad37bbb13a8cb34a50620b396e22db5eff2dfdd testing commit dad37bbb13a8cb34a50620b396e22db5eff2dfdd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 82db51ed7dfd5b6af320c6e3159988b3761edbc59211729c90b489bcb2efdf93 run #0: crashed: kernel BUG in ext4_mb_normalize_request run #1: crashed: kernel BUG in ext4_ext_map_blocks run #2: crashed: kernel BUG in ext4_split_extent_at run #3: crashed: kernel BUG in ext4_ext_map_blocks run #4: crashed: kernel BUG in ext4_ext_map_blocks run #5: crashed: kernel BUG in ext4_mb_normalize_request run #6: crashed: kernel BUG in ext4_mb_normalize_request run #7: crashed: kernel BUG in ext4_split_extent_at run #8: crashed: kernel BUG in ext4_split_extent_at run #9: crashed: kernel BUG in ext4_mb_normalize_request run #10: crashed: kernel BUG in __es_remove_extent run #11: crashed: kernel BUG in ext4_mb_normalize_request run #12: crashed: kernel BUG in ext4_mb_normalize_request run #13: crashed: kernel BUG in ext4_mb_normalize_request run #14: crashed: kernel BUG in ext4_split_extent_at run #15: crashed: kernel BUG in ext4_mb_normalize_request run #16: crashed: kernel BUG in ext4_ext_map_blocks run #17: crashed: kernel BUG in ext4_mb_normalize_request run #18: crashed: kernel BUG in ext4_mb_normalize_request run #19: crashed: kernel BUG in ext4_mb_normalize_request representative crash: kernel BUG in ext4_mb_normalize_request, types: [BUG] check whether we can drop unnecessary instrumentation disabling configs for [hang memleak ubsan kasan locking atomic_sleep], they are not needed testing commit dad37bbb13a8cb34a50620b396e22db5eff2dfdd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: ae333883b92fb3ab3530365fa937a2ccd70375d4083735bbb786059b2b853c78 run #0: crashed: kernel BUG in ext4_split_extent_at run #1: crashed: kernel BUG in ext4_mb_normalize_request run #2: crashed: kernel BUG in ext4_mb_normalize_request run #3: crashed: kernel BUG in ext4_mb_normalize_request run #4: crashed: kernel BUG in ext4_mb_normalize_request run #5: crashed: kernel BUG in ext4_split_extent_at run #6: crashed: kernel BUG in ext4_mb_normalize_request run #7: crashed: kernel BUG in ext4_mb_use_inode_pa run #8: crashed: kernel BUG in ext4_mb_normalize_request run #9: crashed: kernel BUG in ext4_mb_normalize_request representative crash: kernel BUG in ext4_split_extent_at, types: [BUG] the bug reproduces without the instrumentation disabling configs for [atomic_sleep hang memleak ubsan kasan locking], they are not needed kconfig minimization: base=4788 full=6025 leaves diff=248 split chunks (needed=false): <248> split chunk #0 of len 248 into 5 parts testing without sub-chunk 1/5 disabling configs for [hang memleak ubsan kasan locking atomic_sleep], they are not needed testing commit dad37bbb13a8cb34a50620b396e22db5eff2dfdd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 1f508861625f167548e83a9ef31f8443703379dd98254f11b47d2614133bc017 run #0: crashed: kernel BUG in ext4_mb_normalize_request run #1: crashed: kernel BUG in ext4_mb_normalize_request run #2: crashed: kernel BUG in ext4_mb_normalize_request run #3: crashed: kernel BUG in ext4_mb_normalize_request run #4: crashed: kernel BUG in ext4_split_extent_at run #5: crashed: kernel BUG in ext4_mb_normalize_request run #6: crashed: kernel BUG in ext4_mb_normalize_request run #7: crashed: kernel BUG in ext4_mb_normalize_request run #8: crashed: kernel BUG in ext4_mb_normalize_request run #9: crashed: kernel BUG in ext4_mb_normalize_request representative crash: kernel BUG in ext4_mb_normalize_request, types: [BUG] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [memleak ubsan kasan locking atomic_sleep hang], they are not needed testing commit dad37bbb13a8cb34a50620b396e22db5eff2dfdd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 6f156fd097a4cda6ba078cf5218e12b4693e70bdb73479bafdaead5ef0ffaed8 run #0: crashed: kernel BUG in ext4_split_extent_at run #1: crashed: kernel BUG in ext4_split_extent_at run #2: crashed: kernel BUG in ext4_split_extent_at run #3: crashed: kernel BUG in ext4_split_extent_at run #4: crashed: kernel BUG in ext4_split_extent_at run #5: crashed: kernel BUG in ext4_ext_insert_extent run #6: crashed: kernel BUG in ext4_split_extent_at run #7: crashed: kernel BUG in ext4_split_extent_at run #8: OK run #9: OK representative crash: kernel BUG in ext4_split_extent_at, types: [BUG] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [ubsan kasan locking atomic_sleep hang memleak], they are not needed testing commit dad37bbb13a8cb34a50620b396e22db5eff2dfdd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 47e4e93b87cabcc6858e749fc78f8904403aeaa7b23e82f0cdaf9d1bb3ab1744 run #0: crashed: kernel BUG in ext4_ext_insert_extent run #1: crashed: kernel BUG in ext4_es_insert_extent run #2: crashed: kernel BUG in ext4_mb_normalize_request run #3: crashed: kernel BUG in ext4_split_extent_at run #4: crashed: kernel BUG in ext4_split_extent_at run #5: crashed: kernel BUG in ext4_split_extent_at run #6: crashed: kernel BUG in ext4_split_extent_at run #7: crashed: kernel BUG in ext4_mb_normalize_request run #8: crashed: kernel BUG in ext4_split_extent_at run #9: crashed: kernel BUG in ext4_split_extent_at representative crash: kernel BUG in ext4_ext_insert_extent, types: [BUG] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [memleak ubsan kasan locking atomic_sleep hang], they are not needed testing commit dad37bbb13a8cb34a50620b396e22db5eff2dfdd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: ed67debbddb780c5b63f006478a6559e8f18702afbef112a0b064cb3606cc3a3 run #0: crashed: kernel BUG in ext4_split_extent_at run #1: crashed: kernel BUG in ext4_mb_normalize_request run #2: crashed: kernel BUG in ext4_split_extent_at run #3: crashed: kernel BUG in ext4_split_extent_at run #4: crashed: kernel BUG in ext4_split_extent_at run #5: OK run #6: OK run #7: OK run #8: OK run #9: crashed: kernel BUG in ext4_split_extent_at representative crash: kernel BUG in ext4_split_extent_at, types: [BUG] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [ubsan kasan locking atomic_sleep hang memleak], they are not needed testing commit dad37bbb13a8cb34a50620b396e22db5eff2dfdd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 failed building dad37bbb13a8cb34a50620b396e22db5eff2dfdd: net/socket.c:1128:(.text+0x837): undefined reference to `wext_handle_ioctl' net/socket.c:3397:(.text+0xa28): undefined reference to `compat_wext_handle_ioctl' net/core/net-procfs.c:346:(.text+0x109): undefined reference to `wext_proc_exit' net/core/net-procfs.c:330:(.text+0x1e4): undefined reference to `wext_proc_init' minimized to 48 configs; suspects: [HID_ZEROPLUS USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL USB_SERIAL_FTDI_SIO USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM USB_XHCI_PCI_RENESAS WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_ZYDAS ZEROPLUS_FF] disabling configs for [atomic_sleep hang memleak ubsan kasan locking], they are not needed testing current HEAD 447db0046f21df411c817f9f05b9f6210adb9d81 testing commit 447db0046f21df411c817f9f05b9f6210adb9d81 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 3ce63385ebdb3383345e7d90b1a416c7f2507065fc9c1a39656147beec187044 all runs: OK false negative chance: 0.000 # git bisect start 447db0046f21df411c817f9f05b9f6210adb9d81 dad37bbb13a8cb34a50620b396e22db5eff2dfdd Bisecting: 1090 revisions left to test after this (roughly 10 steps) [71db3cbb411245448c61749014179295d8f1e168] UPSTREAM: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued determine whether the revision contains the guilty commit revision dad37bbb13a8cb34a50620b396e22db5eff2dfdd crashed and is reachable testing commit 71db3cbb411245448c61749014179295d8f1e168 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 7fb6faf691461925bb7ef628c731f3f6c5dd5138a89e75ddfdd79f24b6540cce all runs: OK false negative chance: 0.000 # git bisect bad 71db3cbb411245448c61749014179295d8f1e168 Bisecting: 545 revisions left to test after this (roughly 9 steps) [f4632dcc09bf2b6e6ef32b5b45146595b5435cab] igc: fix missing update of skb->tail in igc_xmit_frame() determine whether the revision contains the guilty commit checking the merge base 3e2558088a1a3dc941eec8edafd002758ae97d77 no existing result, test the revision testing commit 3e2558088a1a3dc941eec8edafd002758ae97d77 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 37a5e6ef50cf93af543df4fe87003732501a866442cc676f569284a36f2ab831 run #0: crashed: kernel BUG in ext4_split_extent_at run #1: crashed: kernel BUG in ext4_split_extent_at run #2: crashed: kernel BUG in ext4_split_extent_at run #3: crashed: kernel BUG in ext4_mb_normalize_request run #4: crashed: kernel BUG in ext4_split_extent_at run #5: crashed: kernel BUG in ext4_split_extent_at run #6: crashed: kernel BUG in ext4_mb_normalize_request run #7: crashed: kernel BUG in ext4_split_extent_at run #8: OK run #9: OK representative crash: kernel BUG in ext4_split_extent_at, types: [BUG] testing commit f4632dcc09bf2b6e6ef32b5b45146595b5435cab gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: b3cbb2e6c195c430f289e6dc98b84a2fb4ab4535d3f594b2c41624c3cb27b94b run #0: crashed: kernel BUG in ext4_split_extent_at run #1: crashed: kernel BUG in ext4_split_extent_at run #2: crashed: kernel BUG in ext4_split_extent_at run #3: crashed: kernel BUG in ext4_split_extent_at run #4: crashed: kernel BUG in ext4_split_extent_at run #5: crashed: kernel BUG in ext4_split_extent_at run #6: crashed: kernel BUG in ext4_split_extent_at run #7: crashed: kernel BUG in ext4_split_extent_at run #8: crashed: kernel BUG in ext4_split_extent_at run #9: OK representative crash: kernel BUG in ext4_split_extent_at, types: [BUG] # git bisect good f4632dcc09bf2b6e6ef32b5b45146595b5435cab Bisecting: 272 revisions left to test after this (roughly 8 steps) [dbf862ce9f009128ab86b234d91413a3e450beb4] xen/privcmd: fix double free via VMA splitting determine whether the revision contains the guilty commit revision 3e2558088a1a3dc941eec8edafd002758ae97d77 crashed and is reachable testing commit dbf862ce9f009128ab86b234d91413a3e450beb4 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 92fc45f870f711b79566e045a005d7d61bf3ebe15996d0f6eb7eb9316377e132 run #0: infra problem: error getting instance ci2-android-5-10-bisect-job-0 details after creation: googleapi: Error 503: Internal error. Please try again or contact Google Support. (Code: 'Internal error'), backendError run #1: infra problem: error getting instance ci2-android-5-10-bisect-job-8 details after creation: googleapi: Error 503: Internal error. Please try again or contact Google Support. (Code: 'Internal error'), backendError run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.001 # git bisect bad dbf862ce9f009128ab86b234d91413a3e450beb4 Bisecting: 136 revisions left to test after this (roughly 7 steps) [61eb4b76768f1e78fd032760ea523fd872145e5e] Revert "scsi: core: Wake up the error handler when final completions race against each other" determine whether the revision contains the guilty commit revision 3e2558088a1a3dc941eec8edafd002758ae97d77 crashed and is reachable testing commit 61eb4b76768f1e78fd032760ea523fd872145e5e gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 6e82532e69d9ae1a1df25b0d618d89dea4b73c28dc5a40b0aacf94d350b18c3f all runs: OK false negative chance: 0.000 # git bisect bad 61eb4b76768f1e78fd032760ea523fd872145e5e Bisecting: 67 revisions left to test after this (roughly 6 steps) [806b0c439faecb3f678df3383f28d724aefa5f07] ACPICA: Allow address_space_handler Install and _REG execution as 2 separate steps determine whether the revision contains the guilty commit revision f4632dcc09bf2b6e6ef32b5b45146595b5435cab crashed and is reachable testing commit 806b0c439faecb3f678df3383f28d724aefa5f07 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 761fb34add23b270b8c8592d3eb1920fb1f57610dd86b5236e89d77766def249 run #0: crashed: kernel BUG in ext4_split_extent_at run #1: crashed: kernel BUG in ext4_split_extent_at run #2: crashed: kernel BUG in ext4_split_extent_at run #3: crashed: kernel BUG in ext4_split_extent_at run #4: crashed: kernel BUG in ext4_split_extent_at run #5: crashed: kernel BUG in ext4_split_extent_at run #6: crashed: kernel BUG in ext4_split_extent_at run #7: crashed: kernel BUG in ext4_split_extent_at run #8: crashed: kernel BUG in ext4_split_extent_at run #9: OK representative crash: kernel BUG in ext4_split_extent_at, types: [BUG] # git bisect good 806b0c439faecb3f678df3383f28d724aefa5f07 Bisecting: 33 revisions left to test after this (roughly 5 steps) [deca0a98be23b3017c58b634210a22805847fca0] net: qrtr: Release distant nodes along the bridge node determine whether the revision contains the guilty commit revision f4632dcc09bf2b6e6ef32b5b45146595b5435cab crashed and is reachable testing commit deca0a98be23b3017c58b634210a22805847fca0 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 7440c599be314ddd6de331216db571dbf742938a609c09feb7be5de4aa54256f all runs: OK false negative chance: 0.000 # git bisect bad deca0a98be23b3017c58b634210a22805847fca0 Bisecting: 16 revisions left to test after this (roughly 4 steps) [fea6b2e250ff48f10d166011b57a8516ae5438c9] ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() determine whether the revision contains the guilty commit revision f4632dcc09bf2b6e6ef32b5b45146595b5435cab crashed and is reachable testing commit fea6b2e250ff48f10d166011b57a8516ae5438c9 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: a419995cc79fab890f07c6c6c45105dd72c4e9fab1c047ff476f04ccb5a84b01 run #0: crashed: kernel BUG in ext4_split_extent_at run #1: crashed: kernel BUG in ext4_split_extent_at run #2: crashed: kernel BUG in ext4_split_extent_at run #3: crashed: kernel BUG in ext4_split_extent_at run #4: crashed: kernel BUG in ext4_mb_use_inode_pa run #5: crashed: kernel BUG in ext4_split_extent_at run #6: crashed: kernel BUG in ext4_ext_insert_extent run #7: crashed: kernel BUG in ext4_split_extent_at run #8: crashed: kernel BUG in ext4_split_extent_at run #9: crashed: kernel BUG in ext4_split_extent_at representative crash: kernel BUG in ext4_split_extent_at, types: [BUG] # git bisect good fea6b2e250ff48f10d166011b57a8516ae5438c9 Bisecting: 8 revisions left to test after this (roughly 3 steps) [9afef03e5194f82c81f5e67c6fb233a459df171a] dmaengine: xilinx_dma: Program interrupt delay timeout determine whether the revision contains the guilty commit revision 3e2558088a1a3dc941eec8edafd002758ae97d77 crashed and is reachable testing commit 9afef03e5194f82c81f5e67c6fb233a459df171a gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 989a69ce1f2c7cb91376e2a148e0a3367b39b7de7164cc4d885f4e43e87921e3 all runs: OK false negative chance: 0.000 # git bisect bad 9afef03e5194f82c81f5e67c6fb233a459df171a Bisecting: 3 revisions left to test after this (roughly 2 steps) [c37555560938921cdb189ee6773d1d6220716876] dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA determine whether the revision contains the guilty commit revision 3e2558088a1a3dc941eec8edafd002758ae97d77 crashed and is reachable testing commit c37555560938921cdb189ee6773d1d6220716876 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: e9d351aea63dc12084a674e2421c9364bd133261ff7fed5a0da580d3f27cb3e7 all runs: OK false negative chance: 0.000 # git bisect bad c37555560938921cdb189ee6773d1d6220716876 Bisecting: 1 revision left to test after this (roughly 1 step) [b4e0ef9f5d116760e6f13d03d47c8fced244508a] phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() determine whether the revision contains the guilty commit revision fea6b2e250ff48f10d166011b57a8516ae5438c9 crashed and is reachable testing commit b4e0ef9f5d116760e6f13d03d47c8fced244508a gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: c183c0d3afbec600911a878edb4c2659f7c61681cab1ff9c0a67fbda0c42426e all runs: OK false negative chance: 0.000 # git bisect bad b4e0ef9f5d116760e6f13d03d47c8fced244508a Bisecting: 0 revisions left to test after this (roughly 0 steps) [5ad6d994255e27a3254079dfb50ca861fc31f2d0] ext4: reject mount if bigalloc with s_first_data_block != 0 determine whether the revision contains the guilty commit revision 3e2558088a1a3dc941eec8edafd002758ae97d77 crashed and is reachable testing commit 5ad6d994255e27a3254079dfb50ca861fc31f2d0 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: e2f9b9ba606708c36ccbc3d4ed127a23b61d7d44e2720ee4c1c0388bfe028709 all runs: OK false negative chance: 0.000 # git bisect bad 5ad6d994255e27a3254079dfb50ca861fc31f2d0 5ad6d994255e27a3254079dfb50ca861fc31f2d0 is the first bad commit commit 5ad6d994255e27a3254079dfb50ca861fc31f2d0 Author: Helen Koike Date: Tue Mar 17 11:23:10 2026 -0300 ext4: reject mount if bigalloc with s_first_data_block != 0 commit 3822743dc20386d9897e999dbb990befa3a5b3f8 upstream. bigalloc with s_first_data_block != 0 is not supported, reject mounting it. Signed-off-by: Helen Koike Suggested-by: Theodore Ts'o Reported-by: syzbot+b73703b873a33d8eb8f6@syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=b73703b873a33d8eb8f6 Link: https://patch.msgid.link/20260317142325.135074-1-koike@igalia.com Signed-off-by: Theodore Ts'o Cc: stable@kernel.org Signed-off-by: Greg Kroah-Hartman fs/ext4/super.c | 7 +++++++ 1 file changed, 7 insertions(+) accumulated error probability: 0.00 culprit signature: e2f9b9ba606708c36ccbc3d4ed127a23b61d7d44e2720ee4c1c0388bfe028709 parent signature: a419995cc79fab890f07c6c6c45105dd72c4e9fab1c047ff476f04ccb5a84b01 revisions tested: 19, total time: 6h33m31.21313038s (build: 1h56m47.753578901s, test: 4h3m41.374903221s) first good commit: 5ad6d994255e27a3254079dfb50ca861fc31f2d0 ext4: reject mount if bigalloc with s_first_data_block != 0 recipients (to): ["gregkh@linuxfoundation.org" "koike@igalia.com" "tytso@mit.edu"] recipients (cc): []