ci2 starts bisection 2025-06-28 00:26:13.121431001 +0000 UTC m=+8572.827351769
bisecting fixing commit since 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde
building syzkaller on f10afd6936523834f5b3297e9771b19a8f0edcb5
ensuring issue is reproducible on original commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde

testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: e6c17a20ec307ee031214b01c4da48fb6bc15c4b2d70d80124b49468ead2661e
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
check whether we can drop unnecessary instrumentation
disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: dea0f2ee45834a162e60b6a4a2cc7e29f6fc050789943f2f1558a9ac328541d3
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
the bug reproduces without the instrumentation
disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed
kconfig minimization: base=4788 full=6018 leaves diff=240
split chunks (needed=false): <240>
split chunk #0 of len 240 into 5 parts
testing without sub-chunk 1/5
disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: dbf9ccf044c62373dab50d82aaa9ed82158a49dd75f42c8c715f083a8543784f
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
the chunk can be dropped
testing without sub-chunk 2/5
disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed
testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: a9f63d554166e48dbf68b4af5accf3315e0203549fa2e09c92c829c33466139d
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
the chunk can be dropped
testing without sub-chunk 3/5
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 8854fabc989bad50402b8a6631a08db1cd0d398b7bce08fe1579b6347266137f
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
the chunk can be dropped
testing without sub-chunk 4/5
disabling configs for [LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed
testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 0a489b301a4b5aa577ab709e79bb20e98cddcc41c3d03c749f5b5506635f4b1c
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
the chunk can be dropped
testing without sub-chunk 5/5
disabling configs for [LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed
testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
failed building 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde: net/socket.c:1128: undefined reference to `wext_handle_ioctl'
net/socket.c:3397: undefined reference to `compat_wext_handle_ioctl'
net/core/net-procfs.c:346: undefined reference to `wext_proc_exit'
net/core/net-procfs.c:330: undefined reference to `wext_proc_init'
minimized to 48 configs; suspects: [HID_ZEROPLUS USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL USB_SERIAL_FTDI_SIO USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_ZYDAS X86_X32 ZEROPLUS_FF]
disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing current HEAD 59e9a72288571b476bbe39902c89aed0423905bf
testing commit 59e9a72288571b476bbe39902c89aed0423905bf gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 40546599a4100274f97a661e7906dfab9c29b2d36dd580f330e932df553b7cef
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
crash still not fixed/happens on the oldest tested release
revisions tested: 7, total time: 1h48m54.373245878s (build: 37m31.248248106s, test: 1h1m18.918942294s)
crash still not fixed or there were kernel test errors
commit msg: Merge android13-5.10 into android13-5.10-lts
crash: kernel BUG in ext4_mark_iloc_dirty
EXT4-fs error (device loop3) in ext4_mb_clear_bb:5645: Filesystem failed CRC
------------[ cut here ]------------
kernel BUG at fs/ext4/inode.c:5305!
invalid opcode: 0000 [#1] PREEMPT SMP
CPU: 0 PID: 395 Comm: syz-executor.3 Not tainted 5.10.238-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:ext4_do_update_inode fs/ext4/inode.c:5305 [inline]
RIP: 0010:ext4_mark_iloc_dirty+0xa6e/0xa70 fs/ext4/inode.c:5904
Code: 85 d2 74 0f 48 8b 7a 08 48 89 c6 4c 89 e2 e8 e9 44 02 00 65 ff 0d 62 ee bf 7e 0f 85 d7 fd ff ff e8 2e 66 be ff e9 cd fd ff ff <0f> 0b 48 8b 46 28 48 8b 80 c8 03 00 00 48 8b 80 90 02 00 00 a8 02
RSP: 0018:ffffc900006b78c0 EFLAGS: 00010206
RAX: ffff888113036000 RBX: ffffc900006b7960 RCX: ffff888112fea400
RDX: ffff888111c70ae0 RSI: 0000000000000005 RDI: 00000000000000a0
RBP: ffffc900006b7940 R08: ffffffff82c4d750 R09: 0000000000000000
R10: 0000000000000000 R11: ffff888108d3b334 R12: ffff888111c70c78
R13: ffff88810a79ef08 R14: 000000000000003c R15: ffff88811200bc00
FS:  00007feb718a56c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007feb71d84048 CR3: 0000000113079000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __ext4_mark_inode_dirty+0x76/0x220 fs/ext4/inode.c:6106
 __ext4_ext_dirty+0x84/0xb0 fs/ext4/extents.c:182
 ext4_ext_rm_leaf fs/ext4/extents.c:2720 [inline]
 ext4_ext_remove_space+0x588/0x1500 fs/ext4/extents.c:2932
 ext4_ext_truncate+0x94/0xa0 fs/ext4/extents.c:4465
 ext4_truncate+0x3da/0x4b0 fs/ext4/inode.c:4367
 ext4_setattr+0x54b/0x990 fs/ext4/inode.c:5681
 notify_change+0x33a/0x4a0 fs/attr.c:410
 do_truncate+0x73/0xc0 fs/open.c:65
 handle_truncate fs/namei.c:3054 [inline]
 do_open fs/namei.c:3395 [inline]
 path_openat+0xc0f/0x10d0 fs/namei.c:3509
 do_filp_open+0x9d/0x140 fs/namei.c:3536
 do_sys_openat2+0x9c/0x210 fs/open.c:1217
 do_sys_open fs/open.c:1233 [inline]
 __do_sys_creat fs/open.c:1309 [inline]
 __se_sys_creat fs/open.c:1303 [inline]
 __x64_sys_creat+0x46/0x60 fs/open.c:1303
 do_syscall_64+0x32/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7feb71d23ea9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007feb718a50c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007feb71e51f80 RCX: 00007feb71d23ea9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140
RBP: 00007feb71d704a4 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007feb71e51f80 R15: 00007ffdbff0ed08
Modules linked in:
---[ end trace c037624b6df55f25 ]---
RIP: 0010:ext4_do_update_inode fs/ext4/inode.c:5305 [inline]
RIP: 0010:ext4_mark_iloc_dirty+0xa6e/0xa70 fs/ext4/inode.c:5904
Code: 85 d2 74 0f 48 8b 7a 08 48 89 c6 4c 89 e2 e8 e9 44 02 00 65 ff 0d 62 ee bf 7e 0f 85 d7 fd ff ff e8 2e 66 be ff e9 cd fd ff ff <0f> 0b 48 8b 46 28 48 8b 80 c8 03 00 00 48 8b 80 90 02 00 00 a8 02
RSP: 0018:ffffc900006b78c0 EFLAGS: 00010206
RAX: ffff888113036000 RBX: ffffc900006b7960 RCX: ffff888112fea400
RDX: ffff888111c70ae0 RSI: 0000000000000005 RDI: 00000000000000a0
RBP: ffffc900006b7940 R08: ffffffff82c4d750 R09: 0000000000000000
R10: 0000000000000000 R11: ffff888108d3b334 R12: ffff888111c70c78
R13: ffff88810a79ef08 R14: 000000000000003c R15: ffff88811200bc00
FS:  00007feb718a56c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007feb71d84048 CR3: 0000000113079000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400