ci2 starts bisection 2026-08-06 14:20:43.978037804 +0000 UTC m=+520.590289281 bisecting fixing commit since 186f761c519d0518baa78bf57788195e11c7e34c building syzkaller on ea10c935856cded6cc90ae664ab99f4960e3b9f5 ensuring issue is reproducible on original commit 186f761c519d0518baa78bf57788195e11c7e34c testing commit 186f761c519d0518baa78bf57788195e11c7e34c gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 354e935abd42a725da07b4772c77cbd695db6bad44e0acd869f487f9f9355480 all runs: crashed: kernel BUG in ext4_ext_insert_extent representative crash: kernel BUG in ext4_ext_insert_extent, types: [BUG] check whether we can drop unnecessary instrumentation disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed testing commit 186f761c519d0518baa78bf57788195e11c7e34c gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 1ba42bdd2d6de00e270399ef0531611961ce06224d05756cefb24ec811a9c298 all runs: crashed: kernel BUG in ext4_ext_insert_extent representative crash: kernel BUG in ext4_ext_insert_extent, types: [BUG] the bug reproduces without the instrumentation disabling configs for [hang memleak ubsan kasan locking atomic_sleep], they are not needed kconfig minimization: base=4788 full=6025 leaves diff=248 split chunks (needed=false): <248> split chunk #0 of len 248 into 5 parts testing without sub-chunk 1/5 disabling configs for [locking atomic_sleep hang memleak ubsan kasan], they are not needed testing commit 186f761c519d0518baa78bf57788195e11c7e34c gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 5447162fcbc0044d3badfa5e6d27249c8f4607861f99568e5eec78d7f957fbea all runs: crashed: kernel BUG in ext4_ext_insert_extent representative crash: kernel BUG in ext4_ext_insert_extent, types: [BUG] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [memleak ubsan kasan locking atomic_sleep hang], they are not needed testing commit 186f761c519d0518baa78bf57788195e11c7e34c gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: d65971846dbaaccf1b55a6a1f65bc7959ed37b26d0a2c7762739cd7492e6906a all runs: crashed: kernel BUG in ext4_ext_insert_extent representative crash: kernel BUG in ext4_ext_insert_extent, types: [BUG] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [ubsan kasan locking atomic_sleep hang memleak], they are not needed testing commit 186f761c519d0518baa78bf57788195e11c7e34c gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 93b134bb83cd62ade983878ec51ee749f2df3344126cb837b28632f7bf081cbc all runs: crashed: kernel BUG in ext4_ext_insert_extent representative crash: kernel BUG in ext4_ext_insert_extent, types: [BUG] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [hang memleak ubsan kasan locking atomic_sleep], they are not needed testing commit 186f761c519d0518baa78bf57788195e11c7e34c gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 21c68ae6304b13749e6216561b7e0bd348cb43fccf87bfb987486669a636a9b9 all runs: crashed: kernel BUG in ext4_ext_insert_extent representative crash: kernel BUG in ext4_ext_insert_extent, types: [BUG] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [memleak ubsan kasan locking atomic_sleep hang], they are not needed testing commit 186f761c519d0518baa78bf57788195e11c7e34c gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 failed building 186f761c519d0518baa78bf57788195e11c7e34c: net/socket.c:1128:(.text+0x837): undefined reference to `wext_handle_ioctl' net/socket.c:3397:(.text+0xa28): undefined reference to `compat_wext_handle_ioctl' net/core/net-procfs.c:346:(.text+0x109): undefined reference to `wext_proc_exit' net/core/net-procfs.c:330:(.text+0x1e4): undefined reference to `wext_proc_init' minimized to 48 configs; suspects: [HID_ZEROPLUS USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL USB_SERIAL_FTDI_SIO USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM USB_XHCI_PCI_RENESAS WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_ZYDAS ZEROPLUS_FF] disabling configs for [hang memleak ubsan kasan locking atomic_sleep], they are not needed testing current HEAD 0f73d4924a745338c12b47512b95c879c89e5119 testing commit 0f73d4924a745338c12b47512b95c879c89e5119 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 7c2cffbbec5827d738fbdca49ca26bd7156587e593f2e376242c989b2eab425b all runs: OK false negative chance: 0.000 # git bisect start 0f73d4924a745338c12b47512b95c879c89e5119 186f761c519d0518baa78bf57788195e11c7e34c Bisecting: 1148 revisions left to test after this (roughly 10 steps) [56850666bb5dcf7a13d76c5d02864813e17ee537] HID: alps: fix NULL pointer dereference in alps_raw_event() determine whether the revision contains the guilty commit checking the merge base 816b2eac151a9bcce4eff7119207e088ad45236f no existing result, test the revision testing commit 816b2eac151a9bcce4eff7119207e088ad45236f gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: ffbedce6d0c3b7a27cd1e5f0c029a09164e9a504f7e2626fb9a036289df28145 all runs: crashed: kernel BUG in ext4_ext_insert_extent representative crash: kernel BUG in ext4_ext_insert_extent, types: [BUG] testing commit 56850666bb5dcf7a13d76c5d02864813e17ee537 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: c32da2a60e5b1bc7cb1d42309010368598e73e04e7aeba2884306b2271da16d7 all runs: OK false negative chance: 0.000 # git bisect bad 56850666bb5dcf7a13d76c5d02864813e17ee537 Bisecting: 573 revisions left to test after this (roughly 9 steps) [2b1b1734beeabd107317b00762eab5b6654c3bf4] xfs: fix remote xattr valuelblk check determine whether the revision contains the guilty commit revision 816b2eac151a9bcce4eff7119207e088ad45236f crashed and is reachable testing commit 2b1b1734beeabd107317b00762eab5b6654c3bf4 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 6ae5216493cffc0e322b6874a195bcc054e0c153b4db9a7efa31e3ad22f56750 all runs: crashed: kernel BUG in ext4_ext_insert_extent representative crash: kernel BUG in ext4_ext_insert_extent, types: [BUG] # git bisect good 2b1b1734beeabd107317b00762eab5b6654c3bf4 Bisecting: 286 revisions left to test after this (roughly 8 steps) [927bf73ed559e2f1e8898f4331d90d04ea5d243d] net: enetc: fix the output issue of 'ethtool --show-ring' determine whether the revision contains the guilty commit revision 816b2eac151a9bcce4eff7119207e088ad45236f crashed and is reachable testing commit 927bf73ed559e2f1e8898f4331d90d04ea5d243d gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 8f88239beb9611851ec44d528f8b462629c74d1be10d01987a428ebfaeb7ceac all runs: crashed: kernel BUG in ext4_ext_insert_extent representative crash: kernel BUG in ext4_ext_insert_extent, types: [BUG] # git bisect good 927bf73ed559e2f1e8898f4331d90d04ea5d243d Bisecting: 143 revisions left to test after this (roughly 7 steps) [a932b171554714b1bca313b853c7aa9f2930f9aa] usb: gadget: f_subset: Fix unbalanced refcnt in geth_free determine whether the revision contains the guilty commit revision 2b1b1734beeabd107317b00762eab5b6654c3bf4 crashed and is reachable testing commit a932b171554714b1bca313b853c7aa9f2930f9aa gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: e1a03251b4aeb0197e2c30f887fe2d38e1b005b4c143a5f7138bf8569857190e all runs: OK false negative chance: 0.000 # git bisect bad a932b171554714b1bca313b853c7aa9f2930f9aa Bisecting: 71 revisions left to test after this (roughly 6 steps) [4ec216410fac9de83c99177a160ebb8d42fad075] netfilter: nfnetlink_log: account for netlink header size determine whether the revision contains the guilty commit revision 2b1b1734beeabd107317b00762eab5b6654c3bf4 crashed and is reachable testing commit 4ec216410fac9de83c99177a160ebb8d42fad075 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 264cd1e2cb8c8925cdf599a49feb8f031cab6841f0e385628379d441978c4389 all runs: OK false negative chance: 0.000 # git bisect bad 4ec216410fac9de83c99177a160ebb8d42fad075 Bisecting: 35 revisions left to test after this (roughly 5 steps) [d842348f8a00d5b1d7358f207eb34ffcf5b16df3] scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() determine whether the revision contains the guilty commit revision 816b2eac151a9bcce4eff7119207e088ad45236f crashed and is reachable testing commit d842348f8a00d5b1d7358f207eb34ffcf5b16df3 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: b496c76e8a33b504f974f83db117c5db9d9184f1374751e7900a4944167fb244 all runs: crashed: kernel BUG in ext4_ext_insert_extent representative crash: kernel BUG in ext4_ext_insert_extent, types: [BUG] # git bisect good d842348f8a00d5b1d7358f207eb34ffcf5b16df3 Bisecting: 17 revisions left to test after this (roughly 4 steps) [bb4b4719a2df02bf1bc8c9bc1b7984d264b31ba2] objtool: Fix Clang jump table detection determine whether the revision contains the guilty commit revision 816b2eac151a9bcce4eff7119207e088ad45236f crashed and is reachable testing commit bb4b4719a2df02bf1bc8c9bc1b7984d264b31ba2 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 7a55d731942a1e14dfdc0b5ba3b996ac304b84016d2558bde90a4cf48ae45190 all runs: OK false negative chance: 0.000 # git bisect bad bb4b4719a2df02bf1bc8c9bc1b7984d264b31ba2 Bisecting: 8 revisions left to test after this (roughly 3 steps) [c37555560938921cdb189ee6773d1d6220716876] dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA determine whether the revision contains the guilty commit revision 816b2eac151a9bcce4eff7119207e088ad45236f crashed and is reachable testing commit c37555560938921cdb189ee6773d1d6220716876 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 4e171e1d21e0c883fd41fe981b3f388c39fde9a967501b4f31e7790347b9785f all runs: OK false negative chance: 0.000 # git bisect bad c37555560938921cdb189ee6773d1d6220716876 Bisecting: 4 revisions left to test after this (roughly 2 steps) [758fae67ab913a53602fbc3c028c9ccd11215479] ext4: make recently_deleted() properly work with lazy itable initialization determine whether the revision contains the guilty commit revision 816b2eac151a9bcce4eff7119207e088ad45236f crashed and is reachable testing commit 758fae67ab913a53602fbc3c028c9ccd11215479 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: de6a65f6eed402a2214eed21ab8643a8bfd4a243ab52f2551bbcc78686c14632 all runs: crashed: kernel BUG in ext4_ext_insert_extent representative crash: kernel BUG in ext4_ext_insert_extent, types: [BUG] # git bisect good 758fae67ab913a53602fbc3c028c9ccd11215479 Bisecting: 2 revisions left to test after this (roughly 1 step) [5ad6d994255e27a3254079dfb50ca861fc31f2d0] ext4: reject mount if bigalloc with s_first_data_block != 0 determine whether the revision contains the guilty commit revision 758fae67ab913a53602fbc3c028c9ccd11215479 crashed and is reachable testing commit 5ad6d994255e27a3254079dfb50ca861fc31f2d0 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: be6b7e2e7d38735851f8f5f1574dbb9616421ca0febc1a327135d9e9009dec45 all runs: OK false negative chance: 0.000 # git bisect bad 5ad6d994255e27a3254079dfb50ca861fc31f2d0 Bisecting: 0 revisions left to test after this (roughly 0 steps) [fea6b2e250ff48f10d166011b57a8516ae5438c9] ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() determine whether the revision contains the guilty commit revision 927bf73ed559e2f1e8898f4331d90d04ea5d243d crashed and is reachable testing commit fea6b2e250ff48f10d166011b57a8516ae5438c9 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.44 kernel signature: 9e9e84cd5f153d1c2d3e0cc5a23a5e4a60221e9cd7772ac349ec4b7d31e80d7d all runs: crashed: kernel BUG in ext4_ext_insert_extent representative crash: kernel BUG in ext4_ext_insert_extent, types: [BUG] # git bisect good fea6b2e250ff48f10d166011b57a8516ae5438c9 5ad6d994255e27a3254079dfb50ca861fc31f2d0 is the first bad commit commit 5ad6d994255e27a3254079dfb50ca861fc31f2d0 Author: Helen Koike Date: Tue Mar 17 11:23:10 2026 -0300 ext4: reject mount if bigalloc with s_first_data_block != 0 commit 3822743dc20386d9897e999dbb990befa3a5b3f8 upstream. bigalloc with s_first_data_block != 0 is not supported, reject mounting it. Signed-off-by: Helen Koike Suggested-by: Theodore Ts'o Reported-by: syzbot+b73703b873a33d8eb8f6@syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=b73703b873a33d8eb8f6 Link: https://patch.msgid.link/20260317142325.135074-1-koike@igalia.com Signed-off-by: Theodore Ts'o Cc: stable@kernel.org Signed-off-by: Greg Kroah-Hartman fs/ext4/super.c | 7 +++++++ 1 file changed, 7 insertions(+) accumulated error probability: 0.00 culprit signature: be6b7e2e7d38735851f8f5f1574dbb9616421ca0febc1a327135d9e9009dec45 parent signature: 9e9e84cd5f153d1c2d3e0cc5a23a5e4a60221e9cd7772ac349ec4b7d31e80d7d revisions tested: 19, total time: 7h51m34.272259735s (build: 2h58m49.150724852s, test: 2h58m6.215589494s) first good commit: 5ad6d994255e27a3254079dfb50ca861fc31f2d0 ext4: reject mount if bigalloc with s_first_data_block != 0 recipients (to): ["gregkh@linuxfoundation.org" "koike@igalia.com" "tytso@mit.edu"] recipients (cc): []