ci2 starts bisection 2025-05-28 20:28:25.299458682 +0000 UTC m=+16495.427335585
bisecting fixing commit since 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde
building syzkaller on f10afd6936523834f5b3297e9771b19a8f0edcb5
ensuring issue is reproducible on original commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde

testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: ec1c6a2bfd30a39a8114968b017109fc03b69319ec572e71157a77f5ff509049
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
check whether we can drop unnecessary instrumentation
disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 9b1f212cc94171c138c583ab0a791cbb6dcd5f01e99b1c3c5633acea7cc82233
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
the bug reproduces without the instrumentation
disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN KASAN LOCKDEP], they are not needed
kconfig minimization: base=4788 full=6018 leaves diff=240
split chunks (needed=false): <240>
split chunk #0 of len 240 into 5 parts
testing without sub-chunk 1/5
disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed
testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 86a4cba7744a068dce000f7ea779ed45965831d6315ff237f6469e6f2d926e35
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
the chunk can be dropped
testing without sub-chunk 2/5
disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed
testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: fd8eb1efd7b5d21ce790b237edaf296a26d49eeacaab48c16d3eebc7f0fff921
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
the chunk can be dropped
testing without sub-chunk 3/5
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 9552f7506104a0cc4c9f7466f9b4a295fedff284e483744814e3997158eb19d8
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
the chunk can be dropped
testing without sub-chunk 4/5
disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: a5efd560b49f149107bcf039b61b3a93b3a89c4c6918f910a82452e38a489a66
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
the chunk can be dropped
testing without sub-chunk 5/5
disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN KASAN], they are not needed
testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
failed building 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde: net/socket.c:1128: undefined reference to `wext_handle_ioctl'
net/socket.c:3397: undefined reference to `compat_wext_handle_ioctl'
net/core/net-procfs.c:346: undefined reference to `wext_proc_exit'
net/core/net-procfs.c:330: undefined reference to `wext_proc_init'
minimized to 48 configs; suspects: [HID_ZEROPLUS USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL USB_SERIAL_FTDI_SIO USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_ZYDAS X86_X32 ZEROPLUS_FF]
disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed
testing current HEAD cf6ed0f1511dde4812a5a30a1450af323934dad9
testing commit cf6ed0f1511dde4812a5a30a1450af323934dad9 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 23fb5a28c97f9b815741b287161d41f05eba007b598c1d74599982bc3dfd09f1
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
crash still not fixed/happens on the oldest tested release
revisions tested: 7, total time: 1h10m51.873659051s (build: 27m0.787951s, test: 42m31.474569041s)
crash still not fixed or there were kernel test errors
commit msg: Merge android13-5.10 into android13-5.10-lts
crash: kernel BUG in ext4_mark_iloc_dirty
EXT4-fs error (device loop0): ext4_validate_block_bitmap:420: comm syz-executor.0: bg 0: bad block bitmap checksum
EXT4-fs error (device loop0) in ext4_mb_clear_bb:5645: Filesystem failed CRC
------------[ cut here ]------------
kernel BUG at fs/ext4/inode.c:5305!
invalid opcode: 0000 [#1] PREEMPT SMP
CPU: 1 PID: 411 Comm: syz-executor.0 Not tainted 5.10.237-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:ext4_do_update_inode fs/ext4/inode.c:5305 [inline]
RIP: 0010:ext4_mark_iloc_dirty+0xa6e/0xa70 fs/ext4/inode.c:5904
Code: 85 d2 74 0f 48 8b 7a 08 48 89 c6 4c 89 e2 e8 e9 44 02 00 65 ff 0d e2 ee bf 7e 0f 85 d7 fd ff ff e8 ae 66 be ff e9 cd fd ff ff <0f> 0b 48 8b 46 28 48 8b 80 c8 03 00 00 48 8b 80 90 02 00 00 a8 02
RSP: 0018:ffffc900006c78c0 EFLAGS: 00010206
RAX: ffff888112762000 RBX: ffffc900006c7960 RCX: ffff888112a43400
RDX: ffff888111074c20 RSI: 0000000000000005 RDI: 00000000000000a0
RBP: ffffc900006c7940 R08: ffffffff82c4d790 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff888111074db8
R13: ffff88811101fdd0 R14: 000000000000003c R15: ffff8881117aec00
FS:  00007ff5ffc2b6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff5ffc0ad58 CR3: 00000001129d2000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __ext4_mark_inode_dirty+0x76/0x220 fs/ext4/inode.c:6106
 __ext4_ext_dirty+0x84/0xb0 fs/ext4/extents.c:182
 ext4_ext_rm_leaf fs/ext4/extents.c:2720 [inline]
 ext4_ext_remove_space+0x588/0x1500 fs/ext4/extents.c:2932
 ext4_ext_truncate+0x94/0xa0 fs/ext4/extents.c:4465
 ext4_truncate+0x3da/0x4b0 fs/ext4/inode.c:4367
 ext4_setattr+0x54b/0x990 fs/ext4/inode.c:5681
 notify_change+0x33a/0x4a0 fs/attr.c:410
 do_truncate+0x73/0xc0 fs/open.c:65
 handle_truncate fs/namei.c:3054 [inline]
 do_open fs/namei.c:3395 [inline]
 path_openat+0xc0f/0x10d0 fs/namei.c:3509
 do_filp_open+0x9d/0x140 fs/namei.c:3536
 do_sys_openat2+0x9c/0x210 fs/open.c:1217
 do_sys_open fs/open.c:1233 [inline]
 __do_sys_creat fs/open.c:1309 [inline]
 __se_sys_creat fs/open.c:1303 [inline]
 __x64_sys_creat+0x46/0x60 fs/open.c:1303
 do_syscall_64+0x32/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7ff6000a9ea9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ff5ffc2b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007ff6001d7f80 RCX: 00007ff6000a9ea9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140
RBP: 00007ff6000f64a4 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007ff6001d7f80 R15: 00007ffd5a5d2ff8
Modules linked in:
---[ end trace 46a445dde66fae5f ]---
RIP: 0010:ext4_do_update_inode fs/ext4/inode.c:5305 [inline]
RIP: 0010:ext4_mark_iloc_dirty+0xa6e/0xa70 fs/ext4/inode.c:5904
Code: 85 d2 74 0f 48 8b 7a 08 48 89 c6 4c 89 e2 e8 e9 44 02 00 65 ff 0d e2 ee bf 7e 0f 85 d7 fd ff ff e8 ae 66 be ff e9 cd fd ff ff <0f> 0b 48 8b 46 28 48 8b 80 c8 03 00 00 48 8b 80 90 02 00 00 a8 02
RSP: 0018:ffffc900006c78c0 EFLAGS: 00010206

RAX: ffff888112762000 RBX: ffffc900006c7960 RCX: ffff888112a43400
RDX: ffff888111074c20 RSI: 0000000000000005 RDI: 00000000000000a0
RBP: ffffc900006c7940 R08: ffffffff82c4d790 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff888111074db8
R13: ffff88811101fdd0 R14: 000000000000003c R15: ffff8881117aec00
FS:  00007ff5ffc2b6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff5ffc0ad58 CR3: 00000001129d2000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400