ci2 starts bisection 2025-10-23 08:36:49.286227672 +0000 UTC m=+53068.103605673 bisecting fixing commit since 684ae9bac393aeccf30e835397d9be784d1b26d3 building syzkaller on 807a3b61ca22f8988561c180eb47268ea6e244db ensuring issue is reproducible on original commit 684ae9bac393aeccf30e835397d9be784d1b26d3 testing commit 684ae9bac393aeccf30e835397d9be784d1b26d3 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: d04b1758cbcb03902b4993ec7e3b8993a0fcf76827251a2f02538637daaed0f9 all runs: crashed: kernel BUG in ext4_create_inline_data representative crash: kernel BUG in ext4_create_inline_data, types: [BUG] check whether we can drop unnecessary instrumentation disabling configs for [atomic_sleep hang memleak ubsan kasan locking], they are not needed testing commit 684ae9bac393aeccf30e835397d9be784d1b26d3 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 676061890a33e033e70d4236ec9064b1ab9038eb6f873ba580a4180804736a81 all runs: crashed: kernel BUG in ext4_create_inline_data representative crash: kernel BUG in ext4_create_inline_data, types: [BUG] the bug reproduces without the instrumentation disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed kconfig minimization: base=5186 full=6556 leaves diff=265 split chunks (needed=false): <265> split chunk #0 of len 265 into 5 parts testing without sub-chunk 1/5 disabling configs for [ubsan kasan locking atomic_sleep hang memleak], they are not needed testing commit 684ae9bac393aeccf30e835397d9be784d1b26d3 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: a7007aa76237fd1cc88b48fc88db7298e6336bac929d639f7410a6f8c3ffef15 all runs: crashed: kernel BUG in ext4_create_inline_data representative crash: kernel BUG in ext4_create_inline_data, types: [BUG] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [locking atomic_sleep hang memleak ubsan kasan], they are not needed testing commit 684ae9bac393aeccf30e835397d9be784d1b26d3 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: ca79713f467756b63ace4b0fce5364d6a00eb92a0826de2f28a5363cd38b32bf all runs: crashed: kernel BUG in ext4_create_inline_data representative crash: kernel BUG in ext4_create_inline_data, types: [BUG] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [memleak ubsan kasan locking atomic_sleep hang], they are not needed testing commit 684ae9bac393aeccf30e835397d9be784d1b26d3 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 02018724e96b5cd8ec4cc416393cf4b25151c37b4a7bd8ee3f9ef71879284cfb all runs: crashed: kernel BUG in ext4_create_inline_data representative crash: kernel BUG in ext4_create_inline_data, types: [BUG] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed testing commit 684ae9bac393aeccf30e835397d9be784d1b26d3 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 986df52edc9582dac6211469e767c0de4a446dc7479b78fafd4ce6981bd68a18 all runs: crashed: kernel BUG in ext4_create_inline_data representative crash: kernel BUG in ext4_create_inline_data, types: [BUG] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [memleak ubsan kasan locking atomic_sleep hang], they are not needed testing commit 684ae9bac393aeccf30e835397d9be784d1b26d3 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 failed building 684ae9bac393aeccf30e835397d9be784d1b26d3: ld.lld: error: undefined symbol: wext_proc_init ld.lld: error: undefined symbol: wext_proc_exit ld.lld: error: undefined symbol: wext_handle_ioctl ld.lld: error: undefined symbol: compat_wext_handle_ioctl minimized to 53 configs; suspects: [HID_ZEROPLUS USB_MON USB_NET_CDC_MBIM USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM V4L2_ASYNC V4L2_FWNODE VIDEO_CAMERA_SENSOR WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_PURELIFI WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_SILABS WLAN_VENDOR_ZYDAS ZEROPLUS_FF] disabling configs for [atomic_sleep hang memleak ubsan kasan locking], they are not needed testing current HEAD 22c0b7236c43dfcea893a99fc11dc7d35a518341 testing commit 22c0b7236c43dfcea893a99fc11dc7d35a518341 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 0740db0c087f191f0b4ca6bed88150cc5babae3ac3c24fb1b5568e4c2129b70a all runs: OK false negative chance: 0.000 # git bisect start 22c0b7236c43dfcea893a99fc11dc7d35a518341 684ae9bac393aeccf30e835397d9be784d1b26d3 Bisecting: 491 revisions left to test after this (roughly 9 steps) [7f88614c4d86cf477bda5f666b71b99bdd177dee] rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe determine whether the revision contains the guilty commit checking the merge base 3594f306da129190de25938b823f353ef7f9e322 no existing result, test the revision testing commit 3594f306da129190de25938b823f353ef7f9e322 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 3eb842789537796a06471041ff96b90a064bad9101416308aa2674cd6768e589 all runs: crashed: kernel BUG in ext4_create_inline_data representative crash: kernel BUG in ext4_create_inline_data, types: [BUG] testing commit 7f88614c4d86cf477bda5f666b71b99bdd177dee gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 1c81dc4de73e2d291ba9767318f382e7e251b5b18c9217ac6cbd3584df092812 run #0: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "/tmp/syz-executor3771840933" "root@10.128.1.117:./syz-executor3771840933"]: exit status 255 run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect bad 7f88614c4d86cf477bda5f666b71b99bdd177dee Bisecting: 245 revisions left to test after this (roughly 8 steps) [b1b7f280f3a676536a5a8bec8c39c05b8654b712] net: usbnet: Avoid potential RCU stall on LINK_CHANGE event determine whether the revision contains the guilty commit revision 3594f306da129190de25938b823f353ef7f9e322 crashed and is reachable testing commit b1b7f280f3a676536a5a8bec8c39c05b8654b712 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: e2921cb7c5906e2cb7a7683cf967c4277a79aacdfdf5891dd022620261404136 all runs: crashed: kernel BUG in ext4_create_inline_data representative crash: kernel BUG in ext4_create_inline_data, types: [BUG] # git bisect good b1b7f280f3a676536a5a8bec8c39c05b8654b712 Bisecting: 122 revisions left to test after this (roughly 7 steps) [feb89ec6d53f1b1b3edeacac0280ae88cb52e41b] net: usb: cdc-ncm: check for filtering capability determine whether the revision contains the guilty commit revision 3594f306da129190de25938b823f353ef7f9e322 crashed and is reachable testing commit feb89ec6d53f1b1b3edeacac0280ae88cb52e41b gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 815c0eb5d5a9e2cb0ad6acce8a3e4a42d3020e61f53c66125f27d7bfdc9b253e all runs: crashed: kernel BUG in ext4_create_inline_data representative crash: kernel BUG in ext4_create_inline_data, types: [BUG] # git bisect good feb89ec6d53f1b1b3edeacac0280ae88cb52e41b Bisecting: 61 revisions left to test after this (roughly 6 steps) [891331dbfa3510b349101eb97ece6d443ba6c0f8] cifs: Fix calling CIFSFindFirst() for root path without msearch determine whether the revision contains the guilty commit revision 3594f306da129190de25938b823f353ef7f9e322 crashed and is reachable testing commit 891331dbfa3510b349101eb97ece6d443ba6c0f8 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: cfef4b6aabfdde91dbd1f35cd0405c6f598405431fcf11aa477519f34bb29025 all runs: crashed: kernel BUG in ext4_create_inline_data representative crash: kernel BUG in ext4_create_inline_data, types: [BUG] # git bisect good 891331dbfa3510b349101eb97ece6d443ba6c0f8 Bisecting: 30 revisions left to test after this (roughly 5 steps) [205f187cce14ad9c6d889964cae6e005ee3e2fe5] media: uvcvideo: Fix bandwidth issue for Alcor camera determine whether the revision contains the guilty commit revision 3594f306da129190de25938b823f353ef7f9e322 crashed and is reachable testing commit 205f187cce14ad9c6d889964cae6e005ee3e2fe5 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 4a4a9e2ddab188aa5bc1f1c6e6c403f285fbc6e4ee9d5baff684930d89ed97da all runs: OK false negative chance: 0.000 # git bisect bad 205f187cce14ad9c6d889964cae6e005ee3e2fe5 Bisecting: 15 revisions left to test after this (roughly 4 steps) [3dcc20eb9a3a83a5f323f50caa9148c28208d4e9] MIPS: lantiq: falcon: sysctrl: fix request memory check logic determine whether the revision contains the guilty commit revision 3594f306da129190de25938b823f353ef7f9e322 crashed and is reachable testing commit 3dcc20eb9a3a83a5f323f50caa9148c28208d4e9 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 6005a8bdf2313193e207d630259ab6d7488b91ca0e287376e1896cc9d72bd7df run #0: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "/tmp/syz-executor725635812" "root@10.128.0.122:./syz-executor725635812"]: exit status 255 run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect bad 3dcc20eb9a3a83a5f323f50caa9148c28208d4e9 Bisecting: 7 revisions left to test after this (roughly 3 steps) [a82e24c810b5227632b476f79dafd2ad665ed803] hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state determine whether the revision contains the guilty commit revision b1b7f280f3a676536a5a8bec8c39c05b8654b712 crashed and is reachable testing commit a82e24c810b5227632b476f79dafd2ad665ed803 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 8767386ef883bffa90cc0346993bd74e64861397d77f88d68048f33b864b7c5d all runs: OK false negative chance: 0.000 # git bisect bad a82e24c810b5227632b476f79dafd2ad665ed803 Bisecting: 3 revisions left to test after this (roughly 2 steps) [2817ac83cb4732597bf36853fe13ca616f4ee4e2] ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr determine whether the revision contains the guilty commit revision b1b7f280f3a676536a5a8bec8c39c05b8654b712 crashed and is reachable testing commit 2817ac83cb4732597bf36853fe13ca616f4ee4e2 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: b9ebcea410aa81fa1ab6ba5fa6c968964cdf782ed4d7f9b44a7d2e7ccbc22752 all runs: OK false negative chance: 0.000 # git bisect bad 2817ac83cb4732597bf36853fe13ca616f4ee4e2 Bisecting: 0 revisions left to test after this (roughly 1 step) [8843a56f32055e6c92a691fcda6f915e29285d6f] crypto: hisilicon/hpre - fix dma unmap sequence determine whether the revision contains the guilty commit revision 891331dbfa3510b349101eb97ece6d443ba6c0f8 crashed and is reachable testing commit 8843a56f32055e6c92a691fcda6f915e29285d6f gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: ebabd314c8f4d3dbb772fbf500e3b0003940122a5d2df8b47a7844ff47d8f9e3 all runs: crashed: kernel BUG in ext4_create_inline_data representative crash: kernel BUG in ext4_create_inline_data, types: [BUG] # git bisect good 8843a56f32055e6c92a691fcda6f915e29285d6f 2817ac83cb4732597bf36853fe13ca616f4ee4e2 is the first bad commit commit 2817ac83cb4732597bf36853fe13ca616f4ee4e2 Author: Theodore Ts'o Date: Thu Jul 17 10:54:34 2025 -0400 ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr [ Upstream commit 099b847ccc6c1ad2f805d13cfbcc83f5b6d4bc42 ] A syzbot fuzzed image triggered a BUG_ON in ext4_update_inline_data() when an inode had the INLINE_DATA_FL flag set but was missing the system.data extended attribute. Since this can happen due to a maiciouly fuzzed file system, we shouldn't BUG, but rather, report it as a corrupted file system. Add similar replacements of BUG_ON with EXT4_ERROR_INODE() ii ext4_create_inline_data() and ext4_inline_data_truncate(). Reported-by: syzbot+544248a761451c0df72f@syzkaller.appspotmail.com Signed-off-by: Theodore Ts'o Signed-off-by: Sasha Levin fs/ext4/inline.c | 19 ++++++++++++++++--- 1 file changed, 16 insertions(+), 3 deletions(-) accumulated error probability: 0.00 culprit signature: b9ebcea410aa81fa1ab6ba5fa6c968964cdf782ed4d7f9b44a7d2e7ccbc22752 parent signature: ebabd314c8f4d3dbb772fbf500e3b0003940122a5d2df8b47a7844ff47d8f9e3 revisions tested: 17, total time: 3h41m2.547072001s (build: 1h3m39.254154411s, test: 2h26m32.436550546s) first good commit: 2817ac83cb4732597bf36853fe13ca616f4ee4e2 ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr recipients (to): ["sashal@kernel.org" "tytso@mit.edu"] recipients (cc): []