ci2 starts bisection 2026-11-07 07:12:01.267096265 +0000 UTC m=+127117.531984588 bisecting fixing commit since ad16b162f21d970235ced0c7e36e960c227317e8 building syzkaller on 07aeade527a4cf049c391b7f131ccd468ef22f04 ensuring issue is reproducible on original commit ad16b162f21d970235ced0c7e36e960c227317e8 testing commit ad16b162f21d970235ced0c7e36e960c227317e8 gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: 065614ad2504465dc299f524debb28422d047f20a003405afe6e8a57e04e6559 all runs: crashed: possible deadlock in ext4_destroy_inline_data representative crash: possible deadlock in ext4_destroy_inline_data, types: [LOCKDEP] check whether we can drop unnecessary instrumentation disabling configs for [hang memleak ubsan bug_or_warning kasan atomic_sleep], they are not needed testing commit ad16b162f21d970235ced0c7e36e960c227317e8 gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: 1b2c37a6960a35c51541415922456541b046ff3a7c06d54079b0d3bc01eb0554 all runs: crashed: possible deadlock in ext4_destroy_inline_data representative crash: possible deadlock in ext4_destroy_inline_data, types: [LOCKDEP] the bug reproduces without the instrumentation disabling configs for [atomic_sleep hang memleak ubsan bug_or_warning kasan], they are not needed kconfig minimization: base=7508 full=9786 leaves diff=2005 split chunks (needed=false): <2005> split chunk #0 of len 2005 into 5 parts testing without sub-chunk 1/5 disabling configs for [ubsan bug_or_warning kasan atomic_sleep hang memleak], they are not needed testing commit ad16b162f21d970235ced0c7e36e960c227317e8 gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: 30dff2495057b4add07a88fc1254a5e47326313ee70da6490591fed3df34327b all runs: crashed: possible deadlock in ext4_destroy_inline_data representative crash: possible deadlock in ext4_destroy_inline_data, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [atomic_sleep hang memleak ubsan bug_or_warning kasan], they are not needed testing commit ad16b162f21d970235ced0c7e36e960c227317e8 gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: d888cff68033b3bf80f9673a82be4d468bc063aa9afffb2dd3e5ef51381fdf95 all runs: crashed: possible deadlock in ext4_destroy_inline_data representative crash: possible deadlock in ext4_destroy_inline_data, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [atomic_sleep hang memleak ubsan bug_or_warning kasan], they are not needed testing commit ad16b162f21d970235ced0c7e36e960c227317e8 gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: e12ff28b4738215022cc10804895948bf455effa0999eec76c3c5a2352c455d0 all runs: crashed: possible deadlock in ext4_destroy_inline_data representative crash: possible deadlock in ext4_destroy_inline_data, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [bug_or_warning kasan atomic_sleep hang memleak ubsan], they are not needed testing commit ad16b162f21d970235ced0c7e36e960c227317e8 gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: 732daef8369e3d63dfb288b5411b1ee2191b67b1f403eecfa777b6c793d3db9d all runs: OK false negative chance: 0.000 testing without sub-chunk 5/5 disabling configs for [atomic_sleep hang memleak ubsan bug_or_warning kasan], they are not needed testing commit ad16b162f21d970235ced0c7e36e960c227317e8 gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: c2672056a584549fdd864a9d65aa835daaa6fd5c68fdfa636501286d57b8c08a all runs: crashed: possible deadlock in ext4_destroy_inline_data representative crash: possible deadlock in ext4_destroy_inline_data, types: [LOCKDEP] the chunk can be dropped minimized to 401 configs; suspects: [AF_RXRPC ATM AX25 CFG80211 DLM DRM DRM_ROCKCHIP GENEVE HAMRADIO HID_PANTHERLORD HID_PLAYSTATION HID_SENSOR_HUB HID_SMARTJOYPLUS HID_SONY HID_THRUSTMASTER INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_IPOIB INFINIBAND_USER_ACCESS INFINIBAND_VIRT_DMA INPUT_TABLET IP_SCTP L2TP MAC80211 MEDIA_COMMON_OPTIONS MEDIA_RADIO_SUPPORT MFD_DLN2 MFD_RETU NETFILTER_CONNCOUNT NET_IPGRE NET_IPGRE_DEMUX OCFS2_FS OCFS2_FS_O2CB OCFS2_FS_STATS OCFS2_FS_USERSPACE_CLUSTER OMFS_FS OPENVSWITCH OPENVSWITCH_GENEVE OPENVSWITCH_GRE OPENVSWITCH_VXLAN ORANGEFS_FS OSF_PARTITION OVERLAY_FS_INDEX OVERLAY_FS_REDIRECT_DIR PACKET_DIAG PADATA PAGE_IDLE_FLAG PANTHERLORD_FF PARPORT PARPORT_NOT_PC PARTITION_ADVANCED PATA_AMD PATA_OLDPIIX PATA_SCH PCCARD PCMCIA PERCPU_STATS PERSISTENT_KEYRINGS PHY_CPCAP_USB PHY_QCOM_USB_HSIC PHY_TUSB1210 PKCS7_TEST_KEY PKCS8_PRIVATE_KEY_PARSER PLAYSTATION_FF PLFXLC PMIC_OPREGION PM_DEBUG PM_SLEEP_DEBUG PPP PPPOATM PPPOE PPPOL2TP PPP_ASYNC PPP_BSDCOMP PPP_DEFLATE PPP_FILTER PPP_MPPE PPP_MULTILINK PPP_SYNC_TTY PPTP PRISM2_USB PROC_CHILDREN PROC_KCORE PROC_MEM_ALWAYS_FORCE PSI PSTORE_842_COMPRESS PSTORE_LZ4HC_COMPRESS PSTORE_LZ4_COMPRESS PSTORE_LZO_COMPRESS PSTORE_ZSTD_COMPRESS QFMT_V2 QNX4FS_FS QNX6FS_FS QUOTA_NETLINK_INTERFACE QUOTA_TREE RADIO_ADAPTERS RADIO_SHARK RADIO_SHARK2 RADIO_TEA575X RC_ATI_REMOTE RC_XBOX_DVD RDMA_RXE RDMA_SIW RDS RDS_RDMA RDS_TCP READ_ONLY_THP_FOR_FS REALTEK_AUTOPM REED_SOLOMON REED_SOLOMON_DEC8 REGMAP_SOUNDWIRE REGULATOR_TWL4030 REISERFS_FS REISERFS_FS_POSIX_ACL REISERFS_FS_SECURITY REISERFS_FS_XATTR REISERFS_PROC_INFO RELAY RFKILL RFKILL_INPUT RFKILL_LEDS RMI4_2D_SENSOR RMI4_CORE RMI4_F03 RMI4_F03_SERIO RMI4_F11 RMI4_F12 RMI4_F30 ROCKCHIP_ANALOGIX_DP ROCKCHIP_CDN_DP ROCKCHIP_DW_HDMI ROCKCHIP_DW_MIPI_DSI ROCKCHIP_INNO_HDMI ROCKCHIP_LVDS ROCKCHIP_VOP ROMFS_BACKED_BY_BOTH ROMFS_FS ROMFS_ON_BLOCK ROMFS_ON_MTD ROSE RTC_DRV_HID_SENSOR_TIME RXKAD SCHEDSTATS SCSI_CONSTANTS SCSI_FC_ATTRS SCSI_HPSA SCSI_ISCSI_ATTRS SCSI_LOGGING SCSI_NETLINK SCSI_SCAN_ASYNC SCSI_SPI_ATTRS SCSI_SRP_ATTRS SCTP_COOKIE_HMAC_MD5 SCTP_COOKIE_HMAC_SHA1 SCTP_DEFAULT_COOKIE_HMAC_MD5 SECONDARY_TRUSTED_KEYRING SECURITY_INFINIBAND SECURITY_NETWORK_XFRM SENSORS_AQUACOMPUTER_D5NEXT SENSORS_CORSAIR_CPRO SENSORS_CORSAIR_PSU SENSORS_NZXT_KRAKEN2 SENSORS_NZXT_SMART2 SERIAL_8250_DETECT_IRQ SERIAL_8250_MANY_PORTS SERIAL_8250_RSA SERIO_SERPORT SGI_PARTITION SIGNATURE SIGNED_PE_FILE_VERIFICATION SLHC SLIP SLIP_COMPRESSED SLIP_MODE_SLIP6 SLIP_SMART SMARTJOYPLUS_FF SMBFS SMB_SERVER SMC SMC_DIAG SMS_SDIO_DRV SMS_SIANO_DEBUGFS SMS_SIANO_MDTV SMS_SIANO_RC SMS_USB_DRV SND SND_ALOOP SND_AUDIO_GRAPH_CARD SND_AUDIO_GRAPH_CARD2 SND_BCD2000 SND_BCM2835_SOC_I2S SND_COMPRESS_OFFLOAD SND_CTL_FAST_LOOKUP SND_CTL_LED SND_DEBUG SND_DMAENGINE_PCM SND_DRIVERS SND_DUMMY SND_DYNAMIC_MINORS SND_HDA SND_HDA_ALIGNED_MMIO SND_HDA_CODEC_ANALOG SND_HDA_CODEC_CA0110 SND_HDA_CODEC_CA0132 SND_HDA_CODEC_CIRRUS SND_HDA_CODEC_CMEDIA SND_HDA_CODEC_CONEXANT SND_HDA_CODEC_HDMI SND_HDA_CODEC_REALTEK SND_HDA_CODEC_SI3054 SND_HDA_CODEC_SIGMATEL SND_HDA_CODEC_VIA SND_HDA_COMPONENT SND_HDA_CORE SND_HDA_GENERIC SND_HDA_GENERIC_LEDS SND_HDA_HWDEP SND_HDA_INPUT_BEEP SND_HDA_INTEL SND_HDA_PATCH_LOADER SND_HDA_RECONFIG SND_HDA_TEGRA SND_HRTIMER SND_HWDEP SND_IMX_SOC SND_INTEL_DSP_CONFIG SND_INTEL_NHLT SND_INTEL_SOUNDWIRE_ACPI SND_JACK SND_JACK_INPUT_DEV SND_MESON_AIU SND_MESON_AXG_FIFO SND_MESON_AXG_FRDDR SND_MESON_AXG_PDM SND_MESON_AXG_SOUND_CARD SND_MESON_AXG_SPDIFIN SND_MESON_AXG_SPDIFOUT SND_MESON_AXG_TDMIN SND_MESON_AXG_TDMOUT SND_MESON_AXG_TDM_FORMATTER SND_MESON_AXG_TDM_INTERFACE SND_MESON_AXG_TODDR SND_MESON_CARD_UTILS SND_MESON_CODEC_GLUE SND_MESON_G12A_TOACODEC SND_MESON_G12A_TOHDMITX SND_MESON_GX_SOUND_CARD SND_MIXER_OSS SND_OSSEMUL SND_PCI SND_PCM SND_PCM_ELD SND_PCM_IEC958 SND_PCM_OSS SND_PCM_OSS_PLUGINS SND_PCM_TIMER SND_PCM_XRUN_DEBUG SND_PROC_FS SND_RAWMIDI SND_SEQUENCER SND_SEQUENCER_OSS SND_SEQ_DEVICE SND_SEQ_DUMMY SND_SEQ_MIDI SND_SEQ_MIDI_EVENT SND_SEQ_VIRMIDI SND_SIMPLE_CARD SND_SIMPLE_CARD_UTILS SND_SOC SND_SOC_ADAU7002 SND_SOC_AK4613 SND_SOC_APPLE_MCA SND_SOC_APQ8016_SBC SND_SOC_COMPRESS SND_SOC_DA7219 SND_SOC_DMIC SND_SOC_ES7134 SND_SOC_ES7241 SND_SOC_FSL_ASOC_CARD SND_SOC_FSL_ASRC SND_SOC_FSL_AUDMIX SND_SOC_FSL_EASRC SND_SOC_FSL_ESAI SND_SOC_FSL_MICFIL SND_SOC_FSL_SAI SND_SOC_FSL_SPDIF SND_SOC_FSL_SSI SND_SOC_FSL_UTILS SND_SOC_GENERIC_DMAENGINE_PCM SND_SOC_GTM601 SND_SOC_HDMI_CODEC SND_SOC_I2C_AND_SPI SND_SOC_IMX_AUDMIX SND_SOC_IMX_AUDMUX SND_SOC_IMX_PCM_DMA SND_SOC_IMX_SGTL5000 SND_SOC_IMX_SPDIF SND_SOC_LPASS_APQ8016 SND_SOC_LPASS_CDC_DMA SND_SOC_LPASS_CPU SND_SOC_LPASS_HDMI SND_SOC_LPASS_MACRO_COMMON SND_SOC_LPASS_PLATFORM SND_SOC_LPASS_RX_MACRO SND_SOC_LPASS_SC7180 SND_SOC_LPASS_SC7280 SND_SOC_LPASS_TX_MACRO SND_SOC_LPASS_VA_MACRO SND_SOC_LPASS_WSA_MACRO SND_SOC_MAX98357A SND_SOC_MAX98927 SND_SOC_MESON_T9015 SND_SOC_MSM8916_WCD_ANALOG SND_SOC_MSM8916_WCD_DIGITAL SND_SOC_MSM8996 SND_SOC_NAU8822 SND_SOC_PCM3168A SND_SOC_PCM3168A_I2C SND_SOC_QCOM SND_SOC_QCOM_COMMON SND_SOC_QCOM_SDW SND_SOC_QDSP6 SND_SOC_QDSP6_ADM SND_SOC_QDSP6_AFE SND_SOC_QDSP6_AFE_CLOCKS SND_SOC_QDSP6_AFE_DAI SND_SOC_QDSP6_APM SND_SOC_QDSP6_APM_DAI SND_SOC_QDSP6_APM_LPASS_DAI SND_SOC_QDSP6_ASM SND_SOC_QDSP6_ASM_DAI SND_SOC_QDSP6_COMMON SND_SOC_QDSP6_CORE SND_SOC_QDSP6_PRM SND_SOC_QDSP6_PRM_LPASS_CLOCKS SND_SOC_QDSP6_ROUTING SND_SOC_RCAR SND_SOC_RK3399_GRU_SOUND SND_SOC_RL6231 SND_SOC_ROCKCHIP SND_SOC_ROCKCHIP_I2S SND_SOC_ROCKCHIP_RT5645 SND_SOC_ROCKCHIP_SPDIF SND_SOC_RT5514 SND_SOC_RT5514_SPI SND_SOC_RT5645 SND_SOC_RT5659 SND_SOC_RT5663 SND_SOC_RT5682 SND_SOC_RT5682S SND_SOC_RT5682_I2C SND_SOC_RZ SND_SOC_SAMSUNG SND_SOC_SC7180 SND_SOC_SC7280 SND_SOC_SDM845 SND_SOC_SGTL5000 SND_SOC_SIMPLE_AMPLIFIER SND_SOC_SIMPLE_MUX SND_SOC_SM8250 SND_SOC_SPDIF SND_SOC_TAS571X SND_SOC_TEGRA SND_SOC_TEGRA186_ASRC SND_SOC_TEGRA186_DSPK SND_SOC_TEGRA210_ADMAIF SND_SOC_TEGRA210_ADX SND_SOC_TEGRA210_AHUB SND_SOC_TEGRA210_AMX SND_SOC_TEGRA210_DMIC SND_SOC_TEGRA210_I2S SND_SOC_TEGRA210_MIXER SND_SOC_TEGRA210_MVC SND_SOC_TEGRA210_OPE SND_SOC_TEGRA210_SFC SND_SOC_TEGRA_AUDIO_GRAPH_CARD SND_SOC_TLV320AIC31XX SND_SOC_TLV320AIC32X4 SND_SOC_TLV320AIC32X4_I2C SND_SOC_TOPOLOGY SND_SOC_WCD9335 SND_SOC_WCD934X SND_SOC_WCD938X SND_SOC_WCD938X_SDW SND_SOC_WCD_MBHC SND_SOC_WM8524 SND_SOC_WM8904 SND_SOC_WM8960 SND_SOC_WM8962 SND_SOC_WM8978 SND_SOC_WM8994 SND_SOC_WM_HUBS SND_SOC_WSA881X SND_SPI SND_SUN4I_I2S SND_SUN4I_SPDIF SND_SUN50I_CODEC_ANALOG SND_SUN8I_ADDA_PR_REGMAP SND_SUN8I_CODEC SND_SUN8I_CODEC_ANALOG SND_SUPPORT_OLD_API SND_TIMER SND_USB SND_USB_6FIRE SND_USB_AUDIO SND_USB_AUDIO_USE_MEDIA_CONTROLLER SND_USB_CAIAQ SND_USB_CAIAQ_INPUT SND_USB_HIFACE SND_USB_LINE6 SND_USB_POD SND_USB_PODHD SND_USB_TONEPORT SND_USB_UA101 SND_USB_VARIAX SND_VERBOSE_PROCFS SND_VIRMIDI SND_VIRTIO SND_VMASTER SOCK_VALIDATE_XMIT SOLARIS_X86_PARTITION SONY_FF SOUND SOUNDWIRE_QCOM SOUND_OSS_CORE SOUND_OSS_CORE_PRECLAIM SPI_DLN2 SQUASHFS_4K_DEVBLK_SIZE SQUASHFS_FILE_DIRECT SQUASHFS_LZ4 SQUASHFS_LZO SQUASHFS_XATTR SQUASHFS_XZ SQUASHFS_ZSTD SSB SSB_PCIHOST_POSSIBLE SSB_PCMCIAHOST_POSSIBLE SSB_SDIOHOST_POSSIBLE STREAM_PARSER SUN_PARTITION SW_SYNC SYN_COOKIES SYSV68_PARTITION SYSV_FS TABLET_USB_ACECAD TABLET_USB_AIPTEK TABLET_USB_HANWANG TABLET_USB_KBTAB TABLET_USB_PEGASUS TAHVO_USB TAHVO_USB_HOST_BY_DEFAULT TCG_CRB TCG_TIS_I2C_INFINEON TCG_TPM TCP_CONG_ADVANCED TCP_CONG_BBR TCP_CONG_BIC TCP_CONG_CDG TCP_CONG_DCTCP TCP_CONG_HSTCP TCP_CONG_HTCP TCP_CONG_HYBLA TCP_CONG_ILLINOIS TCP_CONG_LP TCP_CONG_NV TCP_CONG_SCALABLE TCP_CONG_VEGAS TCP_CONG_VENO TCP_CONG_WESTWOOD TCP_CONG_YEAH TCP_MD5SIG TEXTSEARCH TEXTSEARCH_BM TEXTSEARCH_FSM TEXTSEARCH_KMP THERMAL_NETLINK THRUSTMASTER_FF TIPC TIPC_CRYPTO TIPC_DIAG TIPC_MEDIA_IB TIPC_MEDIA_UDP TWL4030_CORE USB_STORAGE_REALTEK VXLAN WIRELESS WLAN WLAN_VENDOR_PURELIFI XFRM] disabling configs for [atomic_sleep hang memleak ubsan bug_or_warning kasan], they are not needed testing current HEAD c75b0cf0982c00cddfd88d1acf3872f79b40980c testing commit c75b0cf0982c00cddfd88d1acf3872f79b40980c gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: d71d9ba00bdaf36c6ddedd4e1d696eee8e60f70d050fb6c2a21486b709211808 all runs: OK false negative chance: 0.000 # git bisect start c75b0cf0982c00cddfd88d1acf3872f79b40980c ad16b162f21d970235ced0c7e36e960c227317e8 Bisecting: 3896 revisions left to test after this (roughly 12 steps) [0bde4f140e90f87ebd49cd9c884c4bb3f19fe931] regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer determine whether the revision contains the guilty commit revision ad16b162f21d970235ced0c7e36e960c227317e8 crashed and is reachable testing commit 0bde4f140e90f87ebd49cd9c884c4bb3f19fe931 gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: 933dc82d42315d929d86917b583e62d11354c64d45bd8512104bf1cbaeb549a2 all runs: crashed: possible deadlock in ext4_destroy_inline_data representative crash: possible deadlock in ext4_destroy_inline_data, types: [LOCKDEP] # git bisect good 0bde4f140e90f87ebd49cd9c884c4bb3f19fe931 Bisecting: 1948 revisions left to test after this (roughly 11 steps) [7c2fe308bda5a7e6222d7f0c3c311991372baab4] net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() determine whether the revision contains the guilty commit revision ad16b162f21d970235ced0c7e36e960c227317e8 crashed and is reachable testing commit 7c2fe308bda5a7e6222d7f0c3c311991372baab4 gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: fa218073087e538f057cc5f9d352a7dd3ee4ef674a3c6bbd99443b659655feae all runs: OK false negative chance: 0.000 # git bisect bad 7c2fe308bda5a7e6222d7f0c3c311991372baab4 Bisecting: 973 revisions left to test after this (roughly 10 steps) [cb2d58cd341bfa3d2a5b840535b104b694b1d593] ALSA: control_led: Use guard() for locking determine whether the revision contains the guilty commit revision ad16b162f21d970235ced0c7e36e960c227317e8 crashed and is reachable testing commit cb2d58cd341bfa3d2a5b840535b104b694b1d593 gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: e9d4b5b6835dfdd8c991fef230a4d15d70950b1dacb6633fde3392e004266011 all runs: OK false negative chance: 0.000 # git bisect bad cb2d58cd341bfa3d2a5b840535b104b694b1d593 Bisecting: 486 revisions left to test after this (roughly 9 steps) [021b58ac3e58cffa68ed9585ff492a19e98414f6] usb: gadget: f_uac1_legacy: remove broken string configfs attributes determine whether the revision contains the guilty commit revision ad16b162f21d970235ced0c7e36e960c227317e8 crashed and is reachable testing commit 021b58ac3e58cffa68ed9585ff492a19e98414f6 gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: f28ec7b414c6de5382b1e88a30c88f95b8b84648caddad68cdb3664c6c25a45b all runs: crashed: possible deadlock in ext4_destroy_inline_data representative crash: possible deadlock in ext4_destroy_inline_data, types: [LOCKDEP] # git bisect good 021b58ac3e58cffa68ed9585ff492a19e98414f6 Bisecting: 243 revisions left to test after this (roughly 8 steps) [4b0fecfcdba550b39c201a4062afb127abd4e39e] of: property: add of_graph_get_next_port_endpoint() determine whether the revision contains the guilty commit revision ad16b162f21d970235ced0c7e36e960c227317e8 crashed and is reachable testing commit 4b0fecfcdba550b39c201a4062afb127abd4e39e gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: eff5a831bc6b19180ff4adaeb7126839bcd4bd085a11f30773b627dae47bf964 all runs: OK false negative chance: 0.000 # git bisect bad 4b0fecfcdba550b39c201a4062afb127abd4e39e Bisecting: 121 revisions left to test after this (roughly 7 steps) [dae82ddb29d6173f718a742d80771428502606bf] rcu: Rename rcu_momentary_dyntick_idle() into rcu_momentary_eqs() determine whether the revision contains the guilty commit revision 0bde4f140e90f87ebd49cd9c884c4bb3f19fe931 crashed and is reachable testing commit dae82ddb29d6173f718a742d80771428502606bf gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: 060057b5f1316991d3121cf228fe5cbc5cd242f9c218e18d7bae40ba241fc17e all runs: OK false negative chance: 0.000 # git bisect bad dae82ddb29d6173f718a742d80771428502606bf Bisecting: 60 revisions left to test after this (roughly 6 steps) [ad13e550ce51c66560bafd315eb5d09f2ee7c4ce] thermal: intel: int3400: clean up ODVP on probe failures determine whether the revision contains the guilty commit revision 0bde4f140e90f87ebd49cd9c884c4bb3f19fe931 crashed and is reachable testing commit ad13e550ce51c66560bafd315eb5d09f2ee7c4ce gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: 188c65f70e1b94d77899587276bc6a9b22bea1f61efb3aeea80d310ed2147ddf all runs: OK false negative chance: 0.000 # git bisect bad ad13e550ce51c66560bafd315eb5d09f2ee7c4ce Bisecting: 29 revisions left to test after this (roughly 5 steps) [51628f8c77f2380fa9b4aa15d2b9e2a861d7c82a] arm64: dts: amlogic: meson-axg-s400: enable mipi_pcie_analog_dphy for PCIe determine whether the revision contains the guilty commit revision 021b58ac3e58cffa68ed9585ff492a19e98414f6 crashed and is reachable testing commit 51628f8c77f2380fa9b4aa15d2b9e2a861d7c82a gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: 7da906c244489c0d261603ef28538ec81305fa7e734ee8e2d06b70c6f5e6a679 all runs: crashed: possible deadlock in ext4_destroy_inline_data representative crash: possible deadlock in ext4_destroy_inline_data, types: [LOCKDEP] # git bisect good 51628f8c77f2380fa9b4aa15d2b9e2a861d7c82a Bisecting: 14 revisions left to test after this (roughly 4 steps) [19eaa3a7c20e4c018fd4094896dc1dc9f0d87382] RDMA/nldev: Add NULL check to silence false warnings determine whether the revision contains the guilty commit revision 021b58ac3e58cffa68ed9585ff492a19e98414f6 crashed and is reachable testing commit 19eaa3a7c20e4c018fd4094896dc1dc9f0d87382 gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: d8ddcb21816139a35e1cabb4db110e04bb60d2e7dbf77e3adf3737e693cf3e33 all runs: OK false negative chance: 0.000 # git bisect bad 19eaa3a7c20e4c018fd4094896dc1dc9f0d87382 Bisecting: 7 revisions left to test after this (roughly 3 steps) [e2ac1866102900b4bcc58df1d1972fed6d51f3f4] ACPI: EC: Avoid _REG disconnect on GPIO IRQ defer determine whether the revision contains the guilty commit revision 51628f8c77f2380fa9b4aa15d2b9e2a861d7c82a crashed and is reachable testing commit e2ac1866102900b4bcc58df1d1972fed6d51f3f4 gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: 329e024f3164b3470f273a3f20854adf4bdd0540b68a6fa8f685777aea684b71 all runs: crashed: possible deadlock in ext4_destroy_inline_data representative crash: possible deadlock in ext4_destroy_inline_data, types: [LOCKDEP] # git bisect good e2ac1866102900b4bcc58df1d1972fed6d51f3f4 Bisecting: 3 revisions left to test after this (roughly 2 steps) [1dd4882dbdc8bfdf2182fa388883c143fac0902a] ext4: skip extra isize expansion during mount to prevent deadlock determine whether the revision contains the guilty commit revision 51628f8c77f2380fa9b4aa15d2b9e2a861d7c82a crashed and is reachable testing commit 1dd4882dbdc8bfdf2182fa388883c143fac0902a gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: 264ec3857c77b6268921fc33b15efa17bc1ecb54f7eaa3f2663b2db3ecd7499e run #0: ignore: lost connection to test machine run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect bad 1dd4882dbdc8bfdf2182fa388883c143fac0902a Bisecting: 1 revision left to test after this (roughly 1 step) [a285fa3780c768dcc51c76768707d099a2cc611d] ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root determine whether the revision contains the guilty commit revision ad16b162f21d970235ced0c7e36e960c227317e8 crashed and is reachable testing commit a285fa3780c768dcc51c76768707d099a2cc611d gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: b48398f1f4ac6789b0400400f4c10ccd17e88a7bb01f32c2eb670f19ac8d24c3 all runs: crashed: possible deadlock in ext4_destroy_inline_data representative crash: possible deadlock in ext4_destroy_inline_data, types: [LOCKDEP] # git bisect good a285fa3780c768dcc51c76768707d099a2cc611d Bisecting: 0 revisions left to test after this (roughly 0 steps) [5fd20d4e50dd6e460b3ea8e4396f8553d4526f8f] ext4: fix out-of-bounds read in ext4_read_inline_dir() determine whether the revision contains the guilty commit revision 0bde4f140e90f87ebd49cd9c884c4bb3f19fe931 crashed and is reachable testing commit 5fd20d4e50dd6e460b3ea8e4396f8553d4526f8f gcc compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 kernel signature: 3786b0cb756133593443fa53c03d67bd8fb5f486b152464e02eac5d8577ec848 all runs: crashed: possible deadlock in ext4_destroy_inline_data representative crash: possible deadlock in ext4_destroy_inline_data, types: [LOCKDEP] # git bisect good 5fd20d4e50dd6e460b3ea8e4396f8553d4526f8f 1dd4882dbdc8bfdf2182fa388883c143fac0902a is the first bad commit commit 1dd4882dbdc8bfdf2182fa388883c143fac0902a Author: Yun Zhou Date: Tue Jun 23 14:19:02 2026 +0800 ext4: skip extra isize expansion during mount to prevent deadlock [ Upstream commit 7461c60b9c6a839b13ad4c3490681a0cf5aa0637 ] ext4_try_to_expand_extra_isize() is called from __ext4_mark_inode_dirty() while holding an active jbd2 handle. During mount (!SB_ACTIVE), the expand path may move xattrs to external blocks and release ea_inodes via iput(). When !SB_ACTIVE, iput() calls write_inode_now() which acquires s_writepages_rwsem, creating a circular lock dependency: s_writepages_rwsem --> jbd2_handle --> xattr_sem --> s_writepages_rwsem This can be triggered via: ext4_process_orphan() -> ext4_truncate() -> ext4_mark_inode_dirty() -> ext4_try_to_expand_extra_isize() or: ext4_evict_inode() -> ext4_mark_inode_dirty() -> ext4_try_to_expand_extra_isize() Skip expansion when !SB_ACTIVE. This is a minor loss of functionality (extra isize won't grow for these inodes during mount), which e2fsck can resolve later if needed. Reported-by: syzbot+5d19358d7eb30ffb0cc5@syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=5d19358d7eb30ffb0cc5 Fixes: c8585c6fcaf2 ("ext4: fix races between changing inode journal mode and ext4_writepages") Signed-off-by: Yun Zhou Reviewed-by: Jan Kara Link: https://patch.msgid.link/20260623061903.2148767-1-yun.zhou@windriver.com Signed-off-by: Theodore Ts'o Signed-off-by: Sasha Levin fs/ext4/inode.c | 10 ++++++++++ 1 file changed, 10 insertions(+) accumulated error probability: 0.00 culprit signature: 264ec3857c77b6268921fc33b15efa17bc1ecb54f7eaa3f2663b2db3ecd7499e parent signature: 3786b0cb756133593443fa53c03d67bd8fb5f486b152464e02eac5d8577ec848 revisions tested: 21, total time: 7h17m49.399677061s (build: 1h53m21.409683917s, test: 4h55m6.454295095s) first good commit: 1dd4882dbdc8bfdf2182fa388883c143fac0902a ext4: skip extra isize expansion during mount to prevent deadlock recipients (to): ["jack@suse.cz" "sashal@kernel.org" "tytso@mit.edu" "yun.zhou@windriver.com"] recipients (cc): []