ci2 starts bisection 2025-07-11 19:01:17.145149484 +0000 UTC m=+94786.381399379 bisecting fixing commit since 16fdf2c7111bd6927f16c3e811f5086fecebbf00 building syzkaller on 350f4ffc211908fed1507b105460d0ce8400ea65 ensuring issue is reproducible on original commit 16fdf2c7111bd6927f16c3e811f5086fecebbf00 testing commit 16fdf2c7111bd6927f16c3e811f5086fecebbf00 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 650664702011dcf8dc2ae7c53f0e6caaee8414530e518e4832064d16724082d2 all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [atomic_sleep hang memleak ubsan kasan locking], they are not needed testing commit 16fdf2c7111bd6927f16c3e811f5086fecebbf00 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9a69ba42ba122c1370f016b365d8b87847869caa8616ed7c8f807860acfac84b all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] the bug reproduces without the instrumentation disabling configs for [hang memleak ubsan kasan locking atomic_sleep], they are not needed kconfig minimization: base=3707 full=7306 leaves diff=2040 split chunks (needed=false): <2040> split chunk #0 of len 2040 into 5 parts testing without sub-chunk 1/5 disabling configs for [ubsan kasan locking atomic_sleep hang memleak], they are not needed testing commit 16fdf2c7111bd6927f16c3e811f5086fecebbf00 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7badf04c23acec6120d95fdc57538701f5e648a8187e4f8bb98c6b3d43b1cca2 all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed testing commit 16fdf2c7111bd6927f16c3e811f5086fecebbf00 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 669cf923b85f4262ad0f3d3d0ffe079cc1faa6d37fffa442b9e288a7f5981757 all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [memleak ubsan kasan locking atomic_sleep hang], they are not needed testing commit 16fdf2c7111bd6927f16c3e811f5086fecebbf00 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 416c4f4adc77b3abb20cf0de09a6ec1acab21ebfa72c9c564343a638f1fb5317 all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed testing commit 16fdf2c7111bd6927f16c3e811f5086fecebbf00 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 752d493f7975b22e3ea25c36ac88feb178a0b52d6cef5d2c9594cd7916d73a5d all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed testing commit 16fdf2c7111bd6927f16c3e811f5086fecebbf00 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 07060473aad73cf72b481687f0486349ea5ad78923c783234a1090d805c0a69a all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] the chunk can be dropped disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed testing current HEAD 2f693b60754599cbe248b385e7bf939c72f3e30e testing commit 2f693b60754599cbe248b385e7bf939c72f3e30e gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 57879314b54198baf145e828b503b70e3792d1c251c1a69aa9d0ad7b577ffab4 all runs: OK false negative chance: 0.000 # git bisect start 2f693b60754599cbe248b385e7bf939c72f3e30e 16fdf2c7111bd6927f16c3e811f5086fecebbf00 Bisecting: 469 revisions left to test after this (roughly 9 steps) [9d06ac32c202142da40904180f2669ed4f5073ac] backlight: pm8941: Add NULL check in wled_configure() determine whether the revision contains the guilty commit revision 16fdf2c7111bd6927f16c3e811f5086fecebbf00 crashed and is reachable testing commit 9d06ac32c202142da40904180f2669ed4f5073ac gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d3c949100027431508ede415fba4ee64efe3af51153880ddd31befc59db598e4 all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] # git bisect good 9d06ac32c202142da40904180f2669ed4f5073ac Bisecting: 234 revisions left to test after this (roughly 8 steps) [410a033bfa8c7daefbae0225c836693db2149ec1] net: bridge: mcast: re-implement br_multicast_{enable, disable}_port functions determine whether the revision contains the guilty commit revision 16fdf2c7111bd6927f16c3e811f5086fecebbf00 crashed and is reachable testing commit 410a033bfa8c7daefbae0225c836693db2149ec1 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 26bd5b99074c5e2db6682aed20d448e7792ee987e873e8ed1a2e831a53f53f73 all runs: OK false negative chance: 0.000 # git bisect bad 410a033bfa8c7daefbae0225c836693db2149ec1 Bisecting: 117 revisions left to test after this (roughly 7 steps) [41807a5f67420464ac8ee7741504f6b5decb3b7c] media: cxusb: no longer judge rbuf when the write fails determine whether the revision contains the guilty commit revision 16fdf2c7111bd6927f16c3e811f5086fecebbf00 crashed and is reachable testing commit 41807a5f67420464ac8ee7741504f6b5decb3b7c gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9f5bee82052ae8b591503d169c5f2a099a14515bc5372d33596c0f01b5da640c all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] # git bisect good 41807a5f67420464ac8ee7741504f6b5decb3b7c Bisecting: 58 revisions left to test after this (roughly 6 steps) [82608027b6e7b7f3cf004340fae6bbba85d7d01b] ASoC: tegra210_ahub: Add check to of_device_get_match_data() determine whether the revision contains the guilty commit revision 16fdf2c7111bd6927f16c3e811f5086fecebbf00 crashed and is reachable testing commit 82608027b6e7b7f3cf004340fae6bbba85d7d01b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0d0f93558c801b0785a633e7926f2301023569d279b5a1006e915c734a89647a all runs: OK false negative chance: 0.000 # git bisect bad 82608027b6e7b7f3cf004340fae6bbba85d7d01b Bisecting: 29 revisions left to test after this (roughly 5 steps) [b0dba0c783232e0962da2255f71aa7eb98bc1552] clk: meson-g12a: add missing fclk_div2 to spicc determine whether the revision contains the guilty commit revision 41807a5f67420464ac8ee7741504f6b5decb3b7c crashed and is reachable testing commit b0dba0c783232e0962da2255f71aa7eb98bc1552 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 80b55ce976cc87de8f579c3d34323fdbe5af393f6d5fb91a4563fe49c22df7a4 all runs: OK false negative chance: 0.000 # git bisect bad b0dba0c783232e0962da2255f71aa7eb98bc1552 Bisecting: 14 revisions left to test after this (roughly 4 steps) [7fc89c218fc96a296a2840b1e37f4e0975f7a108] ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 determine whether the revision contains the guilty commit revision 16fdf2c7111bd6927f16c3e811f5086fecebbf00 crashed and is reachable testing commit 7fc89c218fc96a296a2840b1e37f4e0975f7a108 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9f5bee82052ae8b591503d169c5f2a099a14515bc5372d33596c0f01b5da640c all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] # git bisect good 7fc89c218fc96a296a2840b1e37f4e0975f7a108 Bisecting: 7 revisions left to test after this (roughly 3 steps) [e5a2481dc2a0b430f49276d7482793a8923631d6] Input: ims-pcu - check record size in ims_pcu_flash_firmware() determine whether the revision contains the guilty commit revision 7fc89c218fc96a296a2840b1e37f4e0975f7a108 crashed and is reachable testing commit e5a2481dc2a0b430f49276d7482793a8923631d6 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3f0de65a124191dab181ed952aef738e02b1ef5c4c45d64cb55e33520e0831bd all runs: OK false negative chance: 0.000 # git bisect bad e5a2481dc2a0b430f49276d7482793a8923631d6 Bisecting: 3 revisions left to test after this (roughly 2 steps) [9d1d1c5bf4fc1af76be154d3afb2acdbd89ec7d8] ext4: inline: fix len overflow in ext4_prepare_inline_data determine whether the revision contains the guilty commit revision 7fc89c218fc96a296a2840b1e37f4e0975f7a108 crashed and is reachable testing commit 9d1d1c5bf4fc1af76be154d3afb2acdbd89ec7d8 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 00aeea372ed1877b67102582405cf1a25b3cd1a0e38c9f1a50aaa3dcc0cf2059 all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] # git bisect good 9d1d1c5bf4fc1af76be154d3afb2acdbd89ec7d8 Bisecting: 1 revision left to test after this (roughly 1 step) [9004a1cc5cfc69bd894cc82379fa3ec34ecff3c5] ext4: factor out ext4_get_maxbytes() determine whether the revision contains the guilty commit revision 41807a5f67420464ac8ee7741504f6b5decb3b7c crashed and is reachable testing commit 9004a1cc5cfc69bd894cc82379fa3ec34ecff3c5 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: bfd22a2de2a1e9d55c4e4edeff4b211481d1442d33c8c02747dffe26c760d5e4 all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] # git bisect good 9004a1cc5cfc69bd894cc82379fa3ec34ecff3c5 Bisecting: 0 revisions left to test after this (roughly 0 steps) [a597a609bfd4a2f6f4bce7b7d5f62769401c4c81] ext4: ensure i_size is smaller than maxbytes determine whether the revision contains the guilty commit revision 16fdf2c7111bd6927f16c3e811f5086fecebbf00 crashed and is reachable testing commit a597a609bfd4a2f6f4bce7b7d5f62769401c4c81 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3f0de65a124191dab181ed952aef738e02b1ef5c4c45d64cb55e33520e0831bd all runs: OK false negative chance: 0.000 # git bisect bad a597a609bfd4a2f6f4bce7b7d5f62769401c4c81 a597a609bfd4a2f6f4bce7b7d5f62769401c4c81 is the first bad commit commit a597a609bfd4a2f6f4bce7b7d5f62769401c4c81 Author: Zhang Yi Date: Tue May 6 09:20:09 2025 +0800 ext4: ensure i_size is smaller than maxbytes commit 1a77a028a392fab66dd637cdfac3f888450d00af upstream. The inode i_size cannot be larger than maxbytes, check it while loading inode from the disk. Signed-off-by: Zhang Yi Reviewed-by: Jan Kara Reviewed-by: Baokun Li Link: https://patch.msgid.link/20250506012009.3896990-4-yi.zhang@huaweicloud.com Signed-off-by: Theodore Ts'o Cc: stable@kernel.org Signed-off-by: Greg Kroah-Hartman fs/ext4/inode.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) accumulated error probability: 0.00 culprit signature: 3f0de65a124191dab181ed952aef738e02b1ef5c4c45d64cb55e33520e0831bd parent signature: bfd22a2de2a1e9d55c4e4edeff4b211481d1442d33c8c02747dffe26c760d5e4 revisions tested: 18, total time: 5h0m23.524782453s (build: 2h5m42.780414084s, test: 2h48m53.992900392s) first good commit: a597a609bfd4a2f6f4bce7b7d5f62769401c4c81 ext4: ensure i_size is smaller than maxbytes recipients (to): ["gregkh@linuxfoundation.org" "jack@suse.cz" "libaokun1@huawei.com" "tytso@mit.edu" "yi.zhang@huawei.com"] recipients (cc): []