ci2 starts bisection 2025-07-16 15:43:21.616795807 +0000 UTC m=+31394.757940913 bisecting fixing commit since ac7079a42ea58e77123b55f5e15f1b2679f799aa building syzkaller on 350f4ffc211908fed1507b105460d0ce8400ea65 ensuring issue is reproducible on original commit ac7079a42ea58e77123b55f5e15f1b2679f799aa testing commit ac7079a42ea58e77123b55f5e15f1b2679f799aa gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 8d1684d1e3b5278e23805cfac52fc1d0c88d69a2317b2aeb4a8b2102bbca3bbe all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [hang memleak ubsan kasan locking atomic_sleep], they are not needed testing commit ac7079a42ea58e77123b55f5e15f1b2679f799aa gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 88adb651f45311d745b4162386e15bf5a6938a737830a2704c58031e4902fa88 all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] the bug reproduces without the instrumentation disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed kconfig minimization: base=3829 full=7502 leaves diff=2070 split chunks (needed=false): <2070> split chunk #0 of len 2070 into 5 parts testing without sub-chunk 1/5 disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed testing commit ac7079a42ea58e77123b55f5e15f1b2679f799aa gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 780c084ffb6fc43ca2cacf62ea4950a04c100fa379ce6f970f342a5829743494 run #0: crashed: WARNING in ext4_iomap_begin run #1: crashed: WARNING in ext4_iomap_begin run #2: crashed: WARNING in ext4_iomap_begin run #3: crashed: kernel BUG in ext4_writepages run #4: crashed: WARNING in ext4_iomap_begin run #5: crashed: WARNING in ext4_iomap_begin run #6: crashed: WARNING in ext4_iomap_begin run #7: crashed: WARNING in ext4_iomap_begin run #8: crashed: kernel BUG in ext4_writepages run #9: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [memleak ubsan kasan locking atomic_sleep hang], they are not needed testing commit ac7079a42ea58e77123b55f5e15f1b2679f799aa gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 204abb8111b3e8b9cad7a24baaa100d03c1069b7acd258155d0af85c17aa25c4 all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [ubsan kasan locking atomic_sleep hang memleak], they are not needed testing commit ac7079a42ea58e77123b55f5e15f1b2679f799aa gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 59cf26370c453b568adbbb9d5f27241b5f0b5ac6c7b11fb7110d16ed3f3727bb all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [locking atomic_sleep hang memleak ubsan kasan], they are not needed testing commit ac7079a42ea58e77123b55f5e15f1b2679f799aa gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 64cffe96c6b56f522e23785ab9cddb8bf05cd047e6d1085542745420da9dd4ff all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [atomic_sleep hang memleak ubsan kasan locking], they are not needed testing commit ac7079a42ea58e77123b55f5e15f1b2679f799aa gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 61869ac6833ed6ffe933e1e9f05d947c75222c066159943340f591bb65184755 all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] the chunk can be dropped disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed testing current HEAD f2198ea7eb3e7a0575505c7ce38d76841d98aa36 testing commit f2198ea7eb3e7a0575505c7ce38d76841d98aa36 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 9848174e8a28b9b65b3f1b31bba63b44d97bb1fb1e203d3597b66364cac15bf1 all runs: OK false negative chance: 0.000 # git bisect start f2198ea7eb3e7a0575505c7ce38d76841d98aa36 ac7079a42ea58e77123b55f5e15f1b2679f799aa Bisecting: 670 revisions left to test after this (roughly 9 steps) [c37d2ab34ec89703dba68ffdbadece05afe26277] scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops determine whether the revision contains the guilty commit revision ac7079a42ea58e77123b55f5e15f1b2679f799aa crashed and is reachable testing commit c37d2ab34ec89703dba68ffdbadece05afe26277 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 2d20b40d565c5c742b476fbc09b12db24f3328b8d837e24f49e6f174a7c5a7aa all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] # git bisect good c37d2ab34ec89703dba68ffdbadece05afe26277 Bisecting: 335 revisions left to test after this (roughly 8 steps) [fbf92f7d7272d9a0bac953a05b2e9cad7ab13484] net: macb: Check return value of dma_set_mask_and_coherent() determine whether the revision contains the guilty commit revision c37d2ab34ec89703dba68ffdbadece05afe26277 crashed and is reachable testing commit fbf92f7d7272d9a0bac953a05b2e9cad7ab13484 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: c7f5a6f650402ded4fe26edd93ae168978760bb81acf09065572473bea2b66d6 all runs: OK false negative chance: 0.000 # git bisect bad fbf92f7d7272d9a0bac953a05b2e9cad7ab13484 Bisecting: 167 revisions left to test after this (roughly 7 steps) [22392c9228ebce9767740440287281cc93e477ac] arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 determine whether the revision contains the guilty commit revision c37d2ab34ec89703dba68ffdbadece05afe26277 crashed and is reachable testing commit 22392c9228ebce9767740440287281cc93e477ac gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 86062cbc15468799b646617dfdfe8b64f24d39c46b897b4b4e541b68a5b5ba2a all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] # git bisect good 22392c9228ebce9767740440287281cc93e477ac Bisecting: 83 revisions left to test after this (roughly 6 steps) [64a723b0281ecaa59d31aad73ef8e408a84cb603] nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request determine whether the revision contains the guilty commit revision c37d2ab34ec89703dba68ffdbadece05afe26277 crashed and is reachable testing commit 64a723b0281ecaa59d31aad73ef8e408a84cb603 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 0f77eace0437ec8542988f97e34e38abd77eff1a75babf819bcbe9182dba3628 all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] # git bisect good 64a723b0281ecaa59d31aad73ef8e408a84cb603 Bisecting: 41 revisions left to test after this (roughly 5 steps) [ff0e037241173b574b385bff53d67567b9816db5] fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var determine whether the revision contains the guilty commit revision 64a723b0281ecaa59d31aad73ef8e408a84cb603 crashed and is reachable testing commit ff0e037241173b574b385bff53d67567b9816db5 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 715dc1c63edd63cb82e4e5ea92661fad03c8d6027fd41a7d7fdd041e3e29aadb all runs: OK false negative chance: 0.000 # git bisect bad ff0e037241173b574b385bff53d67567b9816db5 Bisecting: 20 revisions left to test after this (roughly 4 steps) [26e6fa2b63ecd02bafdfc9fbf7aed9b7db912186] media: uvcvideo: Fix deferred probing error determine whether the revision contains the guilty commit revision ac7079a42ea58e77123b55f5e15f1b2679f799aa crashed and is reachable testing commit 26e6fa2b63ecd02bafdfc9fbf7aed9b7db912186 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 1c824a1556ce110c107a0735256303e78c8c4793ec0c2d7242377778433adf90 all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] # git bisect good 26e6fa2b63ecd02bafdfc9fbf7aed9b7db912186 Bisecting: 10 revisions left to test after this (roughly 3 steps) [cf5f319a2d8ab8238f8cf3a19463b9bff6420934] ext4: inline: fix len overflow in ext4_prepare_inline_data determine whether the revision contains the guilty commit revision c37d2ab34ec89703dba68ffdbadece05afe26277 crashed and is reachable testing commit cf5f319a2d8ab8238f8cf3a19463b9bff6420934 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 599d2b77a19f2519f9cbe28fae0ce0ac9dd521d03f9f847902cc4ff6fdc931ef all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] # git bisect good cf5f319a2d8ab8238f8cf3a19463b9bff6420934 Bisecting: 5 revisions left to test after this (roughly 3 steps) [2e42f29f0c8986acbc37b4610898e6d3acb2f697] Input: gpio-keys - fix possible concurrent access in gpio_keys_irq_timer() determine whether the revision contains the guilty commit revision c37d2ab34ec89703dba68ffdbadece05afe26277 crashed and is reachable testing commit 2e42f29f0c8986acbc37b4610898e6d3acb2f697 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 6a0d105fdbc84bbb79230b06ad496639b044c0ff03c0e40f986ed5243cba8f34 all runs: OK false negative chance: 0.000 # git bisect bad 2e42f29f0c8986acbc37b4610898e6d3acb2f697 Bisecting: 2 revisions left to test after this (roughly 1 step) [97779982bd23e58b622a474a860d8306be0783d3] ext4: factor out ext4_get_maxbytes() determine whether the revision contains the guilty commit revision ac7079a42ea58e77123b55f5e15f1b2679f799aa crashed and is reachable testing commit 97779982bd23e58b622a474a860d8306be0783d3 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: b921beb588088be6f29cbff99c4db5617de143acba8b28a8d4e4cd525b00e777 all runs: crashed: WARNING in ext4_iomap_begin representative crash: WARNING in ext4_iomap_begin, types: [WARNING] # git bisect good 97779982bd23e58b622a474a860d8306be0783d3 Bisecting: 0 revisions left to test after this (roughly 1 step) [8e03f1c7d50343bf21da54873301bc4fa647479f] Input: ims-pcu - check record size in ims_pcu_flash_firmware() determine whether the revision contains the guilty commit revision ac7079a42ea58e77123b55f5e15f1b2679f799aa crashed and is reachable testing commit 8e03f1c7d50343bf21da54873301bc4fa647479f gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 080af0e59a9a8f9475a24df60b6992d736ef069268f7bd41e884e67d47177712 all runs: OK false negative chance: 0.000 # git bisect bad 8e03f1c7d50343bf21da54873301bc4fa647479f Bisecting: 0 revisions left to test after this (roughly 0 steps) [74088456b034ca0b32d45d270caae4dbb73e129e] ext4: ensure i_size is smaller than maxbytes determine whether the revision contains the guilty commit revision ac7079a42ea58e77123b55f5e15f1b2679f799aa crashed and is reachable testing commit 74088456b034ca0b32d45d270caae4dbb73e129e gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 9812acb55b7ab09f577f79f6ac650c0e69ae3feea23a3dba15f0d5bad1235b40 all runs: OK false negative chance: 0.000 # git bisect bad 74088456b034ca0b32d45d270caae4dbb73e129e 74088456b034ca0b32d45d270caae4dbb73e129e is the first bad commit commit 74088456b034ca0b32d45d270caae4dbb73e129e Author: Zhang Yi Date: Tue May 6 09:20:09 2025 +0800 ext4: ensure i_size is smaller than maxbytes commit 1a77a028a392fab66dd637cdfac3f888450d00af upstream. The inode i_size cannot be larger than maxbytes, check it while loading inode from the disk. Signed-off-by: Zhang Yi Reviewed-by: Jan Kara Reviewed-by: Baokun Li Link: https://patch.msgid.link/20250506012009.3896990-4-yi.zhang@huaweicloud.com Signed-off-by: Theodore Ts'o Cc: stable@kernel.org Signed-off-by: Greg Kroah-Hartman fs/ext4/inode.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) accumulated error probability: 0.00 culprit signature: 9812acb55b7ab09f577f79f6ac650c0e69ae3feea23a3dba15f0d5bad1235b40 parent signature: b921beb588088be6f29cbff99c4db5617de143acba8b28a8d4e4cd525b00e777 revisions tested: 19, total time: 4h10m41.996189884s (build: 1h33m33.102169545s, test: 2h28m22.074946008s) first good commit: 74088456b034ca0b32d45d270caae4dbb73e129e ext4: ensure i_size is smaller than maxbytes recipients (to): ["gregkh@linuxfoundation.org" "jack@suse.cz" "libaokun1@huawei.com" "tytso@mit.edu" "yi.zhang@huawei.com"] recipients (cc): []