ci2 starts bisection 2025-04-25 08:28:41.129910625 +0000 UTC m=+14216.685219600
bisecting fixing commit since 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde
building syzkaller on f10afd6936523834f5b3297e9771b19a8f0edcb5
ensuring issue is reproducible on original commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde

testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: d8175981dcaf6be679662ca4984b8be968e27bd884b1bfb424acc7028d93afe1
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
check whether we can drop unnecessary instrumentation
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 476ad0698cc17763abcc6f9eac6fb109d57471fff2cd185d2aae7e26809d6cb1
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
the bug reproduces without the instrumentation
disabling configs for [LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed
kconfig minimization: base=4788 full=6018 leaves diff=239
split chunks (needed=false): <239>
split chunk #0 of len 239 into 5 parts
testing without sub-chunk 1/5
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 94d503702388f8b3dc53dbf5c099ad0b77165810a66c37b20fd3a5dac2532abd
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
the chunk can be dropped
testing without sub-chunk 2/5
disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN KASAN], they are not needed
testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: e9a8b2758af4885a0b94f5fe4ed13fbe98c6cc0d275da2ed75657794fd169f33
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
the chunk can be dropped
testing without sub-chunk 3/5
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 7f6576562a4912005945a9a12d73535069e471c996057e1bef6f712e293a6827
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
the chunk can be dropped
testing without sub-chunk 4/5
disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 2ff60535aae0f0800618a9d8eb742da29e9451dc7a3438e2bfb528d000c701c9
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
the chunk can be dropped
testing without sub-chunk 5/5
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
failed building 70b6ab09a34b4cbcada982b2f5c68a408a5c0cde: net/socket.c:1128: undefined reference to `wext_handle_ioctl'
net/socket.c:3397: undefined reference to `compat_wext_handle_ioctl'
net/core/net-procfs.c:346: undefined reference to `wext_proc_exit'
net/core/net-procfs.c:330: undefined reference to `wext_proc_init'
minimized to 47 configs; suspects: [HID_ZEROPLUS USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL USB_SERIAL_FTDI_SIO USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_ZYDAS X86_X32 ZEROPLUS_FF]
disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing current HEAD ba8b8b19339409d005e0b71075309daf1bbbcbb6
testing commit ba8b8b19339409d005e0b71075309daf1bbbcbb6 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 0a35e7395fe00722dbb315bd0495cafc7b0736a44a66a6cd43291c0b4743bf8b
all runs: crashed: kernel BUG in ext4_mark_iloc_dirty
representative crash: kernel BUG in ext4_mark_iloc_dirty, types: [BUG]
crash still not fixed/happens on the oldest tested release
revisions tested: 7, total time: 1h38m22.001085105s (build: 59m16.455572556s, test: 37m52.81645787s)
crash still not fixed or there were kernel test errors
commit msg: Revert "can: statistics: use atomic access in hot path"
crash: kernel BUG in ext4_mark_iloc_dirty
------------[ cut here ]------------
kernel BUG at fs/ext4/inode.c:5273!
invalid opcode: 0000 [#1] PREEMPT SMP
CPU: 0 PID: 380 Comm: syz-executor.2 Not tainted 5.10.236-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:ext4_do_update_inode fs/ext4/inode.c:5273 [inline]
RIP: 0010:ext4_mark_iloc_dirty+0xa6e/0xa70 fs/ext4/inode.c:5872
Code: 85 d2 74 0f 48 8b 7a 08 48 89 c6 4c 89 e2 e8 e9 44 02 00 65 ff 0d 32 f2 bf 7e 0f 85 d7 fd ff ff e8 ee 69 be ff e9 cd fd ff ff <0f> 0b 48 8b 46 28 48 8b 80 c8 03 00 00 48 8b 80 90 02 00 00 a8 02
RSP: 0018:ffffc900006bf8c0 EFLAGS: 00010206
RAX: ffff888111ccd800 RBX: ffffc900006bf960 RCX: ffff888111c3d400
RDX: ffff888111069b30 RSI: 0000000000000005 RDI: 00000000000000a0
RBP: ffffc900006bf940 R08: ffffffff82c4db90 R09: 0000000000000000
R10: 0000000000000000 R11: ffff888108cbcf34 R12: ffff888111069cc8
R13: ffff888109f39068 R14: 000000000000003c R15: ffff88810fb9ec00
FS:  00007fbb13b406c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbb13b1fd58 CR3: 0000000111ceb000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __ext4_mark_inode_dirty+0x76/0x220 fs/ext4/inode.c:6074
 __ext4_ext_dirty+0x84/0xb0 fs/ext4/extents.c:182
 ext4_ext_rm_leaf fs/ext4/extents.c:2720 [inline]
 ext4_ext_remove_space+0x588/0x1500 fs/ext4/extents.c:2932
 ext4_ext_truncate+0x94/0xa0 fs/ext4/extents.c:4465
 ext4_truncate+0x3da/0x4b0 fs/ext4/inode.c:4366
 ext4_setattr+0x54b/0x990 fs/ext4/inode.c:5649
 notify_change+0x33a/0x4a0 fs/attr.c:410
 do_truncate+0x73/0xc0 fs/open.c:65
 handle_truncate fs/namei.c:3054 [inline]
 do_open fs/namei.c:3395 [inline]
 path_openat+0xc0f/0x10d0 fs/namei.c:3509
 do_filp_open+0x9d/0x140 fs/namei.c:3536
 do_sys_openat2+0x9c/0x210 fs/open.c:1217
 do_sys_open fs/open.c:1233 [inline]
 __do_sys_creat fs/open.c:1309 [inline]
 __se_sys_creat fs/open.c:1303 [inline]
 __x64_sys_creat+0x46/0x60 fs/open.c:1303
 do_syscall_64+0x32/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7fbb13fbeea9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fbb13b400c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007fbb140ecf80 RCX: 00007fbb13fbeea9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140
RBP: 00007fbb1400b4a4 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007fbb140ecf80 R15: 00007ffdd35484c8
Modules linked in:
---[ end trace bef415457e6265bc ]---
RIP: 0010:ext4_do_update_inode fs/ext4/inode.c:5273 [inline]
RIP: 0010:ext4_mark_iloc_dirty+0xa6e/0xa70 fs/ext4/inode.c:5872
Code: 85 d2 74 0f 48 8b 7a 08 48 89 c6 4c 89 e2 e8 e9 44 02 00 65 ff 0d 32 f2 bf 7e 0f 85 d7 fd ff ff e8 ee 69 be ff e9 cd fd ff ff <0f> 0b 48 8b 46 28 48 8b 80 c8 03 00 00 48 8b 80 90 02 00 00 a8 02
RSP: 0018:ffffc900006bf8c0 EFLAGS: 00010206
RAX: ffff888111ccd800 RBX: ffffc900006bf960 RCX: ffff888111c3d400
RDX: ffff888111069b30 RSI: 0000000000000005 RDI: 00000000000000a0
RBP: ffffc900006bf940 R08: ffffffff82c4db90 R09: 0000000000000000
R10: 0000000000000000 R11: ffff888108cbcf34 R12: ffff888111069cc8
R13: ffff888109f39068 R14: 000000000000003c R15: ffff88810fb9ec00
FS:  00007fbb13b406c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbb13b1fd58 CR3: 0000000111ceb000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400