ci starts bisection 2025-10-01 23:43:35.732419238 +0000 UTC m=+42452.296083812 bisecting cause commit starting from 50c19e20ed2ef359cf155a39c8462b0a6351b9fa building syzkaller on a185913838f62e03bd7ba14364cc781630375079 ensuring issue is reproducible on original commit 50c19e20ed2ef359cf155a39c8462b0a6351b9fa testing commit 50c19e20ed2ef359cf155a39c8462b0a6351b9fa gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 912e0e624c76545c9286302d63335173677a1577cd06b36f57f6a7a155fee292 run #0: crashed: WARNING in copy_mnt_ns run #1: crashed: WARNING in copy_mnt_ns run #2: crashed: WARNING in copy_mnt_ns run #3: crashed: WARNING in copy_mnt_ns run #4: crashed: WARNING in copy_mnt_ns run #5: crashed: WARNING in copy_mnt_ns run #6: crashed: WARNING in copy_mnt_ns run #7: crashed: WARNING in copy_mnt_ns run #8: crashed: WARNING in copy_mnt_ns run #9: crashed: WARNING in copy_mnt_ns run #10: crashed: WARNING in copy_mnt_ns run #11: crashed: WARNING in copy_mnt_ns run #12: crashed: WARNING in copy_mnt_ns run #13: crashed: WARNING in copy_mnt_ns run #14: crashed: WARNING in copy_mnt_ns run #15: crashed: WARNING in copy_mnt_ns run #16: crashed: WARNING in copy_mnt_ns run #17: crashed: WARNING in copy_mnt_ns run #18: crashed: WARNING in copy_mnt_ns run #19: crashed: WARNING in free_ipc representative crash: WARNING in copy_mnt_ns, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [ubsan kasan locking atomic_sleep hang memleak], they are not needed testing commit 50c19e20ed2ef359cf155a39c8462b0a6351b9fa gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: af7265e244b0cd9336c82215ffedda6e128a23e984f319a7fe28f970a7a349d7 all runs: crashed: WARNING in copy_mnt_ns representative crash: WARNING in copy_mnt_ns, types: [WARNING] the bug reproduces without the instrumentation disabling configs for [memleak ubsan kasan locking atomic_sleep hang], they are not needed kconfig minimization: base=4099 full=8492 leaves diff=2183 split chunks (needed=false): <2183> split chunk #0 of len 2183 into 5 parts testing without sub-chunk 1/5 disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed testing commit 50c19e20ed2ef359cf155a39c8462b0a6351b9fa gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 55d5a365bcd6a7ff0f3cc9be6b4d431707a253e1ee68a5adf551197d55619909 run #0: crashed: WARNING in copy_mnt_ns run #1: crashed: WARNING in copy_mnt_ns run #2: crashed: WARNING in copy_mnt_ns run #3: crashed: WARNING in copy_mnt_ns run #4: crashed: WARNING in copy_mnt_ns run #5: crashed: WARNING in copy_mnt_ns run #6: crashed: WARNING in copy_mnt_ns run #7: crashed: WARNING in pde_put run #8: crashed: WARNING in copy_mnt_ns run #9: crashed: WARNING in copy_mnt_ns representative crash: WARNING in copy_mnt_ns, types: [WARNING] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [atomic_sleep hang memleak ubsan kasan locking], they are not needed testing commit 50c19e20ed2ef359cf155a39c8462b0a6351b9fa gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 822a0f4382f814eb04f591f8575c7f82c6e34d58c392687b748c40d8b38e6d48 run #0: crashed: WARNING in copy_mnt_ns run #1: crashed: WARNING in copy_mnt_ns run #2: crashed: WARNING in copy_mnt_ns run #3: crashed: WARNING in copy_mnt_ns run #4: crashed: WARNING in copy_mnt_ns run #5: crashed: WARNING in copy_mnt_ns run #6: crashed: WARNING in copy_mnt_ns run #7: crashed: WARNING in copy_mnt_ns run #8: crashed: WARNING in free_mnt_ns run #9: crashed: WARNING in free_mnt_ns representative crash: WARNING in copy_mnt_ns, types: [WARNING] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [ubsan kasan locking atomic_sleep hang memleak], they are not needed testing commit 50c19e20ed2ef359cf155a39c8462b0a6351b9fa gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 11895968c77b3e17e8462c719b17c26acbc644c27de8bfcdce1591b1abe6cf08 run #0: crashed: WARNING in copy_mnt_ns run #1: crashed: WARNING in free_mnt_ns run #2: crashed: WARNING in free_mnt_ns run #3: crashed: WARNING in free_mnt_ns run #4: crashed: WARNING in free_mnt_ns run #5: crashed: WARNING in free_mnt_ns run #6: crashed: WARNING in free_mnt_ns run #7: crashed: WARNING in free_mnt_ns run #8: basic kernel testing failed: failed to copy binary to VM: timedout after 1m0s ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "/tmp/syz-executor2439330428" "root@10.128.0.64:./syz-executor2439330428"] Executing: program /usr/bin/ssh host 10.128.0.64, user root, command sftp OpenSSH_9.2p1 Debian-2+deb12u7, OpenSSL 3.0.17 1 Jul 2025 debug1: Reading configuration data /dev/null debug1: Connecting to 10.128.0.64 [10.128.0.64] port 22. debug1: fd 3 clearing O_NONBLOCK debug1: Connection established. debug1: identity file /root/.ssh/id_rsa type -1 debug1: identity file /root/.ssh/id_rsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa type -1 debug1: identity file /root/.ssh/id_ecdsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa_sk type -1 debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1 debug1: identity file /root/.ssh/id_ed25519 type -1 debug1: identity file /root/.ssh/id_ed25519-cert type -1 debug1: identity file /root/.ssh/id_ed25519_sk type -1 debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1 debug1: identity file /root/.ssh/id_xmss type -1 debug1: identity file /root/.ssh/id_xmss-cert type -1 debug1: identity file /root/.ssh/id_dsa type -1 debug1: identity file /root/.ssh/id_dsa-cert type -1 debug1: Local version string SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u7 debug1: Remote protocol version 2.0, remote software version OpenSSH_9.9 debug1: compat_banner: match: OpenSSH_9.9 pat OpenSSH* compat 0x04000000 debug1: Authenticating to 10.128.0.64:22 as 'root' debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug1: kex: algorithm: sntrup761x25519-sha512 debug1: kex: host key algorithm: ssh-ed25519 debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: compression: none debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: compression: none debug1: expecting SSH2_MSG_KEX_ECDH_REPLY debug1: SSH2_MSG_KEX_ECDH_REPLY received debug1: Server host key: ssh-ed25519 SHA256:EAvWV3GG8odMD+k20F251zjwXNDbyLo/P7N2oY0DvFQ debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts. debug1: ssh_packet_send2_wrapped: resetting send seqnr 3 debug1: rekey out after 134217728 blocks debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug1: ssh_packet_read_poll2: resetting read seqnr 3 debug1: SSH2_MSG_NEWKEYS received debug1: rekey in after 134217728 blocks debug1: Will attempt key: /root/.ssh/id_rsa debug1: Will attempt key: /root/.ssh/id_ecdsa debug1: Will attempt key: /root/.ssh/id_ecdsa_sk debug1: Will attempt key: /root/.ssh/id_ed25519 debug1: Will attempt key: /root/.ssh/id_ed25519_sk debug1: Will attempt key: /root/.ssh/id_xmss debug1: Will attempt key: /root/.ssh/id_dsa debug1: SSH2_MSG_EXT_INFO received debug1: kex_input_ext_info: server-sig-algs= debug1: kex_input_ext_info: publickey-hostbound@openssh.com=<0> debug1: kex_input_ext_info: ping@openssh.com (unrecognised) run #9: basic kernel testing failed: failed to copy binary to VM: timedout after 1m0s ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "/tmp/syz-executor3463680780" "root@10.128.1.28:./syz-executor3463680780"] Executing: program /usr/bin/ssh host 10.128.1.28, user root, command sftp OpenSSH_9.2p1 Debian-2+deb12u7, OpenSSL 3.0.17 1 Jul 2025 debug1: Reading configuration data /dev/null debug1: Connecting to 10.128.1.28 [10.128.1.28] port 22. debug1: fd 3 clearing O_NONBLOCK debug1: Connection established. debug1: identity file /root/.ssh/id_rsa type -1 debug1: identity file /root/.ssh/id_rsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa type -1 debug1: identity file /root/.ssh/id_ecdsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa_sk type -1 debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1 debug1: identity file /root/.ssh/id_ed25519 type -1 debug1: identity file /root/.ssh/id_ed25519-cert type -1 debug1: identity file /root/.ssh/id_ed25519_sk type -1 debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1 debug1: identity file /root/.ssh/id_xmss type -1 debug1: identity file /root/.ssh/id_xmss-cert type -1 debug1: identity file /root/.ssh/id_dsa type -1 debug1: identity file /root/.ssh/id_dsa-cert type -1 debug1: Local version string SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u7 debug1: Remote protocol version 2.0, remote software version OpenSSH_9.9 debug1: compat_banner: match: OpenSSH_9.9 pat OpenSSH* compat 0x04000000 debug1: Authenticating to 10.128.1.28:22 as 'root' debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug1: kex: algorithm: sntrup761x25519-sha512 debug1: kex: host key algorithm: ssh-ed25519 debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: compression: none debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: compression: none debug1: expecting SSH2_MSG_KEX_ECDH_REPLY representative crash: WARNING in copy_mnt_ns, types: [WARNING] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed testing commit 50c19e20ed2ef359cf155a39c8462b0a6351b9fa gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 3e3c98216fb77a7ff5dd09c93e2902a52b8806a302d6ccd5c09feca937f15d61 run #0: crashed: WARNING in copy_mnt_ns run #1: crashed: WARNING in copy_mnt_ns run #2: crashed: WARNING in copy_mnt_ns run #3: crashed: WARNING in copy_mnt_ns run #4: crashed: WARNING in destroy_pid_namespace_work run #5: crashed: WARNING in free_mnt_ns run #6: crashed: WARNING in free_mnt_ns run #7: crashed: WARNING in copy_mnt_ns run #8: crashed: WARNING in free_mnt_ns run #9: crashed: WARNING in corrupted representative crash: WARNING in copy_mnt_ns, types: [WARNING] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [ubsan kasan locking atomic_sleep hang memleak], they are not needed testing commit 50c19e20ed2ef359cf155a39c8462b0a6351b9fa gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 7aca79d1774a019a3b88a716dc7fa2ab184aef477e9380dc5c381760b960b836 all runs: crashed: WARNING in copy_mnt_ns representative crash: WARNING in copy_mnt_ns, types: [WARNING] the chunk can be dropped disabling configs for [hang memleak ubsan kasan locking atomic_sleep], they are not needed picked [v6.17 v6.16 v6.15 v6.13 v6.11 v6.9 v6.7 v6.5 v6.2 v5.19 v5.16 v5.13 v5.10 v5.7 v5.4 v5.1 v4.19] out of 40 release tags testing release v6.17 testing commit e5f0a698b34ed76002dc5cff3804a61c80233a7a gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 730c1b6363f29d3ccbedbf9a0633cb015a69054c89bc2018b5ee594e6127e546 all runs: OK false negative chance: 0.000 # git bisect start 50c19e20ed2ef359cf155a39c8462b0a6351b9fa e5f0a698b34ed76002dc5cff3804a61c80233a7a Bisecting: 831 revisions left to test after this (roughly 10 steps) [f3827213abae9291b7525b05e6fd29b1f0536ce6] Merge tag 'for-6.18-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux testing commit f3827213abae9291b7525b05e6fd29b1f0536ce6 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 370a82ec9666f17f3382f55976f61e9a3442efef0132b297c09bd2b8b5fb3f68 all runs: crashed: WARNING in copy_mnt_ns representative crash: WARNING in copy_mnt_ns, types: [WARNING] # git bisect bad f3827213abae9291b7525b05e6fd29b1f0536ce6 Bisecting: 455 revisions left to test after this (roughly 9 steps) [5928397f5739fb94559350575826d94fa8c35929] Merge tag 'erofs-for-6.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/xiang/erofs testing commit 5928397f5739fb94559350575826d94fa8c35929 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 424130c6ba67eec8e62befca4653f64072be3cf102b9a5245bd20036bb989bbb run #0: crashed: WARNING in copy_mnt_ns run #1: crashed: WARNING in copy_mnt_ns run #2: crashed: WARNING in copy_mnt_ns run #3: crashed: WARNING in copy_mnt_ns run #4: crashed: WARNING in copy_mnt_ns run #5: crashed: WARNING in copy_mnt_ns run #6: crashed: WARNING in copy_mnt_ns run #7: crashed: WARNING in copy_mnt_ns run #8: crashed: WARNING in copy_mnt_ns run #9: crashed: WARNING in free_mnt_ns representative crash: WARNING in copy_mnt_ns, types: [WARNING] # git bisect bad 5928397f5739fb94559350575826d94fa8c35929 Bisecting: 232 revisions left to test after this (roughly 8 steps) [a40eb50a9566318a138b3e222fc4fe04e3932cda] Merge tag 'gfs2-for-6.18' of git://git.kernel.org/pub/scm/linux/kernel/git/gfs2/linux-gfs2 testing commit a40eb50a9566318a138b3e222fc4fe04e3932cda gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 23e26e60b9b62cffbda0afca7c8479b6bb386e706f823fa4887604a6e53e4460 all runs: crashed: WARNING in copy_mnt_ns representative crash: WARNING in copy_mnt_ns, types: [WARNING] # git bisect bad a40eb50a9566318a138b3e222fc4fe04e3932cda Bisecting: 108 revisions left to test after this (roughly 7 steps) [5484a4ea7a1f208b886b58dd55cc55f418930f8a] Merge tag 'vfs-6.18-rc1.afs' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs testing commit 5484a4ea7a1f208b886b58dd55cc55f418930f8a gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 475e321bb3a90e671a8286ff9daddd8751f8d18c598007e85ada0c3fbe59076d all runs: OK false negative chance: 0.000 # git bisect good 5484a4ea7a1f208b886b58dd55cc55f418930f8a Bisecting: 54 revisions left to test after this (roughly 6 steps) [83914de1c1d39dca4a3196a03bcd64d0a861d551] net-sysfs: use check_net() testing commit 83914de1c1d39dca4a3196a03bcd64d0a861d551 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 1468bbeae22c513f51dbf70b3a3452cf9a6db8ed7a6a8d4aabb1e8372a16565a all runs: crashed: WARNING in copy_mnt_ns representative crash: WARNING in copy_mnt_ns, types: [WARNING] # git bisect bad 83914de1c1d39dca4a3196a03bcd64d0a861d551 Bisecting: 26 revisions left to test after this (roughly 5 steps) [58f976d41fd915acd2403a2b8e0eef8e9c478357] uts: support ns lookup testing commit 58f976d41fd915acd2403a2b8e0eef8e9c478357 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 46fce503fd5f4436c1a5ce5d07156284e077de90f3a3e8e07d219fbfce29a8d0 all runs: OK false negative chance: 0.000 # git bisect good 58f976d41fd915acd2403a2b8e0eef8e9c478357 Bisecting: 13 revisions left to test after this (roughly 4 steps) [5fc6bef178f1b644f1439e520c8f83bfc83a1252] cgroup: split namespace into separate header testing commit 5fc6bef178f1b644f1439e520c8f83bfc83a1252 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 failed building 5fc6bef178f1b644f1439e520c8f83bfc83a1252: kernel/nscommon.c:10:9: error: call to undeclared function 'proc_alloc_inum'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] # git bisect skip 5fc6bef178f1b644f1439e520c8f83bfc83a1252 Bisecting: 13 revisions left to test after this (roughly 4 steps) [5612ff3ec588be09f11a9424db6d1186bcdeb3fa] nscommon: simplify initialization testing commit 5612ff3ec588be09f11a9424db6d1186bcdeb3fa gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 5c6dec4189775f7c824f29a55d3006fb07a0156c12671632b24ee9b7a93c69c5 all runs: OK false negative chance: 0.000 # git bisect good 5612ff3ec588be09f11a9424db6d1186bcdeb3fa Bisecting: 4 revisions left to test after this (roughly 2 steps) [06099e374f3ab818f0501671b21493ba2e1b94b9] cgroup: port to ns_ref_*() helpers testing commit 06099e374f3ab818f0501671b21493ba2e1b94b9 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 870be8f4011b03c16964e77264cfc55e750b04ee0d00d66432f93d453c5ad4f7 all runs: crashed: WARNING in copy_mnt_ns representative crash: WARNING in copy_mnt_ns, types: [WARNING] # git bisect bad 06099e374f3ab818f0501671b21493ba2e1b94b9 Bisecting: 1 revision left to test after this (roughly 1 step) [224ef741ce87aa6474b82e0eb76e0e8e1bafe544] ns: add reference count helpers testing commit 224ef741ce87aa6474b82e0eb76e0e8e1bafe544 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 482c9837b3a1d437b126c0c5b5fca156afc77b2827637cf7b6976a0b58fb7b95 all runs: crashed: WARNING in copy_mnt_ns representative crash: WARNING in copy_mnt_ns, types: [WARNING] # git bisect bad 224ef741ce87aa6474b82e0eb76e0e8e1bafe544 Bisecting: 0 revisions left to test after this (roughly 1 step) [bb57289f0ce1bab7c9ea2106a29088088dc95229] Merge patch series "ns: rework common initialization" testing commit bb57289f0ce1bab7c9ea2106a29088088dc95229 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 0caa7bfc7db0639ee012519ace34711041d1a50ce633af1348f61fa064d4ae0e all runs: crashed: WARNING in copy_mnt_ns representative crash: WARNING in copy_mnt_ns, types: [WARNING] # git bisect bad bb57289f0ce1bab7c9ea2106a29088088dc95229 Bisecting: 0 revisions left to test after this (roughly 0 steps) [be5f21d3985f00827e09b798f7a07ebd6dd7f54a] ns: add ns_common_free() testing commit be5f21d3985f00827e09b798f7a07ebd6dd7f54a gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: cc48d3ebf955cc0517ec5c20728b319afaa3d34f8ab3b9a4e36523e681152136 run #0: crashed: WARNING in copy_mnt_ns run #1: crashed: WARNING in copy_mnt_ns run #2: crashed: WARNING in copy_mnt_ns run #3: crashed: WARNING in copy_mnt_ns run #4: crashed: WARNING in copy_mnt_ns run #5: crashed: WARNING in copy_mnt_ns run #6: crashed: WARNING in copy_mnt_ns run #7: crashed: WARNING in copy_mnt_ns run #8: crashed: WARNING in copy_mnt_ns run #9: crashed: WARNING in free_mnt_ns representative crash: WARNING in copy_mnt_ns, types: [WARNING] # git bisect bad be5f21d3985f00827e09b798f7a07ebd6dd7f54a be5f21d3985f00827e09b798f7a07ebd6dd7f54a is the first bad commit commit be5f21d3985f00827e09b798f7a07ebd6dd7f54a Author: Christian Brauner Date: Wed Sep 17 12:28:08 2025 +0200 ns: add ns_common_free() And drop ns_free_inum(). Anything common that can be wasted centrally should be wasted in the new common helper. Reviewed-by: Jan Kara Signed-off-by: Christian Brauner fs/namespace.c | 4 ++-- include/linux/ns_common.h | 3 +++ include/linux/proc_ns.h | 2 -- ipc/namespace.c | 4 ++-- kernel/cgroup/namespace.c | 2 +- kernel/nscommon.c | 5 +++++ kernel/pid_namespace.c | 4 ++-- kernel/time/namespace.c | 2 +- kernel/user_namespace.c | 4 ++-- kernel/utsname.c | 2 +- net/core/net_namespace.c | 4 ++-- 11 files changed, 21 insertions(+), 15 deletions(-) accumulated error probability: 0.00 culprit signature: cc48d3ebf955cc0517ec5c20728b319afaa3d34f8ab3b9a4e36523e681152136 parent signature: 5c6dec4189775f7c824f29a55d3006fb07a0156c12671632b24ee9b7a93c69c5 revisions tested: 19, total time: 8h21m29.059784012s (build: 4h37m3.627004089s, test: 3h8m44.213440884s) first bad commit: be5f21d3985f00827e09b798f7a07ebd6dd7f54a ns: add ns_common_free() recipients (to): ["anna-maria@linutronix.de" "brauner@kernel.org" "davem@davemloft.net" "edumazet@google.com" "frederic@kernel.org" "jack@suse.cz" "kuba@kernel.org" "netdev@vger.kernel.org" "pabeni@redhat.com" "tglx@linutronix.de"] recipients (cc): ["akpm@linux-foundation.org" "anna.schumaker@oracle.com" "bodonnel@redhat.com" "brauner@kernel.org" "cgroups@vger.kernel.org" "cyphar@cyphar.com" "hannes@cmpxchg.org" "horms@kernel.org" "jack@suse.cz" "jlayton@kernel.org" "joel.granados@kernel.org" "kuniyu@google.com" "linux-fsdevel@vger.kernel.org" "linux-kernel@vger.kernel.org" "mawupeng1@huawei.com" "mkoutny@suse.com" "rostedt@goodmis.org" "sd@queasysnail.net" "tj@kernel.org" "viro@zeniv.linux.org.uk"] crash: WARNING in copy_mnt_ns RBP: 00007fbe13417090 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fbe13806038 R14: 00007fbe13805fa0 R15: 00007ffe0fdc6bd8 ------------[ cut here ]------------ ida_free called for id=726 which is not allocated. WARNING: CPU: 1 PID: 1986 at lib/idr.c:592 ida_free+0x107/0x150 lib/idr.c:592 Modules linked in: CPU: 1 UID: 0 PID: 1986 Comm: syz.1.22 Not tainted syzkaller #0 PREEMPT(none) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 RIP: 0010:ida_free+0x107/0x150 lib/idr.c:592 Code: 21 d0 74 2c 48 8d 34 45 01 00 00 00 eb 24 48 8b 3c 24 48 89 de e8 29 f7 03 00 90 48 c7 c7 4b 22 4e 82 89 ee e8 1a 65 26 ff 90 <0f> 0b 90 90 eb 16 31 f6 48 89 e7 e8 a9 44 02 00 48 8b 3c 24 48 89 RSP: 0018:ffffc900017e7da0 EFLAGS: 00010246 RAX: 6a027983d43a2d00 RBX: 0000000000000286 RCX: 0000000000000000 RDX: 7e26f13f8bf2fba7 RSI: ffffffff8254bc32 RDI: 00000000ffffffff RBP: 00000000000002d6 R08: 0000000000080000 R09: 000000000000000d R10: 0000000000000000 R11: 00000000ffffdfff R12: ffff88810134e700 R13: ffff88810ce8a840 R14: 00000000000002d6 R15: ffff888101b59e00 FS: 00007fbe134176c0(0000) GS:ffff8882b4ada000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fbe13807dac CR3: 000000010ff6e000 CR4: 00000000003506f0 Call Trace: copy_mnt_ns+0xbe/0x2f0 fs/namespace.c:4157 create_new_namespaces+0x51/0x200 kernel/nsproxy.c:78 unshare_nsproxy_namespaces+0x79/0xa0 kernel/nsproxy.c:218 ksys_unshare+0x1da/0x350 kernel/fork.c:3127 __do_sys_unshare kernel/fork.c:3198 [inline] __se_sys_unshare kernel/fork.c:3196 [inline] __x64_sys_unshare+0xd/0x20 kernel/fork.c:3196 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xe2/0x2f0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fbe135aeec9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fbe13417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00007fbe13805fa0 RCX: 00007fbe135aeec9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020400 RBP: 00007fbe13417090 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fbe13806038 R14: 00007fbe13805fa0 R15: 00007ffe0fdc6bd8