ci2 starts bisection 2023-06-22 03:21:16.343460399 +0000 UTC m=+110260.572418666 bisecting fixing commit since 9d6bde853685609a631871d7c12be94fdf8d912e building syzkaller on 4bce1a3e705a8b62de8194bdb28f5eef89c8feec ensuring issue is reproducible on original commit 9d6bde853685609a631871d7c12be94fdf8d912e testing commit 9d6bde853685609a631871d7c12be94fdf8d912e gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: e5103f778a1232cba0f5b4fe5daf82f641016dae735b65b1ced95c5ca93c1a77 run #0: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit run #1: crashed: WARNING in xfs_qm_dqget_cache_insert run #2: crashed: WARNING in xfs_qm_dqget_cache_insert run #3: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit run #4: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit run #5: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit run #6: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit run #7: crashed: WARNING in xfs_qm_dqget_cache_insert run #8: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit run #9: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit run #10: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit run #11: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit run #12: crashed: WARNING in xfs_qm_dqget_cache_insert run #13: crashed: WARNING in xfs_qm_dqget_cache_insert run #14: crashed: WARNING in xfs_qm_dqget_cache_insert run #15: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit run #16: crashed: WARNING in xfs_qm_dqget_cache_insert run #17: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit run #18: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit run #19: crashed: WARNING in xfs_qm_dqget_cache_insert testing current HEAD f67653019430833d5003f16817d7fa85272a6a76 testing commit f67653019430833d5003f16817d7fa85272a6a76 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 0e4c5d10b856bd6552630d3dd6b81eb5a8ba8c62a7dd33d7c1f481ade38900f6 run #0: crashed: WARNING in xfs_qm_dqget_cache_insert run #1: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit run #2: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit run #3: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit run #4: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit run #5: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit run #6: crashed: WARNING in xfs_qm_dqget_cache_insert run #7: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit run #8: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit run #9: crashed: KASAN: null-ptr-deref Write in xlog_cil_commit crash still not fixed/happens on the oldest tested release revisions tested: 2, total time: 50m27.732965984s (build: 43m1.343962594s, test: 6m16.730330734s) crash still not fixed on HEAD or HEAD had kernel test errors commit msg: Linux 5.15.118 crash: KASAN: null-ptr-deref Write in xlog_cil_commit RBP: 00007fdff010c1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fff6bae982f R14: 00007fdff010c300 R15: 0000000000022000 ================================================================== BUG: KASAN: null-ptr-deref in xlog_cil_alloc_shadow_bufs fs/xfs/xfs_log_cil.c:225 [inline] BUG: KASAN: null-ptr-deref in xlog_cil_commit+0x357/0x2250 fs/xfs/xfs_log_cil.c:1264 Write of size 88 at addr 0000000000000000 by task syz-executor.0/3966 CPU: 0 PID: 3966 Comm: syz-executor.0 Not tainted 5.15.118-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x57/0x7d lib/dump_stack.c:106 __kasan_report mm/kasan/report.c:438 [inline] kasan_report.cold+0x66/0xdf mm/kasan/report.c:451 check_region_inline mm/kasan/generic.c:183 [inline] kasan_check_range+0x13d/0x180 mm/kasan/generic.c:189 memset+0x20/0x40 mm/kasan/shadow.c:44 xlog_cil_alloc_shadow_bufs fs/xfs/xfs_log_cil.c:225 [inline] xlog_cil_commit+0x357/0x2250 fs/xfs/xfs_log_cil.c:1264 __xfs_trans_commit+0x535/0xc00 fs/xfs/xfs_trans.c:881 xfs_trans_roll+0x14f/0x300 fs/xfs/xfs_trans.c:1009 xfs_defer_trans_roll+0x320/0x8d0 fs/xfs/libxfs/xfs_defer.c:297 xfs_defer_finish+0xb8/0x1c0 fs/xfs/libxfs/xfs_defer.c:525 xfs_dquot_disk_alloc+0x5dd/0x9f0 fs/xfs/xfs_dquot.c:376 xfs_qm_dqread_alloc fs/xfs/xfs_dquot.c:647 [inline] xfs_qm_dqread+0x3c3/0x4a0 fs/xfs/xfs_dquot.c:692 xfs_qm_dqget+0x10e/0x410 fs/xfs/xfs_dquot.c:897 xfs_qm_vop_dqalloc+0x3f5/0xb70 fs/xfs/xfs_qm.c:1683 xfs_setattr_nonsize+0x4f1/0x9f0 fs/xfs/xfs_iops.c:709 xfs_vn_setattr+0x1a0/0x200 fs/xfs/xfs_iops.c:1050 notify_change+0x863/0xe20 fs/attr.c:488 chown_common+0x4cf/0x600 fs/open.c:680 vfs_fchown fs/open.c:748 [inline] vfs_fchown fs/open.c:740 [inline] ksys_fchown+0xbb/0x110 fs/open.c:759 __do_sys_fchown fs/open.c:767 [inline] __se_sys_fchown fs/open.c:765 [inline] __x64_sys_fchown+0x6a/0xb0 fs/open.c:765 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x61/0xcb RIP: 0033:0x7fdff0d9a169 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fdff010c168 EFLAGS: 00000246 ORIG_RAX: 000000000000005d RAX: ffffffffffffffda RBX: 00007fdff0eb9f80 RCX: 00007fdff0d9a169 RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000003 RBP: 00007fdff010c1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fff6bae982f R14: 00007fdff010c300 R15: 0000000000022000 ==================================================================