ci starts bisection 2023-03-06 20:20:04.673174509 +0000 UTC m=+468331.044427360
bisecting fixing commit since f2f32f8af2b0ca9d619e5183eae3eed431793baf
building syzkaller on 6d752409f178135881da3510c910bb11ae1f1381
ensuring issue is reproducible on original commit f2f32f8af2b0ca9d619e5183eae3eed431793baf

testing commit f2f32f8af2b0ca9d619e5183eae3eed431793baf gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: fef538833b750d3f4cd936c75d6037e7a5bdb14dbc50593098d27bfd629d317f
all runs: crashed: kernel BUG in dnotify_free_mark
testing current HEAD fe15c26ee26efa11741a7b632e9f23b01aca4cc6
testing commit fe15c26ee26efa11741a7b632e9f23b01aca4cc6 gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: b43e8321845261613af3b2b2e0530049ed314ab80434083ebb8e312e1807c4e5
all runs: crashed: kernel BUG in dnotify_free_mark
revisions tested: 2, total time: 20m36.240938588s (build: 13m26.836844149s, test: 6m8.157867577s)
the crash still happens on HEAD
commit msg: Linux 6.3-rc1
crash: kernel BUG in dnotify_free_mark
------------[ cut here ]------------
kernel BUG at fs/notify/dnotify/dnotify.c:136!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 968 Comm: kworker/u4:5 Not tainted 6.3.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: events_unbound fsnotify_mark_destroy_workfn
RIP: 0010:dnotify_free_mark+0x3c/0x50 fs/notify/dnotify/dnotify.c:136
Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1c 48 83 be 80 00 00 00 00 75 10 48 8b 3d fd 1a 3f 0b 48 83 c4 08 e9 c4 a7 e2 ff <0f> 0b 48 89 34 24 e8 69 ed e2 ff 48 8b 34 24 eb d5 0f 1f 00 41 55
RSP: 0018:ffffc90004aa7c60 EFLAGS: 00010286
RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: 1ffff92000954f96
RDX: 1ffff1100e889c10 RSI: ffff88807444e000 RDI: ffff88807444e080
RBP: ffff88807444e000 R08: ffff88807444e018 R09: ffff88807444e010
R10: ffffed10053fe701 R11: 0000000000082001 R12: ffff888017464000
R13: ffffc90004aa7cb0 R14: 1ffff92000954f92 R15: ffff888027b553e8
FS:  0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055555601c708 CR3: 0000000027a71000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 fsnotify_final_mark_destroy fs/notify/mark.c:278 [inline]
 fsnotify_mark_destroy_workfn+0x21c/0x3b0 fs/notify/mark.c:902
 process_one_work+0x8ba/0x1590 kernel/workqueue.c:2390
 worker_thread+0x598/0xec0 kernel/workqueue.c:2537
 kthread+0x294/0x330 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:dnotify_free_mark+0x3c/0x50 fs/notify/dnotify/dnotify.c:136
Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1c 48 83 be 80 00 00 00 00 75 10 48 8b 3d fd 1a 3f 0b 48 83 c4 08 e9 c4 a7 e2 ff <0f> 0b 48 89 34 24 e8 69 ed e2 ff 48 8b 34 24 eb d5 0f 1f 00 41 55
RSP: 0018:ffffc90004aa7c60 EFLAGS: 00010286
RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: 1ffff92000954f96
RDX: 1ffff1100e889c10 RSI: ffff88807444e000 RDI: ffff88807444e080
RBP: ffff88807444e000 R08: ffff88807444e018 R09: ffff88807444e010
R10: ffffed10053fe701 R11: 0000000000082001 R12: ffff888017464000
R13: ffffc90004aa7cb0 R14: 1ffff92000954f92 R15: ffff888027b553e8
FS:  0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f30b798c300 CR3: 0000000020800000 CR4: 0000000000350ef0