bisecting cause commit starting from c68c5373c504078cc0e0edc7d5c88b47ca308144 building syzkaller on d797d2018f9550530c469ce03b5ae36cfa1ebd23 testing commit c68c5373c504078cc0e0edc7d5c88b47ca308144 with gcc (GCC) 8.1.0 all runs: crashed: BUG: Dentry still in use [unmount of hugetlbfs hugetlbfs] testing release v5.3 testing commit 4d856f72c10ecb060868ed10ff1b1453943fc6c8 with gcc (GCC) 8.1.0 all runs: OK # git bisect start c68c5373c504078cc0e0edc7d5c88b47ca308144 4d856f72c10ecb060868ed10ff1b1453943fc6c8 Bisecting: 12458 revisions left to test after this (roughly 14 steps) [b55f0097ae1da2520108bc426275c1ec5f857b78] Merge branch 'nvme-5.4' of git://git.infradead.org/nvme into for-linus testing commit b55f0097ae1da2520108bc426275c1ec5f857b78 with gcc (GCC) 8.1.0 all runs: OK # git bisect good b55f0097ae1da2520108bc426275c1ec5f857b78 Bisecting: 6434 revisions left to test after this (roughly 13 steps) [4f18480665e8e6bba2f250a0a275854401fe4882] Merge remote-tracking branch 'rdma/for-next' testing commit 4f18480665e8e6bba2f250a0a275854401fe4882 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 4f18480665e8e6bba2f250a0a275854401fe4882 Bisecting: 3227 revisions left to test after this (roughly 12 steps) [88a7bff26d85aaa4a69dc5ec242384f5af53bfd3] Merge remote-tracking branch 'etnaviv/etnaviv/next' testing commit 88a7bff26d85aaa4a69dc5ec242384f5af53bfd3 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 88a7bff26d85aaa4a69dc5ec242384f5af53bfd3 Bisecting: 1588 revisions left to test after this (roughly 11 steps) [89424122c246bc03d50e430085c6cc40087db79b] Merge remote-tracking branch 'usb/usb-next' testing commit 89424122c246bc03d50e430085c6cc40087db79b with gcc (GCC) 8.1.0 all runs: OK # git bisect good 89424122c246bc03d50e430085c6cc40087db79b Bisecting: 723 revisions left to test after this (roughly 10 steps) [549e5a3dddf8667b8d58d1184ef89626e6226ad1] Merge remote-tracking branch 'scsi/for-next' testing commit 549e5a3dddf8667b8d58d1184ef89626e6226ad1 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 549e5a3dddf8667b8d58d1184ef89626e6226ad1 Bisecting: 361 revisions left to test after this (roughly 9 steps) [2a69b0b47f72d065c9a192ad78766bf979f5a51d] Merge remote-tracking branch 'kgdb/kgdb/for-next' testing commit 2a69b0b47f72d065c9a192ad78766bf979f5a51d with gcc (GCC) 8.1.0 all runs: OK # git bisect good 2a69b0b47f72d065c9a192ad78766bf979f5a51d Bisecting: 180 revisions left to test after this (roughly 8 steps) [0adbf5ac7818fbff3e8643ba2bc4bd5cef01456f] scripts/get_maintainer.pl: add signatures from Fixes: lines in commit message testing commit 0adbf5ac7818fbff3e8643ba2bc4bd5cef01456f with gcc (GCC) 8.1.0 all runs: crashed: BUG: Dentry still in use [unmount of hugetlbfs hugetlbfs] # git bisect bad 0adbf5ac7818fbff3e8643ba2bc4bd5cef01456f Bisecting: 90 revisions left to test after this (roughly 7 steps) [18be77a54a01b4669318831627b0c86edfa763cc] mm/memory_hotplug: drop local variables in shrink_zone_span() testing commit 18be77a54a01b4669318831627b0c86edfa763cc with gcc (GCC) 8.1.0 all runs: OK # git bisect good 18be77a54a01b4669318831627b0c86edfa763cc Bisecting: 45 revisions left to test after this (roughly 6 steps) [04e22ec4586e90b559021b63b0df4156f1e2fdb5] hugetlb: remove duplicated code testing commit 04e22ec4586e90b559021b63b0df4156f1e2fdb5 with gcc (GCC) 8.1.0 all runs: crashed: BUG: Dentry still in use [unmount of hugetlbfs hugetlbfs] # git bisect bad 04e22ec4586e90b559021b63b0df4156f1e2fdb5 Bisecting: 22 revisions left to test after this (roughly 5 steps) [024b36604d8fb29020b12147893b58977c617681] virtio-balloon: pull page poisoning config out of free page hinting testing commit 024b36604d8fb29020b12147893b58977c617681 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 024b36604d8fb29020b12147893b58977c617681 Bisecting: 11 revisions left to test after this (roughly 4 steps) [90ffec33b18d21067ec5de2d28fe2933d6ab1bff] mm-vmscan-split-shrink_node-into-node-part-and-memcgs-part-fix testing commit 90ffec33b18d21067ec5de2d28fe2933d6ab1bff with gcc (GCC) 8.1.0 all runs: OK # git bisect good 90ffec33b18d21067ec5de2d28fe2933d6ab1bff Bisecting: 5 revisions left to test after this (roughly 3 steps) [8f9078b19d297e276f95dc80382bcdede728b331] mm, oom: avoid printk() iteration under RCU testing commit 8f9078b19d297e276f95dc80382bcdede728b331 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 8f9078b19d297e276f95dc80382bcdede728b331 Bisecting: 2 revisions left to test after this (roughly 2 steps) [efe323d5cfecd2ad9dd4aa485e05312f0fa7617a] hugetlbfs: add O_TMPFILE support testing commit efe323d5cfecd2ad9dd4aa485e05312f0fa7617a with gcc (GCC) 8.1.0 all runs: crashed: BUG: Dentry still in use [unmount of hugetlbfs hugetlbfs] # git bisect bad efe323d5cfecd2ad9dd4aa485e05312f0fa7617a Bisecting: 0 revisions left to test after this (roughly 1 step) [53bd8d11fd67e2a48b0f71d9df9b85c02fab40ae] hugetlbfs: hugetlb_fault_mutex_hash() cleanup testing commit 53bd8d11fd67e2a48b0f71d9df9b85c02fab40ae with gcc (GCC) 8.1.0 all runs: OK # git bisect good 53bd8d11fd67e2a48b0f71d9df9b85c02fab40ae efe323d5cfecd2ad9dd4aa485e05312f0fa7617a is the first bad commit commit efe323d5cfecd2ad9dd4aa485e05312f0fa7617a Author: Piotr Sarna Date: Wed Nov 6 16:06:34 2019 +1100 hugetlbfs: add O_TMPFILE support O_TMPFILE is an option used to create an unnamed temporary regular file. Currently, libhugetlbfs and Seastar use a combination of mkstemp and unlink to accomplish similar functionality on hugetlbfs. Add O_TMPFILE support to hugetlbfs so that it can potentially be used by existing users (Seastar) and new users (Oracle DB). Support is added by simply using the d_tmpfile utility function to instantiate the dcache entry for a temporary file. Tested manually by successfully creating a temporary file by opening it with (O_TMPFILE|O_RDWR) on mounted hugetlbfs and successfully mapping 2M huge pages with it. Without the patch, trying to open a file with O_TMPFILE results in -ENOSUP. [mike.kravetz@oracle.com: changelog updates] Link: http://lkml.kernel.org/r/22c29acf9c51dae17802e1b05c9e5e4051448c5c.1571129593.git.p.sarna@tlen.pl Signed-off-by: Piotr Sarna Reviewed-by: Mike Kravetz Cc: Michal Hocko Cc: Al Viro Signed-off-by: Andrew Morton Signed-off-by: Stephen Rothwell :040000 040000 aed10f5ed77ef6c646e162c410f482c6a2afc763 a352780dcebb3e9bbc9913edf1e12c770c6e002b M fs revisions tested: 16, total time: 4h7m25.69908941s (build: 1h33m57.454199212s, test: 2h27m56.803629459s) first bad commit: efe323d5cfecd2ad9dd4aa485e05312f0fa7617a hugetlbfs: add O_TMPFILE support cc: ["akpm@linux-foundation.org" "mhocko@kernel.org" "mike.kravetz@oracle.com" "p.sarna@tlen.pl" "sfr@canb.auug.org.au" "viro@zeniv.linux.org.uk"] crash: BUG: Dentry still in use [unmount of hugetlbfs hugetlbfs] BUG: Dentry 000000009aada1a5{i=6d48,n=#27976} still in use (1) [unmount of hugetlbfs hugetlbfs] ------------[ cut here ]------------ WARNING: CPU: 1 PID: 7561 at fs/dcache.c:1595 umount_check.cold.53+0xd2/0x13f fs/dcache.c:1586 Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 7561 Comm: syz-executor.2 Not tainted 5.4.0-rc6+ #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x12d/0x187 lib/dump_stack.c:118 panic+0x22a/0x4e3 kernel/panic.c:221 __warn.cold.11+0x25/0x30 kernel/panic.c:582 report_bug+0x1b0/0x270 lib/bug.c:195 fixup_bug arch/x86/kernel/traps.c:179 [inline] do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:272 do_invalid_op+0x36/0x40 arch/x86/kernel/traps.c:291 invalid_op+0x23/0x30 arch/x86/entry/entry_64.S:1028 RIP: 0010:umount_check.cold.53+0xd2/0x13f fs/dcache.c:1595 Code: c1 ea 03 80 3c 02 00 75 79 49 81 c4 88 06 00 00 41 89 d8 48 89 f1 41 54 4d 8b 0e 4c 89 ea 48 c7 c7 20 90 35 87 e8 5b d9 aa ff <0f> 0b 58 e9 b0 3b ff ff 48 89 75 d8 e8 7b ff f1 ff 48 8b 75 d8 e9 RSP: 0018:ffff888098e8fbf8 EFLAGS: 00010282 RAX: 0000000000000060 RBX: 0000000000000001 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff89fe01a0 RBP: ffff888098e8fc28 R08: ffffed1015d66159 R09: ffffed1015d66159 R10: ffffed1015d66158 R11: ffff8880aeb30ac7 R12: ffff88807ffe8688 R13: 0000000000006d48 R14: ffffffff886f3de0 R15: ffff88808983a930 d_walk+0x257/0x6b0 fs/dcache.c:1305 do_one_tree+0x1f/0x40 fs/dcache.c:1602 shrink_dcache_for_umount+0x56/0x120 fs/dcache.c:1618 generic_shutdown_super+0x61/0x330 fs/super.c:447 kill_anon_super+0x38/0x60 fs/super.c:1106 kill_litter_super+0x39/0x50 fs/super.c:1115 deactivate_locked_super+0x77/0xd0 fs/super.c:335 deactivate_super+0x136/0x150 fs/super.c:366 cleanup_mnt+0x204/0x440 fs/namespace.c:1102 __cleanup_mnt+0xd/0x10 fs/namespace.c:1109 task_work_run+0x108/0x180 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_usermode_loop+0x24e/0x2e0 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline] syscall_return_slowpath arch/x86/entry/common.c:274 [inline] do_syscall_64+0x4e8/0x5d0 arch/x86/entry/common.c:300 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45cc47 Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007ffe3ecc3768 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000045cc47 RDX: 0000000000403a90 RSI: 0000000000000002 RDI: 00007ffe3ecc3810 RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000009 R10: 0000000000000005 R11: 0000000000000202 R12: 00007ffe3ecc48a0 R13: 0000000001b1d940 R14: 0000000000000000 R15: 00007ffe3ecc48a0 Kernel Offset: disabled Rebooting in 86400 seconds..