bisecting fixing commit since a1b977b49b66c75e6c51a515f6700371ae720217 building syzkaller on 1880b4a9f394370a7d1fcb5c1cfca0fa1127b463 testing commit a1b977b49b66c75e6c51a515f6700371ae720217 with gcc (GCC) 8.1.0 kernel signature: d567170957d01ec1a9c1d6086b79f7f28cc0089954cf65f39f4b39d7bbf5c2bc run #0: crashed: WARNING in drop_nlink run #1: crashed: WARNING in drop_nlink run #2: crashed: WARNING in corrupted run #3: crashed: WARNING in drop_nlink run #4: crashed: WARNING in drop_nlink run #5: crashed: WARNING in drop_nlink run #6: crashed: WARNING in drop_nlink run #7: crashed: WARNING in corrupted run #8: crashed: WARNING in drop_nlink run #9: crashed: WARNING in drop_nlink testing current HEAD b94de4d19498b454645b72d08a05d32fa9074fb5 testing commit b94de4d19498b454645b72d08a05d32fa9074fb5 with gcc (GCC) 8.1.0 kernel signature: 2f0a99240a0dd51e24c580f32c4ccd7f42430df24760a79cdb44c530dbc299c2 run #0: crashed: WARNING in drop_nlink run #1: crashed: WARNING in drop_nlink run #2: crashed: WARNING in drop_nlink run #3: crashed: WARNING in drop_nlink run #4: crashed: WARNING in drop_nlink run #5: crashed: WARNING in corrupted run #6: crashed: WARNING in drop_nlink run #7: crashed: WARNING in drop_nlink run #8: crashed: WARNING in corrupted run #9: crashed: WARNING in corrupted revisions tested: 2, total time: 23m19.326896772s (build: 17m17.688586778s, test: 5m21.040463995s) the crash still happens on HEAD commit msg: Linux 4.19.155 crash: WARNING in corrupted wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 MINIX-fs: mounting unchecked file system, running fsck is recommended ------------[ cut here ]------------ IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready MINIX-fs: mounting unchecked file system, running fsck is recommended WARNING: CPU: 0 PID: 8092 at fs/inode.c:286 drop_nlink.cold.19+0xc/0x3c fs/inode.c:286 ------------[ cut here ]------------ Kernel panic - not syncing: panic_on_warn set ... CPU: 0 PID: 8092 Comm: syz-executor.2 Not tainted 4.19.155-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x22a lib/dump_stack.c:118 panic+0x1cd/0x375 kernel/panic.c:186 WARNING: CPU: 1 PID: 8103 at fs/inode.c:286 drop_nlink.cold.19+0xc/0x3c fs/inode.c:286 Modules linked in: __warn.cold.7+0x1b/0x3e kernel/panic.c:541 CPU: 1 PID: 8103 Comm: syz-executor.0 Not tainted 4.19.155-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 report_bug+0x1a4/0x200 lib/bug.c:186 RIP: 0010:drop_nlink.cold.19+0xc/0x3c fs/inode.c:286 fixup_bug arch/x86/kernel/traps.c:178 [inline] do_error_trap+0x200/0x350 arch/x86/kernel/traps.c:296 Code: e0 2a 80 3c 02 00 75 0c 48 8b 83 d0 00 00 00 e9 ef b8 ff ff 4c 89 e7 e8 d5 c3 f0 ff eb ea 48 c7 c7 c0 b0 53 87 e8 57 55 ad ff <0f> 0b b8 ff ff 37 00 4c 89 e2 48 c1 ea 03 48 c1 e0 2a 0f b6 04 02 RSP: 0018:ffff8880a18af9e0 EFLAGS: 00010282 RAX: 0000000000000024 RBX: ffff888080b7b180 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8a3e2a60 RBP: ffff8880a18af9f8 R08: ffffed10174a3eef R09: ffffed10174a3eee R10: ffffed10174a3eee R11: ffff8880ba51f777 R12: ffff888080b7b1c8 R13: ffff888080b7daa0 R14: 0000000000000000 R15: ffff888080c64080 FS: 00007f03c319a700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:316 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055e3cb365410 CR3: 00000000a0f35000 CR4: 00000000001406e0 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1038 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 RIP: 0010:drop_nlink.cold.19+0xc/0x3c fs/inode.c:286 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Code: e0 2a 80 3c 02 00 75 0c 48 8b 83 d0 00 00 00 e9 ef b8 ff ff 4c 89 e7 e8 d5 c3 f0 ff eb ea 48 c7 c7 c0 b0 53 87 e8 57 55 ad ff <0f> 0b b8 ff ff 37 00 4c 89 e2 48 c1 ea 03 48 c1 e0 2a 0f b6 04 02 Call Trace: RSP: 0018:ffff88808e4df9e0 EFLAGS: 00010282 inode_dec_link_count include/linux/fs.h:2108 [inline] minix_rename+0x330/0x720 fs/minix/namei.c:226 RAX: 0000000000000024 RBX: ffff888080ae10c0 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8a3e2a60 RBP: ffff88808e4df9f8 R08: ffffed1017483eef R09: ffffed1017483eee R10: ffffed1017483eee R11: ffff8880ba41f777 R12: ffff888080ae1108 R13: ffff888080ae5a20 R14: 0000000000000000 R15: ffff888081534080 vfs_rename+0xa13/0x1860 fs/namei.c:4479 inode_dec_link_count include/linux/fs.h:2108 [inline] minix_rename+0x330/0x720 fs/minix/namei.c:226 do_renameat2+0x60d/0xa00 fs/namei.c:4629 vfs_rename+0xa13/0x1860 fs/namei.c:4479 do_renameat2+0x60d/0xa00 fs/namei.c:4629 __do_sys_renameat fs/namei.c:4670 [inline] __se_sys_renameat fs/namei.c:4667 [inline] __x64_sys_renameat+0x95/0xf0 fs/namei.c:4667 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45de29 Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f03c3199c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 __do_sys_renameat fs/namei.c:4670 [inline] __se_sys_renameat fs/namei.c:4667 [inline] __x64_sys_renameat+0x95/0xf0 fs/namei.c:4667 RAX: ffffffffffffffda RBX: 00000000000272c0 RCX: 000000000045de29 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 RDX: 0000000000000009 RSI: 0000000020000500 RDI: 000000000000000a entry_SYSCALL_64_after_hwframe+0x49/0xbe RBP: 000000000118bf68 R08: 0000000000000000 R09: 0000000000000000 RIP: 0033:0x45de29 R10: 00000000200017c0 R11: 0000000000000246 R12: 000000000118bf2c R13: 00007ffcbbc9178f R14: 00007f03c319a9c0 R15: 000000000118bf2c Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 irq event stamp: 1342 RSP: 002b:00007fa69c403c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 hardirqs last enabled at (1341): [] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline] hardirqs last enabled at (1341): [] _raw_spin_unlock_irq+0x27/0x90 kernel/locking/spinlock.c:192 RAX: ffffffffffffffda RBX: 00000000000272c0 RCX: 000000000045de29 hardirqs last disabled at (1342): [] trace_hardirqs_off_thunk+0x1a/0x1c RDX: 0000000000000009 RSI: 0000000020000500 RDI: 000000000000000a softirqs last enabled at (1162): [] spin_unlock_bh include/linux/spinlock.h:374 [inline] softirqs last enabled at (1162): [] wb_queue_work+0x1e3/0x3c0 fs/fs-writeback.c:204 RBP: 000000000118bf68 R08: 0000000000000000 R09: 0000000000000000 softirqs last disabled at (1158): [] spin_lock_bh include/linux/spinlock.h:334 [inline] softirqs last disabled at (1158): [] wb_queue_work+0x84/0x3c0 fs/fs-writeback.c:196 ---[ end trace b75cafa5a958354e ]--- R10: 00000000200017c0 R11: 0000000000000246 R12: 000000000118bf2c R13: 00007fff4602639f R14: 00007fa69c4049c0 R15: 000000000118bf2c wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 Kernel Offset: disabled Rebooting in 86400 seconds..