bisecting fixing commit since cb1f9a169a0e197f93816ace48a6520e8640809d
building syzkaller on 4c04afaa19a16e90d8b495cc3795fd4ed21df4df
testing commit cb1f9a169a0e197f93816ace48a6520e8640809d with gcc (GCC) 8.1.0
kernel signature: fae4f5caf1331e3cf3db7264ce7d21bc50569da8cf3cf069e2b50e653494408c
run #0: crashed: WARNING in ovl_real_fdget_meta
run #1: crashed: WARNING in ovl_real_fdget_meta
run #2: crashed: WARNING in ovl_real_fdget_meta
run #3: crashed: WARNING in ovl_real_fdget_meta
run #4: crashed: WARNING in ovl_real_fdget_meta
run #5: crashed: WARNING in ovl_real_fdget_meta
run #6: crashed: WARNING in corrupted
run #7: crashed: WARNING in ovl_real_fdget_meta
run #8: crashed: WARNING in corrupted
run #9: crashed: WARNING in ovl_real_fdget_meta
testing current HEAD b499cf4b3a901e87e1f933df04abf69b54de4457
testing commit b499cf4b3a901e87e1f933df04abf69b54de4457 with gcc (GCC) 8.1.0
kernel signature: f803849c5269bb6a24e80c330dc3426cf469a3335768fb81705d2e99e521af4f
run #0: crashed: WARNING in corrupted
run #1: crashed: WARNING in corrupted
run #2: crashed: WARNING in ovl_real_fdget_meta
run #3: crashed: WARNING in ovl_real_fdget_meta
run #4: crashed: WARNING in corrupted
run #5: crashed: WARNING in corrupted
run #6: crashed: WARNING in ovl_real_fdget_meta
run #7: crashed: WARNING in ovl_real_fdget_meta
run #8: crashed: WARNING in corrupted
run #9: crashed: WARNING in ovl_real_fdget_meta
revisions tested: 2, total time: 25m29.847583723s (build: 18m20.514555324s, test: 6m31.826693975s)
the crash still happens on HEAD
commit msg: Linux 4.19.102
crash: WARNING in ovl_real_fdget_meta
IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready
IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
------------[ cut here ]------------
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
WARNING: CPU: 0 PID: 7427 at fs/overlayfs/file.c:58 ovl_change_flags fs/overlayfs/file.c:58 [inline]
WARNING: CPU: 0 PID: 7427 at fs/overlayfs/file.c:58 ovl_real_fdget_meta.cold.10+0xc/0x18 fs/overlayfs/file.c:109
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 7427 Comm: syz-executor.2 Not tainted 4.19.102-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x123/0x177 lib/dump_stack.c:118
 panic+0x1cd/0x375 kernel/panic.c:186
 __warn.cold.8+0x1b/0x3e kernel/panic.c:541
 report_bug+0x1a4/0x200 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 do_error_trap+0x200/0x350 arch/x86/kernel/traps.c:296
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:316
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1037
RIP: 0010:ovl_change_flags fs/overlayfs/file.c:58 [inline]
RIP: 0010:ovl_real_fdget_meta.cold.10+0xc/0x18 fs/overlayfs/file.c:109
Code: ff e9 87 fe ff ff 4c 89 8d 70 ff ff ff e8 59 da 51 ff 4c 8b 8d 70 ff ff ff e9 93 fe ff ff 48 c7 c7 a0 d6 52 87 e8 a0 6e 0e ff <0f> 0b b8 fb ff ff ff e9 42 cd ff ff 48 c7 c7 a0 d6 52 87 e8 88 6e
RSP: 0018:ffff888091dd7ba0 EFLAGS: 00010286
RAX: 0000000000000024 RBX: ffff888091dd7c10 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8767a2a0 RDI: ffffffff8a19daa0
RBP: ffff888091dd7bd0 R08: ffffed1015d45079 R09: ffffed1015d45078
R10: ffffed1015d45078 R11: ffff8880aea283c7 R12: 000000000000a000
R13: ffff88808928e340 R14: ffff88808928e3b8 R15: ffff888092c3a470
 ovl_real_fdget fs/overlayfs/file.c:116 [inline]
 ovl_read_iter+0xf4/0x2b3 fs/overlayfs/file.c:241
 call_read_iter include/linux/fs.h:1814 [inline]
 new_sync_read fs/read_write.c:406 [inline]
 __vfs_read+0x440/0x880 fs/read_write.c:418
 vfs_read+0xf5/0x2f0 fs/read_write.c:452
 ksys_read+0x103/0x260 fs/read_write.c:579
 __do_sys_read fs/read_write.c:589 [inline]
 __se_sys_read fs/read_write.c:587 [inline]
 __x64_sys_read+0x6e/0xb0 fs/read_write.c:587
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45af49
Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007effe6686c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
RDX: 0000000000001000 RSI: 0000000020000300 RDI: 0000000000000003
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007effe66876d4
R13: 00000000004c964f R14: 00000000004e21e0 R15: 00000000ffffffff
Kernel Offset: disabled
Rebooting in 86400 seconds..