ci2 starts bisection 2023-03-20 16:55:03.877384745 +0000 UTC m=+14902.995904320 bisecting fixing commit since 1b929c02afd37871d5afb9d498426f83432e71c2 building syzkaller on 9da18ae8fa827d046ef8da48cc23c97418553c23 ensuring issue is reproducible on original commit 1b929c02afd37871d5afb9d498426f83432e71c2 testing commit 1b929c02afd37871d5afb9d498426f83432e71c2 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b6990df7d010dfebb91e7bea4e49eca1f4c0a7ea032175106380da4a820efcd7 run #0: crashed: kernel BUG in clear_inode run #1: crashed: KASAN: use-after-free Read in ntfs_lookup_inode_by_name run #2: crashed: kernel BUG in clear_inode run #3: crashed: kernel BUG in clear_inode run #4: crashed: kernel BUG in clear_inode run #5: crashed: kernel BUG in clear_inode run #6: crashed: kernel BUG in clear_inode run #7: crashed: KASAN: use-after-free Read in ntfs_lookup_inode_by_name run #8: crashed: kernel BUG in clear_inode run #9: crashed: KASAN: use-after-free Read in ntfs_lookup_inode_by_name run #10: crashed: kernel BUG in clear_inode run #11: crashed: KASAN: use-after-free Read in ntfs_lookup_inode_by_name run #12: crashed: kernel BUG in clear_inode run #13: crashed: KASAN: use-after-free Read in ntfs_lookup_inode_by_name run #14: crashed: kernel BUG in clear_inode run #15: crashed: kernel BUG in clear_inode run #16: crashed: KASAN: use-after-free Read in ntfs_lookup_inode_by_name run #17: crashed: kernel BUG in clear_inode run #18: crashed: kernel BUG in clear_inode run #19: crashed: KASAN: use-after-free Read in ntfs_lookup_inode_by_name testing current HEAD e8d018dd0257f744ca50a729e3d042cf2ec9da65 testing commit e8d018dd0257f744ca50a729e3d042cf2ec9da65 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 640a0ddcd354f23fb310952e4cf8fc992010b59476ef4807aa6ba9ddf7cd5089 run #0: crashed: kernel BUG in clear_inode run #1: crashed: KASAN: use-after-free Read in ntfs_lookup_inode_by_name run #2: crashed: KASAN: out-of-bounds Read in ntfs_lookup_inode_by_name run #3: crashed: KASAN: use-after-free Read in ntfs_lookup_inode_by_name run #4: crashed: KASAN: use-after-free Read in ntfs_lookup_inode_by_name run #5: crashed: KASAN: use-after-free Read in ntfs_lookup_inode_by_name run #6: crashed: KASAN: use-after-free Read in ntfs_lookup_inode_by_name run #7: crashed: kernel BUG in clear_inode run #8: crashed: KASAN: use-after-free Read in ntfs_lookup_inode_by_name run #9: crashed: kernel BUG in clear_inode revisions tested: 2, total time: 46m58.678719196s (build: 31m55.07690456s, test: 6m55.165324046s) the crash still happens on HEAD commit msg: Linux 6.3-rc3 crash: kernel BUG in clear_inode ------------[ cut here ]------------ kernel BUG at fs/inode.c:612! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 5521 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 RIP: 0010:clear_inode+0xe6/0xf0 Code: 60 9b ed ff 49 8b 07 4c 39 f8 75 26 42 80 3c 23 00 74 08 4c 89 f7 e8 e9 9b ed ff 49 c7 06 60 00 00 00 5b 41 5c 41 5e 41 5f c3 <0f> 0b 0f 0b 0f 0b 0f 0b 0f 0b f3 0f 1e fa 55 48 89 e5 41 57 41 56 RSP: 0018:ffffc900047bfb40 EFLAGS: 00010002 RAX: 1ffff1100df0991e RBX: ffff88806f84c8f0 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900047bfa20 RBP: ffff88806f84c520 R08: dffffc0000000000 R09: 0000000000000003 R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 R13: ffffffff89fb2e70 R14: ffff88806f84c750 R15: ffff88806f84c520 FS: 0000555555bd7400(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f52109dfdd0 CR3: 000000007c6ee000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ntfs_evict_big_inode+0x33/0x3b0 evict+0x262/0x550 ntfs_put_super+0x820/0xcb0 generic_shutdown_super+0x113/0x2d0 kill_block_super+0x79/0xc0 deactivate_locked_super+0x75/0xd0 cleanup_mnt+0x358/0x3e0 task_work_run+0x20a/0x290 exit_to_user_mode_loop+0xd1/0xf0 exit_to_user_mode_prepare+0xb1/0x140 syscall_exit_to_user_mode+0x54/0x270 do_syscall_64+0x4d/0xc0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f01a4e8d517 Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff2d3e71f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f01a4e8d517 RDX: 00007fff2d3e72c9 RSI: 000000000000000a RDI: 00007fff2d3e72c0 RBP: 00007fff2d3e72c0 R08: 00000000ffffffff R09: 00007fff2d3e7090 R10: 0000555555bd88b3 R11: 0000000000000246 R12: 00007f01a4ee6b24 R13: 00007fff2d3e8380 R14: 0000555555bd8810 R15: 00007fff2d3e83c0 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:clear_inode+0xe6/0xf0 Code: 60 9b ed ff 49 8b 07 4c 39 f8 75 26 42 80 3c 23 00 74 08 4c 89 f7 e8 e9 9b ed ff 49 c7 06 60 00 00 00 5b 41 5c 41 5e 41 5f c3 <0f> 0b 0f 0b 0f 0b 0f 0b 0f 0b f3 0f 1e fa 55 48 89 e5 41 57 41 56 RSP: 0018:ffffc900047bfb40 EFLAGS: 00010002 RAX: 1ffff1100df0991e RBX: ffff88806f84c8f0 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900047bfa20 RBP: ffff88806f84c520 R08: dffffc0000000000 R09: 0000000000000003 R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 R13: ffffffff89fb2e70 R14: ffff88806f84c750 R15: ffff88806f84c520 FS: 0000555555bd7400(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f52109dfdd0 CR3: 000000007c6ee000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400