ci starts bisection 2023-01-31 03:54:27.656791837 +0000 UTC m=+722581.602853927 bisecting fixing commit since f2f32f8af2b0ca9d619e5183eae3eed431793baf building syzkaller on 6d752409f178135881da3510c910bb11ae1f1381 ensuring issue is reproducible on original commit f2f32f8af2b0ca9d619e5183eae3eed431793baf testing commit f2f32f8af2b0ca9d619e5183eae3eed431793baf gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d38a7c8480e0ab40e72408cbb85b5d6c8936aa53fd13597bc3fda13af4af7d2a all runs: crashed: kernel BUG in dnotify_free_mark testing current HEAD c0b67534c95c537f7a506a06b98e5e85d72e2b7d testing commit c0b67534c95c537f7a506a06b98e5e85d72e2b7d gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 416e04a3d3557539c41a4f1979b906e25ec0d7dcb8251e3ecb87ae0e4ce3df79 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #1: crashed: kernel BUG in dnotify_free_mark run #2: crashed: kernel BUG in dnotify_free_mark run #3: crashed: kernel BUG in dnotify_free_mark run #4: crashed: kernel BUG in dnotify_free_mark run #5: crashed: kernel BUG in dnotify_free_mark run #6: crashed: kernel BUG in dnotify_free_mark run #7: crashed: kernel BUG in dnotify_free_mark run #8: crashed: kernel BUG in dnotify_free_mark run #9: crashed: kernel BUG in dnotify_free_mark revisions tested: 2, total time: 20m24.520864291s (build: 12m59.4958885s, test: 6m42.504442905s) the crash still happens on HEAD commit msg: Merge tag 'cgroup-for-6.2-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup crash: kernel BUG in dnotify_free_mark ------------[ cut here ]------------ kernel BUG at fs/notify/dnotify/dnotify.c:136! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 2833 Comm: kworker/u4:6 Not tainted 6.2.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 Workqueue: events_unbound fsnotify_mark_destroy_workfn RIP: 0010:dnotify_free_mark+0x3c/0x50 fs/notify/dnotify/dnotify.c:136 Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1c 48 83 be 80 00 00 00 00 75 10 48 8b 3d fd 34 21 0b 48 83 c4 08 e9 94 0e e3 ff <0f> 0b 48 89 34 24 e8 e9 50 e3 ff 48 8b 34 24 eb d5 0f 1f 00 41 55 RSP: 0018:ffffc9000b2bfc60 EFLAGS: 00010286 RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: 1ffff92001657f96 RDX: 1ffff1100e1ef610 RSI: ffff888070f7b000 RDI: ffff888070f7b080 RBP: ffff888070f7b000 R08: ffff888070f7b018 R09: ffff888070f7b010 R10: ffffed1004a3fc01 R11: 0000000000080001 R12: ffff888016bbb800 R13: ffffc9000b2bfcb0 R14: 1ffff92001657f92 R15: ffff88801ec78898 FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f526817c000 CR3: 0000000070e6f000 CR4: 0000000000350ef0 Call Trace: fsnotify_final_mark_destroy fs/notify/mark.c:278 [inline] fsnotify_mark_destroy_workfn+0x21c/0x3b0 fs/notify/mark.c:902 process_one_work+0x8ba/0x14b0 kernel/workqueue.c:2289 worker_thread+0x598/0xec0 kernel/workqueue.c:2436 kthread+0x294/0x330 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:dnotify_free_mark+0x3c/0x50 fs/notify/dnotify/dnotify.c:136 Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1c 48 83 be 80 00 00 00 00 75 10 48 8b 3d fd 34 21 0b 48 83 c4 08 e9 94 0e e3 ff <0f> 0b 48 89 34 24 e8 e9 50 e3 ff 48 8b 34 24 eb d5 0f 1f 00 41 55 RSP: 0018:ffffc9000b2bfc60 EFLAGS: 00010286 RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: 1ffff92001657f96 RDX: 1ffff1100e1ef610 RSI: ffff888070f7b000 RDI: ffff888070f7b080 RBP: ffff888070f7b000 R08: ffff888070f7b018 R09: ffff888070f7b010 R10: ffffed1004a3fc01 R11: 0000000000080001 R12: ffff888016bbb800 R13: ffffc9000b2bfcb0 R14: 1ffff92001657f92 R15: ffff88801ec78898 FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f526817afc8 CR3: 000000000ae8e000 CR4: 0000000000350ef0