bisecting fixing commit since cbfa1702aaf69b2311ea1b35e04f113c48368c67 building syzkaller on 9e1fa68ee1625a7f0ef03906ee1abb40cb987fbf testing commit cbfa1702aaf69b2311ea1b35e04f113c48368c67 with gcc (GCC) 8.1.0 kernel signature: 6f7cb9767116592bcf9c72403e9e025263a0f9f96e66372ad583739529f805eb all runs: crashed: general protection fault in open_xa_dir testing current HEAD 5b7a52cd2eef952cee8a72512ef370bcdef46636 testing commit 5b7a52cd2eef952cee8a72512ef370bcdef46636 with gcc (GCC) 8.1.0 kernel signature: 1c5744e646a8db2e8332564af021808f3d3e815d04a9259a7478b8759a2a82e4 all runs: OK # git bisect start 5b7a52cd2eef952cee8a72512ef370bcdef46636 cbfa1702aaf69b2311ea1b35e04f113c48368c67 Bisecting: 175 revisions left to test after this (roughly 8 steps) [dcadd67205d624dc1440aedef542cf778de5be09] media: tda10071: fix unsigned sign extension overflow testing commit dcadd67205d624dc1440aedef542cf778de5be09 with gcc (GCC) 8.1.0 kernel signature: 8d2df1d267bcc3c9a8ca04ff2f84b4d1d23faa1806cb82eac453022a95e3dcf8 all runs: crashed: general protection fault in open_xa_dir # git bisect good dcadd67205d624dc1440aedef542cf778de5be09 Bisecting: 87 revisions left to test after this (roughly 7 steps) [b40b29b615adaa76f449be821b692f4e12cfb34b] vsock/virtio: stop workers during the .remove() testing commit b40b29b615adaa76f449be821b692f4e12cfb34b with gcc (GCC) 8.1.0 kernel signature: 1b28ce93b41ec72eebb44484d24f35485998c2dbf5d3d02219f82895dad61709 all runs: crashed: general protection fault in open_xa_dir # git bisect good b40b29b615adaa76f449be821b692f4e12cfb34b Bisecting: 43 revisions left to test after this (roughly 6 steps) [f62dfdf3318575c0875838caaaec92a38663b8ba] mm/khugepaged: fix filemap page_to_pgoff(page) != offset testing commit f62dfdf3318575c0875838caaaec92a38663b8ba with gcc (GCC) 8.1.0 kernel signature: df4160bc91dbb043c22a3f690ce339b1d5298b6a6896c333522fcd33f71f7ca9 all runs: crashed: general protection fault in open_xa_dir # git bisect good f62dfdf3318575c0875838caaaec92a38663b8ba Bisecting: 21 revisions left to test after this (roughly 5 steps) [387026b76afb69a349bc5aa7e18fa9ef4aa0bd23] mmc: core: don't set limits.discard_granularity as 0 testing commit 387026b76afb69a349bc5aa7e18fa9ef4aa0bd23 with gcc (GCC) 8.1.0 kernel signature: 8c52da4ef236924323b6a3c5157b16696576af350c94d965cd9b2ff22436459d all runs: crashed: general protection fault in open_xa_dir # git bisect good 387026b76afb69a349bc5aa7e18fa9ef4aa0bd23 Bisecting: 10 revisions left to test after this (roughly 4 steps) [24217072bf906c4628b75cf6b68c07ef22c1f391] media: usbtv: Fix refcounting mixup testing commit 24217072bf906c4628b75cf6b68c07ef22c1f391 with gcc (GCC) 8.1.0 kernel signature: 9d5ec5201c522c22f502178e55c9aae704e984c5f96d4aaee64e925532ea86fb all runs: crashed: general protection fault in open_xa_dir # git bisect good 24217072bf906c4628b75cf6b68c07ef22c1f391 Bisecting: 5 revisions left to test after this (roughly 3 steps) [491bba5c9a632496518c25a5de98f5d8b9a30e4b] USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters testing commit 491bba5c9a632496518c25a5de98f5d8b9a30e4b with gcc (GCC) 8.1.0 kernel signature: 8bfd18ade38fcf7cd3d0d4ada63a6a692918714a7d802118395daa7273e7bef7 all runs: crashed: general protection fault in open_xa_dir # git bisect good 491bba5c9a632496518c25a5de98f5d8b9a30e4b Bisecting: 2 revisions left to test after this (roughly 2 steps) [e47af171227445e71262a228f1b541deb1963b3d] drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case testing commit e47af171227445e71262a228f1b541deb1963b3d with gcc (GCC) 8.1.0 kernel signature: 5da6bada1c1ac671e63dab1cf08a37c66754bc4078bb073fa7bca657308904bd all runs: OK # git bisect bad e47af171227445e71262a228f1b541deb1963b3d Bisecting: 0 revisions left to test after this (roughly 1 step) [e2b6b34324c44944051bc11477ecf2b3a45ec0f4] reiserfs: Fix oops during mount testing commit e2b6b34324c44944051bc11477ecf2b3a45ec0f4 with gcc (GCC) 8.1.0 kernel signature: 5da6bada1c1ac671e63dab1cf08a37c66754bc4078bb073fa7bca657308904bd all runs: OK # git bisect bad e2b6b34324c44944051bc11477ecf2b3a45ec0f4 Bisecting: 0 revisions left to test after this (roughly 0 steps) [bd0bef47c51499396a2ccaf7efa77fc8849a46c0] reiserfs: Initialize inode keys properly testing commit bd0bef47c51499396a2ccaf7efa77fc8849a46c0 with gcc (GCC) 8.1.0 kernel signature: b4a5bc58f7ca40c097da9aaebf05f7b6a5b5480691c479a8ec1cd7da93eeb302 all runs: crashed: general protection fault in open_xa_dir # git bisect good bd0bef47c51499396a2ccaf7efa77fc8849a46c0 e2b6b34324c44944051bc11477ecf2b3a45ec0f4 is the first bad commit commit e2b6b34324c44944051bc11477ecf2b3a45ec0f4 Author: Jan Kara Date: Wed Sep 30 17:08:20 2020 +0200 reiserfs: Fix oops during mount commit c2bb80b8bdd04dfe32364b78b61b6a47f717af52 upstream. With suitably crafted reiserfs image and mount command reiserfs will crash when trying to verify that XATTR_ROOT directory can be looked up in / as that recurses back to xattr code like: xattr_lookup+0x24/0x280 fs/reiserfs/xattr.c:395 reiserfs_xattr_get+0x89/0x540 fs/reiserfs/xattr.c:677 reiserfs_get_acl+0x63/0x690 fs/reiserfs/xattr_acl.c:209 get_acl+0x152/0x2e0 fs/posix_acl.c:141 check_acl fs/namei.c:277 [inline] acl_permission_check fs/namei.c:309 [inline] generic_permission+0x2ba/0x550 fs/namei.c:353 do_inode_permission fs/namei.c:398 [inline] inode_permission+0x234/0x4a0 fs/namei.c:463 lookup_one_len+0xa6/0x200 fs/namei.c:2557 reiserfs_lookup_privroot+0x85/0x1e0 fs/reiserfs/xattr.c:972 reiserfs_fill_super+0x2b51/0x3240 fs/reiserfs/super.c:2176 mount_bdev+0x24f/0x360 fs/super.c:1417 Fix the problem by bailing from reiserfs_xattr_get() when xattrs are not yet initialized. CC: stable@vger.kernel.org Reported-by: syzbot+9b33c9b118d77ff59b6f@syzkaller.appspotmail.com Signed-off-by: Jan Kara Signed-off-by: Greg Kroah-Hartman fs/reiserfs/xattr.c | 7 +++++++ 1 file changed, 7 insertions(+) culprit signature: 5da6bada1c1ac671e63dab1cf08a37c66754bc4078bb073fa7bca657308904bd parent signature: b4a5bc58f7ca40c097da9aaebf05f7b6a5b5480691c479a8ec1cd7da93eeb302 revisions tested: 11, total time: 2h23m6.551500215s (build: 1h27m49.268589846s, test: 54m13.65972449s) first good commit: e2b6b34324c44944051bc11477ecf2b3a45ec0f4 reiserfs: Fix oops during mount recipients (to): ["gregkh@linuxfoundation.org" "jack@suse.cz" "reiserfs-devel@vger.kernel.org"] recipients (cc): ["gregkh@linuxfoundation.org" "jack@suse.cz" "jeffm@suse.com" "linux-kernel@vger.kernel.org"]