bisecting fixing commit since 2965db2e004cf9c92b87c1f559e9812c0ae878c1 building syzkaller on 17f0b706a417a8a15d472f64a6a8b01872da1661 testing commit 2965db2e004cf9c92b87c1f559e9812c0ae878c1 with gcc (GCC) 8.4.1 20210217 kernel signature: 29d4053df8d72f27b55f30367baa205c9923aea35b353f2c1b27f5a31d88e98e all runs: crashed: kernel BUG in inline_xattr_iter_begin testing current HEAD 1e986fe9ad15b8406034c504afc5ae76f0a8e852 testing commit 1e986fe9ad15b8406034c504afc5ae76f0a8e852 with gcc (GCC) 8.4.1 20210217 kernel signature: ac5c9ce26ef3fd58b02a85e506344172ec7a49a0eaa812dd3dfe8d0c94036541 run #0: crashed: kernel BUG in corrupted run #1: crashed: kernel BUG in inline_xattr_iter_begin run #2: crashed: kernel BUG in inline_xattr_iter_begin run #3: crashed: kernel BUG in inline_xattr_iter_begin run #4: crashed: kernel BUG in corrupted run #5: crashed: kernel BUG in inline_xattr_iter_begin run #6: crashed: kernel BUG in inline_xattr_iter_begin run #7: crashed: kernel BUG in inline_xattr_iter_begin run #8: crashed: kernel BUG in inline_xattr_iter_begin run #9: crashed: kernel BUG in inline_xattr_iter_begin revisions tested: 2, total time: 33m6.489867302s (build: 24m58.923072715s, test: 7m3.571762794s) the crash still happens on HEAD commit msg: Linux 4.19.191 crash: kernel BUG in inline_xattr_iter_begin erofs: options -> wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 erofs: root inode @ nid 36 erofs: mounted on /dev/loop3 with opts: . ------------[ cut here ]------------ kernel BUG at drivers/staging/erofs/xattr.c:186! invalid opcode: 0000 [#1] PREEMPT SMP KASAN wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 CPU: 1 PID: 9869 Comm: syz-executor.3 Not tainted 4.19.191-syzkaller #0 IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:inline_xattr_iter_begin+0x37a/0x4a0 drivers/staging/erofs/xattr.c:186 Code: 08 84 d2 0f 85 30 01 00 00 0f b7 43 ea 48 83 c4 18 5b 41 5c 44 29 e8 41 5d 41 5e 41 5f 5d c3 b8 c3 ff ff ff 0f 83 1e ff ff ff <0f> 0b 48 89 45 d0 e8 4b 99 aa fb 48 8b 45 d0 e9 0a fd ff ff 4c 89 wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 RSP: 0018:ffff88809b777c40 EFLAGS: 00010283 RAX: 00000000ffffffc3 RBX: ffff8880819f04c0 RCX: 0000000000000000 RDX: 0000000000000048 RSI: ffff8880819f04c0 RDI: ffff8880819f04ac RBP: ffff88809b777c80 R08: fffff9400040f50f R09: fffff9400040f50e R10: fffff9400040f50e R11: ffffea000207a877 R12: ffff8880819f0498 R13: 0000000000000280 R14: ffff88809b777d40 R15: ffff8880819f04aa FS: 00007fa84d4c2700(0000) GS:ffff8880ba300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000005216f0 CR3: 0000000097450000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: inline_listxattr drivers/staging/erofs/xattr.c:584 [inline] erofs_listxattr+0x125/0xd30 drivers/staging/erofs/xattr.c:653 vfs_listxattr+0xd4/0x140 fs/xattr.c:392 listxattr+0xcb/0xe0 fs/xattr.c:687 path_listxattr+0xba/0x120 fs/xattr.c:711 __do_sys_listxattr fs/xattr.c:723 [inline] __se_sys_listxattr fs/xattr.c:720 [inline] __x64_sys_listxattr+0x73/0xb0 fs/xattr.c:720 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665f9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa84d4c2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 RBP: 00000000004bfbb9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 R13: 00007fffa6c5d46f R14: 00007fa84d4c2300 R15: 0000000000022000 Modules linked in: ---[ end trace d0115c50a0b7eebd ]--- wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 RIP: 0010:inline_xattr_iter_begin+0x37a/0x4a0 drivers/staging/erofs/xattr.c:186 wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 Code: 08 84 d2 0f 85 30 01 00 00 0f b7 43 ea 48 83 c4 18 5b 41 5c 44 29 e8 41 5d 41 5e 41 5f 5d c3 b8 c3 ff ff ff 0f 83 1e ff ff ff <0f> 0b 48 89 45 d0 e8 4b 99 aa fb 48 8b 45 d0 e9 0a fd ff ff 4c 89 IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready RSP: 0018:ffff88809b777c40 EFLAGS: 00010283 wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 RAX: 00000000ffffffc3 RBX: ffff8880819f04c0 RCX: 0000000000000000 IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready RDX: 0000000000000048 RSI: ffff8880819f04c0 RDI: ffff8880819f04ac IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready RBP: ffff88809b777c80 R08: fffff9400040f50f R09: fffff9400040f50e IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready R10: fffff9400040f50e R11: ffffea000207a877 R12: ffff8880819f0498 IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready R13: 0000000000000280 R14: ffff88809b777d40 R15: ffff8880819f04aa IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready FS: 00007fa84d4c2700(0000) GS:ffff8880ba300000(0000) knlGS:0000000000000000 wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 CR2: 00007ffe217e6c40 CR3: 0000000097450000 CR4: 00000000001406e0 ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50