bisecting cause commit starting from e4c26faa426c17274884f759f708bc9ee22fd59a building syzkaller on 2d3cdd63ad4aa5bd204a8e79f8e3e166462c2999 testing commit e4c26faa426c17274884f759f708bc9ee22fd59a with gcc (GCC) 8.1.0 kernel signature: 4a2a8450b3b47f283a4042bc6465575979b94cdb2d7d4c50518d0addfe34a246 all runs: crashed: kernel BUG at lib/string.c:LINE! testing release v5.8 testing commit bcf876870b95592b52519ed4aafcf9d95999bc9c with gcc (GCC) 8.1.0 kernel signature: 5dd6da7d7a958f3ce41212c232fb2e501e0127d196dd8c729111fc7f79ea3468 all runs: crashed: kernel BUG at lib/string.c:LINE! testing release v5.7 testing commit 3d77e6a8804abcc0504c904bd6e5cdf3a5cf8162 with gcc (GCC) 8.1.0 kernel signature: c6feadd8d7101ffe4429b61c459133e2348f9ee10df5a7cf92d39844ff4f6ebf all runs: crashed: kernel BUG at lib/string.c:LINE! testing release v5.6 testing commit 7111951b8d4973bda27ff663f2cf18b663d15b48 with gcc (GCC) 8.1.0 kernel signature: fb9bada54951585f3553962880cbed465d9567e5b189a07a86018e950bb66aa6 all runs: crashed: kernel BUG at lib/string.c:LINE! testing release v5.5 testing commit d5226fa6dbae0569ee43ecfc08bdcd6770fc4755 with gcc (GCC) 8.1.0 kernel signature: 8c647278d3582c3f0e13a861c8fd3b8299c13041a03dd0e521684ca9c00c64fc all runs: crashed: kernel BUG at lib/string.c:LINE! testing release v5.4 testing commit 219d54332a09e8d8741c1e1982f5eae56099de85 with gcc (GCC) 8.1.0 kernel signature: 1377c1989f175b00d6c89e3c963cdeaf4a2ca6c147c091c14db96fc4a0d080e2 all runs: OK # git bisect start d5226fa6dbae0569ee43ecfc08bdcd6770fc4755 219d54332a09e8d8741c1e1982f5eae56099de85 Bisecting: 8639 revisions left to test after this (roughly 13 steps) [8c39f71ee2019e77ee14f88b1321b2348db51820] Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit 8c39f71ee2019e77ee14f88b1321b2348db51820 with gcc (GCC) 8.1.0 kernel signature: bfebe023e50f22a2f3e4476c0c7972e7c31d9f3f3ada39aad6d2ad6159beff75 all runs: crashed: kernel BUG at lib/string.c:LINE! # git bisect bad 8c39f71ee2019e77ee14f88b1321b2348db51820 Bisecting: 3435 revisions left to test after this (roughly 12 steps) [3b397c7ccafe0624018cb09fc96729f8f6165573] Merge tag 'regmap-v5.5' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap testing commit 3b397c7ccafe0624018cb09fc96729f8f6165573 with gcc (GCC) 8.1.0 kernel signature: df3de94b116553e3f6510720c35e6d7bdfd363fd80fff9747d8816475083855e all runs: crashed: kernel BUG at lib/string.c:LINE! # git bisect bad 3b397c7ccafe0624018cb09fc96729f8f6165573 Bisecting: 1709 revisions left to test after this (roughly 11 steps) [924ea58dadea23cc28b60d02b9c0896b7b168a6f] Merge tag 'mt76-for-kvalo-2019-11-20' of https://github.com/nbd168/wireless testing commit 924ea58dadea23cc28b60d02b9c0896b7b168a6f with gcc (GCC) 8.1.0 kernel signature: 74ea83de999d7d52054db12c7964badb3fcc638ae56cd38df7851f44069eb61a all runs: OK # git bisect good 924ea58dadea23cc28b60d02b9c0896b7b168a6f Bisecting: 901 revisions left to test after this (roughly 10 steps) [3f3c8be973af10875cfa1e7b85a535b6ba76b44f] Merge tag 'for-linus-5.5a-rc1-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip testing commit 3f3c8be973af10875cfa1e7b85a535b6ba76b44f with gcc (GCC) 8.1.0 kernel signature: 31bc71e010bbed9936bb1875f1e6ca505b63942164c547f7555f88555a27f2df all runs: crashed: kernel BUG at lib/string.c:LINE! # git bisect bad 3f3c8be973af10875cfa1e7b85a535b6ba76b44f Bisecting: 469 revisions left to test after this (roughly 9 steps) [1b88176b9c72fb4edd5920969aef94c5cd358337] Merge tag 'mtd/for-5.5' of git://git.kernel.org/pub/scm/linux/kernel/git/mtd/linux testing commit 1b88176b9c72fb4edd5920969aef94c5cd358337 with gcc (GCC) 8.1.0 kernel signature: 2ef28ab7077cd90594cafd9b8615f36ff3140751d9feacda170eda528f0a606a all runs: OK # git bisect good 1b88176b9c72fb4edd5920969aef94c5cd358337 Bisecting: 278 revisions left to test after this (roughly 8 steps) [e25645b181ae67753f9a48e11bb5b34dcf41187d] Merge tag 'linux-kselftest-5.5-rc1-kunit' of git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest testing commit e25645b181ae67753f9a48e11bb5b34dcf41187d with gcc (GCC) 8.1.0 kernel signature: 7e25d767f9519cea664fa68ef52c1da0a8d40e2190d655397ab82b2e1a61c4ff all runs: crashed: kernel BUG at lib/string.c:LINE! # git bisect bad e25645b181ae67753f9a48e11bb5b34dcf41187d Bisecting: 95 revisions left to test after this (roughly 7 steps) [3d976388daa9ed77c9d2ded914ad07385b37d97e] btrfs: remove embedded block_group_cache::item testing commit 3d976388daa9ed77c9d2ded914ad07385b37d97e with gcc (GCC) 8.1.0 kernel signature: 9f907bdc25bc19d75422c57eae620a3f4c8e8eec31e03ed7c566fe885667773e all runs: crashed: kernel BUG at lib/string.c:LINE! # git bisect bad 3d976388daa9ed77c9d2ded914ad07385b37d97e Bisecting: 47 revisions left to test after this (roughly 6 steps) [f7bddf1e27d18fbc7d3e3056ba449cfbe4e20b0a] btrfs: Avoid getting stuck during cyclic writebacks testing commit f7bddf1e27d18fbc7d3e3056ba449cfbe4e20b0a with gcc (GCC) 8.1.0 kernel signature: 957e1806c49c95f13921accc7283fd006e8d4cfa4a404c586f804e9040dc1387 all runs: OK # git bisect good f7bddf1e27d18fbc7d3e3056ba449cfbe4e20b0a Bisecting: 23 revisions left to test after this (roughly 5 steps) [c778df140644142fb7e12b7e468b137721d85890] btrfs: compression: inline alloc_workspace testing commit c778df140644142fb7e12b7e468b137721d85890 with gcc (GCC) 8.1.0 kernel signature: a08eebef7713b266a56465404e19eb1801dd646be7f852c9a33df704e3c9a27f all runs: OK # git bisect good c778df140644142fb7e12b7e468b137721d85890 Bisecting: 11 revisions left to test after this (roughly 4 steps) [32ab3d1b4d0c55daea9ba52c0f5d1363be21bf2a] btrfs: remove pointless indentation in btrfs_read_sys_array() testing commit 32ab3d1b4d0c55daea9ba52c0f5d1363be21bf2a with gcc (GCC) 8.1.0 kernel signature: e8579ef6e980621138dd384464916d4e99b54d8198291b9cda3c2f5b8479d8b5 all runs: OK # git bisect good 32ab3d1b4d0c55daea9ba52c0f5d1363be21bf2a Bisecting: 5 revisions left to test after this (roughly 3 steps) [41e6d2a808ad89d34c662ba8dd1209c4fefb1416] btrfs: sysfs: show used checksum driver per filesystem testing commit 41e6d2a808ad89d34c662ba8dd1209c4fefb1416 with gcc (GCC) 8.1.0 kernel signature: b6ba27d6a63a50af1836a2e6e8a612abd4cd362c735147b771d687b0a0686335 all runs: crashed: kernel BUG at lib/string.c:LINE! # git bisect bad 41e6d2a808ad89d34c662ba8dd1209c4fefb1416 Bisecting: 2 revisions left to test after this (roughly 2 steps) [3951e7f050ac6a38bbc859fc3cd6093890c31d1c] btrfs: add xxhash64 to checksumming algorithms testing commit 3951e7f050ac6a38bbc859fc3cd6093890c31d1c with gcc (GCC) 8.1.0 kernel signature: 1932db158c5a9b8f5a0047be39e53b056e1978a5bc078dbf9652f7938b5e405d all runs: crashed: kernel BUG at lib/string.c:LINE! # git bisect bad 3951e7f050ac6a38bbc859fc3cd6093890c31d1c Bisecting: 0 revisions left to test after this (roughly 1 step) [8530c37a70df71ea8a04fbafabba0b92f4475c6c] btrfs: get bdev from latest_dev for dio bh_result testing commit 8530c37a70df71ea8a04fbafabba0b92f4475c6c with gcc (GCC) 8.1.0 kernel signature: c5934fac388eebea8a93a6647a90d49a7840f8db0456dbee5539d92416f0dc19 all runs: OK # git bisect good 8530c37a70df71ea8a04fbafabba0b92f4475c6c 3951e7f050ac6a38bbc859fc3cd6093890c31d1c is the first bad commit commit 3951e7f050ac6a38bbc859fc3cd6093890c31d1c Author: Johannes Thumshirn Date: Mon Oct 7 11:11:01 2019 +0200 btrfs: add xxhash64 to checksumming algorithms Add xxhash64 to the list of possible checksumming algorithms used by BTRFS. Signed-off-by: Johannes Thumshirn Reviewed-by: David Sterba Signed-off-by: David Sterba fs/btrfs/Kconfig | 1 + fs/btrfs/ctree.c | 1 + fs/btrfs/disk-io.c | 1 + fs/btrfs/super.c | 1 + include/uapi/linux/btrfs_tree.h | 1 + 5 files changed, 5 insertions(+) culprit signature: 1932db158c5a9b8f5a0047be39e53b056e1978a5bc078dbf9652f7938b5e405d parent signature: c5934fac388eebea8a93a6647a90d49a7840f8db0456dbee5539d92416f0dc19 revisions tested: 19, total time: 3h52m20.591924093s (build: 2h0m14.50970358s, test: 1h49m55.670665794s) first bad commit: 3951e7f050ac6a38bbc859fc3cd6093890c31d1c btrfs: add xxhash64 to checksumming algorithms recipients (to): ["clm@fb.com" "dsterba@suse.com" "dsterba@suse.com" "josef@toxicpanda.com" "jthumshirn@suse.de" "linux-btrfs@vger.kernel.org"] recipients (cc): ["linux-kernel@vger.kernel.org"] crash: kernel BUG at lib/string.c:LINE! detected buffer overflow in memcpy ------------[ cut here ]------------ kernel BUG at lib/string.c:1096! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 460 Comm: kworker/u4:4 Not tainted 5.4.0-rc8-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: btrfs-endio-meta btrfs_work_helper RIP: 0010:fortify_panic+0x13/0x20 lib/string.c:1096 Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 89 df e8 d2 bf 74 fa eb de 55 48 89 fe 48 c7 c7 a0 7a 45 88 48 89 e5 e8 cc 2f 2d fa <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 55 48 89 f2 48 89 f9 48 b8 RSP: 0018:ffff8880a881f8e8 EFLAGS: 00010282 RAX: 0000000000000022 RBX: ffff88807a7c0000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8a9064a0 RBP: ffff8880a881f8e8 R08: ffffed1015d04109 R09: ffffed1015d04109 R10: ffffed1015d04108 R11: ffff8880ae820847 R12: 00000000ffffff6e R13: 0000000000000000 R14: ffff8880a16f7a0c R15: ffff8880a16f79b0 FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000001590004 CR3: 0000000094c05000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: memcpy include/linux/string.h:377 [inline] btree_readpage_end_io_hook.cold.59+0x1e9/0x208 fs/btrfs/disk-io.c:658 end_bio_extent_readpage+0x3b3/0x14d0 fs/btrfs/extent_io.c:2766 bio_endio+0x475/0x860 block/bio.c:1818 end_workqueue_fn+0x117/0x180 fs/btrfs/disk-io.c:1656 btrfs_work_helper+0x1b6/0x1160 fs/btrfs/async-thread.c:318 process_one_work+0x856/0x1630 kernel/workqueue.c:2269 worker_thread+0x85/0xb60 kernel/workqueue.c:2415 kthread+0x331/0x3f0 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Modules linked in: ---[ end trace cf89801f55d71e1b ]--- RIP: 0010:fortify_panic+0x13/0x20 lib/string.c:1096 Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 89 df e8 d2 bf 74 fa eb de 55 48 89 fe 48 c7 c7 a0 7a 45 88 48 89 e5 e8 cc 2f 2d fa <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 55 48 89 f2 48 89 f9 48 b8 RSP: 0018:ffff8880a881f8e8 EFLAGS: 00010282 RAX: 0000000000000022 RBX: ffff88807a7c0000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8a9064a0 RBP: ffff8880a881f8e8 R08: ffffed1015d04109 R09: ffffed1015d04109 R10: ffffed1015d04108 R11: ffff8880ae820847 R12: 00000000ffffff6e R13: 0000000000000000 R14: ffff8880a16f7a0c R15: ffff8880a16f79b0 FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000768000 CR3: 000000009261e000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400