ci starts bisection 2023-05-19 14:22:04.474815102 +0000 UTC m=+137711.093496289 bisecting fixing commit since 4bdec23f971b1a5caf7a18ae117e44bdfaf26c93 building syzkaller on fbf0499acc828df26995835e51d83c3a0117e716 ensuring issue is reproducible on original commit 4bdec23f971b1a5caf7a18ae117e44bdfaf26c93 testing commit 4bdec23f971b1a5caf7a18ae117e44bdfaf26c93 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: de2dc288494ab879bf5f768a93a0943a988ee58adc16cb702f53ea337a1324b6 run #0: crashed: WARNING: locking bug in take_dentry_name_snapshot run #1: crashed: WARNING: locking bug in take_dentry_name_snapshot run #2: crashed: WARNING: locking bug in take_dentry_name_snapshot run #3: crashed: WARNING: locking bug in take_dentry_name_snapshot run #4: crashed: BUG: unable to handle kernel paging request in take_dentry_name_snapshot run #5: crashed: BUG: unable to handle kernel paging request in take_dentry_name_snapshot run #6: crashed: KASAN: wild-memory-access Read in take_dentry_name_snapshot run #7: crashed: KASAN: wild-memory-access Read in take_dentry_name_snapshot run #8: crashed: KASAN: wild-memory-access Read in take_dentry_name_snapshot run #9: crashed: WARNING: locking bug in take_dentry_name_snapshot run #10: crashed: BUG: spinlock bad magic in take_dentry_name_snapshot run #11: crashed: WARNING: locking bug in take_dentry_name_snapshot run #12: crashed: BUG: unable to handle kernel paging request in take_dentry_name_snapshot run #13: crashed: BUG: unable to handle kernel paging request in take_dentry_name_snapshot run #14: crashed: possible deadlock in take_dentry_name_snapshot run #15: crashed: WARNING: locking bug in take_dentry_name_snapshot run #16: crashed: WARNING: locking bug in take_dentry_name_snapshot run #17: crashed: WARNING: locking bug in take_dentry_name_snapshot run #18: crashed: WARNING: locking bug in take_dentry_name_snapshot run #19: crashed: KASAN: wild-memory-access Read in take_dentry_name_snapshot testing current HEAD 2d1bcbc6cd703e64caf8df314e3669b4786e008a testing commit 2d1bcbc6cd703e64caf8df314e3669b4786e008a gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9fcd531abfc87d700ac1fe3d3eb67a031e63104ebbad4903c39d05f6cbcdf7b5 all runs: OK # git bisect start 2d1bcbc6cd703e64caf8df314e3669b4786e008a 4bdec23f971b1a5caf7a18ae117e44bdfaf26c93 Bisecting: 8594 revisions left to test after this (roughly 13 steps) [b68ee1c6131c540a62ecd443be89c406401df091] Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi testing commit b68ee1c6131c540a62ecd443be89c406401df091 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 2d666abdc9975a59d4e3af23c20c54e329fb2993fea7b3abd8688be9eaf350b9 all runs: OK # git bisect bad b68ee1c6131c540a62ecd443be89c406401df091 Bisecting: 3826 revisions left to test after this (roughly 12 steps) [736b378b29d89c8c3567fa4b2e948be5568aebb8] Merge tag 'slab-for-6.4' of git://git.kernel.org/pub/scm/linux/kernel/git/vbabka/slab testing commit 736b378b29d89c8c3567fa4b2e948be5568aebb8 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 3d0266e5699753dae832b621a0b13586d710da425628bd288915c7c9694c0777 all runs: OK # git bisect bad 736b378b29d89c8c3567fa4b2e948be5568aebb8 Bisecting: 1397 revisions left to test after this (roughly 11 steps) [61d325dcbc05d8fef88110d35ef7776f3ac3f68b] Merge tag 'erofs-for-6.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/xiang/erofs testing commit 61d325dcbc05d8fef88110d35ef7776f3ac3f68b gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: a7f5b21e8dd2ddbad679340d7f5a49ec3e1d82219fc886ab08b8506829769788 all runs: OK # git bisect bad 61d325dcbc05d8fef88110d35ef7776f3ac3f68b Bisecting: 697 revisions left to test after this (roughly 10 steps) [829cca4d1783088e43bace57a555044cc937c554] Merge tag 'net-6.3-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit 829cca4d1783088e43bace57a555044cc937c554 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b44cfd126d7858c94b3bf025128f93410014debd3902f2342e1c7a6edaec28bc run #0: crashed: WARNING: locking bug in take_dentry_name_snapshot run #1: crashed: WARNING: locking bug in take_dentry_name_snapshot run #2: crashed: KASAN: wild-memory-access Read in take_dentry_name_snapshot run #3: crashed: WARNING: locking bug in take_dentry_name_snapshot run #4: crashed: WARNING: locking bug in take_dentry_name_snapshot run #5: crashed: WARNING: locking bug in take_dentry_name_snapshot run #6: crashed: WARNING: locking bug in take_dentry_name_snapshot run #7: crashed: WARNING: locking bug in take_dentry_name_snapshot run #8: crashed: WARNING: locking bug in take_dentry_name_snapshot run #9: crashed: WARNING: locking bug in take_dentry_name_snapshot # git bisect good 829cca4d1783088e43bace57a555044cc937c554 Bisecting: 338 revisions left to test after this (roughly 9 steps) [08e30833f86ba25945e416b9f372791aacfef153] Merge tag 'lsm-pr-20230420' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm testing commit 08e30833f86ba25945e416b9f372791aacfef153 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 1f06793ab2fe4b24312b6c8a20ede8160bc608582e72b7b2a8a02cec58b75897 all runs: OK # git bisect bad 08e30833f86ba25945e416b9f372791aacfef153 Bisecting: 189 revisions left to test after this (roughly 8 steps) [cb0856346a60fe3eb837ba5e73588a41f81ac05f] Merge tag 'mm-hotfixes-stable-2023-04-19-16-36' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm testing commit cb0856346a60fe3eb837ba5e73588a41f81ac05f gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: baa58bf22fc4c21d2365fc5119724265bcca7c966f82fb2b97249b8d19cb4c36 run #0: crashed: WARNING: locking bug in take_dentry_name_snapshot run #1: crashed: possible deadlock in take_dentry_name_snapshot run #2: crashed: BUG: unable to handle kernel paging request in take_dentry_name_snapshot run #3: crashed: inconsistent lock state in take_dentry_name_snapshot run #4: crashed: WARNING: locking bug in take_dentry_name_snapshot run #5: crashed: WARNING: locking bug in take_dentry_name_snapshot run #6: crashed: possible deadlock in take_dentry_name_snapshot run #7: crashed: WARNING: locking bug in take_dentry_name_snapshot run #8: crashed: WARNING: locking bug in take_dentry_name_snapshot run #9: crashed: WARNING: locking bug in take_dentry_name_snapshot # git bisect good cb0856346a60fe3eb837ba5e73588a41f81ac05f Bisecting: 93 revisions left to test after this (roughly 7 steps) [84ebdb8e0d9ca261d73677f345814505af172ae0] Merge tag '6.3-rc7-smb3-client-fixes' of git://git.samba.org/sfrench/cifs-2.6 testing commit 84ebdb8e0d9ca261d73677f345814505af172ae0 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b753a950fd0fb0e85293274d16d8c4ac36ac07d57aeb207e94cf29e4c9f1b522 run #0: crashed: BUG: unable to handle kernel paging request in take_dentry_name_snapshot run #1: crashed: BUG: unable to handle kernel paging request in take_dentry_name_snapshot run #2: crashed: BUG: unable to handle kernel paging request in take_dentry_name_snapshot run #3: crashed: WARNING: locking bug in take_dentry_name_snapshot run #4: crashed: WARNING: locking bug in take_dentry_name_snapshot run #5: crashed: WARNING: locking bug in take_dentry_name_snapshot run #6: crashed: KASAN: wild-memory-access Read in take_dentry_name_snapshot run #7: crashed: KASAN: wild-memory-access Read in take_dentry_name_snapshot run #8: crashed: WARNING: locking bug in take_dentry_name_snapshot run #9: crashed: WARNING: locking bug in take_dentry_name_snapshot # git bisect good 84ebdb8e0d9ca261d73677f345814505af172ae0 Bisecting: 42 revisions left to test after this (roughly 6 steps) [a5624566431de76b17862383d9ae254d9606cba9] Merge branch 'x86-rep-insns': x86 user copy clarifications testing commit a5624566431de76b17862383d9ae254d9606cba9 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 7f21a37ebaf4b176a4df727b85894e8cc32d7c7bc12ac65eff3f8f7b4219516f run #0: crashed: WARNING: locking bug in take_dentry_name_snapshot run #1: crashed: WARNING: locking bug in take_dentry_name_snapshot run #2: crashed: WARNING: locking bug in take_dentry_name_snapshot run #3: crashed: WARNING: locking bug in take_dentry_name_snapshot run #4: crashed: WARNING: locking bug in take_dentry_name_snapshot run #5: crashed: WARNING: locking bug in take_dentry_name_snapshot run #6: crashed: WARNING: locking bug in take_dentry_name_snapshot run #7: crashed: WARNING: locking bug in take_dentry_name_snapshot run #8: crashed: KASAN: wild-memory-access Read in take_dentry_name_snapshot run #9: crashed: KASAN: wild-memory-access Read in take_dentry_name_snapshot # git bisect good a5624566431de76b17862383d9ae254d9606cba9 Bisecting: 21 revisions left to test after this (roughly 5 steps) [e261301c851aee401cfc63179ca4d3facd2f098b] lsm: move the remaining LSM hook comments to security/security.c testing commit e261301c851aee401cfc63179ca4d3facd2f098b gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 18f4d838dc2c1c81d23d58f74a517e11729469e88172ad4bbeec5278d59245d0 run #0: crashed: WARNING: locking bug in take_dentry_name_snapshot run #1: crashed: WARNING: locking bug in take_dentry_name_snapshot run #2: crashed: WARNING: locking bug in take_dentry_name_snapshot run #3: crashed: BUG: unable to handle kernel paging request in take_dentry_name_snapshot run #4: crashed: WARNING: locking bug in take_dentry_name_snapshot run #5: crashed: WARNING: locking bug in take_dentry_name_snapshot run #6: crashed: BUG: unable to handle kernel paging request in take_dentry_name_snapshot run #7: crashed: WARNING: locking bug in take_dentry_name_snapshot run #8: crashed: WARNING: locking bug in take_dentry_name_snapshot run #9: OK # git bisect good e261301c851aee401cfc63179ca4d3facd2f098b Bisecting: 10 revisions left to test after this (roughly 4 steps) [d82dcd9e21b77d338dc4875f3d4111f0db314a7c] reiserfs: Add security prefix to xattr name in reiserfs_security_write() testing commit d82dcd9e21b77d338dc4875f3d4111f0db314a7c gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: e91433945ab204da67a0b06dfd5dafe7baa2186af081f0fad4e36047bcc38a93 all runs: OK # git bisect bad d82dcd9e21b77d338dc4875f3d4111f0db314a7c Bisecting: 5 revisions left to test after this (roughly 3 steps) [42994ee3cd7298b27698daa6848ed7168e72d056] security: Introduce LSM_ORDER_LAST and set it for the integrity LSM testing commit 42994ee3cd7298b27698daa6848ed7168e72d056 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 3e4d8695aefa9898cc3ca250e52a4bb39d67a619293671e4f2f7b2ab241c12b0 run #0: crashed: KASAN: wild-memory-access Read in take_dentry_name_snapshot run #1: crashed: WARNING: locking bug in take_dentry_name_snapshot run #2: crashed: WARNING: locking bug in take_dentry_name_snapshot run #3: crashed: WARNING: locking bug in take_dentry_name_snapshot run #4: crashed: WARNING: locking bug in take_dentry_name_snapshot run #5: crashed: KASAN: wild-memory-access Read in take_dentry_name_snapshot run #6: crashed: BUG: unable to handle kernel paging request in take_dentry_name_snapshot run #7: crashed: WARNING: locking bug in take_dentry_name_snapshot run #8: crashed: WARNING: locking bug in take_dentry_name_snapshot run #9: crashed: WARNING: locking bug in take_dentry_name_snapshot # git bisect good 42994ee3cd7298b27698daa6848ed7168e72d056 Bisecting: 2 revisions left to test after this (roughly 2 steps) [52ca4b6435a493e47aaa98e7345e19e1e8710b13] reiserfs: Switch to security_inode_init_security() testing commit 52ca4b6435a493e47aaa98e7345e19e1e8710b13 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: ba1841c8d6871839a56b89a426535b757c1540c9d64600c812ac6a68158185ce all runs: OK # git bisect bad 52ca4b6435a493e47aaa98e7345e19e1e8710b13 Bisecting: 0 revisions left to test after this (roughly 1 step) [b9b8701b43146f5ebd7fe13d89103cfc545cda34] security: Remove integrity from the LSM list in Kconfig testing commit b9b8701b43146f5ebd7fe13d89103cfc545cda34 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: c700119f9b0b2fe9e4752ed9028d636df1b823978772e2ac8ca9c51765976fdd run #0: crashed: WARNING: locking bug in take_dentry_name_snapshot run #1: crashed: WARNING: locking bug in take_dentry_name_snapshot run #2: crashed: WARNING: locking bug in take_dentry_name_snapshot run #3: crashed: WARNING: locking bug in take_dentry_name_snapshot run #4: crashed: WARNING: locking bug in take_dentry_name_snapshot run #5: crashed: WARNING: locking bug in take_dentry_name_snapshot run #6: crashed: WARNING: locking bug in take_dentry_name_snapshot run #7: crashed: WARNING: locking bug in take_dentry_name_snapshot run #8: crashed: WARNING: locking bug in take_dentry_name_snapshot run #9: OK # git bisect good b9b8701b43146f5ebd7fe13d89103cfc545cda34 52ca4b6435a493e47aaa98e7345e19e1e8710b13 is the first bad commit commit 52ca4b6435a493e47aaa98e7345e19e1e8710b13 Author: Roberto Sassu Date: Tue Mar 14 09:17:15 2023 +0100 reiserfs: Switch to security_inode_init_security() In preparation for removing security_old_inode_init_security(), switch to security_inode_init_security(). Commit 572302af1258 ("reiserfs: Add missing calls to reiserfs_security_free()") fixed possible memory leaks and another issue related to adding an xattr at inode creation time. Define the initxattrs callback reiserfs_initxattrs(), to populate the name/value/len triple in the reiserfs_security_handle() with the first xattr provided by LSMs. Make a copy of the xattr value, as security_inode_init_security() frees it. After the call to security_inode_init_security(), remove the check for returning -EOPNOTSUPP, as security_inode_init_security() changes it to zero. Multiple xattrs are currently not supported, as the reiserfs_security_handle structure is exported to user space. As a consequence, even if EVM is invoked, it will not provide an xattr (if it is not the first to set it, its xattr will be discarded; if it is the first, it does not have xattrs to calculate the HMAC on). Signed-off-by: Roberto Sassu Reviewed-by: Casey Schaufler Reviewed-by: Mimi Zohar Signed-off-by: Paul Moore fs/reiserfs/xattr_security.c | 23 ++++++++++++++++++----- 1 file changed, 18 insertions(+), 5 deletions(-) culprit signature: ba1841c8d6871839a56b89a426535b757c1540c9d64600c812ac6a68158185ce parent signature: c700119f9b0b2fe9e4752ed9028d636df1b823978772e2ac8ca9c51765976fdd revisions tested: 15, total time: 6h33m9.09919458s (build: 3h56m22.56585595s, test: 2h34m0.044110495s) first good commit: 52ca4b6435a493e47aaa98e7345e19e1e8710b13 reiserfs: Switch to security_inode_init_security() recipients (to): ["casey@schaufler-ca.com" "paul@paul-moore.com" "roberto.sassu@huawei.com" "zohar@linux.ibm.com"] recipients (cc): []