bisecting fixing commit since 87ef12027b9b1dd0e0b12cf311fbcb19f9d92539
building syzkaller on 3642839c105d2c84160c10866805f903a22fa343
testing commit 87ef12027b9b1dd0e0b12cf311fbcb19f9d92539 with gcc (GCC) 8.1.0
kernel signature: de8170ba5257bd93affc6e125447844879ba6da0a5af0e651542cc956c978b88
run #0: crashed: WARNING in unlock_new_inode
run #1: crashed: WARNING in unlock_new_inode
run #2: crashed: WARNING in unlock_new_inode
run #3: crashed: WARNING in unlock_new_inode
run #4: crashed: WARNING in unlock_new_inode
run #5: crashed: WARNING in unlock_new_inode
run #6: crashed: WARNING in unlock_new_inode
run #7: crashed: WARNING in unlock_new_inode
run #8: crashed: WARNING in unlock_new_inode
run #9: crashed: WARNING in corrupted
testing current HEAD b3a9e3b9622ae10064826dccb4f7a52bd88c7407
testing commit b3a9e3b9622ae10064826dccb4f7a52bd88c7407 with gcc (GCC) 8.1.0
kernel signature: dff571b6e4aa1358633e8842d05110040467606e88d0ffd04bc5f463c3263f76
all runs: crashed: WARNING in unlock_new_inode
revisions tested: 2, total time: 17m24.543280604s (build: 10m13.612089177s, test: 6m29.346074158s)
the crash still happens on HEAD
commit msg: Linux 5.8-rc1
crash: WARNING in unlock_new_inode
REISERFS (device loop3): checking transaction log (loop3)
REISERFS (device loop3): Using r5 hash to sort names
REISERFS (device loop3): using 3.5.x disk format
REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
------------[ cut here ]------------
WARNING: CPU: 0 PID: 3950 at fs/inode.c:996 unlock_new_inode+0xc8/0x100 fs/inode.c:1001
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 3950 Comm: syz-executor3 Not tainted 5.8.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x136/0x187 lib/dump_stack.c:118
 panic+0x22a/0x4f5 kernel/panic.c:231
 __warn.cold.12+0x25/0x25 kernel/panic.c:600
 report_bug+0x1b5/0x260 lib/bug.c:198
 exc_invalid_op+0x1be/0x370 arch/x86/kernel/traps.c:235
 asm_exc_invalid_op+0x12/0x20 arch/x86/include/asm/idtentry.h:563
RIP: 0010:unlock_new_inode+0xc8/0x100 fs/inode.c:996
Code: d8 00 00 00 f0 83 44 24 fc 00 be 03 00 00 00 4c 89 e7 e8 eb 61 a2 ff 4c 89 ef e8 73 ec 73 05 48 83 c4 08 5b 41 5c 41 5d 5d c3 <0f> 0b eb b2 e8 af 5c f2 ff e9 5b ff ff ff 4c 89 e7 48 89 45 e0 e8
RSP: 0018:ffff8881b9dbf520 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff8881b691c1d0 RCX: ffffffff8153e109
RDX: 1ffff11036d23855 RSI: 0000000000000004 RDI: ffff8881b9dbf488
RBP: ffff8881b9dbf540 R08: 0000000000000004 R09: ffffed10373b7e91
R10: 0000000000000003 R11: ffffed10373b7e91 R12: ffff8881b691c2a8
R13: ffff8881b691c258 R14: 00000000fffffff4 R15: 0000000000000000
 reiserfs_new_inode+0x3aa/0x2140 fs/reiserfs/inode.c:2166
 reiserfs_mkdir+0x420/0x840 fs/reiserfs/namei.c:841
 xattr_mkdir.constprop.20+0x96/0xc0 fs/reiserfs/xattr.c:76
 create_privroot fs/reiserfs/xattr.c:882 [inline]
 reiserfs_xattr_init+0x405/0x984 fs/reiserfs/xattr.c:1004
 reiserfs_fill_super+0x1b93/0x2980 fs/reiserfs/super.c:2177
 mount_bdev+0x27b/0x340 fs/super.c:1417
 get_super_block+0x10/0x20 fs/reiserfs/super.c:2606
 legacy_get_tree+0x103/0x1f0 fs/fs_context.c:592
 vfs_get_tree+0x8b/0x2d0 fs/super.c:1547
 do_new_mount fs/namespace.c:2874 [inline]
 do_mount+0x1293/0x1c40 fs/namespace.c:3199
 __do_sys_mount fs/namespace.c:3409 [inline]
 __se_sys_mount fs/namespace.c:3386 [inline]
 __x64_sys_mount+0x169/0x1c0 fs/namespace.c:3386
 do_syscall_64+0x6e/0xf0 arch/x86/entry/common.c:359
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x457eaa
Code: Bad RIP value.
RSP: 002b:00007fda0d068bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000457eaa
RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fda0d068c00
RBP: 0000000000000006 R08: 0000000020011500 R09: 0000000020000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
R13: 000000000000067d R14: 00000000006fcc58 R15: 0000000000000000
Kernel Offset: disabled