bisecting cause commit starting from 88b06399c9c766c283e070b022b5ceafa4f63f19 building syzkaller on b3c3bb8e115e28ac78d37da1ee8931351d6cb113 testing commit 88b06399c9c766c283e070b022b5ceafa4f63f19 with gcc (GCC) 10.2.1 20210217 kernel signature: dc2d0e09867a5698534b2c637a1d2319b0d53caf835e49a89bea215126002008 all runs: crashed: divide error in do_journal_end testing release v5.12 testing commit 9f4ad9e425a1d3b6a34617b8ea226d56a119a717 with gcc (GCC) 10.2.1 20210217 kernel signature: 1109f9be8385a1b187df831786445ddf0445ad7ec30cbcbf6eddc2eec6f9ddc3 all runs: crashed: divide error in do_journal_end testing release v5.11 testing commit f40ddce88593482919761f74910f42f4b84c004b with gcc (GCC) 10.2.1 20210217 kernel signature: 9d21064640c713b8d677f57b1bcd0cf8e762c6d3bf0e6457a6babaafd000596a all runs: crashed: general protection fault in reiserfs_security_init testing release v5.10 testing commit 2c85ebc57b3e1817b6ce1a6b703928e113a90442 with gcc (GCC) 10.2.1 20210217 kernel signature: 34e80e340f57ad66db7bd4b43aaf85a17636ab3814afbea373ef7ed09f10bac7 all runs: crashed: general protection fault in reiserfs_security_init testing release v5.9 testing commit bbf5c979011a099af5dc76498918ed7df445635b with gcc (GCC) 10.2.1 20210217 kernel signature: 2cfbac3c5bdb22b1effd251df99493d300e4f13516f06ec6c1d226eea66add2d all runs: crashed: general protection fault in reiserfs_security_init testing release v5.8 testing commit bcf876870b95592b52519ed4aafcf9d95999bc9c with gcc (GCC) 8.4.1 20210217 kernel signature: 823421b85c93bb32dcbc97b73342bfa6612455c2f7a84ebf28638c15220200d0 all runs: crashed: general protection fault in reiserfs_security_init testing release v5.7 testing commit 3d77e6a8804abcc0504c904bd6e5cdf3a5cf8162 with gcc (GCC) 8.4.1 20210217 kernel signature: 5e50ad15937d4da80927be552a652830453a7d967cf5c10e7e7efb728fccf977 all runs: crashed: general protection fault in reiserfs_security_init testing release v5.6 testing commit 7111951b8d4973bda27ff663f2cf18b663d15b48 with gcc (GCC) 8.4.1 20210217 kernel signature: 32fa2d532d1146ecc4128e25cd94e531bc576abdd627e76e719f93191786246a all runs: crashed: UBSAN: undefined-behaviour in do_journal_end testing release v5.5 testing commit d5226fa6dbae0569ee43ecfc08bdcd6770fc4755 with gcc (GCC) 8.4.1 20210217 kernel signature: 7a5e2800be52e8d4b358a1b5c4ac2817a7e39b03f12f59bc4e63a8e98bbcecd0 run #0: crashed: UBSAN: undefined-behaviour in do_journal_end run #1: crashed: UBSAN: undefined-behaviour in do_journal_end run #2: crashed: divide error in do_journal_end run #3: crashed: UBSAN: undefined-behaviour in do_journal_end run #4: crashed: UBSAN: undefined-behaviour in do_journal_end run #5: crashed: divide error in do_journal_end run #6: crashed: UBSAN: undefined-behaviour in do_journal_end run #7: crashed: UBSAN: undefined-behaviour in do_journal_end run #8: crashed: UBSAN: undefined-behaviour in do_journal_end run #9: crashed: UBSAN: undefined-behaviour in do_journal_end testing release v5.4 testing commit 219d54332a09e8d8741c1e1982f5eae56099de85 with gcc (GCC) 8.4.1 20210217 kernel signature: 3d5f1b8e4f315805d539d82965973ebfd57484e3bc7388d1a3db209b5dd7baf8 all runs: crashed: UBSAN: undefined-behaviour in do_journal_end testing release v5.3 testing commit 4d856f72c10ecb060868ed10ff1b1453943fc6c8 with gcc (GCC) 8.4.1 20210217 kernel signature: 45893405022533e4782fd8403562f6e48ecb1264fc6e9da1e7344c99de16b9e0 run #0: crashed: UBSAN: undefined-behaviour in do_journal_end run #1: crashed: UBSAN: undefined-behaviour in do_journal_end run #2: crashed: UBSAN: undefined-behaviour in do_journal_end run #3: crashed: UBSAN: undefined-behaviour in do_journal_end run #4: crashed: UBSAN: undefined-behaviour in do_journal_end run #5: crashed: UBSAN: undefined-behaviour in do_journal_end run #6: crashed: UBSAN: undefined-behaviour in do_journal_end run #7: crashed: UBSAN: undefined-behaviour in do_journal_end run #8: crashed: UBSAN: undefined-behaviour in do_journal_end run #9: crashed: divide error in do_journal_end testing release v5.2 testing commit 0ecfebd2b52404ae0c54a878c872bb93363ada36 with gcc (GCC) 8.4.1 20210217 kernel signature: b3409ee986cdfdf7eec9cdfda0b512292b6dca756a6ea135e3e493a2c95d3db2 all runs: crashed: divide error in do_journal_end testing release v5.1 testing commit e93c9c99a629c61837d5a7fc2120cd2b6c70dbdd with gcc (GCC) 8.4.1 20210217 kernel signature: 6850df95dc19bcfc4eadcf54173c2c559f72d26ac5c6838f9ec2f46b26390479 all runs: crashed: divide error in do_journal_end testing release v5.0 testing commit 1c163f4c7b3f621efff9b28a47abb36f7378d783 with gcc (GCC) 8.4.1 20210217 kernel signature: 1f20fd6b3f28c17859b2529fda5048edde49cc7be31892a819981a7798af74f5 all runs: crashed: divide error in do_journal_end testing release v4.20 testing commit 8fe28cb58bcb235034b64cbbb7550a8a43fd88be with gcc (GCC) 8.4.1 20210217 kernel signature: 0b6b1b03fd777d43224691b66099718c44b52f369ae7b92a8d559277878e30d6 all runs: crashed: divide error in do_journal_end testing release v4.19 testing commit 84df9525b0c27f3ebc2ebb1864fa62a97fdedb7d with gcc (GCC) 8.4.1 20210217 kernel signature: bb64c333ab9846a4adcb4373ded1a468194dd65d1e61df066f2a30f4a5d38b15 all runs: crashed: divide error in do_journal_end testing release v4.18 testing commit 94710cac0ef4ee177a63b5227664b38c95bbf703 with gcc (GCC) 8.4.1 20210217 kernel signature: 4465ce7c5170c3d76c682e1fa68b1227878cbb2daa4849880c3dee4896ebf73b all runs: crashed: divide error in do_journal_end testing release v4.17 testing commit 29dcea88779c856c7dc92040a0c01233263101d4 with gcc (GCC) 8.4.1 20210217 failed to run ["make" "-j" "64" "ARCH=x86_64" "CC=/syzkaller/shared/bisect_bin/gcc-8.1.0/bin/gcc" "bzImage"]: exit status 2 testing release v4.16 testing commit 0adb32858b0bddf4ada5f364a84ed60b196dbcda with gcc (GCC) 8.4.1 20210217 orc_dump.c:106:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] orc_dump.c:111:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] elf.c:135:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:140:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] testing release v4.15 testing commit d8a5b80568a9cb66810e75b182018e9edb68e8ff with gcc (GCC) 8.4.1 20210217 orc_dump.c:106:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] orc_dump.c:111:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] elf.c:135:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:140:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] pager.c:36:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] testing release v4.14 testing commit bebc6082da0a9f5d47a1ea2edc099bf671058bd4 with gcc (GCC) 8.4.1 20210217 orc_dump.c:105:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] orc_dump.c:110:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] pager.c:36:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] elf.c:134:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:139:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] testing release v4.13 testing commit 569dbb88e80deb68974ef6fdd6a13edb9d686261 with gcc (GCC) 8.4.1 20210217 pager.c:35:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] elf.c:144:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:149:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] testing release v4.12 testing commit 6f7da290413ba713f0cdd9ff1a2a9bb129ef4f6c with gcc (GCC) 8.4.1 20210217 pager.c:35:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] elf.c:141:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:146:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] testing release v4.11 testing commit a351e9b9fc24e982ec2f0e76379a49826036da12 with gcc (GCC) 7.5.0 elf.c:141:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:146:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] pager.c:35:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] testing release v4.10 testing commit c470abd4fde40ea6a0846a2beab642a578c0b8cd with gcc (GCC) 5.5.0 tools/include/linux/log2.h:19:1: error: ignoring attribute 'noreturn' because it conflicts with attribute 'const' [-Werror=attributes] elf.c:129:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:134:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] pager.c:35:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] testing release v4.9 testing commit 69973b830859bc6529a7a0468ba0d80ee5117826 with gcc (GCC) 5.5.0 tools/include/linux/log2.h:19:1: error: ignoring attribute 'noreturn' because it conflicts with attribute 'const' [-Werror=attributes] elf.c:129:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:134:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] pager.c:35:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] testing release v4.8 testing commit c8d2bc9bc39ebea8437fd974fdbc21847bb897a3 with gcc (GCC) 5.5.0 tools/include/linux/log2.h:19:1: error: ignoring attribute 'noreturn' because it conflicts with attribute 'const' [-Werror=attributes] elf.c:129:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:134:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] pager.c:33:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] testing release v4.7 testing commit 523d939ef98fd712632d93a5a2b588e477a7565e with gcc (GCC) 5.5.0 tools/include/linux/log2.h:19:1: error: ignoring attribute 'noreturn' because it conflicts with attribute 'const' [-Werror=attributes] elf.c:122:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:127:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] pager.c:33:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] testing release v4.6 testing commit 2dcd0af568b0cf583645c8a317dd12e344b1c72a with gcc (GCC) 5.5.0 tools/include/linux/log2.h:19:1: error: ignoring attribute 'noreturn' because it conflicts with attribute 'const' [-Werror=attributes] pager.c:33:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] revisions tested: 17, total time: 2h54m37.185355231s (build: 1h58m53.99116784s, test: 50m18.297094354s) the crash already happened on the oldest tested release commit msg: Linux 4.18 crash: divide error in do_journal_end Bluetooth: hci4: command 0x0419 tx timeout REISERFS (device loop4): Using r5 hash to sort names REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. divide error: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 8572 Comm: syz-executor.4 Not tainted 4.18.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:do_journal_end+0x20f3/0x43b0 fs/reiserfs/journal.c:4204 Code: 95 c6 41 84 f3 0f 85 f8 14 00 00 41 83 e0 07 44 38 c2 40 0f 9e c6 84 d2 0f 95 c2 40 84 d6 0f 85 df 14 00 00 41 8b 7d 14 31 d2 <48> f7 f7 48 8d 79 18 4a 8d 34 12 48 89 f8 48 c1 e8 03 80 3c 18 00 RSP: 0018:ffff8800b0a47b78 EFLAGS: 00010246 RAX: 0000000000000005 RBX: dffffc0000000000 RCX: ffff8800a1885500 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffff8800b0a47c88 R08: 0000000000000007 R09: ffffed00174c454a R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90005c02048 R13: ffff88008ab9c000 R14: ffff8800964d3300 R15: 0000000000001000 FS: 0000000002e46400(0000) GS:ffff8800ba600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000002e4f848 CR3: 00000000a2e40000 CR4: 0000000000340ef0 Call Trace: journal_end_sync+0x117/0x210 fs/reiserfs/journal.c:3534 reiserfs_sync_fs+0xcc/0xe0 fs/reiserfs/super.c:78 __sync_filesystem fs/sync.c:39 [inline] sync_filesystem fs/sync.c:67 [inline] sync_filesystem+0x165/0x200 fs/sync.c:48 generic_shutdown_super+0x69/0x330 fs/super.c:439 kill_block_super+0x96/0xe0 fs/super.c:1201 reiserfs_kill_sb+0x171/0x1d0 fs/reiserfs/super.c:570 deactivate_locked_super+0x77/0xd0 fs/super.c:326 deactivate_super fs/super.c:357 [inline] deactivate_super+0x8a/0xa0 fs/super.c:353 cleanup_mnt+0x9f/0x130 fs/namespace.c:1183 __cleanup_mnt+0xd/0x10 fs/namespace.c:1190 task_work_run+0x111/0x180 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:192 [inline] exit_to_usermode_loop+0x180/0x1e0 arch/x86/entry/common.c:166 REISERFS (device loop5): Using r5 hash to sort names prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x47a/0x540 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x467a57 Code: ff d0 48 89 c7 b8 REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff5fa81018 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000467a57 RDX: 00007fff5fa810e9 RSI: 0000000000000002 RDI: 00007fff5fa810e0 RBP: 00007fff5fa810e0 R08: 00000000ffffffff R09: 00007fff5fa80eb0 R10: 0000000002e478e3 R11: 0000000000000246 R12: 00000000004bee98 R13: 00007fff5fa821b0 R14: 0000000002e47810 R15: 00007fff5fa821f0 Modules linked in: divide error: 0000 [#2] PREEMPT SMP KASAN CPU: 0 PID: 8565 Comm: syz-executor.5 Tainted: G D 4.18.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:do_journal_end+0x20f3/0x43b0 fs/reiserfs/journal.c:4204 Code: 95 c6 41 84 f3 0f 85 f8 14 00 00 41 83 e0 07 44 38 c2 40 0f 9e c6 84 d2 0f 95 c2 40 84 d6 0f 85 df 14 00 00 41 8b 7d 14 31 d2 <48> f7 f7 48 8d 79 18 4a 8d 34 12 48 89 f8 48 c1 e8 03 80 3c 18 00 RSP: 0018:ffff88009ce4fb78 EFLAGS: 00010246 RAX: 0000000000000005 RBX: dffffc0000000000 RCX: ffff8800ab942200 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffff88009ce4fc88 R08: 0000000000000007 R09: ffffed0016b82df5 R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90005ff1048 R13: ffff8800857a8000 R14: ffff8800a7ef9100 R15: 0000000000001000 FS: 00000000033de400(0000) GS:ffff8800ba600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000033e7848 CR3: 00000000aaea7000 CR4: 0000000000340ef0 Call Trace: journal_end_sync+0x117/0x210 fs/reiserfs/journal.c:3534 reiserfs_sync_fs+0xcc/0xe0 fs/reiserfs/super.c:78 __sync_filesystem fs/sync.c:39 [inline] sync_filesystem fs/sync.c:67 [inline] sync_filesystem+0x165/0x200 fs/sync.c:48 generic_shutdown_super+0x69/0x330 fs/super.c:439 kill_block_super+0x96/0xe0 fs/super.c:1201 reiserfs_kill_sb+0x171/0x1d0 fs/reiserfs/super.c:570 deactivate_locked_super+0x77/0xd0 fs/super.c:326 deactivate_super fs/super.c:357 [inline] deactivate_super+0x8a/0xa0 fs/super.c:353 cleanup_mnt+0x9f/0x130 fs/namespace.c:1183 __cleanup_mnt+0xd/0x10 fs/namespace.c:1190 task_work_run+0x111/0x180 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:192 [inline] exit_to_usermode_loop+0x180/0x1e0 arch/x86/entry/common.c:166 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x47a/0x540 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x467a57 Code: ff d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffe94328e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000467a57 RDX: 00007ffe94328f29 RSI: 0000000000000002 RDI: 00007ffe94328f20 RBP: 00007ffe94328f20 R08: 00000000ffffffff R09: 00007ffe94328cf0 R10: 00000000033df8e3 R11: 0000000000000246 R12: 00000000004bee98 R13: 00007ffe94329ff0 R14: 00000000033df810 R15: 00007ffe9432a030 Modules linked in: REISERFS (device loop2): Using r5 hash to sort names REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. divide error: 0000 [#3] PREEMPT SMP KASAN ---[ end trace 969f4583796ddc9d ]--- CPU: 1 PID: 8566 Comm: syz-executor.2 Tainted: G D 4.18.0-syzkaller #0 RIP: 0010:do_journal_end+0x20f3/0x43b0 fs/reiserfs/journal.c:4204 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:do_journal_end+0x20f3/0x43b0 fs/reiserfs/journal.c:4204 Code: 95 c6 41 84 f3 0f 85 f8 14 00 00 41 83 e0 07 44 38 c2 40 0f 9e c6 84 d2 0f 95 c2 40 84 d6 0f 85 df 14 00 00 41 8b 7d 14 31 d2 <48> f7 f7 48 8d 79 18 4a 8d 34 12 48 89 f8 48 c1 e8 03 80 3c 18 00 RSP: 0018:ffff8800b0a87b78 EFLAGS: 00010246 RAX: 0000000000000005 RBX: dffffc0000000000 RCX: ffff8800a17caa80 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffff8800b0a87c88 R08: 0000000000000007 R09: ffffed0016b82975 R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90005e44048 R13: ffff88008a534000 R14: ffff8800a0950000 R15: 0000000000001000 FS: 0000000001ba3400(0000) GS:ffff8800ba700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc005c0ff8 CR3: 00000000b3a27000 CR4: 0000000000340ee0 Call Trace: journal_end_sync+0x117/0x210 fs/reiserfs/journal.c:3534 Code: reiserfs_sync_fs+0xcc/0xe0 fs/reiserfs/super.c:78 95 __sync_filesystem fs/sync.c:39 [inline] sync_filesystem fs/sync.c:67 [inline] sync_filesystem+0x165/0x200 fs/sync.c:48 generic_shutdown_super+0x69/0x330 fs/super.c:439 kill_block_super+0x96/0xe0 fs/super.c:1201 reiserfs_kill_sb+0x171/0x1d0 fs/reiserfs/super.c:570 deactivate_locked_super+0x77/0xd0 fs/super.c:326 deactivate_super fs/super.c:357 [inline] deactivate_super+0x8a/0xa0 fs/super.c:353 cleanup_mnt+0x9f/0x130 fs/namespace.c:1183 c6 __cleanup_mnt+0xd/0x10 fs/namespace.c:1190 task_work_run+0x111/0x180 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:192 [inline] exit_to_usermode_loop+0x180/0x1e0 arch/x86/entry/common.c:166 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x47a/0x540 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x467a57 Code: ff d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 41 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffc005c17d8 EFLAGS: 00000246 84 ORIG_RAX: 00000000000000a6 f3 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000467a57 RDX: 00007ffc005c18a9 RSI: 0000000000000002 RDI: 00007ffc005c18a0 RBP: 00007ffc005c18a0 R08: 00000000ffffffff R09: 00007ffc005c1670 R10: 0000000001ba48e3 R11: 0000000000000246 R12: 00000000004bee98 R13: 00007ffc005c2970 R14: 0000000001ba4810 R15: 00007ffc005c29b0 Modules linked in: ---[ end trace 969f4583796ddc9e ]--- REISERFS (device loop1): Using r5 hash to sort names RIP: 0010:do_journal_end+0x20f3/0x43b0 fs/reiserfs/journal.c:4204 REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. Code: 0f 95 85 c6 f8 divide error: 0000 [#4] PREEMPT SMP KASAN 14 CPU: 1 PID: 8570 Comm: syz-executor.1 Tainted: G D 4.18.0-syzkaller #0 00 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:do_journal_end+0x20f3/0x43b0 fs/reiserfs/journal.c:4204 Code: 95 c6 41 84 f3 0f 85 f8 14 00 00 41 83 e0 07 44 38 c2 40 0f 9e c6 84 d2 0f 95 c2 40 84 d6 0f 85 df 14 00 00 41 8b 7d 14 31 d2 <48> f7 f7 48 8d 79 18 4a 8d 34 12 48 89 f8 48 c1 e8 03 80 3c 18 00 00 RSP: 0018:ffff88009bc37b78 EFLAGS: 00010246 RAX: 0000000000000005 RBX: dffffc0000000000 RCX: ffff8800a1571100 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffff88009bc37c88 R08: 0000000000000007 R09: ffffed0016b82f75 R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90005d23048 R13: ffff880088473000 R14: ffff8800890f1100 R15: 0000000000001000 FS: 0000000002b12400(0000) GS:ffff8800ba700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff4d309d88 CR3: 00000000a53d2000 CR4: 0000000000340ee0 Call Trace: journal_end_sync+0x117/0x210 fs/reiserfs/journal.c:3534 reiserfs_sync_fs+0xcc/0xe0 fs/reiserfs/super.c:78 __sync_filesystem fs/sync.c:39 [inline] sync_filesystem fs/sync.c:67 [inline] sync_filesystem+0x165/0x200 fs/sync.c:48 generic_shutdown_super+0x69/0x330 fs/super.c:439 kill_block_super+0x96/0xe0 fs/super.c:1201 reiserfs_kill_sb+0x171/0x1d0 fs/reiserfs/super.c:570 deactivate_locked_super+0x77/0xd0 fs/super.c:326 deactivate_super fs/super.c:357 [inline] deactivate_super+0x8a/0xa0 fs/super.c:353 cleanup_mnt+0x9f/0x130 fs/namespace.c:1183 __cleanup_mnt+0xd/0x10 fs/namespace.c:1190 task_work_run+0x111/0x180 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:192 [inline] exit_to_usermode_loop+0x180/0x1e0 arch/x86/entry/common.c:166 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x47a/0x540 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x467a57 Code: ff d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff4d30a4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000467a57 RDX: 00007fff4d30a599 RSI: 0000000000000002 RDI: 00007fff4d30a590 RBP: 00007fff4d30a590 R08: 00000000ffffffff R09: 00007fff4d30a360 R10: 0000000002b138e3 R11: 0000000000000246 R12: 00000000004bee98 R13: 00007fff4d30b660 R14: 0000000002b13810 R15: 00007fff4d30b6a0 Modules linked in: 41 41 84 REISERFS (device loop0): Using r5 hash to sort names f3 REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. 0f 83 85 e0 f8 divide error: 0000 [#5] PREEMPT SMP KASAN 14 CPU: 0 PID: 8568 Comm: syz-executor.0 Tainted: G D 4.18.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:do_journal_end+0x20f3/0x43b0 fs/reiserfs/journal.c:4204 Code: 95 c6 41 84 f3 0f 85 f8 14 00 00 41 83 e0 07 44 38 00 c2 40 0f 9e c6 84 d2 0f 95 c2 40 84 d6 0f 85 df 14 00 00 41 8b 7d ---[ end trace 969f4583796ddc9f ]--- 14 31 00 d2 RIP: 0010:do_journal_end+0x20f3/0x43b0 fs/reiserfs/journal.c:4204 <48> 41 f7 f7 48 8d 79 18 4a 8d 34 12 48 89 f8 48 c1 e8 03 80 3c 18 83 00 RSP: 0018:ffff8800b2427b78 EFLAGS: 00010246 RAX: 0000000000000005 RBX: dffffc0000000000 RCX: ffff8800b0d89980 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffff8800b2427c88 R08: 0000000000000007 R09: ffffed0016b82eb5 R10: 0000000000000000 R11: 0000000000000001 R12: ffffc9000628f048 R13: ffff8800831c2000 R14: ffff8800a6f53300 R15: 0000000000001000 FS: 00000000030b0400(0000) GS:ffff8800ba600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Code: CR2: 00007ffc40e6fc18 CR3: 00000000a68d0000 CR4: 0000000000340ef0 e0 Call Trace: journal_end_sync+0x117/0x210 fs/reiserfs/journal.c:3534 reiserfs_sync_fs+0xcc/0xe0 fs/reiserfs/super.c:78 07 __sync_filesystem fs/sync.c:39 [inline] sync_filesystem fs/sync.c:67 [inline] sync_filesystem+0x165/0x200 fs/sync.c:48 44 generic_shutdown_super+0x69/0x330 fs/super.c:439 kill_block_super+0x96/0xe0 fs/super.c:1201 reiserfs_kill_sb+0x171/0x1d0 fs/reiserfs/super.c:570 deactivate_locked_super+0x77/0xd0 fs/super.c:326 deactivate_super fs/super.c:357 [inline] deactivate_super+0x8a/0xa0 fs/super.c:353 cleanup_mnt+0x9f/0x130 fs/namespace.c:1183 38 __cleanup_mnt+0xd/0x10 fs/namespace.c:1190 task_work_run+0x111/0x180 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:192 [inline] exit_to_usermode_loop+0x180/0x1e0 arch/x86/entry/common.c:166 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x47a/0x540 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe 95 RIP: 0033:0x467a57 c6 Code: 41 ff 84 d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 c2 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 40 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 0f 64 89 01 48 RSP: 002b:00007ffc40e70358 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000467a57 RDX: 00007ffc40e70429 RSI: 0000000000000002 RDI: 00007ffc40e70420 RBP: 00007ffc40e70420 R08: 00000000ffffffff R09: 00007ffc40e701f0 R10: 00000000030b18e3 R11: 0000000000000246 R12: 00000000004bee98 R13: 00007ffc40e714f0 R14: 00000000030b1810 R15: 00007ffc40e71530 ---[ end trace 969f4583796ddca0 ]--- Modules linked in: RIP: 0010:do_journal_end+0x20f3/0x43b0 fs/reiserfs/journal.c:4204 07 9e 44 f3 38 c6 c2 Code: 40 0f 0f 85 9e 84 c6 95 84 d2 d2 f8 0f c6 95 0f c2 14 40 41 84 95 d6 00 0f 84 85 c2 df f3 14 00 00 41 00 0f 41 40 8b 85 7d 83 14 REISERFS (device loop3): Using r5 hash to sort names 84 REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. d6 0f 85 df 14 00 00 41 8b 7d 14 31 d2 <48> f7 f7 e0 48 f8 8d 79 18 4a 8d 34 12 48 89 f8 48 c1 e8 03 80 07 31 d2 <48> f7 f7 48 8d 79 18 4a 8d 34 12 48 89 f8 48 c1 e8 03 80 3c 14 18 divide error: 0000 [#6] PREEMPT SMP KASAN 00 CPU: 1 PID: 8562 Comm: syz-executor.3 Tainted: G D 4.18.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:do_journal_end+0x20f3/0x43b0 fs/reiserfs/journal.c:4204 Code: 95 c6 41 84 f3 0f 85 f8 14 00 00 41 83 e0 07 44 38 c2 40 0f 9e c6 RSP: 0018:ffff8800b0a47b78 EFLAGS: 00010246 84 3c d2 18 0f 00 95 c2 40 84 d6 0f 85 df 14 00 00 41 8b 7d 14 31 d2 <48> f7 f7 48 8d 79 RAX: 0000000000000005 RBX: dffffc0000000000 RCX: ffff8800a1885500 18 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 4a 8d 34 12 48 89 f8 48 c1 e8 03 80 3c 18 00 RSP: 0018:ffff8800b09bfb78 EFLAGS: 00010246 RAX: 0000000000000005 RBX: dffffc0000000000 RCX: ffff88009eb6c400 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffff8800b09bfc88 R08: 0000000000000007 R09: ffffed0016b82a35 R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90006142048 R13: ffff8800831d3000 R14: ffff8800a6900000 R15: 0000000000001000 FS: 0000000001d4f400(0000) GS:ffff8800ba700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffe6d8b9c48 CR3: 00000000a05e8000 CR4: 0000000000340ee0 Call Trace: journal_end_sync+0x117/0x210 fs/reiserfs/journal.c:3534 reiserfs_sync_fs+0xcc/0xe0 fs/reiserfs/super.c:78 __sync_filesystem fs/sync.c:39 [inline] sync_filesystem fs/sync.c:67 [inline] sync_filesystem+0x165/0x200 fs/sync.c:48 generic_shutdown_super+0x69/0x330 fs/super.c:439 kill_block_super+0x96/0xe0 fs/super.c:1201 reiserfs_kill_sb+0x171/0x1d0 fs/reiserfs/super.c:570 deactivate_locked_super+0x77/0xd0 fs/super.c:326 deactivate_super fs/super.c:357 [inline] deactivate_super+0x8a/0xa0 fs/super.c:353 cleanup_mnt+0x9f/0x130 fs/namespace.c:1183 __cleanup_mnt+0xd/0x10 fs/namespace.c:1190 task_work_run+0x111/0x180 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:192 [inline] exit_to_usermode_loop+0x180/0x1e0 arch/x86/entry/common.c:166 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x47a/0x540 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RSP: 0018:ffff8800b0a47b78 EFLAGS: 00010246 RIP: 0033:0x467a57 44 Code: 38 ff c2 d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RBP: ffff8800b0a47c88 R08: 0000000000000007 R09: ffffed00174c454a 83 40 c8 0f ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 RAX: 0000000000000005 RBX: dffffc0000000000 RCX: ffff8800a1885500 48 9e c7 c6 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffe6d8ba388 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000467a57 RDX: 00007ffe6d8ba459 RSI: 0000000000000002 RDI: 00007ffe6d8ba450 RBP: 00007ffe6d8ba450 R08: 00000000ffffffff R09: 00007ffe6d8ba220 R10: 0000000001d508e3 R11: 0000000000000246 R12: 00000000004bee98 R13: 00007ffe6d8bb520 R14: 0000000001d50810 R15: 00007ffe6d8bb560 Modules linked in: R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90005c02048 00 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 00 84 d2 0f 95 41 RBP: ffff8800b0a47c88 R08: 0000000000000007 R09: ffffed00174c454a 83 R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90005c02048 e0 c2 07 R13: ffff88008ab9c000 R14: ffff8800964d3300 R15: 0000000000001000 44 R13: ffff88008ab9c000 R14: ffff8800964d3300 R15: 0000000000001000 FS: 0000000001ba3400(0000) GS:ffff8800ba600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fde1aad1000 CR3: 00000000b3a27000 CR4: 0000000000340ef0