bisecting fixing commit since 6b6446efedb27c2766745a04f9b5d4449f51391d
building syzkaller on cba33199be220cbf61f7c0c8223d88a25a913d6f
testing commit 6b6446efedb27c2766745a04f9b5d4449f51391d with gcc (GCC) 8.1.0
kernel signature: 32471f30a52dd8e2d8b56d82472be136537feef8e46900d3d395015bcd060770
all runs: crashed: divide error in do_journal_end
testing current HEAD 47cbf4cc32db62f053c4cd04fc6ee39a0218139e
testing commit 47cbf4cc32db62f053c4cd04fc6ee39a0218139e with gcc (GCC) 8.1.0
kernel signature: 57bdaa5bc67a5bf1ed092a144a8ec4ebfdfc17a55fb4a1ca7ef1566ec6d95670
all runs: crashed: divide error in do_journal_end
revisions tested: 2, total time: 23m39.429700527s (build: 17m22.318455965s, test: 5m42.197366638s)
the crash still happens on HEAD
commit msg: Linux 4.14.211
crash: divide error in do_journal_end
batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready
batman_adv: batadv0: Interface activated: batadv_slave_1
IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready
divide error: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 7713 Comm: syz-executor.3 Not tainted 4.14.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8881ddfee180 task.stack: ffff8881dc598000
RIP: 0010:do_journal_end+0x1ffb/0x4400 fs/reiserfs/journal.c:4201
RSP: 0018:ffff8881dc59fb68 EFLAGS: 00010246
RAX: 0000000000000005 RBX: ffffc90002343048 RCX: ffff8881d49529c0
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffff8881dc59fc70 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: ffff8881c94bf000 R14: ffff8881e82aa380 R15: 0000000000001000
FS:  00000000021dd940(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055a53f42bc08 CR3: 00000001ddd66006 CR4: 00000000001606e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 journal_end_sync+0x117/0x210 fs/reiserfs/journal.c:3531
 reiserfs_sync_fs+0xb6/0xd0 fs/reiserfs/super.c:78
 __sync_filesystem fs/sync.c:39 [inline]
 sync_filesystem+0x158/0x1f0 fs/sync.c:67
 generic_shutdown_super+0x69/0x330 fs/super.c:432
 kill_block_super+0x96/0xe0 fs/super.c:1161
 reiserfs_kill_sb+0x171/0x1d0 fs/reiserfs/super.c:570
 deactivate_locked_super+0x62/0xb0 fs/super.c:319
 deactivate_super+0x7d/0x90 fs/super.c:350
 cleanup_mnt+0x9f/0x130 fs/namespace.c:1183
REISERFS (device loop0): Using tea hash to sort names
 __cleanup_mnt+0xd/0x10 fs/namespace.c:1190
REISERFS (device loop0): using 3.5.x disk format
 task_work_run+0xe5/0x170 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:191 [inline]
 exit_to_usermode_loop+0x14a/0x190 arch/x86/entry/common.c:164
REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:270 [inline]
 do_syscall_64+0x416/0x5b0 arch/x86/entry/common.c:297
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x4608e7
RSP: 002b:00007ffd6d0ab058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000004608e7
RDX: 00000000004031f8 RSI: 0000000000000002 RDI: 00007ffd6d0ab100
RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000009
R10: 0000000000000005 R11: 0000000000000246 R12: 00007ffd6d0ac190
R13: 00000000021dea60 R14: 0000000000000000 R15: 00007ffd6d0ac190
Code: 0f 95 c6 41 84 f3 0f 85 dc 13 00 00 41 83 e0 07 44 38 c2 40 0f 9e c6 84 d2 0f 95 c2 40 84 d6 0f 85 c3 13 00 00 41 8b 7d 14 31 d2 <48> f7 f7 48 8d 79 18 4a 8d 34 12 48 89 f8 48 c1 e8 03 42 80 3c 
RIP: do_journal_end+0x1ffb/0x4400 fs/reiserfs/journal.c:4201 RSP: ffff8881dc59fb68
IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
---[ end trace 60dbfa10cf01177b ]---
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready