bisecting fixing commit since 2b79150141611d3c6e1b55d4e70f49602482f0b8
building syzkaller on 18e33098d58c8738cc3b678346141b74d34d4e30
testing commit 2b79150141611d3c6e1b55d4e70f49602482f0b8 with gcc (GCC) 8.1.0
kernel signature: 0ebffefef77f439ca53764d9e9e3cc18704276870f09c4a4a9f770230bfd9863
all runs: crashed: kernel BUG at fs/reiserfs/prints.c:LINE!
testing current HEAD 3f2ecb86cb909da0b9157fd2952ad79924cbe5ae
testing commit 3f2ecb86cb909da0b9157fd2952ad79924cbe5ae with gcc (GCC) 8.1.0
kernel signature: 1f9270b245122e281f016137f7f719528bb26de76ea9ab32dec7b22a6db6d448
all runs: crashed: kernel BUG at fs/reiserfs/prints.c:LINE!
revisions tested: 2, total time: 22m37.710397009s (build: 16m28.522821398s, test: 5m33.601119728s)
the crash still happens on HEAD
commit msg: Linux 4.14.212
crash: kernel BUG at fs/reiserfs/prints.c:LINE!
REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
REISERFS panic (device loop0): journal-2332 do_journal_end: Trying to log block 8211, which is a log block
------------[ cut here ]------------
kernel BUG at fs/reiserfs/prints.c:390!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 7715 Comm: syz-executor.0 Not tainted 4.14.212-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8881eb0763c0 task.stack: ffff8881dbcb0000
RIP: 0010:__reiserfs_panic.cold.9+0x25/0x6d fs/reiserfs/prints.c:390
RSP: 0018:ffff8881dbcb7ab0 EFLAGS: 00010282
RAX: 000000000000006a RBX: ffff8881e8968e40 RCX: 0000000000000000
RDX: 000000000000006a RSI: ffffffff878b9020 RDI: ffffed103b796f4d
RBP: ffff8881dbcb7b58 R08: ffff8881eb076ce0 R09: 0000000000000000
R10: 0000000000000000 R11: dffffc0000000000 R12: ffffffff87975320
R13: ffffffff87975b20 R14: 0000000000000001 R15: 0000000000002013
FS:  0000000001e3a940(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055c61e7f9a77 CR3: 00000001ddef6005 CR4: 00000000001606e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 do_journal_end+0x390c/0x4400 fs/reiserfs/journal.c:4146
 journal_end_sync+0x117/0x210 fs/reiserfs/journal.c:3531
 reiserfs_sync_fs+0xb6/0xd0 fs/reiserfs/super.c:78
 __sync_filesystem fs/sync.c:39 [inline]
 sync_filesystem+0xc7/0x1f0 fs/sync.c:64
 generic_shutdown_super+0x69/0x330 fs/super.c:432
 kill_block_super+0x96/0xe0 fs/super.c:1161
 reiserfs_kill_sb+0x171/0x1d0 fs/reiserfs/super.c:570
 deactivate_locked_super+0x62/0xb0 fs/super.c:319
 deactivate_super+0x7d/0x90 fs/super.c:350
 cleanup_mnt+0x9f/0x130 fs/namespace.c:1183
 __cleanup_mnt+0xd/0x10 fs/namespace.c:1190
 task_work_run+0xe5/0x170 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:191 [inline]
 exit_to_usermode_loop+0x14a/0x190 arch/x86/entry/common.c:164
 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:270 [inline]
 do_syscall_64+0x416/0x5b0 arch/x86/entry/common.c:297
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x4608e7
RSP: 002b:00007fff878ca1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000004608e7
RDX: 00000000004031f8 RSI: 0000000000000002 RDI: 00007fff878ca290
RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000009
R10: 0000000000000005 R11: 0000000000000246 R12: 00007fff878cb320
R13: 0000000001e3ba60 R14: 0000000000000000 R15: 00007fff878cb320
Code: 72 a2 94 ff eb bd 4d 85 e4 48 c7 c2 a0 f8 96 87 74 49 49 c7 c0 00 06 01 8b 4c 89 e9 4c 89 e6 48 c7 c7 60 fa 96 87 e8 4b a2 94 ff <0f> 0b 4d 85 e4 48 c7 c1 a0 f8 96 87 74 2e 48 8d b3 50 06 00 00 
RIP: __reiserfs_panic.cold.9+0x25/0x6d fs/reiserfs/prints.c:390 RSP: ffff8881dbcb7ab0
---[ end trace 7957696741802db5 ]---