REISERFS (device loop0): using ordered data mode REISERFS (device loop5): using 3.5.x disk format reiserfs: using flush barriers ------------[ cut here ]------------ REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 kernel BUG at fs/reiserfs/journal.c:3640! REISERFS (device loop3): Using rupasov hash to sort names REISERFS (device loop3): using 3.5.x disk format REISERFS (device loop2): journal params: device loop2, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 reiserfs: using flush barriers REISERFS (device loop0): checking transaction log (loop0) REISERFS (device loop2): checking transaction log (loop2) invalid opcode: 0000 [#1] PREEMPT SMP KASAN init_special_inode: bogus i_mode (0) for inode loop0:2 Modules linked in: CPU: 0 PID: 6497 Comm: syz-executor367 Not tainted 4.14.198-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff888094a10280 task.stack: ffff8880872c0000 RIP: 0010:check_journal_end fs/reiserfs/journal.c:3640 [inline] RIP: 0010:do_journal_end+0x3081/0x41d0 fs/reiserfs/journal.c:4037 RSP: 0018:ffff8880872c79f8 EFLAGS: 00010297 init_special_inode: bogus i_mode (0) for inode loop2:2 RAX: ffff888094a10280 RBX: ffffc90008b90000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff8880872c7c30 RDI: ffff8880872c7c3c RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000004057c R10: ffff888094a10b58 R11: ffff888094a10280 R12: ffffc90008b90058 R13: ffffc90008b90048 R14: ffff8880872c7c38 R15: ffff888087de6280 FS: 00000000008c6880(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055b9c8e06728 CR3: 00000000a0bcb000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore journal_end+0x259/0x300 fs/reiserfs/journal.c:3409 reiserfs_fill_super+0x1ab8/0x28b6 fs/reiserfs/super.c:2171 mount_bdev+0x2b3/0x360 fs/super.c:1134 mount_fs+0x92/0x2a0 fs/super.c:1237 REISERFS (device loop0): Using rupasov hash to sort names vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046 vfs_kern_mount fs/namespace.c:1036 [inline] do_new_mount fs/namespace.c:2549 [inline] do_mount+0xe53/0x2a00 fs/namespace.c:2879 REISERFS warning (device loop2): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore REISERFS (device loop0): using 3.5.x disk format SYSC_mount fs/namespace.c:3095 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3072 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x447e5a RSP: 002b:00007fffeefc7cf8 EFLAGS: 00000297 REISERFS (device loop2): Using rupasov hash to sort names ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fffeefc7d50 RCX: 0000000000447e5a RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fffeefc7d10 RBP: 00007fffeefc7d10 R08: 00007fffeefc7d50 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 Code: e8 45 23 ff ff e9 11 REISERFS (device loop2): using 3.5.x disk format fa ff ff e8 5b 88 a1 ff 0f 0b e8 54 88 a1 ff 0f 0b e8 4d 88 a1 ff 0f 0b e8 46 88 a1 ff 0f 0b e8 3f 88 a1 ff <0f> 0b e8 38 88 a1 ff 48 8d bb d0 01 00 00 48 REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal b8 00 00 00 00 00 RIP: check_journal_end fs/reiserfs/journal.c:3640 [inline] RSP: ffff8880872c79f8 RIP: do_journal_end+0x3081/0x41d0 fs/reiserfs/journal.c:4037 RSP: ffff8880872c79f8 ---[ end trace ad73401383bb1354 ]--- REISERFS (device loop4): using ordered data mode