REISERFS (device loop1): using 3.5.x disk format REISERFS (device loop0): using 3.5.x disk format REISERFS (device loop5): Using tea hash to sort names REISERFS (device loop5): using 3.5.x disk format ------------[ cut here ]------------ kernel BUG at fs/reiserfs/journal.c:3640! invalid opcode: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 0 PID: 6421 Comm: syz-executor839 Not tainted 4.14.198-syzkaller #0 REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8880983e43c0 task.stack: ffff88809a508000 RIP: 0010:check_journal_end fs/reiserfs/journal.c:3640 [inline] RIP: 0010:do_journal_end+0x3081/0x41d0 fs/reiserfs/journal.c:4037 RSP: 0018:ffff88809a50f9f8 EFLAGS: 00010297 RAX: ffff8880983e43c0 RBX: ffffc900078af000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff88809a50fc30 RDI: ffff88809a50fc3c RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000004057c R10: ffff8880983e4c98 R11: ffff8880983e43c0 R12: ffffc900078af058 R13: ffffc900078af048 R14: ffff88809a50fc38 R15: ffff888095fbcbc0 FS: 00007f1389626700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 REISERFS (device loop3): using ordered data mode CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000004c204c CR3: 000000008221e000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 reiserfs: using flush barriers Call Trace: journal_end+0x259/0x300 fs/reiserfs/journal.c:3409 reiserfs_fill_super+0x1ab8/0x28b6 fs/reiserfs/super.c:2171 REISERFS (device loop3): journal params: device loop3, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 mount_bdev+0x2b3/0x360 fs/super.c:1134 mount_fs+0x92/0x2a0 fs/super.c:1237 vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046 REISERFS (device loop3): checking transaction log (loop3) vfs_kern_mount fs/namespace.c:1036 [inline] do_new_mount fs/namespace.c:2549 [inline] do_mount+0xe53/0x2a00 fs/namespace.c:2879 REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal SYSC_mount fs/namespace.c:3095 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3072 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x44d4fa REISERFS (device loop4): using ordered data mode RSP: 002b:00007f1389625bf8 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000044d4fa RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f1389625c10 RBP: 00007f1389625c10 R08: 00007f1389625c50 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000004 R13: 00007f1389625c50 R14: 00007f13896266d0 R15: 0000000000000003 Code: reiserfs: using flush barriers e8 45 23 ff ff e9 11 fa ff ff e8 5b 88 a1 ff 0f 0b e8 54 88 a1 ff 0f 0b e8 4d 88 a1 ff 0f 0b e8 46 88 a1 ff 0f 0b e8 3f 88 a1 ff <0f> 0b e8 38 88 a1 ff 48 8d bb init_special_inode: bogus i_mode (0) for inode loop3:2 d0 01 00 00 48 b8 00 00 00 00 00 RIP: check_journal_end fs/reiserfs/journal.c:3640 [inline] RSP: ffff88809a50f9f8 RIP: do_journal_end+0x3081/0x41d0 fs/reiserfs/journal.c:4037 RSP: ffff88809a50f9f8 REISERFS (device loop4): journal params: device loop4, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 ---[ end trace 00cec84140e965f1 ]--- REISERFS (device loop4): checking transaction log (loop4)