sg_write: data in/out 262577/146 bytes for SCSI command 0x0-- guessing data in; program syz-executor.4 not setting count and/or reply_len properly REISERFS warning (device loop5): reiserfs_fill_super: Cannot allocate memory for journal device name ------------[ cut here ]------------ kernel BUG at fs/reiserfs/lock.c:44! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 23023 Comm: syz-executor.5 Not tainted 5.0.0-rc8+ #1 kobject: 'loop3' (00000000dbd37e8e): kobject_uevent_env Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:reiserfs_write_unlock+0xeb/0x110 fs/reiserfs/lock.c:44 Code: 5d c3 e8 a8 1d 89 ff 48 8d 7b 28 48 c7 83 a8 00 00 00 00 00 00 00 e8 34 ad 1b 05 e8 8f 1d 89 ff 5b 41 5c 5d c3 e8 85 1d 89 ff <0f> 0b e8 7e 1e c0 ff eb a1 e8 97 1e c0 ff e9 33 ff ff ff e8 8d 1e kobject: 'kvm' (00000000788f2d24): kobject_uevent_env RSP: 0018:ffff8880586bfa10 EFLAGS: 00010246 RAX: 0000000000040000 RBX: ffff88809cc096c0 RCX: ffffc9001089c000 RDX: 0000000000040000 RSI: ffffffff81e6c19b RDI: ffff88809cc09768 RBP: ffff8880586bfa20 R08: 0000000000000065 R09: ffffed1015d25021 R10: ffffed1015d25020 R11: ffff8880ae928107 R12: 00000000ffffffea R13: ffff888052cace80 R14: ffff8880586bfbc0 R15: ffff88809cc096c0 kobject: 'loop3' (00000000dbd37e8e): fill_kobj_path: path = '/devices/virtual/block/loop3' FS: 00007fb4a3939700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000940004 CR3: 0000000096980000 CR4: 00000000001426e0 Call Trace: kobject: 'loop0' (0000000054045cd5): kobject_uevent_env reiserfs_fill_super+0x2b51/0x2eb0 fs/reiserfs/super.c:2219 kobject: 'loop0' (0000000054045cd5): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'kvm' (00000000788f2d24): fill_kobj_path: path = '/devices/virtual/misc/kvm' kobject: 'kvm' (00000000788f2d24): kobject_uevent_env kobject: 'kvm' (00000000788f2d24): fill_kobj_path: path = '/devices/virtual/misc/kvm' mount_bdev+0x307/0x3c0 fs/super.c:1159 get_super_block+0x35/0x40 fs/reiserfs/super.c:2605 mount_fs+0x106/0x3ff fs/super.c:1258 vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:959 vfs_kern_mount fs/namespace.c:949 [inline] do_new_mount fs/namespace.c:2513 [inline] do_mount+0x581/0x2d30 fs/namespace.c:2845 ksys_mount+0xdb/0x150 fs/namespace.c:3061 __do_sys_mount fs/namespace.c:3075 [inline] __se_sys_mount fs/namespace.c:3072 [inline] __x64_sys_mount+0xbe/0x150 fs/namespace.c:3072 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45a89a Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0a 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 RSP: 002b:00007fb4a3938a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fb4a3938b30 RCX: 000000000045a89a RDX: 00007fb4a3938ad0 RSI: 0000000020003300 RDI: 00007fb4a3938af0 RBP: 0000000020003300 R08: 00007fb4a3938b30 R09: 00007fb4a3938ad0 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 R13: 0000000000000000 R14: 00000000004dbdb0 R15: 0000000000000003 Modules linked in: ---[ end trace 80418985fd62802b ]--- kobject: 'loop0' (0000000054045cd5): kobject_uevent_env RIP: 0010:reiserfs_write_unlock+0xeb/0x110 fs/reiserfs/lock.c:44 kobject: 'kvm' (00000000788f2d24): kobject_uevent_env Code: 5d c3 e8 a8 1d 89 ff 48 8d 7b 28 48 c7 83 a8 00 00 00 00 00 00 00 e8 34 ad 1b 05 e8 8f 1d 89 ff 5b 41 5c 5d c3 e8 85 1d 89 ff <0f> 0b e8 7e 1e c0 ff eb a1 e8 97 1e c0 ff e9 33 ff ff ff e8 8d 1e kobject: 'kvm' (00000000788f2d24): fill_kobj_path: path = '/devices/virtual/misc/kvm' sg_write: data in/out 262577/144 bytes for SCSI command 0x0-- guessing data in; program syz-executor.3 not setting count and/or reply_len properly kobject: 'loop0' (0000000054045cd5): fill_kobj_path: path = '/devices/virtual/block/loop0' sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; program syz-executor.0 not setting count and/or reply_len properly kobject: 'loop4' (000000003e099d37): kobject_uevent_env kobject: 'loop4' (000000003e099d37): fill_kobj_path: path = '/devices/virtual/block/loop4' RSP: 0018:ffff8880586bfa10 EFLAGS: 00010246 RAX: 0000000000040000 RBX: ffff88809cc096c0 RCX: ffffc9001089c000 RDX: 0000000000040000 RSI: ffffffff81e6c19b RDI: ffff88809cc09768 kobject: 'loop1' (00000000cc048270): kobject_uevent_env kobject: 'kvm' (00000000788f2d24): kobject_uevent_env RBP: ffff8880586bfa20 R08: 0000000000000065 R09: ffffed1015d25021 sg_write: data in/out 262577/146 bytes for SCSI command 0x0-- guessing data in; program syz-executor.4 not setting count and/or reply_len properly R10: ffffed1015d25020 R11: ffff8880ae928107 R12: 00000000ffffffea kobject: 'kvm' (00000000788f2d24): fill_kobj_path: path = '/devices/virtual/misc/kvm' R13: ffff888052cace80 R14: ffff8880586bfbc0 R15: ffff88809cc096c0 kobject: 'loop1' (00000000cc048270): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop3' (00000000dbd37e8e): kobject_uevent_env FS: 00007fb4a3939700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 kobject: 'kvm' (00000000788f2d24): kobject_uevent_env CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kobject: 'loop3' (00000000dbd37e8e): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop4' (000000003e099d37): kobject_uevent_env CR2: 0000001b2c822000 CR3: 0000000096980000 CR4: 00000000001426e0 kobject: 'kvm' (00000000788f2d24): fill_kobj_path: path = '/devices/virtual/misc/kvm' kobject: 'loop4' (000000003e099d37): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop2' (00000000dfdffc44): kobject_uevent_env