REISERFS (device loop2): journal params: device loop2, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30
REISERFS (device loop5): using 3.5.x disk format
------------[ cut here ]------------
REISERFS (device loop3): checking transaction log (loop3)
kernel BUG at fs/reiserfs/journal.c:3640!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 6545 Comm: syz-executor368 Not tainted 4.14.198-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8880931f0440 task.stack: ffff888084418000
RIP: 0010:check_journal_end fs/reiserfs/journal.c:3640 [inline]
RIP: 0010:do_journal_end+0x3081/0x41d0 fs/reiserfs/journal.c:4037
RSP: 0018:ffff88808441f9f8 EFLAGS: 00010297
RAX: ffff8880931f0440 RBX: ffffc90009a17000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff88808441fc30 RDI: ffff88808441fc3c
RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000004057c
R10: ffff8880931f0d18 R11: ffff8880931f0440 R12: ffffc90009a17058
R13: ffffc90009a17048 R14: ffff88808441fc38 R15: ffff88809249e400
FS:  00007fa7516dc700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa4c88c5000 CR3: 000000009b968000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 journal_end+0x259/0x300 fs/reiserfs/journal.c:3409
 reiserfs_fill_super+0x1ab8/0x28b6 fs/reiserfs/super.c:2171
 mount_bdev+0x2b3/0x360 fs/super.c:1134
 mount_fs+0x92/0x2a0 fs/super.c:1237
 vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046
 vfs_kern_mount fs/namespace.c:1036 [inline]
 do_new_mount fs/namespace.c:2549 [inline]
 do_mount+0xe53/0x2a00 fs/namespace.c:2879
 SYSC_mount fs/namespace.c:3095 [inline]
 SyS_mount+0xa8/0x120 fs/namespace.c:3072
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x44d4fa
RSP: 002b:00007fa7516dbbf8 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000044d4fa
RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fa7516dbc10
RBP: 00007fa7516dbc10 R08: 00007fa7516dbc50 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000004
R13: 00007fa7516dbc50 R14: 00007fa7516dc6d0 R15: 0000000000000005
Code: e8 45 23 ff ff e9 11 fa ff ff e8 5b 88 a1 ff 0f 0b e8 54 88 a1 ff 0f 0b e8 4d 88 a1 ff 0f 0b e8 46 88 a1 ff 0f 0b e8 3f 88 a1 ff <0f> 0b e8 38 88 a1 ff 48 8d bb d0 01 00 00 48 b8 00 00 00 00 00 
RIP: check_journal_end fs/reiserfs/journal.c:3640 [inline] RSP: ffff88808441f9f8
RIP: do_journal_end+0x3081/0x41d0 fs/reiserfs/journal.c:4037 RSP: ffff88808441f9f8
init_special_inode: bogus i_mode (0) for inode loop3:2
---[ end trace 4343e65081c5a2a4 ]---
REISERFS (device loop0): checking transaction log (loop0)