reiserfs: enabling write barrier flush mode
------------[ cut here ]------------
kernel BUG at fs/reiserfs/journal.c:1925!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 8131 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
RIP: 0010:do_journal_release fs/reiserfs/journal.c:1925 [inline]
RIP: 0010:journal_release+0x326/0x4d0 fs/reiserfs/journal.c:1981
Code: 00 0f 85 5d 01 00 00 49 8b 34 24 4c 89 f7 e8 41 75 ff ff be 01 00 00 00 4c 89 f7 e8 f4 96 ff ff e9 51 fe ff ff e8 4a 49 8b ff <0f> 0b e8 43 49 8b ff ba 38 00 00 00 31 f6 4c 8d 74 24 20 4c 89 f7
RSP: 0018:ffff88809ffb7b98 EFLAGS: 00010293
RAX: ffff88809e230180 RBX: 1ffff11013ff6f73 RCX: ffffffff81d73a32
RDX: 0000000000000000 RSI: ffffffff81d73c26 RDI: 0000000000000005
RBP: ffff8880411e6280 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000
R13: ffff8880411e6900 R14: ffff88809ffb7c90 R15: ffffc9000d890000
FS:  00005555566e7400(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c02c6b0000 CR3: 000000009daa5000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 reiserfs_put_super+0xe0/0x5c0 fs/reiserfs/super.c:616
 generic_shutdown_super+0x144/0x370 fs/super.c:456
REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
 kill_block_super+0x97/0xf0 fs/super.c:1185
 deactivate_locked_super+0x94/0x160 fs/super.c:329
 deactivate_super+0x174/0x1a0 fs/super.c:360
REISERFS (device loop3): using ordered data mode
 cleanup_mnt+0x1a8/0x290 fs/namespace.c:1098
 task_work_run+0x148/0x1c0 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:193 [inline]
 exit_to_usermode_loop+0x251/0x2a0 arch/x86/entry/common.c:167
 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
 do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
reiserfs: using flush barriers
RIP: 0033:0x7f999d4f7537
REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe3b40e608 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f999d4f7537
RDX: 00007ffe3b40e6dc RSI: 000000000000000a RDI: 00007ffe3b40e6d0
REISERFS (device loop3): checking transaction log (loop3)
RBP: 00007ffe3b40e6d0 R08: 00000000ffffffff R09: 00007ffe3b40e4a0
R10: 00005555566e8903 R11: 0000000000000246 R12: 00007f999d550b24
R13: 00007ffe3b40f790 R14: 00005555566e8810 R15: 00007ffe3b40f7d0
Modules linked in:
---[ end trace b0030d755bb09a39 ]---
REISERFS (device loop3): Using r5 hash to sort names
RIP: 0010:do_journal_release fs/reiserfs/journal.c:1925 [inline]
RIP: 0010:journal_release+0x326/0x4d0 fs/reiserfs/journal.c:1981
reiserfs: enabling write barrier flush mode
Code: 00 0f 85 5d 01 00 00 49 8b 34 24 4c 89 f7 e8 41 75 ff ff be 01 00 00 00 4c 89 f7 e8 f4 96 ff ff e9 51 fe ff ff e8 4a 49 8b ff <0f> 0b e8 43 49 8b ff ba 38 00 00 00 31 f6 4c 8d 74 24 20 4c 89 f7
REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
RSP: 0018:ffff88809ffb7b98 EFLAGS: 00010293
RAX: ffff88809e230180 RBX: 1ffff11013ff6f73 RCX: ffffffff81d73a32
REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
RDX: 0000000000000000 RSI: ffffffff81d73c26 RDI: 0000000000000005
overlayfs: upper fs needs to support d_type.
RBP: ffff8880411e6280 R08: 0000000000000001 R09: 0000000000000000
overlayfs: upper fs does not support tmpfile.
R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000
overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off.
R13: ffff8880411e6900 R14: ffff88809ffb7c90 R15: ffffc9000d890000
FS:  00005555566e7400(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007feda85d6718 CR3: 000000009daa5000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
----------------
Code disassembly (best guess), 2 bytes skipped:
   0:	ff f7                	push   %rdi
   2:	d8 64 89 01          	fsubs  0x1(%rcx,%rcx,4)
   6:	48 83 c8 ff          	or     $0xffffffffffffffff,%rax
   a:	c3                   	retq
   b:	66 0f 1f 44 00 00    	nopw   0x0(%rax,%rax,1)
  11:	31 f6                	xor    %esi,%esi
  13:	e9 09 00 00 00       	jmpq   0x21
  18:	66 0f 1f 84 00 00 00 	nopw   0x0(%rax,%rax,1)
  1f:	00 00
  21:	b8 a6 00 00 00       	mov    $0xa6,%eax
  26:	0f 05                	syscall
* 28:	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax <-- trapping instruction
  2e:	73 01                	jae    0x31
  30:	c3                   	retq
  31:	48 c7 c1 b8 ff ff ff 	mov    $0xffffffffffffffb8,%rcx
  38:	f7 d8                	neg    %eax
  3a:	64 89 01             	mov    %eax,%fs:(%rcx)
  3d:	48                   	rex.W