REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
CPU: 0 PID: 6257 Comm: syz.0.70 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:reiserfs_get_block+0x1612/0x3ed0 fs/reiserfs/inode.c:1052
Code: 5f 04 00 00 e8 8f c0 65 ff 4d 89 f0 e9 0b 02 00 00 44 8b bc 24 40 03 00 00 4c 89 74 24 38 4d 8d 74 9e fc 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 63 0d 00 00 4c 89 fb 45 89 3e 48 8b 44
RSP: 0000:ffffc9000ba4e9c0 EFLAGS: 00010203
RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88802b90bc00
RDX: 0000000000000000 RSI: 00000000000003f4 RDI: 0000000000000000
RBP: ffffc9000ba4ef30 R08: ffffc9000ba4ee9f R09: 0000000000000000
R10: ffffc9000ba4ee80 R11: fffff52001749dd4 R12: dffffc0000000000
R13: 00000000000003f4 R14: 000000000000000c R15: 0000000000000227
FS:  00007fd9b40536c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00001ffffffffe40 CR3: 000000002331c000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 __block_write_begin_int+0x566/0x1ad0 fs/buffer.c:2124
 reiserfs_write_begin+0x20a/0x4c0 fs/reiserfs/inode.c:2771
 generic_perform_write+0x2fb/0x5b0 mm/filemap.c:4031
 generic_file_write_iter+0xaf/0x2e0 mm/filemap.c:4152
 __kernel_write_iter+0x274/0x670 fs/read_write.c:517
 __kernel_write+0xf0/0x140 fs/read_write.c:537
 __dump_emit+0x206/0x310 fs/coredump.c:882
 elf_core_dump+0x28fe/0x36e0 fs/binfmt_elf.c:2136
 do_coredump+0x1755/0x2480 fs/coredump.c:833
 get_signal+0x1133/0x1400 kernel/signal.c:2888
 arch_do_signal_or_restart+0x9c/0x7b0 arch/x86/kernel/signal.c:310
 exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xf6/0x180 kernel/entry/common.c:210
 irqentry_exit_to_user_mode+0x9/0x40 kernel/entry/common.c:315
 exc_page_fault+0x8f/0x110 arch/x86/mm/fault.c:1524
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:608
RIP: 0033:0xe7dab6137a
Code: Unable to access opcode bytes at 0xe7dab61350.
RSP: 002b:00002000000003d8 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007fd9b33e6270 RCX: 00007fd9b318f749
RDX: 0000200000000180 RSI: 00002000000003d0 RDI: 0000000008000000
RBP: 00007fd9b3213f91 R08: 00002000000004c0 R09: 00002000000004c0
R10: 0000200000000480 R11: 0000000000000206 R12: 0000000000000000
R13: 00007fd9b33e6308 R14: 00007fd9b33e6270 R15: 00007fff88863d98
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:reiserfs_get_block+0x1612/0x3ed0 fs/reiserfs/inode.c:1052
Code: 5f 04 00 00 e8 8f c0 65 ff 4d 89 f0 e9 0b 02 00 00 44 8b bc 24 40 03 00 00 4c 89 74 24 38 4d 8d 74 9e fc 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 63 0d 00 00 4c 89 fb 45 89 3e 48 8b 44
RSP: 0000:ffffc9000ba4e9c0 EFLAGS: 00010203
RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88802b90bc00
RDX: 0000000000000000 RSI: 00000000000003f4 RDI: 0000000000000000
RBP: ffffc9000ba4ef30 R08: ffffc9000ba4ee9f R09: 0000000000000000
R10: ffffc9000ba4ee80 R11: fffff52001749dd4 R12: dffffc0000000000
R13: 00000000000003f4 R14: 000000000000000c R15: 0000000000000227
FS:  00007fd9b40536c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000e7dab61350 CR3: 000000002331c000 CR4: 00000000003506f0
----------------
Code disassembly (best guess):
   0:	5f                   	pop    %rdi
   1:	04 00                	add    $0x0,%al
   3:	00 e8                	add    %ch,%al
   5:	8f c0                	pop    %rax
   7:	65 ff 4d 89          	decl   %gs:-0x77(%rbp)
   b:	f0 e9 0b 02 00 00    	lock jmp 0x21c
  11:	44 8b bc 24 40 03 00 	mov    0x340(%rsp),%r15d
  18:	00
  19:	4c 89 74 24 38       	mov    %r14,0x38(%rsp)
  1e:	4d 8d 74 9e fc       	lea    -0x4(%r14,%rbx,4),%r14
  23:	4c 89 f0             	mov    %r14,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
* 2a:	42 0f b6 04 20       	movzbl (%rax,%r12,1),%eax <-- trapping instruction
  2f:	84 c0                	test   %al,%al
  31:	0f 85 63 0d 00 00    	jne    0xd9a
  37:	4c 89 fb             	mov    %r15,%rbx
  3a:	45 89 3e             	mov    %r15d,(%r14)
  3d:	48                   	rex.W
  3e:	8b                   	.byte 0x8b
  3f:	44                   	rex.R