================================================================== BUG: KASAN: use-after-free in reiserfs_release_objectid+0x430/0x614 fs/reiserfs/objectid.c:165 Read of size 8188 at addr ffff0000de8c2050 by task syz.3.48/4357 CPU: 0 PID: 4357 Comm: syz.3.48 Not tainted 5.15.186-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Call trace: dump_backtrace+0x0/0x43c arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf8/0x160 lib/dump_stack.c:106 print_address_description+0x78/0x30c mm/kasan/report.c:248 __kasan_report mm/kasan/report.c:434 [inline] kasan_report+0xec/0x15c mm/kasan/report.c:451 check_region_inline mm/kasan/generic.c:-1 [inline] kasan_check_range+0x270/0x2b0 mm/kasan/generic.c:189 memmove+0x90/0xe8 mm/kasan/shadow.c:54 reiserfs_release_objectid+0x430/0x614 fs/reiserfs/objectid.c:165 remove_save_link+0x21c/0x320 fs/reiserfs/super.c:542 reiserfs_evict_inode+0x2fc/0x3e8 fs/reiserfs/inode.c:91 evict+0x3c8/0x810 fs/inode.c:647 iput_final fs/inode.c:1769 [inline] iput+0x6c4/0x77c fs/inode.c:1795 dentry_unlink_inode+0x360/0x438 fs/dcache.c:380 __dentry_kill+0x320/0x598 fs/dcache.c:586 dentry_kill+0xc8/0x248 fs/dcache.c:-1 dput+0x23c/0x458 fs/dcache.c:893 __fput+0x494/0x7f8 fs/file_table.c:319 ____fput+0x20/0x30 fs/file_table.c:339 task_work_run+0x12c/0x1e0 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x24b4/0x3128 arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1e0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 The buggy address belongs to the page: page:0000000077e2e897 refcount:2 mapcount:0 mapping:00000000daa9a656 index:0x10 pfn:0x11e8c2 memcg:ffff0000d803c000 aops:def_blk_aops ino:700003 flags: 0x5ffc00000022036(referenced|uptodate|lru|active|private|mappedtodisk|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000022036 fffffc00038131c8 fffffc00037a30c8 ffff0000c04a08c8 raw: 0000000000000010 ffff0000de0ff3a0 00000002ffffffff ffff0000d803c000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff0000de8c3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff0000de8c3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffff0000de8c4000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ^ ffff0000de8c4080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff0000de8c4100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ==================================================================