REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
==================================================================
BUG: KASAN: use-after-free in reiserfs_release_objectid+0x430/0x614 fs/reiserfs/objectid.c:165
Read of size 8188 at addr ffff0000fae91050 by task syz.1.479/5862

CPU: 0 PID: 5862 Comm: syz.1.479 Not tainted 5.15.189-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Call trace:
 dump_backtrace+0x0/0x43c arch/arm64/kernel/stacktrace.c:152
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216
 __dump_stack+0x30/0x40 lib/dump_stack.c:88
 dump_stack_lvl+0xf8/0x160 lib/dump_stack.c:106
 print_address_description+0x78/0x30c mm/kasan/report.c:248
 __kasan_report mm/kasan/report.c:434 [inline]
 kasan_report+0xec/0x15c mm/kasan/report.c:451
 check_region_inline mm/kasan/generic.c:-1 [inline]
 kasan_check_range+0x270/0x2b0 mm/kasan/generic.c:189
 memmove+0x90/0xe8 mm/kasan/shadow.c:54
 reiserfs_release_objectid+0x430/0x614 fs/reiserfs/objectid.c:165
 remove_save_link+0x21c/0x320 fs/reiserfs/super.c:542
 reiserfs_evict_inode+0x2fc/0x3e8 fs/reiserfs/inode.c:91
 evict+0x3c8/0x810 fs/inode.c:647
 iput_final fs/inode.c:1769 [inline]
 iput+0x6c4/0x77c fs/inode.c:1795
 dentry_unlink_inode+0x360/0x438 fs/dcache.c:380
 __dentry_kill+0x320/0x598 fs/dcache.c:586
 dentry_kill+0xc8/0x248 fs/dcache.c:-1
 dput+0x23c/0x458 fs/dcache.c:893
 __fput+0x494/0x7f8 fs/file_table.c:319
 ____fput+0x20/0x30 fs/file_table.c:339
 task_work_run+0x12c/0x1e0 kernel/task_work.c:188
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0x684/0x1f58 kernel/exit.c:883
 do_group_exit+0x100/0x268 kernel/exit.c:997
 get_signal+0x73c/0x1340 kernel/signal.c:2900
 do_signal arch/arm64/kernel/signal.c:893 [inline]
 do_notify_resume+0x35c/0x3128 arch/arm64/kernel/signal.c:946
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline]
 el0_svc+0xf0/0x1e0 arch/arm64/kernel/entry-common.c:609
 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584

The buggy address belongs to the page:
page:00000000ad1f3a9a refcount:2 mapcount:0 mapping:00000000f48b3a8d index:0x10 pfn:0x13ae91
memcg:ffff0000d2120000
aops:def_blk_aops ino:700001
flags: 0x5ffc00000022036(referenced|uptodate|lru|active|private|mappedtodisk|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc00000022036 fffffc0003eba408 fffffc0003bfec48 ffff0000c0545b08
raw: 0000000000000010 ffff0000c0683658 00000002ffffffff ffff0000d2120000
page dumped because: kasan: bad access detected

Memory state around the buggy address:
 ffff0000fae91f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 ffff0000fae91f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
>ffff0000fae92000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
                   ^
 ffff0000fae92080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
 ffff0000fae92100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
==================================================================