REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2
REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck?
general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
CPU: 0 PID: 17740 Comm: syz-executor.1 Not tainted 6.2.0-rc6-syzkaller-00083-ge7368fd30165 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
RIP: 0010:reiserfs_node_data fs/reiserfs/reiserfs.h:2184 [inline]
RIP: 0010:item_head fs/reiserfs/reiserfs.h:2200 [inline]
RIP: 0010:tp_item_head fs/reiserfs/reiserfs.h:2226 [inline]
RIP: 0010:prepare_for_delete_or_cut+0x182/0x21a0 fs/reiserfs/stree.c:1050
Code: 89 d8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 8a 04 20 84 c0 0f 85 f2 17 00 00 4c 63 3b 49 83 c6 28 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 4f 41 b3 ff 4d 8b 36 48 b8 00 00
RSP: 0018:ffffc900065dee40 EFLAGS: 00010206
RAX: 0000000000000005 RBX: ffffc900065df600 RCX: dffffc0000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000008
RBP: ffffc900065defa8 R08: ffffffff822d4469 R09: ffffc900065df470
R10: 0000000000000002 R11: ffff88801fed57c0 R12: dffffc0000000000
R13: 0000000000000000 R14: 0000000000000028 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc8ef7dd000 CR3: 000000004457d000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 reiserfs_cut_from_item+0x38c/0x25b0 fs/reiserfs/stree.c:1682
 reiserfs_do_truncate+0x9d6/0x15a0 fs/reiserfs/stree.c:1973
 reiserfs_truncate_file+0x471/0x790 fs/reiserfs/inode.c:2310
 reiserfs_file_release+0x887/0xa30 fs/reiserfs/file.c:109
 __fput+0x3ba/0x880 fs/file_table.c:320
 task_work_run+0x243/0x300 kernel/task_work.c:179
 exit_task_work include/linux/task_work.h:38 [inline]
 do_exit+0x644/0x2150 kernel/exit.c:867
 do_group_exit+0x1fd/0x2b0 kernel/exit.c:1012
 get_signal+0x1701/0x17c0 kernel/signal.c:2859
 arch_do_signal_or_restart+0x7b/0x5e0 arch/x86/kernel/signal.c:306
 exit_to_user_mode_loop+0x74/0x150 kernel/entry/common.c:168
 exit_to_user_mode_prepare+0xb2/0x140 kernel/entry/common.c:203
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x26/0x60 kernel/entry/common.c:296
 ret_from_fork+0x15/0x30 arch/x86/entry/entry_64.S:301
RIP: 0033:0x7f7f6168d4f1
Code: Unable to access opcode bytes at 0x7f7f6168d4c7.
RSP: 002b:00007f7f581bc2f0 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
RAX: 0000000000000000 RBX: 00007f7f581bc700 RCX: 00007f7f6168d4f1
RDX: 00007f7f581bc9d0 RSI: 00007f7f581bc2f0 RDI: 00000000003d0f00
RBP: 00007ffe0e20d4d0 R08: 00007f7f581bc700 R09: 00007f7f581bc700
R10: 00007f7f581bc9d0 R11: 0000000000000206 R12: 00007ffe0e20d33e
R13: 00007ffe0e20d33f R14: 00007f7f581bc300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:reiserfs_node_data fs/reiserfs/reiserfs.h:2184 [inline]
RIP: 0010:item_head fs/reiserfs/reiserfs.h:2200 [inline]
RIP: 0010:tp_item_head fs/reiserfs/reiserfs.h:2226 [inline]
RIP: 0010:prepare_for_delete_or_cut+0x182/0x21a0 fs/reiserfs/stree.c:1050
Code: 89 d8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 8a 04 20 84 c0 0f 85 f2 17 00 00 4c 63 3b 49 83 c6 28 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 4f 41 b3 ff 4d 8b 36 48 b8 00 00
RSP: 0018:ffffc900065dee40 EFLAGS: 00010206
RAX: 0000000000000005 RBX: ffffc900065df600 RCX: dffffc0000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000008
RBP: ffffc900065defa8 R08: ffffffff822d4469 R09: ffffc900065df470
R10: 0000000000000002 R11: ffff88801fed57c0 R12: dffffc0000000000
R13: 0000000000000000 R14: 0000000000000028 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2615b85058 CR3: 0000000043757000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	89 d8                	mov    %ebx,%eax
   2:	48 c1 e8 03          	shr    $0x3,%rax
   6:	49 bc 00 00 00 00 00 	movabs $0xdffffc0000000000,%r12
   d:	fc ff df
  10:	42 8a 04 20          	mov    (%rax,%r12,1),%al
  14:	84 c0                	test   %al,%al
  16:	0f 85 f2 17 00 00    	jne    0x180e
  1c:	4c 63 3b             	movslq (%rbx),%r15
  1f:	49 83 c6 28          	add    $0x28,%r14
  23:	4c 89 f0             	mov    %r14,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
* 2a:	42 80 3c 20 00       	cmpb   $0x0,(%rax,%r12,1) <-- trapping instruction
  2f:	74 08                	je     0x39
  31:	4c 89 f7             	mov    %r14,%rdi
  34:	e8 4f 41 b3 ff       	callq  0xffb34188
  39:	4d 8b 36             	mov    (%r14),%r14
  3c:	48                   	rex.W
  3d:	b8                   	.byte 0xb8