REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
syz-executor.0[6379]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
==================================================================
BUG: KASAN: out-of-bounds in leaf_insert_into_buf+0x1f4/0x748 fs/reiserfs/lbalance.c:933
Read of size 18446744073709551384 at addr ffff0000e3811000 by task syz-executor.0/6379

CPU: 0 PID: 6379 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-10885-g0468be89b3fa #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
Call trace:
 dump_backtrace+0x1b8/0x1e4 arch/arm64/kernel/stacktrace.c:233
 show_stack+0x2c/0x44 arch/arm64/kernel/stacktrace.c:240
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xd0/0x124 lib/dump_stack.c:106
 print_address_description mm/kasan/report.c:364 [inline]
 print_report+0x174/0x514 mm/kasan/report.c:475
 kasan_report+0xd8/0x138 mm/kasan/report.c:588
 kasan_check_range+0x254/0x294 mm/kasan/generic.c:187
 __asan_memmove+0x3c/0x84 mm/kasan/shadow.c:94
 leaf_insert_into_buf+0x1f4/0x748 fs/reiserfs/lbalance.c:933
 balance_leaf_new_nodes_insert fs/reiserfs/do_balan.c:1001 [inline]
 balance_leaf_new_nodes fs/reiserfs/do_balan.c:1243 [inline]
 balance_leaf+0x61f0/0xe860 fs/reiserfs/do_balan.c:1450
 do_balance+0x27c/0x788 fs/reiserfs/do_balan.c:1888
 reiserfs_insert_item+0x940/0xa84 fs/reiserfs/stree.c:2259
 indirect2direct+0x58c/0xa40 fs/reiserfs/tail_conversion.c:283
 maybe_indirect_to_direct fs/reiserfs/stree.c:1585 [inline]
 reiserfs_cut_from_item+0x854/0x1c98 fs/reiserfs/stree.c:1692
 reiserfs_do_truncate+0x860/0x1110 fs/reiserfs/stree.c:1971
 reiserfs_truncate_file+0x510/0xb18 fs/reiserfs/inode.c:2306
 reiserfs_truncate_failed_write fs/reiserfs/inode.c:2739 [inline]
 reiserfs_write_end+0x694/0x848 fs/reiserfs/inode.c:2955
 generic_perform_write+0x394/0x588 mm/filemap.c:3956
 __generic_file_write_iter+0xfc/0x204 mm/filemap.c:4040
 generic_file_write_iter+0xb8/0x2b4 mm/filemap.c:4066
 call_write_iter include/linux/fs.h:1985 [inline]
 new_sync_write fs/read_write.c:491 [inline]
 vfs_write+0x628/0x93c fs/read_write.c:584
 ksys_write+0x15c/0x26c fs/read_write.c:637
 __do_sys_write fs/read_write.c:649 [inline]
 __se_sys_write fs/read_write.c:646 [inline]
 __arm64_sys_write+0x7c/0x90 fs/read_write.c:646
 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:51
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:136
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:155
 el0_svc+0x58/0x16c arch/arm64/kernel/entry-common.c:678
 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:696
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591

The buggy address belongs to the physical page:
page:00000000a446144a refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x123811
flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff)
page_type: 0xffffffff()
raw: 05ffc00000000000 fffffc00038e0e88 fffffc00038e05c8 0000000000000000
raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected

Memory state around the buggy address:
 ffff0000e3810f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 ffff0000e3810f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
>ffff0000e3811000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
                   ^
 ffff0000e3811080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
 ffff0000e3811100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
==================================================================
Unable to handle kernel write to read-only memory at virtual address ffff0000e10b8ff0
KASAN: maybe wild-memory-access in range [0xfffc0007085c7f80-0xfffc0007085c7f87]