Unable to handle kernel NULL pointer dereference at virtual address 0000000000000068 Mem abort info: ESR = 0x0000000096000006 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x06: level 2 translation fault Data abort info: ISV = 0, ISS = 0x00000006 CM = 0, WnR = 0 user pgtable: 4k pages, 48-bit VAs, pgdp=000000015bb56000 [0000000000000068] pgd=080000015bb5d003, p4d=080000015bb5d003, pud=0800000157ccc003, pmd=0000000000000000 Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 10763 Comm: syz-executor.2 Not tainted 6.2.0-rc7-syzkaller-17907-g2d3827b3f393 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : d_really_is_negative include/linux/dcache.h:466 [inline] pc : reiserfs_xattr_jcreate_nblocks fs/reiserfs/xattr.h:79 [inline] pc : reiserfs_set_acl+0xdc/0x2b4 fs/reiserfs/xattr_acl.c:37 lr : reiserfs_xattr_jcreate_nblocks fs/reiserfs/xattr.h:78 [inline] lr : reiserfs_set_acl+0xc4/0x2b4 fs/reiserfs/xattr_acl.c:37 sp : ffff8000212d3af0 x29: ffff8000212d3b40 x28: ffff000118376000 x27: 0000000000000002 x26: dead4ead00000000 x25: 0000000000000036 x24: 0000000000000007 x23: 0000000000000000 x22: ffff000118373000 x21: 0000000000000000 x20: 0000000000008000 x19: ffff00011c0d0190 x18: 000000000000aeeb x17: ffff80000dd94158 x16: ffff80000dbd2118 x15: ffff00011d47ce00 x14: 000000001fffffff x13: 00000000000000c0 x12: ffff00011d47ce00 x11: ff8080000877345c x10: 00000000000002a0 x9 : 000000000000006c x8 : 0000000000000000 x7 : ffff80000868db54 x6 : 0000000000000000 x5 : ffff80000e22f7c0 x4 : ffff8000212d3af0 x3 : 0000000000008000 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: reiserfs_set_acl+0xdc/0x2b4 fs/reiserfs/xattr_acl.c:37 set_posix_acl fs/posix_acl.c:957 [inline] vfs_remove_acl+0x2e8/0x418 fs/posix_acl.c:1209 removexattr+0x1b4/0x1f0 fs/xattr.c:895 path_removexattr+0xb4/0x15c fs/xattr.c:911 __do_sys_lremovexattr fs/xattr.c:931 [inline] __se_sys_lremovexattr fs/xattr.c:928 [inline] __arm64_sys_lremovexattr+0x24/0x38 fs/xattr.c:928 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x64/0x178 arch/arm64/kernel/syscall.c:52 el0_svc_common+0xbc/0x180 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x110 arch/arm64/kernel/syscall.c:193 el0_svc+0x58/0x14c arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 Code: 52803809 52800d8a 9a890149 5280540a (f9403508) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: 52803809 mov w9, #0x1c0 // #448 4: 52800d8a mov w10, #0x6c // #108 8: 9a890149 csel x9, x10, x9, eq // eq = none c: 5280540a mov w10, #0x2a0 // #672 * 10: f9403508 ldr x8, [x8, #104] <-- trapping instruction