Unable to handle kernel paging request at virtual address dfff80000000000d
Mem abort info:
  ESR = 0x0000000096000006
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x06: level 2 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000006
  CM = 0, WnR = 0
[dfff80000000000d] address between user and kernel address ranges
Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 4981 Comm: syz.1.29 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : d_really_is_negative include/linux/dcache.h:476 [inline]
pc : reiserfs_xattr_jcreate_nblocks fs/reiserfs/xattr.h:79 [inline]
pc : reiserfs_xattr_set+0x2d0/0x4d4 fs/reiserfs/xattr.c:631
lr : reiserfs_xattr_jcreate_nblocks fs/reiserfs/xattr.h:78 [inline]
lr : reiserfs_xattr_set+0x294/0x4d4 fs/reiserfs/xattr.c:631
sp : ffff800020207720
x29: ffff800020207810 x28: 0000000000000068 x27: 0000000000000002
x26: ffff0000efe90000 x25: 0000000000000002 x24: ffff0000e5d8e4f0
x23: ffff0000e5d8e518 x22: dfff800000000000 x21: ffff700004040eec
x20: 1fffe0001cbb1ca3 x19: 000000000000006c x18: 0000000000000000
x17: 0000000000000000 x16: ffff80000a4d5e64 x15: 0000000000000003
x14: 0000000000000007 x13: 1ffff00004040ef0 x12: 0000000000000000
x11: ff80800008c4cc28 x10: 000000000000006c x9 : 00000000000001c0
x8 : 000000000000000d x7 : 0000000000000000 x6 : 0000000000000002
x5 : ffff0000d55cbc00 x4 : 0000000000000000 x3 : 0000000000000030
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 d_really_is_negative include/linux/dcache.h:476 [inline]
 reiserfs_xattr_jcreate_nblocks fs/reiserfs/xattr.h:79 [inline]
 reiserfs_xattr_set+0x2d0/0x4d4 fs/reiserfs/xattr.c:631
 security_set+0x9c/0xd4 fs/reiserfs/xattr_security.c:32
 __vfs_setxattr+0x374/0x390 fs/xattr.c:182
 __vfs_setxattr_noperm+0x120/0x56c fs/xattr.c:216
 __vfs_setxattr_locked+0x1e8/0x214 fs/xattr.c:277
 vfs_setxattr+0x158/0x2a8 fs/xattr.c:303
 do_setxattr fs/xattr.c:588 [inline]
 setxattr+0x278/0x2f8 fs/xattr.c:611
 __do_sys_fsetxattr fs/xattr.c:667 [inline]
 __se_sys_fsetxattr fs/xattr.c:656 [inline]
 __arm64_sys_fsetxattr+0x1b8/0x234 fs/xattr.c:656
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x28c arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x5c/0x140 arch/arm64/kernel/syscall.c:181
 el0_svc+0x78/0x1d0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: f9400388 aa1903fb 9101a11c d343ff88 (38766908) 
---[ end trace d0f47fbf9d8f0837 ]---
----------------
Code disassembly (best guess):
   0:	f9400388 	ldr	x8, [x28]
   4:	aa1903fb 	mov	x27, x25
   8:	9101a11c 	add	x28, x8, #0x68
   c:	d343ff88 	lsr	x8, x28, #3
* 10:	38766908 	ldrb	w8, [x8, x22] <-- trapping instruction