Unable to handle kernel paging request at virtual address dfff800000000000
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
Mem abort info:
  ESR = 0x0000000096000005
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x05: level 1 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000
  CM = 0, WnR = 0, TnD = 0, TagAccess = 0
  GCS = 0, Overlay = 0, DirtyBit = 0
[dfff800000000000] address between user and kernel address ranges
Internal error: Oops: 0000000096000005 [#1]  SMP
Modules linked in:
CPU: 1 UID: 0 PID: 4822 Comm: syz-executor Tainted: G   M                syzkaller #0 PREEMPT 
Tainted: [M]=MACHINE_CHECK
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
pstate: 03400005 (nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : vxlan_handle_lowerdev_unregister drivers/net/vxlan/vxlan_core.c:4729 [inline]
pc : vxlan_netdevice_event+0x190/0x2c4 drivers/net/vxlan/vxlan_core.c:4752
lr : vxlan_netdevice_event+0xd8/0x2c4 drivers/net/vxlan/vxlan_core.c:4751
sp : ffff8000956f7280
x29: ffff8000956f7310 x28: ffff800089797ec8 x27: 1fffe0001e71281c
x26: dfff800000000000 x25: ffff700012adee54 x24: dfff800000000000
x23: ffff80008979c480 x22: 0000000000000000 x21: ffff0000f38940e0
x20: ffff0000c9472000 x19: ffff8000956f72c0 x18: 1fffe000349fbc28
x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
x14: 0000000000a3f368 x13: 0000000000000009 x12: 0000000000000009
x11: 0000000010b4364a x10: 000000000000007f x9 : 1ffff00012adee59
x8 : 0000000000000000 x7 : ffff800082cd0718 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800082cebdec
x2 : 0000000000000006 x1 : ffff0000c5c0bb00 x0 : 0000000000000000
Call trace:
 vxlan_handle_lowerdev_unregister drivers/net/vxlan/vxlan_core.c:4729 [inline] (P)
 vxlan_netdevice_event+0x190/0x2c4 drivers/net/vxlan/vxlan_core.c:4752 (P)
 notifier_call_chain+0x1a4/0x4cc kernel/notifier.c:85
 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453
 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275
 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline]
 call_netdevice_notifiers net/core/dev.c:2327 [inline]
 unregister_netdevice_many_notify+0xf24/0x1760 net/core/dev.c:12561
 unregister_netdevice_many net/core/dev.c:12632 [inline]
 unregister_netdevice_queue+0x274/0x30c net/core/dev.c:12433
 unregister_netdevice include/linux/netdevice.h:3490 [inline]
 __tun_detach+0x9d8/0x1180 drivers/net/tun.c:637
 tun_detach drivers/net/tun.c:653 [inline]
 tun_chr_close+0x118/0x1f4 drivers/net/tun.c:3587
 __fput+0x338/0x74c fs/file_table.c:512
 ____fput+0x20/0x30 fs/file_table.c:540
 task_work_run+0x1cc/0x25c kernel/task_work.c:233
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0x58c/0x1a74 kernel/exit.c:986
 do_group_exit+0x198/0x238 kernel/exit.c:1129
 get_signal+0xfb0/0x1094 kernel/signal.c:3112
 arch_do_signal_or_restart+0x288/0x444c arch/arm64/kernel/signal.c:1671
 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
 exit_to_user_mode_loop+0x70/0x17c kernel/entry/common.c:101
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
 arm64_syscall_exit_to_user_mode arch/arm64/kernel/entry-common.c:146 [inline]
 el0_svc+0x12c/0x1d8 arch/arm64/kernel/entry-common.c:797
 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606
Code: 12000aa8 11000d08 b9001fe8 d343fec8 (387a6908) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	12000aa8 	and	w8, w21, #0x7
   4:	11000d08 	add	w8, w8, #0x3
   8:	b9001fe8 	str	w8, [sp, #28]
   c:	d343fec8 	lsr	x8, x22, #3
* 10:	387a6908 	ldrb	w8, [x8, x26] <-- trapping instruction