Unable to handle kernel paging request at virtual address dfff800000000000
Mem abort info:
  ESR = 0x0000000096000006
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x06: level 2 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000006
  CM = 0, WnR = 0
[dfff800000000000] address between user and kernel address ranges
Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted 5.15.179-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : dev_map_generic_redirect+0x98/0x7b8 kernel/bpf/devmap.c:667
lr : dev_map_generic_redirect+0x94/0x7b8 kernel/bpf/devmap.c:664
sp : ffff80001bdc6660
x29: ffff80001bdc6790 x28: ffff0000d74f8140 x27: ffff80002055b000
x26: ffff800014b71010 x25: dfff800000000000 x24: 0000000000000021
x23: ffff800014b71008 x22: 0000000000000000 x21: ffff80001bdc66c0
x20: ffff7000037b8cd8 x19: 0000000000000000 x18: 0000000000000100
x17: 0000000000000000 x16: ffff800010017d78 x15: 0000000000000019
x14: ffff0000c0a78000 x13: 0000000000ff0100 x12: ffffffffffffffff
x11: 0000000000000100 x10: 0000000000000000 x9 : ffff0000c0a78000
x8 : ffff80000864d15c x7 : f100000000000004 x6 : 0000000000000000
x5 : ffff0000d1c7cef0 x4 : ffff0000d5c716f0 x3 : ffff80002055b000
x2 : ffff80002055b000 x1 : ffff0000d74f8140 x0 : 0000000000000000
Call trace:
 dev_map_generic_redirect+0x98/0x7b8 kernel/bpf/devmap.c:667
 xdp_do_generic_redirect_map net/core/filter.c:4177 [inline]
 xdp_do_generic_redirect+0x3fc/0xe30 net/core/filter.c:4236
 do_xdp_generic+0x3b8/0x8a8 net/core/dev.c:4942
 __netif_receive_skb_core+0x15c4/0x3420 net/core/dev.c:5347
 __netif_receive_skb_one_core net/core/dev.c:5522 [inline]
 __netif_receive_skb+0x114/0x400 net/core/dev.c:5638
 netif_receive_skb_internal net/core/dev.c:5724 [inline]
 netif_receive_skb+0x1e0/0x8c4 net/core/dev.c:5783
 br_netif_receive_skb+0x148/0x19c net/bridge/br_input.c:30
 NF_HOOK+0xa8/0x3e0 include/linux/netfilter.h:302
 br_pass_frame_up+0x2a4/0x3f4 net/bridge/br_input.c:70
 br_handle_frame_finish+0xe94/0x1264
 br_nf_hook_thresh+0x388/0x47c
 br_nf_pre_routing_finish_ipv6+0x828/0xaf4
 NF_HOOK include/linux/netfilter.h:302 [inline]
 br_nf_pre_routing_ipv6+0x2ac/0x628 net/bridge/br_netfilter_ipv6.c:237
 br_nf_pre_routing+0x548/0x102c net/bridge/br_netfilter_hooks.c:512
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:242 [inline]
 br_handle_frame+0x870/0xf04 net/bridge/br_input.c:384
 __netif_receive_skb_core+0xf10/0x3420 net/core/dev.c:5418
 __netif_receive_skb_one_core net/core/dev.c:5522 [inline]
 __netif_receive_skb+0x114/0x400 net/core/dev.c:5638
 process_backlog+0x3ec/0x7e0 net/core/dev.c:6515
 __napi_poll+0xb4/0x624 net/core/dev.c:7074
 napi_poll net/core/dev.c:7141 [inline]
 net_rx_action+0x500/0xc10 net/core/dev.c:7231
 handle_softirqs+0x384/0xdbc kernel/softirq.c:558
 run_ksoftirqd+0x6c/0x29c kernel/softirq.c:925
 smpboot_thread_fn+0x4b0/0x920 kernel/smpboot.c:164
 kthread+0x37c/0x45c kernel/kthread.c:334
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870
Code: b800f289 39004e8a 97f9e060 d343fe76 (38796ac8) 
---[ end trace 34121228334e9b3e ]---
----------------
Code disassembly (best guess):
   0:	b800f289 	stur	w9, [x20, #15]
   4:	39004e8a 	strb	w10, [x20, #19]
   8:	97f9e060 	bl	0xffffffffffe78188
   c:	d343fe76 	lsr	x22, x19, #3
* 10:	38796ac8 	ldrb	w8, [x22, x25] <-- trapping instruction