Unable to handle kernel paging request at virtual address dfff800000000002
KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]
Mem abort info:
  ESR = 0x0000000096000005
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x05: level 1 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000
  CM = 0, WnR = 0, TnD = 0, TagAccess = 0
  GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[dfff800000000002] address between user and kernel address ranges
Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 6270 Comm: kworker/u9:3 Not tainted 6.9.0-rc7-syzkaller-gfda5695d692c #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Workqueue: bcachefs bch2_write_point_do_index_updates
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : bch2_snapshot_has_children fs/bcachefs/snapshot.h:188 [inline]
pc : __bch2_insert_snapshot_whiteouts+0x28c/0x10d0 fs/bcachefs/btree_update.c:135
lr : __snapshot_t fs/bcachefs/snapshot.h:38 [inline]
lr : snapshot_t fs/bcachefs/snapshot.h:45 [inline]
lr : bch2_snapshot_has_children fs/bcachefs/snapshot.h:187 [inline]
lr : __bch2_insert_snapshot_whiteouts+0xfcc/0x10d0 fs/bcachefs/btree_update.c:135
sp : ffff8000a5d26880
x29: ffff8000a5d26b80 x28: ffff0000f4630000 x27: dfff800000000000
x26: ffff700014ba4d2c x25: ffff8000a5d26b20 x24: ffff8000a5d26a00
x23: ffff8000a5d26960 x22: ffff8000a5d270f0 x21: ffff8000a5d26a90
x20: 0000000000000000 x19: 0000000000000001 x18: ffff8000a5d265e0
x17: 00000000000119c4 x16: ffff800080331e9c x15: 0000000000000003
x14: ffff80008eeb0668 x13: dfff800000000000 x12: 0000000062e1bbc5
x11: 0000000017bf28b5 x10: 0000000000ff0100 x9 : 0000000000000000
x8 : 0000000000000002 x7 : ffff80008279c2d8 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002
x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000014
Call trace:
 bch2_snapshot_has_children fs/bcachefs/snapshot.h:188 [inline]
 __bch2_insert_snapshot_whiteouts+0x28c/0x10d0 fs/bcachefs/btree_update.c:135
 bch2_insert_snapshot_whiteouts fs/bcachefs/btree_update.h:93 [inline]
 bch2_trans_update_extent_overwrite+0x9cc/0x21dc fs/bcachefs/btree_update.c:218
 bch2_trans_update_extent fs/bcachefs/btree_update.c:318 [inline]
 bch2_trans_update+0x121c/0x1c70 fs/bcachefs/btree_update.c:514
 bch2_extent_update+0x368/0x9b4 fs/bcachefs/io_write.c:317
 bch2_write_index_default fs/bcachefs/io_write.c:366 [inline]
 __bch2_write_index+0x6b4/0x1324 fs/bcachefs/io_write.c:520
 bch2_write_point_do_index_updates+0x288/0x560 fs/bcachefs/io_write.c:629
 process_one_work+0x7b8/0x15d4 kernel/workqueue.c:3267
 process_scheduled_works kernel/workqueue.c:3348 [inline]
 worker_thread+0x938/0xef4 kernel/workqueue.c:3429
 kthread+0x288/0x310 kernel/kthread.c:388
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
Code: 91006114 91005280 f9406bf9 d343fc08 (38fb6908) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	91006114 	add	x20, x8, #0x18
   4:	91005280 	add	x0, x20, #0x14
   8:	f9406bf9 	ldr	x25, [sp, #208]
   c:	d343fc08 	lsr	x8, x0, #3
* 10:	38fb6908 	ldrsb	w8, [x8, x27] <-- trapping instruction