Unable to handle kernel paging request at virtual address ffff8001f1cee000
Mem abort info:
  ESR = 0x0000000096000005
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x05: level 1 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000005
  CM = 0, WnR = 0
swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001c54db000
[ffff8001f1cee000] pgd=100000023ffff003, p4d=100000023ffff003, pud=0000000000000000
Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 14934 Comm: kworker/0:16 Not tainted 6.1.0-rc2-syzkaller-154433-g247f34f7b803 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Workqueue: events free_ipc
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : percpu_counter_add_batch+0x4c/0x170 lib/percpu_counter.c:87
lr : percpu_counter_add_batch+0x3c/0x170 lib/percpu_counter.c:87
sp : ffff800021d23be0
x29: ffff800021d23be0 x28: ffff80000d2fb000 x27: ffff0001187fe310
x26: 0000000000000000 x25: 0000000000000000 x24: ffff0001187fe300
x23: ffff0001187fe300 x22: ffff000118e45d80 x21: 000000007fffffff
x20: ffffffffffffffff x19: ffff0000cbcea7b8 x18: 0000000000000013
x17: 0000000052172550 x16: 0000000000000001 x15: 0000000000000000
x14: 0000000000000000 x13: 0000000000000003 x12: ffff80000d65f7f8
x11: ff808000095d4118 x10: 0000000000000000 x9 : ffff8001f1cee000
x8 : 0000000000000000 x7 : 0000000000000000 x6 : ffff8000095d57e4
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 000000007fffffff x1 : 000000007fffffff x0 : 0000000000000000
Call trace:
 percpu_counter_add_batch+0x4c/0x170 lib/percpu_counter.c:88
 percpu_counter_add_local include/linux/percpu_counter.h:75 [inline]
 percpu_counter_sub_local include/linux/percpu_counter.h:225 [inline]
 freeque+0x21c/0x2e8 ipc/msg.c:289
 free_ipcs+0x11c/0x170 ipc/namespace.c:125
 msg_exit_ns+0x3c/0x5c ipc/msg.c:1334
 free_ipc_ns+0x34/0x12c ipc/namespace.c:138
 free_ipc+0x4c/0x7c ipc/namespace.c:157
 process_one_work+0x2d8/0x504 kernel/workqueue.c:2289
 worker_thread+0x340/0x610 kernel/workqueue.c:2436
 kthread+0x12c/0x158 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
Code: f9402e68 d538d089 93407eb5 aa1503e1 (b8a86937) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	f9402e68 	ldr	x8, [x19, #88]
   4:	d538d089 	mrs	x9, tpidr_el1
   8:	93407eb5 	sxtw	x21, w21
   c:	aa1503e1 	mov	x1, x21
* 10:	b8a86937 	ldrsw	x23, [x9, x8] <-- trapping instruction