Unable to handle kernel paging request at virtual address dfff800000000003
KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f]
Mem abort info:
  ESR = 0x0000000096000006
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x06: level 2 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000006
  CM = 0, WnR = 0
[dfff800000000003] address between user and kernel address ranges
Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 3902 Comm: kworker/0:3 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
Workqueue: kafsd afs_process_async_call
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : rxrpc_kernel_get_srtt+0x34/0x124 net/rxrpc/peer_object.c:518
lr : rxrpc_kernel_get_srtt+0x2c/0x124 net/rxrpc/peer_object.c:517
sp : ffff800025897960
x29: ffff800025897970 x28: 1fffe0001b70503f x27: ffff0000f0d9190a
x26: 0000000000000000 x25: ffff0000f45f5700 x24: dfff800000000000
x23: ffff700004b12f38 x22: ffff0000db8280f0 x21: dfff800000000000
x20: 0000000000000018 x19: ffff8000258979e0 x18: 1fffe00033e7037e
x17: ffff80001538d000 x16: ffff8000082f2858 x15: 0000000000000000
x14: 0000000000000001 x13: 1fffe0001e1b2303 x12: 0000000000000000
x11: ff00800010fdc9d8 x10: 0000000000000000 x9 : ffff800010fdc9d8
x8 : 0000000000000003 x7 : ffff800009c97950 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800009c97c94
x2 : ffff8000258979e0 x1 : 0000000000000000 x0 : ffff0000e191e000
Call trace:
 rxrpc_kernel_get_srtt+0x34/0x124 net/rxrpc/peer_object.c:518
 afs_vlserver_probe_result+0x4dc/0x9e8 fs/afs/vl_probe.c:118
 afs_deliver_to_call+0x9a4/0xec0 fs/afs/rxrpc.c:563
 afs_process_async_call+0x90/0xf8 fs/afs/rxrpc.c:703
 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
 kthread+0x254/0x2e0 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
Code: f2fbfff5 97c04fb1 91006294 d343fe88 (38756908) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	f2fbfff5 	movk	x21, #0xdfff, lsl #48
   4:	97c04fb1 	bl	0xffffffffff013ec8
   8:	91006294 	add	x20, x20, #0x18
   c:	d343fe88 	lsr	x8, x20, #3
* 10:	38756908 	ldrb	w8, [x8, x21] <-- trapping instruction