Unable to handle kernel paging request at virtual address dfff800000000000
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
Mem abort info:
  ESR = 0x0000000096000005
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x05: level 1 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000
  CM = 0, WnR = 0, TnD = 0, TagAccess = 0
  GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[dfff800000000000] address between user and kernel address ranges
Internal error: Oops: 0000000096000005 [#1]  SMP
Modules linked in:
CPU: 0 UID: 0 PID: 1831 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
Workqueue: events rcu_pending_work
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : genradix_free_recurse+0x4c/0xdc lib/generic-radix-tree.c:203
lr : genradix_free_recurse+0x30/0xdc lib/generic-radix-tree.c:199
sp : ffff8000a0ce78c0
x29: ffff8000a0ce78c0 x28: dfff800000000000 x27: ffff8000a0ce7960
x26: 0000000000000018 x25: ffff000108a04388 x24: dfff800000000000
x23: 0000000000000000 x22: ffff8000828b6f00 x21: 0000000000000000
x20: 0000000000000003 x19: 0000000000000000 x18: 1fffe00033771c88
x17: ffff80010c3e8000 x16: ffff80008052bc24 x15: 0000000000000001
x14: 1ffff0001419cf30 x13: 0000000000000000 x12: 0000000000000000
x11: ffff70001419cf31 x10: 0000000000ff0100 x9 : 0000000000000000
x8 : 0000000000000000 x7 : 0000000000000000 x6 : ffff0000dc8e2c00
x5 : fffffdffbf6e2830 x4 : 0000000000000000 x3 : ffff8000830b2810
x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000000
Call trace:
 genradix_free_recurse+0x4c/0xdc lib/generic-radix-tree.c:203 (P)
 __genradix_free+0x48/0x58 lib/generic-radix-tree.c:227
 __process_finished_items+0x664/0x720 fs/bcachefs/rcu_pending.c:263
 process_finished_items+0x254/0x27c fs/bcachefs/rcu_pending.c:291
 rcu_pending_work+0x60/0x90 fs/bcachefs/rcu_pending.c:307
 process_one_work+0x7e8/0x155c kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x958/0xed8 kernel/workqueue.c:3400
 kthread+0x5fc/0x75c kernel/kthread.c:463
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844
Code: 51000694 f2fbfff8 aa1303f5 d343fea8 (38786908) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	51000694 	sub	w20, w20, #0x1
   4:	f2fbfff8 	movk	x24, #0xdfff, lsl #48
   8:	aa1303f5 	mov	x21, x19
   c:	d343fea8 	lsr	x8, x21, #3
* 10:	38786908 	ldrb	w8, [x8, x24] <-- trapping instruction