Unable to handle kernel paging request at virtual address dfff80000000001b
KASAN: null-ptr-deref in range [0x00000000000000d8-0x00000000000000df]
Mem abort info:
  ESR = 0x0000000096000006
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x06: level 2 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000006
  CM = 0, WnR = 0
[dfff80000000001b] address between user and kernel address ranges
Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 55 Comm: kworker/u4:3 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
Workqueue: bat_events batadv_bla_periodic_work
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : arp_create+0x5c/0x7ec net/ipv4/arp.c:553
lr : arp_create+0x4c/0x7ec net/ipv4/arp.c:549
sp : ffff80001cfd78c0
x29: ffff80001cfd7900 x28: 0000000000000000 x27: 0000000000000000
x26: 0000000000000000 x25: ffff0000cb79ab28 x24: dfff800000000000
x23: 0000000000000000 x22: ffff80001cfd7980 x21: ffff80001cfd79a0
x20: ffff0000d9a56380 x19: 0000000000000000 x18: ffff800011b8bf60
x17: 1fffe00033eac97e x16: ffff8000082d7ca0 x15: 0000000040000000
x14: ffff7000039faf34 x13: 1ffff000039faf34 x12: 0000000000ff0100
x11: ff008000105bb3f0 x10: 0000000000000000 x9 : 0000000000000007
x8 : 000000000000001b x7 : ffff80001cfd79a0 x6 : ffff0000cb79ab28
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000806 x0 : 00000000000000de
Call trace:
 arp_create+0x5c/0x7ec net/ipv4/arp.c:553
 batadv_bla_send_claim+0x134/0xa9c net/batman-adv/bridge_loop_avoidance.c:361
 batadv_bla_send_announce net/batman-adv/bridge_loop_avoidance.c:675 [inline]
 batadv_bla_periodic_work+0x498/0x994 net/batman-adv/bridge_loop_avoidance.c:1481
 process_one_work+0x7f8/0x13a4 kernel/workqueue.c:2292
 worker_thread+0x8c4/0xfec kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
Code: 91037b60 d343fc08 12000809 11000529 (38f86908) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	91037b60 	add	x0, x27, #0xde
   4:	d343fc08 	lsr	x8, x0, #3
   8:	12000809 	and	w9, w0, #0x7
   c:	11000529 	add	w9, w9, #0x1
* 10:	38f86908 	ldrsb	w8, [x8, x24] <-- trapping instruction