We are currently using &offset_node->loc when offset_node is NULL. A NULL dereference of rel_offset can also happen if hlsl_offset_from_deref() fails because the dereference is out of bounds.