BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 PGD 1cc22c067 P4D 1cc22c067 PUD 1b0c00067 PMD 0 Oops: 0010 [#1] SMP KASAN CPU: 0 PID: 781 Comm: syz-executor1 Not tainted 4.18.0-rc2+ #24 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010: (null) Code: Bad RIP value. RSP: 0018:ffff88019f6e73e8 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff8801d25fd9c0 RCX: ffffc90002618000 RDX: ffff88019f6e76a0 RSI: ffff8801d25fd9c0 RDI: ffff8801cf4ed800 RBP: ffff88019f6e7490 R08: ffff8801992be5c0 R09: ffff88019f6e6f40 R10: 0000000000000003 R11: 0000000000000000 R12: ffff88019f6e76a0 R13: ffff8801cf4ed800 R14: ffffffff8818a920 R15: ffff8801d86c7440 FS: 0000000000000000(0000) GS:ffff8801dae00000(0063) knlGS:00000000f5f61b40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: ffffffffffffffd6 CR3: 00000001d7bc0000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: vfs_poll include/linux/poll.h:86 [inline] do_select+0xac4/0x1b00 fs/select.c:507 compat_core_sys_select+0x848/0xb10 fs/select.c:1236 do_compat_pselect+0x239/0x4d0 fs/select.c:1336 __do_compat_sys_pselect6 fs/select.c:1371 [inline] __se_compat_sys_pselect6 fs/select.c:1356 [inline] __ia32_compat_sys_pselect6+0x1f5/0x280 fs/select.c:1356 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline] do_fast_syscall_32+0x34d/0xfb2 arch/x86/entry/common.c:397 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 RIP: 0023:0xf7f65cb9 Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 RSP: 002b:00000000f5f610ac EFLAGS: 00000282 ORIG_RAX: 0000000000000134 RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 0000000020f33fc0 RDX: 0000000020768000 RSI: 0000000020086000 RDI: 0000000020349000 RBP: 0000000020f14000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 Modules linked in: Dumping ftrace buffer: (ftrace buffer empty) CR2: 0000000000000000 ---[ end trace d19bde9fcfd42250 ]--- RIP: 0010: (null) ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 Code: Bad RIP value. ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 RSP: 0018:ffff88019f6e73e8 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff8801d25fd9c0 RCX: ffffc90002618000 RDX: ffff88019f6e76a0 RSI: ffff8801d25fd9c0 RDI: ffff8801cf4ed800 RBP: ffff88019f6e7490 R08: ffff8801992be5c0 R09: ffff88019f6e6f40 R10: 0000000000000003 R11: 0000000000000000 R12: ffff88019f6e76a0 R13: ffff8801cf4ed800 R14: ffffffff8818a920 R15: ffff8801d86c7440 FS: 0000000000000000(0000) GS:ffff8801dae00000(0063) knlGS:00000000f5f61b40 ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: ffffffffffffffd6 CR3: 00000001d7bc0000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400