Unable to handle kernel NULL pointer dereference at virtual address 000000000000007e
Mem abort info:
  ESR = 0x0000000096000006
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x06: level 2 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000006
  CM = 0, WnR = 0
user pgtable: 4k pages, 48-bit VAs, pgdp=00000001118bd000
[000000000000007e] pgd=0800000111cdf003, p4d=0800000111cdf003, pud=08000001118c6003, pmd=0000000000000000
Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 13264 Comm: syz-executor.5 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : skb_clone+0x60/0x168 net/core/skbuff.c:1538
lr : skb_zcopy include/linux/skbuff.h:1631 [inline]
lr : skb_orphan_frags include/linux/skbuff.h:3077 [inline]
lr : skb_clone+0x50/0x168 net/core/skbuff.c:1535
sp : ffff800017423840
x29: ffff800017423840 x28: ffff0000d1b1d100 x27: 0000000000000040
x26: ffff0000d19a8040 x25: ffff80000d8a3710 x24: 0000000000000000
x23: ffff0000d1030c80 x22: ffff0000d02f0000 x21: ffff0000d1b1d100
x20: 0000000000000a20 x19: 0000000000000000 x18: fffffffffffffff8
x17: 0000000000000000 x16: 0000000000000200 x15: 0000000000000000
x14: 0000000000000000 x13: 0000000000000100 x12: 00000000000000bb
x11: ff8080000b1ce3d4 x10: 0000000000000000 x9 : ffff80000b1ce3d4
x8 : ffff0000d1940000 x7 : ffff80000b20d9b8 x6 : 00000000ffffffff
x5 : 0000000000000a20 x4 : 0000000000000100 x3 : 00000000000000f0
x2 : ffff0000c01a0d00 x1 : 0000000000000a20 x0 : 0000000000000000
Call trace:
 skb_orphan_frags include/linux/skbuff.h:3077 [inline]
 skb_clone+0x60/0x168 net/core/skbuff.c:1535
 hsr_get_untagged_frame+0x3c/0x188 net/hsr/hsr_forward.c:164
 hsr_forward_skb+0x4cc/0x980 net/hsr/hsr_forward.c:623
 hsr_handle_frame+0x258/0x2ac net/hsr/hsr_slave.c:69
 __netif_receive_skb_core+0x6e4/0x10dc net/core/dev.c:5379
 __netif_receive_skb_one_core net/core/dev.c:5483 [inline]
 __netif_receive_skb+0x4c/0x14c net/core/dev.c:5599
 netif_receive_skb_internal+0xb4/0x258 net/core/dev.c:5685
 netif_receive_skb+0x28/0x44 net/core/dev.c:5744
 tun_rx_batched+0x1e0/0x220
 tun_get_user+0xf78/0x111c drivers/net/tun.c:1995
 tun_chr_write_iter+0xa4/0x144 drivers/net/tun.c:2025
 call_write_iter include/linux/fs.h:2187 [inline]
 new_sync_write fs/read_write.c:491 [inline]
 vfs_write+0x2dc/0x46c fs/read_write.c:578
 ksys_write+0xb4/0x160 fs/read_write.c:631
 __do_sys_write fs/read_write.c:643 [inline]
 __se_sys_write fs/read_write.c:640 [inline]
 __arm64_sys_write+0x24/0x34 fs/read_write.c:640
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall arch/arm64/kernel/syscall.c:52 [inline]
 el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x48/0x164 arch/arm64/kernel/syscall.c:206
 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:636
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:654
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581
Code: 14000004 f94016c8 b5000628 9743460d (3941fa76) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	14000004 	b	0x10
   4:	f94016c8 	ldr	x8, [x22, #40]
   8:	b5000628 	cbnz	x8, 0xcc
   c:	9743460d 	bl	0xfffffffffd0d1840
* 10:	3941fa76 	ldrb	w22, [x19, #126] <-- trapping instruction