Unable to handle kernel NULL pointer dereference at virtual address 000000000000007e
Mem abort info:
  ESR = 0x0000000096000006
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x06: level 2 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000006
  CM = 0, WnR = 0
user pgtable: 4k pages, 48-bit VAs, pgdp=000000016299f000
[000000000000007e] pgd=080000014be4c003, p4d=080000014be4c003, pud=08000001628a8003, pmd=0000000000000000
Internal error: Oops: 96000006 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 11147 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : skb_clone+0x60/0x168 net/core/skbuff.c:1534
lr : skb_zcopy include/linux/skbuff.h:1631 [inline]
lr : skb_orphan_frags include/linux/skbuff.h:3056 [inline]
lr : skb_clone+0x50/0x168 net/core/skbuff.c:1531
sp : ffff8000136cb830
x29: ffff8000136cb830 x28: ffff0000c8f20c00 x27: 0000000000000040
x26: ffff000111928040 x25: ffff80000d912810 x24: 0000000000000000
x23: ffff0000fd6f4c80 x22: ffff00011344a080 x21: ffff0000c8f20c00
x20: 0000000000000a20 x19: 0000000000000000 x18: fffffffffffffff8
x17: 0000000000000000 x16: 0000000000000200 x15: 0000000000000000
x14: 0000000000000002 x13: 0000000000000100 x12: 0000000000040000
x11: 0000000000000578 x10: ffff800018059000 x9 : ffff80000b205580
x8 : 0000000000000579 x7 : ffff80000b244d84 x6 : 00000000ffffffff
x5 : 0000000000000a20 x4 : 0000000000000100 x3 : 00000000000000f0
x2 : ffff0000c01a1d00 x1 : 0000000000000a20 x0 : 0000000000000000
Call trace:
 skb_orphan_frags include/linux/skbuff.h:3056 [inline]
 skb_clone+0x60/0x168 net/core/skbuff.c:1531
 hsr_get_untagged_frame+0x3c/0x188 net/hsr/hsr_forward.c:164
 hsr_forward_skb+0x4cc/0x980 net/hsr/hsr_forward.c:623
 hsr_handle_frame+0x258/0x2ac net/hsr/hsr_slave.c:69
 __netif_receive_skb_core+0x71c/0x1088 net/core/dev.c:5379
 __netif_receive_skb_one_core net/core/dev.c:5483 [inline]
 __netif_receive_skb+0x4c/0x14c net/core/dev.c:5599
 netif_receive_skb_internal+0x10c/0x270 net/core/dev.c:5685
 netif_receive_skb+0x28/0x44 net/core/dev.c:5744
 tun_rx_batched+0x1e0/0x220
 tun_get_user+0xf78/0x110c drivers/net/tun.c:1995
 tun_chr_write_iter+0xa4/0x134 drivers/net/tun.c:2025
 call_write_iter include/linux/fs.h:2187 [inline]
 new_sync_write fs/read_write.c:491 [inline]
 vfs_write+0x2dc/0x46c fs/read_write.c:578
 ksys_write+0xb4/0x160 fs/read_write.c:631
 __do_sys_write fs/read_write.c:643 [inline]
 __se_sys_write fs/read_write.c:640 [inline]
 __arm64_sys_write+0x24/0x34 fs/read_write.c:640
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall arch/arm64/kernel/syscall.c:52 [inline]
 el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x48/0x154 arch/arm64/kernel/syscall.c:206
 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:624
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:642
 el0t_64_sync+0x18c/0x190
Code: 14000004 f94016c8 b5000628 974278cf (3941fa76) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	14000004 	b	0x10
   4:	f94016c8 	ldr	x8, [x22, #40]
   8:	b5000628 	cbnz	x8, 0xcc
   c:	974278cf 	bl	0xfffffffffd09e348
* 10:	3941fa76 	ldrb	w22, [x19, #126] <-- trapping instruction