8<--- cut here --- Unable to handle kernel NULL pointer dereference at virtual address 00000000 pgd = 86a5bdc0 [00000000] *pgd=86a4a003, *pmd=fe671003 Internal error: Oops: 207 [#1] PREEMPT SMP ARM Modules linked in: CPU: 0 PID: 6787 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 Hardware name: ARM-Versatile Express PC is at __list_del_entry_valid+0x28/0x9c lib/list_debug.c:51 LR is at __list_del_entry include/linux/list.h:132 [inline] LR is at list_del_init include/linux/list.h:204 [inline] LR is at __fw_load_abort drivers/base/firmware_loader/fallback.c:97 [inline] LR is at __fw_load_abort drivers/base/firmware_loader/fallback.c:88 [inline] LR is at kill_pending_fw_fallback_reqs+0x64/0xb4 drivers/base/firmware_loader/fallback.c:119 pc : [<808072e4>] lr : [<80a3996c>] psr: 80000013 sp : 86c85c00 ip : 86c85c10 fp : 86c85c0c r10: 833ba640 r9 : 86c58300 r8 : 00000003 r7 : 00000001 r6 : 82b6b2d0 r5 : ffffff94 r4 : 86c5836c r3 : 00000000 r2 : 00000000 r1 : 00000122 r0 : 86c5836c Flags: Nzcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 86a5bdc0 DAC: fffffffd Process syz-executor.0 (pid: 6787, stack limit = 0x86c84210) Stack: (0x86c85c00 to 0x86c86000) 5c00: 86c85c34 86c85c10 80a3996c 808072c8 82b85378 00000001 fffffffa 86c85c90 5c20: 00000001 00000000 86c85c4c 86c85c38 80a37988 80a39914 82b85378 00000001 5c40: 86c85c84 86c85c50 80275934 80a37958 81f4aaf0 81f4aad4 81825014 82b0a558 5c60: 82a40bb0 00000000 00000002 00000000 82a40c00 81a0367c 86c85cbc 86c85c88 5c80: 80275bf8 802758dc 86c85c90 840475e8 00000004 56b92eae 83278a04 00000000 5ca0: 86f66640 82b65e18 840475e8 000000e7 86c85ccc 86c85cc0 802c7910 80275b9c 5cc0: 86c85ce4 86c85cd0 802d05c4 802c78f8 82a41068 82b65e64 86c85d14 86c85ce8 5ce0: 8098d3d0 802d0524 8098d290 8354c400 840475e8 81b1e1fc 86f66640 804e0074 5d00: 86f66648 840475e8 86c85d44 86c85d18 804e013c 8098d29c 806f319c 56b92eae 5d20: 86f66640 840475e8 00000000 86c85e58 804e0074 86f66648 86c85d6c 86c85d48 5d40: 804d565c 804e0080 00040040 86c85f20 82a3c39c 86c85e58 86f66640 00000000 5d60: 86c85d7c 86c85d70 804d7564 804d5520 86c85e54 86c85d80 804ec9dc 804d753c 5d80: 00000000 00000000 86c85da4 86c85d98 8181dacc 8181d97c 00000041 81f713c8 5da0: 00008000 86c85e60 86c84000 00000001 834e8370 00040040 00000040 00000000 5dc0: 8181dacc 8181d97c 86c85e4c 00000000 dead4ead ffffffff ffffffff 832cb4dc 5de0: 00000000 00000000 81f713c8 00000200 86c85df0 86c85df0 00000000 dead4ead 5e00: ffffffff ffffffff 832cb4dc 00000000 00000000 81f713c8 00000200 86c85df0 5e20: 86c85df0 56b92eae 60000013 86c85f58 86c85e58 86c85f20 00000001 80200224 5e40: 86c84000 00000142 86c85f0c 86c85e58 804ef4ac 804ec438 858c1790 838529c0 5e60: 3bb95240 00000008 85691015 56b92eae 858c10d0 83e933c0 840475e8 00000309 5e80: 00000000 000002c6 000013b2 00000000 00000000 00000000 86c85e9c 8027e0bc 5ea0: 00000004 00000001 86c85efc 86c85eb8 80502a5c 81826a2c 86c85ef4 81f9199c 5ec0: 81f40284 00040040 86f66580 85691000 00000000 00000002 ffffff9c 00000000 5ee0: ffff41ed 80200224 86c84000 56b92eae 86c85f58 85691000 00000004 ffffff9c 5f00: 86c85f54 86c85f10 804d782c 804ef43c 8020d140 8020e34c 00000000 80200e90 5f20: 00040040 80208000 00000004 00000300 00000001 56b92eae ffffff9c 20000600 5f40: 00000000 00000142 86c85fa4 86c85f58 804d7cd0 804d7790 00040040 00000000 5f60: 00000000 00000000 00000000 00000000 00040040 00000000 00000000 00000000 5f80: 00000000 00000000 80384db8 56b92eae 00000000 00000000 00000000 86c85fa8 5fa0: 80200060 804d7c38 00000000 00000000 ffffff9c 20000600 00040040 00000000 5fc0: 00000000 00000000 00000000 00000142 7ebe833a 76fbb6d0 7ebe84ac 76fbb20c 5fe0: 76fbb048 76fbb038 00018d58 0004b620 60000010 ffffff9c 00000000 00000000 Backtrace: [<808072bc>] (__list_del_entry_valid) from [<80a3996c>] (__list_del_entry include/linux/list.h:132 [inline]) [<808072bc>] (__list_del_entry_valid) from [<80a3996c>] (list_del_init include/linux/list.h:204 [inline]) [<808072bc>] (__list_del_entry_valid) from [<80a3996c>] (__fw_load_abort drivers/base/firmware_loader/fallback.c:97 [inline]) [<808072bc>] (__list_del_entry_valid) from [<80a3996c>] (__fw_load_abort drivers/base/firmware_loader/fallback.c:88 [inline]) [<808072bc>] (__list_del_entry_valid) from [<80a3996c>] (kill_pending_fw_fallback_reqs+0x64/0xb4 drivers/base/firmware_loader/fallback.c:119) [<80a39908>] (kill_pending_fw_fallback_reqs) from [<80a37988>] (fw_pm_notify+0x3c/0x104 drivers/base/firmware_loader/main.c:1448) r9:00000000 r8:00000001 r7:86c85c90 r6:fffffffa r5:00000001 r4:82b85378 [<80a3794c>] (fw_pm_notify) from [<80275934>] (notifier_call_chain+0x64/0xe0 kernel/notifier.c:83) r5:00000001 r4:82b85378 [<802758d0>] (notifier_call_chain) from [<80275bf8>] (notifier_call_chain_robust kernel/notifier.c:118 [inline]) [<802758d0>] (notifier_call_chain) from [<80275bf8>] (blocking_notifier_call_chain_robust kernel/notifier.c:302 [inline]) [<802758d0>] (notifier_call_chain) from [<80275bf8>] (blocking_notifier_call_chain_robust+0x68/0xc8 kernel/notifier.c:290) r10:81a0367c r9:82a40c00 r8:00000000 r7:00000002 r6:00000000 r5:82a40bb0 r4:82b0a558 [<80275b90>] (blocking_notifier_call_chain_robust) from [<802c7910>] (pm_notifier_call_chain_robust+0x24/0x38 kernel/power/main.c:87) r9:000000e7 r8:840475e8 r7:82b65e18 r6:86f66640 r5:00000000 r4:83278a04 [<802c78ec>] (pm_notifier_call_chain_robust) from [<802d05c4>] (snapshot_open+0xac/0x12c kernel/power/user.c:75) [<802d0518>] (snapshot_open) from [<8098d3d0>] (misc_open+0x140/0x178 drivers/char/misc.c:141) r5:82b65e64 r4:82a41068 [<8098d290>] (misc_open) from [<804e013c>] (chrdev_open+0xc8/0x244 fs/char_dev.c:414) r10:840475e8 r9:86f66648 r8:804e0074 r7:86f66640 r6:81b1e1fc r5:840475e8 r4:8354c400 r3:8098d290 [<804e0074>] (chrdev_open) from [<804d565c>] (do_dentry_open+0x148/0x3e8 fs/open.c:826) r9:86f66648 r8:804e0074 r7:86c85e58 r6:00000000 r5:840475e8 r4:86f66640 [<804d5514>] (do_dentry_open) from [<804d7564>] (vfs_open+0x34/0x38 fs/open.c:940) r9:00000000 r8:86f66640 r7:86c85e58 r6:82a3c39c r5:86c85f20 r4:00040040 [<804d7530>] (vfs_open) from [<804ec9dc>] (do_open fs/namei.c:3365 [inline]) [<804d7530>] (vfs_open) from [<804ec9dc>] (path_openat+0x5b0/0x10f8 fs/namei.c:3498) [<804ec42c>] (path_openat) from [<804ef4ac>] (do_filp_open+0x7c/0x12c fs/namei.c:3525) r10:00000142 r9:86c84000 r8:80200224 r7:00000001 r6:86c85f20 r5:86c85e58 r4:86c85f58 [<804ef430>] (do_filp_open) from [<804d782c>] (do_sys_openat2+0xa8/0x160 fs/open.c:1187) r7:ffffff9c r6:00000004 r5:85691000 r4:86c85f58 [<804d7784>] (do_sys_openat2) from [<804d7cd0>] (do_sys_open fs/open.c:1203 [inline]) [<804d7784>] (do_sys_openat2) from [<804d7cd0>] (__do_sys_openat fs/open.c:1219 [inline]) [<804d7784>] (do_sys_openat2) from [<804d7cd0>] (sys_openat+0xa4/0xcc fs/open.c:1214) r7:00000142 r6:00000000 r5:20000600 r4:ffffff9c [<804d7c2c>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x2c arch/arm/mm/proc-v7.S:64) Exception stack(0x86c85fa8 to 0x86c85ff0) 5fa0: 00000000 00000000 ffffff9c 20000600 00040040 00000000 5fc0: 00000000 00000000 00000000 00000142 7ebe833a 76fbb6d0 7ebe84ac 76fbb20c 5fe0: 76fbb048 76fbb038 00018d58 0004b620 r5:00000000 r4:00000000 Code: 0a00000a e3001122 e1520001 0a000017 (e5921000) ---[ end trace c93478f8f1f5a3f6 ]---