BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP CPU: 0 PID: 4880 Comm: systemd-udevd Not tainted 5.9.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:taprio_dequeue_soft+0xa7/0x2d0 net/sched/sch_taprio.c:544 Code: 45 8b 74 24 28 45 85 f6 0f 84 0d 01 00 00 41 8b 85 08 04 00 00 45 31 ff 85 c0 0f 84 fb 00 00 00 48 8b 93 c0 02 00 00 49 63 c7 <48> 8b 3c c2 48 85 ff 48 89 7d d0 0f 84 cf 00 00 00 f6 83 d0 02 00 RSP: 0018:ffffc90000003eb0 EFLAGS: 00010202 RAX: 0000000000000000 RBX: ffff88811d375800 RCX: ffff888134d10000 RDX: 0000000000000000 RSI: ffffffff84b0eea0 RDI: ffff888134d10960 RBP: ffffc90000003ee8 R08: 0000000000000001 R09: 0000000000000000 R10: ffff888134d10000 R11: 0000000000000246 R12: ffff88811ba85640 R13: ffff88811e4b3000 R14: 0000000000000401 R15: 0000000000000000 FS: 00007faf87c568c0(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 0000000133515000 CR4: 00000000001506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: dequeue_skb net/sched/sch_generic.c:263 [inline] qdisc_restart net/sched/sch_generic.c:366 [inline] __qdisc_run+0x75/0x5d0 net/sched/sch_generic.c:384 qdisc_run include/net/pkt_sched.h:134 [inline] net_tx_action+0x18d/0x430 net/core/dev.c:4899 __do_softirq+0xd8/0x579 kernel/softirq.c:298 asm_call_on_stack+0xf/0x20 arch/x86/entry/entry_64.S:706 __run_on_irqstack arch/x86/include/asm/irq_stack.h:22 [inline] run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:48 [inline] do_softirq_own_stack+0x73/0x90 arch/x86/kernel/irq_64.c:77 invoke_softirq kernel/softirq.c:393 [inline] __irq_exit_rcu kernel/softirq.c:423 [inline] irq_exit_rcu+0xbb/0xe0 kernel/softirq.c:435 sysvec_apic_timer_interrupt+0x57/0xe0 arch/x86/kernel/apic/apic.c:1091 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:581 RIP: 0010:tomoyo_domain_quota_is_ok+0x39/0xe0 security/tomoyo/util.c:1037 Code: 67 10 4d 85 e4 0f 84 82 00 00 00 49 8b 74 24 10 4d 8d 44 24 10 31 db 49 39 f0 75 0a eb 42 48 8b 36 4c 39 c6 74 3a 80 7e 18 00 <75> f2 80 7e 19 08 77 6f 0f b6 46 19 ff 24 c5 48 60 b8 83 0f b6 56 RSP: 0018:ffffc90000d83b50 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 000000000000001f RCX: 0000000000000010 RDX: 0000000000000022 RSI: ffff88813354b580 RDI: ffffc90000d83cc8 RBP: ffffc90000d83c58 R08: ffff888134d4b0d0 R09: 0000000000000000 R10: ffffc90000d83b85 R11: 0000000000000046 R12: ffff888134d4b0c0 R13: ffffffff84525600 R14: 0000000000000000 R15: 0000000000000001 tomoyo_supervisor+0x125/0x620 security/tomoyo/common.c:2089 tomoyo_audit_path_log security/tomoyo/file.c:168 [inline] tomoyo_path_permission+0x91/0xd0 security/tomoyo/file.c:587 tomoyo_path_perm+0x196/0x260 security/tomoyo/file.c:838 security_inode_getattr+0x25/0x40 security/security.c:1278 vfs_getattr+0x17/0x40 fs/stat.c:121 vfs_statx+0x8c/0x110 fs/stat.c:206 vfs_lstat include/linux/fs.h:3178 [inline] __do_sys_newlstat+0x39/0x70 fs/stat.c:374 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7faf86ac9335 Code: 69 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 48 89 f0 77 30 48 89 c7 48 89 d6 b8 06 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 03 f3 c3 90 48 8b 15 31 db 2b 00 f7 d8 64 89 RSP: 002b:00007ffe55398b08 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 RAX: ffffffffffffffda RBX: 000055bde49f2b80 RCX: 00007faf86ac9335 RDX: 00007ffe55398b40 RSI: 00007ffe55398b40 RDI: 000055bde49f1b80 RBP: 00007ffe55398c00 R08: 00007faf86d88198 R09: 0000000000001010 R10: 0000000000000020 R11: 0000000000000246 R12: 000055bde49f1b80 R13: 000055bde49f1ba7 R14: 000055bde49e2581 R15: 000055bde49e2587 Modules linked in: CR2: 0000000000000000 ---[ end trace 20ef2161079893e1 ]--- RIP: 0010:taprio_dequeue_soft+0xa7/0x2d0 net/sched/sch_taprio.c:544 Code: 45 8b 74 24 28 45 85 f6 0f 84 0d 01 00 00 41 8b 85 08 04 00 00 45 31 ff 85 c0 0f 84 fb 00 00 00 48 8b 93 c0 02 00 00 49 63 c7 <48> 8b 3c c2 48 85 ff 48 89 7d d0 0f 84 cf 00 00 00 f6 83 d0 02 00 RSP: 0018:ffffc90000003eb0 EFLAGS: 00010202 RAX: 0000000000000000 RBX: ffff88811d375800 RCX: ffff888134d10000 RDX: 0000000000000000 RSI: ffffffff84b0eea0 RDI: ffff888134d10960 RBP: ffffc90000003ee8 R08: 0000000000000001 R09: 0000000000000000 R10: ffff888134d10000 R11: 0000000000000246 R12: ffff88811ba85640 R13: ffff88811e4b3000 R14: 0000000000000401 R15: 0000000000000000 FS: 00007faf87c568c0(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 0000000133515000 CR4: 00000000001506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400