8<--- cut here --- Unable to handle kernel NULL pointer dereference at virtual address 00000010 when read [00000010] *pgd=85504003, *pmd=e1db2003 Internal error: Oops: 205 [#1] SMP ARM Modules linked in: CPU: 1 UID: 0 PID: 5310 Comm: syz.2.16 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at generic_hwtstamp_ioctl_lower+0x94/0x104 net/core/dev_ioctl.c:447 LR is at generic_hwtstamp_ioctl_lower+0x88/0x104 net/core/dev_ioctl.c:446 pc : [<815b6a40>] lr : [<815b6a34>] psr: 40000013 sp : e03c5940 ip : e03c5954 fp : e03c5984 r10: 85994000 r9 : 854f5eb0 r8 : 859f1014 r7 : 000089b1 r6 : 85992800 r5 : e03c59d8 r4 : e03c5954 r3 : 00000010 r2 : 00000004 r1 : 00000000 r0 : e03c594f Flags: nZcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 849e68c0 DAC: 00000000 Register r0 information: 2-page vmalloc region starting at 0xe03c4000 allocated at kernel_clone+0xac/0x3ec kernel/fork.c:2605 Register r1 information: NULL pointer Register r2 information: non-paged memory Register r3 information: zero-size pointer Register r4 information: 2-page vmalloc region starting at 0xe03c4000 allocated at kernel_clone+0xac/0x3ec kernel/fork.c:2605 Register r5 information: 2-page vmalloc region starting at 0xe03c4000 allocated at kernel_clone+0xac/0x3ec kernel/fork.c:2605 Register r6 information: slab kmalloc-cg-2k start 85992800 pointer offset 0 size 2048 Register r7 information: non-paged memory Register r8 information: slab kmalloc-4k start 859f1000 pointer offset 20 size 4096 Register r9 information: slab kmalloc-1k start 854f5c00 pointer offset 688 size 1024 Register r10 information: slab kmalloc-cg-2k start 85994000 pointer offset 0 size 2048 Register r11 information: 2-page vmalloc region starting at 0xe03c4000 allocated at kernel_clone+0xac/0x3ec kernel/fork.c:2605 Register r12 information: 2-page vmalloc region starting at 0xe03c4000 allocated at kernel_clone+0xac/0x3ec kernel/fork.c:2605 Process syz.2.16 (pid: 5310, stack limit = 0xe03c4000) Stack: (0xe03c5940 to 0xe03c6000) 5940: 826c54b8 68746576 6c765f30 00006e61 00000000 00000000 00000000 00000000 5960: 00000000 cec875fb 85992800 00000000 85994000 84c94b40 e03c59a4 e03c5988 5980: 815b6ec4 815b69b8 e03c59f8 802914e4 e03c59d8 00000000 e03c59b4 e03c59a8 59a0: 81914590 815b6e28 e03c59d4 e03c59b8 815b6dd4 81914588 8599434c 8599434c 59c0: 00000000 849e6b00 e03c5a34 e03c59d8 81699c9c 815b6cf8 00000000 00000000 59e0: 00000000 00000000 00000000 00000000 00000000 859f1000 84f6cae0 854f5eb0 5a00: e03c5a34 e03c5a10 81673bd0 8166d858 00000004 cec875fb 854f5ea4 84e2b418 5a20: 85994000 84c94b40 e03c5a64 e03c5a38 8168708c 81699c34 00000002 0000002f 5a40: 85992b48 85994348 854f5e70 8599434c 84c94b40 84f6cae0 e03c5aa4 e03c5a68 5a60: 816875b4 81686ffc 84c94b40 854f5ea4 84fd2700 cec875fb 00000cc0 854f5e70 5a80: 84e2b400 84c94b40 854f5ed4 854f5e70 00000000 854f5e70 e03c5ac4 e03c5aa8 5aa0: 81674578 816874dc 84c94b40 854f5c00 00000000 854f5ed4 e03c5b74 e03c5ac8 5ac0: 8166f428 81674544 85494d80 85494d90 e03c5b0c e03c5ae0 00000000 00000000 5ae0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5b00: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5b20: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5b40: 00000000 cec875fb 81553594 854f5c00 00000000 84c94300 e03c5bec 854f5ed4 5b60: 00000000 854f5e70 e03c5ba4 e03c5b78 81671568 8166f2bc e03c5bec 82476efc 5b80: 85494d80 00000003 e03c5bd4 84c94300 84f6c9c0 00000004 e03c5c3c e03c5ba8 5ba0: 8167474c 816713f0 e03c5bd4 e03c5bb8 81a3f188 81a3e068 00000004 e03c5c40 5bc0: 82476efc 85494d80 e03c5c40 e03c5bd4 00000004 81686c44 816874d0 8168652c 5be0: 81e6a5ac 00000001 0004002e 816741dc 81674538 81674904 e03c5c40 e03c5bc0 5c00: 00000000 00000000 00000000 cec875fb e03c5c80 84c94300 816745b4 85494d80 5c20: 00000014 84f6c9c0 00000000 00000000 e03c5ccc e03c5c40 81672c34 816745c0 5c40: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5c60: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5c80: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5ca0: 00000000 00000000 00000000 cec875fb 84c94300 829e8ee8 849d5f00 84c94300 5cc0: e03c5ce4 e03c5cd0 81673e44 81672b80 854f4000 00000014 e03c5d1c e03c5ce8 5ce0: 81672400 81673e24 854f5c00 7fffffff 00000000 cec875fb e03c5f20 84c94300 5d00: 00000014 854f5c00 00000000 00000000 e03c5d84 e03c5d20 816726e8 8167221c 5d20: 00000000 00000000 00000000 cec875fb 00000000 00000014 832cd080 00000000 5d40: 00000002 00000000 00000000 00000000 80794fc8 cec875fb e03c5d84 00000000 5d60: e03c5f20 8375a000 00000000 e03c5dc4 e03c5dc4 00000000 e03c5da4 e03c5d88 5d80: 81544270 81672528 e03c5f20 00000000 8375a000 00000000 e03c5e14 e03c5da8 5da0: 815455c8 81544238 e03c5e20 e03c5f30 00000000 00000000 e03c5e14 00000000 5dc0: 8154749c 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5de0: 00000000 cec875fb 00000000 00000000 e03c5f20 8375a000 00000000 00000000 5e00: 20000700 e03c5e24 e03c5f14 e03c5e18 81547590 8154533c 00000000 85540c00 5e20: 00000000 20000540 00000014 00000000 00000000 00000000 00000000 00000000 5e40: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5e60: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5e80: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5ea0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5ec0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5ee0: 00000000 cec875fb e03c5f14 00000003 83b65001 20000700 00000000 83b65000 5f00: 85540c00 00000128 e03c5f94 e03c5f18 81547a28 81547500 00000000 00000000 5f20: 00000000 00000000 00000000 00000000 00010000 00000014 20000540 00000000 5f40: 00000001 00000000 00000000 00000001 00000000 00000000 00000000 00000000 5f60: 00000000 00000000 ecac8b10 cec875fb 00000000 00000000 00000000 002e6300 5f80: 00000128 8020029c e03c5fa4 e03c5f98 81547a90 815479a8 00000000 e03c5fa8 5fa0: 80200060 81547a88 00000000 00000000 00000003 20000700 00000000 00000000 5fc0: 00000000 00000000 002e6300 00000128 002d0000 00000000 00006364 76bf10bc 5fe0: 76bf0ec0 76bf0eb0 00019384 00131f20 60000010 00000003 00000000 00000000 Call trace: [<815b69ac>] (generic_hwtstamp_ioctl_lower) from [<815b6ec4>] (generic_hwtstamp_get_lower net/core/dev_ioctl.c:478 [inline]) [<815b69ac>] (generic_hwtstamp_ioctl_lower) from [<815b6ec4>] (generic_hwtstamp_get_lower+0xa8/0xe0 net/core/dev_ioctl.c:459) r7:84c94b40 r6:85994000 r5:00000000 r4:85992800 [<815b6e1c>] (generic_hwtstamp_get_lower) from [<81914590>] (vlan_hwtstamp_get+0x14/0x18 net/8021q/vlan_dev.c:342) r5:00000000 r4:e03c59d8 [<8191457c>] (vlan_hwtstamp_get) from [<815b6dd4>] (dev_get_hwtstamp_phylib+0xe8/0x130 net/core/dev_ioctl.c:278) [<815b6cec>] (dev_get_hwtstamp_phylib) from [<81699c9c>] (tsconfig_prepare_data+0x74/0x144 net/ethtool/tsconfig.c:51) r5:849e6b00 r4:00000000 [<81699c28>] (tsconfig_prepare_data) from [<8168708c>] (ethnl_default_dump_one+0x9c/0x1fc net/ethtool/netlink.c:591) r7:84c94b40 r6:85994000 r5:84e2b418 r4:854f5ea4 [<81686ff0>] (ethnl_default_dump_one) from [<816875b4>] (ethnl_default_dumpit+0xe4/0x190 net/ethtool/netlink.c:628) r8:84f6cae0 r7:84c94b40 r6:8599434c r5:854f5e70 r4:85994348 [<816874d0>] (ethnl_default_dumpit) from [<81674578>] (genl_dumpit+0x40/0x7c net/netlink/genetlink.c:1027) r10:854f5e70 r9:00000000 r8:854f5e70 r7:854f5ed4 r6:84c94b40 r5:84e2b400 r4:854f5e70 [<81674538>] (genl_dumpit) from [<8166f428>] (netlink_dump+0x178/0x4d0 net/netlink/af_netlink.c:2327) r7:854f5ed4 r6:00000000 r5:854f5c00 r4:84c94b40 [<8166f2b0>] (netlink_dump) from [<81671568>] (__netlink_dump_start+0x184/0x234 net/netlink/af_netlink.c:2442) r10:854f5e70 r9:00000000 r8:854f5ed4 r7:e03c5bec r6:84c94300 r5:00000000 r4:854f5c00 [<816713e4>] (__netlink_dump_start) from [<8167474c>] (genl_family_rcv_msg_dumpit net/netlink/genetlink.c:1076 [inline]) [<816713e4>] (__netlink_dump_start) from [<8167474c>] (genl_family_rcv_msg net/netlink/genetlink.c:1192 [inline]) [<816713e4>] (__netlink_dump_start) from [<8167474c>] (genl_rcv_msg+0x198/0x350 net/netlink/genetlink.c:1210) r10:00000004 r9:84f6c9c0 r8:84c94300 r7:e03c5bd4 r6:00000003 r5:85494d80 r4:82476efc r3:e03c5bec [<816745b4>] (genl_rcv_msg) from [<81672c34>] (netlink_rcv_skb+0xc0/0x120 net/netlink/af_netlink.c:2552) r10:00000000 r9:00000000 r8:84f6c9c0 r7:00000014 r6:85494d80 r5:816745b4 r4:84c94300 [<81672b74>] (netlink_rcv_skb) from [<81673e44>] (genl_rcv+0x2c/0x3c net/netlink/genetlink.c:1219) r7:84c94300 r6:849d5f00 r5:829e8ee8 r4:84c94300 [<81673e18>] (genl_rcv) from [<81672400>] (netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline]) [<81673e18>] (genl_rcv) from [<81672400>] (netlink_unicast+0x1f0/0x30c net/netlink/af_netlink.c:1346) r5:00000014 r4:854f4000 [<81672210>] (netlink_unicast) from [<816726e8>] (netlink_sendmsg+0x1cc/0x444 net/netlink/af_netlink.c:1896) r9:00000000 r8:00000000 r7:854f5c00 r6:00000014 r5:84c94300 r4:e03c5f20 [<8167251c>] (netlink_sendmsg) from [<81544270>] (sock_sendmsg_nosec net/socket.c:714 [inline]) [<8167251c>] (netlink_sendmsg) from [<81544270>] (__sock_sendmsg+0x44/0x78 net/socket.c:729) r10:00000000 r9:e03c5dc4 r8:e03c5dc4 r7:00000000 r6:8375a000 r5:e03c5f20 r4:00000000 [<8154422c>] (__sock_sendmsg) from [<815455c8>] (____sys_sendmsg+0x298/0x2cc net/socket.c:2614) r7:00000000 r6:8375a000 r5:00000000 r4:e03c5f20 [<81545330>] (____sys_sendmsg) from [<81547590>] (___sys_sendmsg+0x9c/0xd0 net/socket.c:2668) r10:e03c5e24 r9:20000700 r8:00000000 r7:00000000 r6:8375a000 r5:e03c5f20 r4:00000000 [<815474f4>] (___sys_sendmsg) from [<81547a28>] (__sys_sendmsg+0x8c/0xe0 net/socket.c:2700) r10:00000128 r9:85540c00 r8:83b65000 r7:00000000 r6:20000700 r5:83b65001 r4:00000003 [<8154799c>] (__sys_sendmsg) from [<81547a90>] (__do_sys_sendmsg net/socket.c:2705 [inline]) [<8154799c>] (__sys_sendmsg) from [<81547a90>] (sys_sendmsg+0x14/0x18 net/socket.c:2703) r8:8020029c r7:00000128 r6:002e6300 r5:00000000 r4:00000000 [<81547a7c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xe03c5fa8 to 0xe03c5ff0) 5fa0: 00000000 00000000 00000003 20000700 00000000 00000000 5fc0: 00000000 00000000 002e6300 00000128 002d0000 00000000 00006364 76bf10bc 5fe0: 76bf0ec0 76bf0eb0 00019384 00131f20 Code: eb115682 e595300c e24b4030 e2833010 (e893000f) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: eb115682 bl 0x455a10 4: e595300c ldr r3, [r5, #12] 8: e24b4030 sub r4, fp, #48 @ 0x30 c: e2833010 add r3, r3, #16 * 10: e893000f ldm r3, {r0, r1, r2, r3} <-- trapping instruction