program:
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) (fail_nth: 92)
[ 89.667458][ T5302] Bluetooth: hci0: command tx timeout
[ 89.858742][ T5324] FAULT_INJECTION: forcing a failure.
[ 89.858742][ T5324] name failslab, interval 1, probability 0, space 0, times 1
[ 89.910011][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 89.910034][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 89.910042][ T5324] Call Trace:
[ 89.910047][ T5324]
[ 89.910053][ T5324] dump_stack_lvl+0xe8/0x150
[ 89.910656][ T5324] should_fail_ex+0x412/0x560
[ 89.910784][ T5324] should_failslab+0xa8/0x100
[ 89.910852][ T5324] __kmalloc_cache_noprof+0x83/0x6e0
[ 89.910870][ T5324] ? vidtv_mux_init+0x15bd/0x1a70
[ 89.910962][ T5324] vidtv_mux_init+0x15bd/0x1a70
[ 89.910985][ T5324] vidtv_start_feed+0x34a/0x510
[ 89.911000][ T5324] ? __pfx_vidtv_start_feed+0x10/0x10
[ 89.911011][ T5324] ? do_raw_spin_lock+0x12b/0x2f0
[ 89.911070][ T5324] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[ 89.911089][ T5324] ? _raw_spin_unlock_irq+0x23/0x50
[ 89.911142][ T5324] dmx_ts_feed_start_filtering+0x135/0x240
[ 89.911163][ T5324] dvb_dmxdev_filter_start+0x447/0x10e0
[ 89.911184][ T5324] dvb_demux_do_ioctl+0x48b/0x540
[ 89.911198][ T5324] dvb_usercopy+0x199/0x2e0
[ 89.911210][ T5324] ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[ 89.911221][ T5324] ? __pfx_dvb_usercopy+0x10/0x10
[ 89.911239][ T5324] ? __fget_files+0x3a0/0x420
[ 89.911251][ T5324] ? __fget_files+0x2a/0x420
[ 89.911263][ T5324] ? __pfx_dvb_demux_ioctl+0x10/0x10
[ 89.911275][ T5324] dvb_demux_ioctl+0x29/0x40
[ 89.911287][ T5324] __se_sys_ioctl+0xfc/0x170
[ 89.911304][ T5324] do_syscall_64+0xe2/0xf80
[ 89.911316][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.911347][ T5324] ? trace_irq_disable+0x37/0x100
[ 89.911361][ T5324] ? clear_bhb_loop+0x60/0xb0
[ 89.911375][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.911393][ T5324] RIP: 0033:0x7fe9f239aeb9
[ 89.911406][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 89.911416][ T5324] RSP: 002b:00007fe9f3209028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 89.911430][ T5324] RAX: ffffffffffffffda RBX: 00007fe9f2615fa0 RCX: 00007fe9f239aeb9
[ 89.911438][ T5324] RDX: 00002000000000c0 RSI: 0000000040146f2c RDI: 0000000000000003
[ 89.911446][ T5324] RBP: 00007fe9f3209090 R08: 0000000000000000 R09: 0000000000000000
[ 89.911453][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 89.911459][ T5324] R13: 00007fe9f2616038 R14: 00007fe9f2615fa0 R15: 00007ffc850c44a8
[ 89.911480][ T5324]
[ 90.021909][ T5322] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI
[ 90.026781][ T5322] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 90.030080][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full)
[ 90.033578][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 90.037867][ T5322] Workqueue: events vidtv_mux_tick
[ 90.040310][ T5322] RIP: 0010:vidtv_psi_ts_psi_write_into+0x615/0xcb0
[ 90.043394][ T5322] Code: 00 00 e8 0e 11 a2 f9 48 8b 44 24 60 42 80 3c 20 00 48 8b 5c 24 68 74 08 48 89 df e8 75 ee 0b fa 48 8b 1b 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e6 02 00 00 0f b6 03 0f b6 8c 24 a3 00
[ 90.051976][ T5322] RSP: 0018:ffffc9000c727300 EFLAGS: 00010246
[ 90.054620][ T5322] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffff88800084a4c0
[ 90.058143][ T5322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 90.061172][ T5322] RBP: ffffc9000c727410 R08: 0000000000000006 R09: 0000000000000002
[ 90.064328][ T5322] R10: ffffc9000c727582 R11: fffff520018e4eb2 R12: dffffc0000000000
[ 90.067647][ T5322] R13: ffffc9000c727508 R14: 0000000000000178 R15: 0000000000000000
[ 90.071275][ T5322] FS: 0000000000000000(0000) GS:ffff88808ccea000(0000) knlGS:0000000000000000
[ 90.075120][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 90.077870][ T5322] CR2: 000056251a497660 CR3: 000000001a695000 CR4: 0000000000352ef0
[ 90.081077][ T5322] Call Trace:
[ 90.082398][ T5322]
[ 90.083555][ T5322] ? vidtv_memset+0x4a/0xb0
[ 90.085500][ T5322] ? __pfx_vidtv_psi_ts_psi_write_into+0x10/0x10
[ 90.088146][ T5322] ? vidtv_psi_pmt_table_update_sec_len+0x455/0x610
[ 90.090930][ T5322] vidtv_psi_pmt_write_into+0x3cf/0xaf0
[ 90.093309][ T5322] ? __pfx_vidtv_psi_pmt_write_into+0x10/0x10
[ 90.095893][ T5322] ? unwind_next_frame+0xa5/0x23c0
[ 90.098063][ T5322] ? __kasan_check_byte+0x12/0x40
[ 90.100291][ T5322] ? unwind_next_frame+0xa5/0x23c0
[ 90.102460][ T5322] vidtv_mux_tick+0x1007/0x24b0
[ 90.104511][ T5322] ? __pfx_vidtv_mux_tick+0x10/0x10
[ 90.106747][ T5322] ? check_path+0x21/0x40
[ 90.108601][ T5322] ? add_lock_to_list+0xc7/0x100
[ 90.110887][ T5322] ? process_scheduled_works+0xa0f/0x17a0
[ 90.113324][ T5322] ? process_scheduled_works+0xa0f/0x17a0
[ 90.115847][ T5322] ? process_scheduled_works+0xa0f/0x17a0
[ 90.118385][ T5322] process_scheduled_works+0xaec/0x17a0
[ 90.120706][ T5322] ? __pfx_process_scheduled_works+0x10/0x10
[ 90.123352][ T5322] ? do_raw_spin_lock+0x12b/0x2f0
[ 90.125495][ T5322] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 90.127800][ T5322] ? schedule+0x90/0x360
[ 90.129732][ T5322] worker_thread+0xda6/0x1360
[ 90.131844][ T5322] ? __kthread_parkme+0x19c/0x1f0
[ 90.134060][ T5322] kthread+0x726/0x8b0
[ 90.135781][ T5322] ? __pfx_worker_thread+0x10/0x10
[ 90.137891][ T5322] ? __pfx_kthread+0x10/0x10
[ 90.139820][ T5322] ? _raw_spin_unlock_irq+0x23/0x50
[ 90.141903][ T5322] ? __pfx_kthread+0x10/0x10
[ 90.143787][ T5322] ret_from_fork+0x51b/0xa40
[ 90.145649][ T5322] ? __pfx_ret_from_fork+0x10/0x10
[ 90.147792][ T5322] ? __switch_to+0xc82/0x1410
[ 90.149831][ T5322] ? __pfx_kthread+0x10/0x10
[ 90.151863][ T5322] ret_from_fork_asm+0x1a/0x30
[ 90.153972][ T5322]
[ 90.155351][ T5322] Modules linked in:
[ 90.157688][ T5322] ---[ end trace 0000000000000000 ]---
[ 90.170355][ T5322] RIP: 0010:vidtv_psi_ts_psi_write_into+0x615/0xcb0
[ 90.173629][ T5322] Code: 00 00 e8 0e 11 a2 f9 48 8b 44 24 60 42 80 3c 20 00 48 8b 5c 24 68 74 08 48 89 df e8 75 ee 0b fa 48 8b 1b 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e6 02 00 00 0f b6 03 0f b6 8c 24 a3 00
[ 90.183343][ T5322] RSP: 0018:ffffc9000c727300 EFLAGS: 00010246
[ 90.186973][ T5322] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffff88800084a4c0
[ 90.190975][ T5322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 90.194138][ T5322] RBP: ffffc9000c727410 R08: 0000000000000006 R09: 0000000000000002
[ 90.198083][ T5322] R10: ffffc9000c727582 R11: fffff520018e4eb2 R12: dffffc0000000000
[ 90.201578][ T5322] R13: ffffc9000c727508 R14: 0000000000000178 R15: 0000000000000000
[ 90.205593][ T5322] FS: 0000000000000000(0000) GS:ffff88808ccea000(0000) knlGS:0000000000000000
[ 90.209654][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 90.212640][ T5322] CR2: 00007f6487e17ad0 CR3: 0000000030ed9000 CR4: 0000000000352ef0
[ 90.216629][ T5322] Kernel panic - not syncing: Fatal exception
[ 90.219831][ T5322] Kernel Offset: disabled
[ 90.221707][ T5322] Rebooting in 86400 seconds..