program: r0 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x14, 0x4}) (fail_nth: 85) [ 74.313830][ T4668] Bluetooth: hci0: command tx timeout [ 74.416954][ T5320] FAULT_INJECTION: forcing a failure. [ 74.416954][ T5320] name failslab, interval 1, probability 0, space 0, times 1 [ 74.439553][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.439572][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.439579][ T5320] Call Trace: [ 74.439584][ T5320] [ 74.439589][ T5320] dump_stack_lvl+0xe8/0x150 [ 74.439793][ T5320] should_fail_ex+0x412/0x560 [ 74.439909][ T5320] should_failslab+0xa8/0x100 [ 74.440003][ T5320] __kmalloc_cache_noprof+0x83/0x6e0 [ 74.440038][ T5320] ? __kasan_kmalloc+0x93/0xb0 [ 74.440059][ T5320] ? vidtv_psi_pmt_stream_init+0x5a/0x440 [ 74.440130][ T5320] vidtv_psi_pmt_stream_init+0x5a/0x440 [ 74.440146][ T5320] vidtv_channel_pmt_match_sections+0x229/0x420 [ 74.440164][ T5320] vidtv_channel_si_init+0x12c5/0x1580 [ 74.440190][ T5320] vidtv_mux_init+0x4b0/0x1a70 [ 74.440212][ T5320] vidtv_start_feed+0x34a/0x510 [ 74.440227][ T5320] ? __pfx_vidtv_start_feed+0x10/0x10 [ 74.440238][ T5320] ? do_raw_spin_lock+0x12b/0x2f0 [ 74.440317][ T5320] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 74.440335][ T5320] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.440390][ T5320] dmx_ts_feed_start_filtering+0x135/0x240 [ 74.440408][ T5320] dvb_dmxdev_filter_start+0x447/0x10e0 [ 74.440429][ T5320] dvb_demux_do_ioctl+0x48b/0x540 [ 74.440443][ T5320] dvb_usercopy+0x199/0x2e0 [ 74.440454][ T5320] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 74.440466][ T5320] ? __pfx_dvb_usercopy+0x10/0x10 [ 74.440483][ T5320] ? __fget_files+0x3a0/0x420 [ 74.440515][ T5320] ? __fget_files+0x2a/0x420 [ 74.440526][ T5320] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 74.440538][ T5320] dvb_demux_ioctl+0x29/0x40 [ 74.440550][ T5320] __se_sys_ioctl+0xfc/0x170 [ 74.440580][ T5320] do_syscall_64+0xe2/0xf80 [ 74.440589][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.440611][ T5320] ? trace_irq_disable+0x37/0x100 [ 74.440634][ T5320] ? clear_bhb_loop+0x60/0xb0 [ 74.440643][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.440650][ T5320] RIP: 0033:0x7fc1bc59aeb9 [ 74.440658][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.440665][ T5320] RSP: 002b:00007fc1bd3a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.440674][ T5320] RAX: ffffffffffffffda RBX: 00007fc1bc815fa0 RCX: 00007fc1bc59aeb9 [ 74.440679][ T5320] RDX: 0000200000000040 RSI: 0000000040146f2c RDI: 0000000000000003 [ 74.440684][ T5320] RBP: 00007fc1bd3a5090 R08: 0000000000000000 R09: 0000000000000000 [ 74.440688][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.440692][ T5320] R13: 00007fc1bc816038 R14: 00007fc1bc815fa0 R15: 00007ffeee1a4788 [ 74.440703][ T5320] [ 74.576945][ T5320] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 74.582070][ T5320] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 74.585553][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.589268][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.593462][ T5320] RIP: 0010:vidtv_psi_desc_assign+0x29/0x90 [ 74.596020][ T5320] Code: 90 0f 1f 40 d6 41 57 41 56 41 55 41 54 53 48 89 f3 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 de 3a a2 f9 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 47 18 0c fa 4d 8b 3e 4c 39 fb [ 74.604052][ T5320] RSP: 0018:ffffc9000b71f910 EFLAGS: 00010247 [ 74.606608][ T5320] RAX: ffffffff88224c12 RBX: ffff88805b3fa000 RCX: ffff8880340e0000 [ 74.609908][ T5320] RDX: 0000000000000000 RSI: ffff88805b3fa000 RDI: 0000000000000005 [ 74.612889][ T5320] RBP: ffff8880373e9b00 R08: 0000000000000000 R09: 4453534204050000 [ 74.616231][ T5320] R10: dffffc0000000000 R11: ffffed100b67f402 R12: dffffc0000000000 [ 74.619510][ T5320] R13: 0000000000000000 R14: 0000000000000005 R15: ffff888032d4b500 [ 74.623017][ T5320] FS: 00007fc1bd3a56c0(0000) GS:ffff88808ccea000(0000) knlGS:0000000000000000 [ 74.626683][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.629401][ T5320] CR2: 00007fc1bc7e8558 CR3: 000000001a696000 CR4: 0000000000352ef0 [ 74.632619][ T5320] Call Trace: [ 74.634077][ T5320] [ 74.635338][ T5320] vidtv_channel_pmt_match_sections+0x289/0x420 [ 74.637908][ T5320] vidtv_channel_si_init+0x12c5/0x1580 [ 74.640236][ T5320] vidtv_mux_init+0x4b0/0x1a70 [ 74.642034][ T5320] vidtv_start_feed+0x34a/0x510 [ 74.644050][ T5320] ? __pfx_vidtv_start_feed+0x10/0x10 [ 74.646374][ T5320] ? do_raw_spin_lock+0x12b/0x2f0 [ 74.648540][ T5320] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 74.651305][ T5320] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.653511][ T5320] dmx_ts_feed_start_filtering+0x135/0x240 [ 74.656014][ T5320] dvb_dmxdev_filter_start+0x447/0x10e0 [ 74.658355][ T5320] dvb_demux_do_ioctl+0x48b/0x540 [ 74.660541][ T5320] dvb_usercopy+0x199/0x2e0 [ 74.662580][ T5320] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 74.664930][ T5320] ? __pfx_dvb_usercopy+0x10/0x10 [ 74.667100][ T5320] ? __fget_files+0x3a0/0x420 [ 74.668964][ T5320] ? __fget_files+0x2a/0x420 [ 74.671041][ T5320] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 74.673434][ T5320] dvb_demux_ioctl+0x29/0x40 [ 74.675485][ T5320] __se_sys_ioctl+0xfc/0x170 [ 74.677522][ T5320] do_syscall_64+0xe2/0xf80 [ 74.679481][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.682229][ T5320] ? trace_irq_disable+0x37/0x100 [ 74.684476][ T5320] ? clear_bhb_loop+0x60/0xb0 [ 74.686477][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.689055][ T5320] RIP: 0033:0x7fc1bc59aeb9 [ 74.691006][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.698138][ T5320] RSP: 002b:00007fc1bd3a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.701281][ T5320] RAX: ffffffffffffffda RBX: 00007fc1bc815fa0 RCX: 00007fc1bc59aeb9 [ 74.704379][ T5320] RDX: 0000200000000040 RSI: 0000000040146f2c RDI: 0000000000000003 [ 74.707552][ T5320] RBP: 00007fc1bd3a5090 R08: 0000000000000000 R09: 0000000000000000 [ 74.710754][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.714027][ T5320] R13: 00007fc1bc816038 R14: 00007fc1bc815fa0 R15: 00007ffeee1a4788 [ 74.717239][ T5320] [ 74.718461][ T5320] Modules linked in: [ 74.721043][ T5320] ---[ end trace 0000000000000000 ]--- [ 74.729178][ T5320] RIP: 0010:vidtv_psi_desc_assign+0x29/0x90 [ 74.731851][ T5320] Code: 90 0f 1f 40 d6 41 57 41 56 41 55 41 54 53 48 89 f3 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 de 3a a2 f9 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 47 18 0c fa 4d 8b 3e 4c 39 fb [ 74.741045][ T5320] RSP: 0018:ffffc9000b71f910 EFLAGS: 00010247 [ 74.743751][ T5320] RAX: ffffffff88224c12 RBX: ffff88805b3fa000 RCX: ffff8880340e0000 [ 74.747247][ T5320] RDX: 0000000000000000 RSI: ffff88805b3fa000 RDI: 0000000000000005 [ 74.751300][ T5320] RBP: ffff8880373e9b00 R08: 0000000000000000 R09: 4453534204050000 [ 74.754880][ T5320] R10: dffffc0000000000 R11: ffffed100b67f402 R12: dffffc0000000000 [ 74.758369][ T5320] R13: 0000000000000000 R14: 0000000000000005 R15: ffff888032d4b500 [ 74.762311][ T5320] FS: 00007fc1bd3a56c0(0000) GS:ffff88808ccea000(0000) knlGS:0000000000000000 [ 74.766138][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.769314][ T5320] CR2: 00007fc1bc7e8558 CR3: 000000001a696000 CR4: 0000000000352ef0 [ 74.772861][ T5320] Kernel panic - not syncing: Fatal exception [ 74.775691][ T5320] Kernel Offset: disabled [ 74.777459][ T5320] Rebooting in 86400 seconds..