Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN PTI KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] CPU: 1 UID: 0 PID: 21157 Comm: syz.6.3540 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 RIP: 0010:module_is_live include/linux/module.h:618 [inline] RIP: 0010:try_module_get+0x24/0xc0 kernel/module/main.c:913 Code: 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 b0 01 48 85 ff 74 72 48 89 fb 49 bf 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 64 83 3b 02 74 5b 4c 8d b3 f8 04 00 00 4c RSP: 0018:ffffc9000588f710 EFLAGS: 00010207 RAX: 000000000000005f RBX: 00000000000002ff RCX: ffffffff8b0ef156 RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000000002ff RBP: ffff88807cc9fa00 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff52000b11ed4 R12: ffff888147f87c18 R13: ffff888144fbb800 R14: ffff88802a4ba320 R15: dffffc0000000000 FS: 00007f8d0c77e6c0(0000) GS:ffff8881266c9000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8d0e5140c0 CR3: 000000009ae82000 CR4: 00000000003526f0 Call Trace: dvb_device_open+0xef/0x360 drivers/media/dvb-core/dvbdev.c:103 chrdev_open+0x4d0/0x5f0 fs/char_dev.c:414 do_dentry_open+0x7d0/0x1270 fs/open.c:962 vfs_open+0x3b/0x350 fs/open.c:1094 do_open fs/namei.c:4637 [inline] path_openat+0x34c9/0x3e70 fs/namei.c:4796 do_filp_open+0x22d/0x490 fs/namei.c:4823 do_sys_openat2+0x12f/0x220 fs/open.c:1430 do_sys_open fs/open.c:1436 [inline] __do_sys_openat fs/open.c:1452 [inline] __se_sys_openat fs/open.c:1447 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1447 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8d0e4eb78e Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 RSP: 002b:00007f8d0c77db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f8d0c77e6c0 RCX: 00007f8d0e4eb78e RDX: 0000000000000002 RSI: 00007f8d0c77dc00 RDI: ffffffffffffff9c RBP: 00007f8d0c77dc00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd R13: 00007f8d0e7a6038 R14: 00007f8d0e7a5fa0 R15: 00007ffe6f6958f8 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:module_is_live include/linux/module.h:618 [inline] RIP: 0010:try_module_get+0x24/0xc0 kernel/module/main.c:913 Code: 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 b0 01 48 85 ff 74 72 48 89 fb 49 bf 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 64 83 3b 02 74 5b 4c 8d b3 f8 04 00 00 4c RSP: 0018:ffffc9000588f710 EFLAGS: 00010207 RAX: 000000000000005f RBX: 00000000000002ff RCX: ffffffff8b0ef156 RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000000002ff RBP: ffff88807cc9fa00 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff52000b11ed4 R12: ffff888147f87c18 R13: ffff888144fbb800 R14: ffff88802a4ba320 R15: dffffc0000000000 FS: 00007f8d0c77e6c0(0000) GS:ffff8881266c9000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8d0e5140c0 CR3: 000000009ae82000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess): 0: 90 nop 1: 90 nop 2: 90 nop 3: 90 nop 4: 90 nop 5: 90 nop 6: f3 0f 1e fa endbr64 a: 41 57 push %r15 c: 41 56 push %r14 e: 53 push %rbx f: b0 01 mov $0x1,%al 11: 48 85 ff test %rdi,%rdi 14: 74 72 je 0x88 16: 48 89 fb mov %rdi,%rbx 19: 49 bf 00 00 00 00 00 movabs $0xdffffc0000000000,%r15 20: fc ff df 23: 48 89 f8 mov %rdi,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 42 0f b6 04 38 movzbl (%rax,%r15,1),%eax <-- trapping instruction 2f: 84 c0 test %al,%al 31: 75 64 jne 0x97 33: 83 3b 02 cmpl $0x2,(%rbx) 36: 74 5b je 0x93 38: 4c 8d b3 f8 04 00 00 lea 0x4f8(%rbx),%r14 3f: 4c rex.WR