Oops: general protection fault, probably for non-canonical address 0xdffffc000000003f: 0000 [#1] SMP KASAN PTI KASAN: null-ptr-deref in range [0x00000000000001f8-0x00000000000001ff] CPU: 0 UID: 0 PID: 14131 Comm: syz.8.1844 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 RIP: 0010:module_is_live include/linux/module.h:612 [inline] RIP: 0010:try_module_get+0x24/0xc0 kernel/module/main.c:913 Code: 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 b0 01 48 85 ff 74 72 48 89 fb 49 bf 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 64 83 3b 02 74 5b 4c 8d b3 f8 04 00 00 4c RSP: 0018:ffffc90004ddf6f0 EFLAGS: 00010207 RAX: 000000000000003f RBX: 00000000000001ff RCX: ffffffff8b23b696 RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000000001ff RBP: ffff888037f1ee00 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff520009bbed0 R12: ffff88802c65a018 R13: ffff88802520f800 R14: ffff88802bf7e420 R15: dffffc0000000000 FS: 00007f3b217346c0(0000) GS:ffff88812633f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3b23505900 CR3: 0000000027646000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: dvb_device_open+0xef/0x360 drivers/media/dvb-core/dvbdev.c:103 chrdev_open+0x4d0/0x5f0 fs/char_dev.c:411 do_dentry_open+0x83d/0x13e0 fs/open.c:949 vfs_open+0x3b/0x350 fs/open.c:1081 do_open fs/namei.c:4671 [inline] path_openat+0x2e43/0x38a0 fs/namei.c:4830 do_file_open+0x23e/0x4a0 fs/namei.c:4859 do_sys_openat2+0x113/0x200 fs/open.c:1366 do_sys_open fs/open.c:1372 [inline] __do_sys_openat fs/open.c:1388 [inline] __se_sys_openat fs/open.c:1383 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1383 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3b234dcfce Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 RSP: 002b:00007f3b21733b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f3b217346c0 RCX: 00007f3b234dcfce RDX: 0000000000000002 RSI: 00007f3b21733c00 RDI: ffffffffffffff9c RBP: 00007f3b21733c00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd R13: 00007f3b23796218 R14: 00007f3b23796180 R15: 00007fff016d14d8 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:module_is_live include/linux/module.h:612 [inline] RIP: 0010:try_module_get+0x24/0xc0 kernel/module/main.c:913 Code: 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 b0 01 48 85 ff 74 72 48 89 fb 49 bf 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 64 83 3b 02 74 5b 4c 8d b3 f8 04 00 00 4c RSP: 0018:ffffc90004ddf6f0 EFLAGS: 00010207 RAX: 000000000000003f RBX: 00000000000001ff RCX: ffffffff8b23b696 RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000000001ff RBP: ffff888037f1ee00 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff520009bbed0 R12: ffff88802c65a018 R13: ffff88802520f800 R14: ffff88802bf7e420 R15: dffffc0000000000 FS: 00007f3b217346c0(0000) GS:ffff88812633f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3b23505900 CR3: 0000000027646000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 90 nop 1: 90 nop 2: 90 nop 3: 90 nop 4: 90 nop 5: 90 nop 6: f3 0f 1e fa endbr64 a: 41 57 push %r15 c: 41 56 push %r14 e: 53 push %rbx f: b0 01 mov $0x1,%al 11: 48 85 ff test %rdi,%rdi 14: 74 72 je 0x88 16: 48 89 fb mov %rdi,%rbx 19: 49 bf 00 00 00 00 00 movabs $0xdffffc0000000000,%r15 20: fc ff df 23: 48 89 f8 mov %rdi,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 42 0f b6 04 38 movzbl (%rax,%r15,1),%eax <-- trapping instruction 2f: 84 c0 test %al,%al 31: 75 64 jne 0x97 33: 83 3b 02 cmpl $0x2,(%rbx) 36: 74 5b je 0x93 38: 4c 8d b3 f8 04 00 00 lea 0x4f8(%rbx),%r14 3f: 4c rex.WR