kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 2766 Comm: syz-executor0 Not tainted 4.4.165+ #15
task: ffff8801d09d4740 task.stack: ffff8800b3868000
RIP: 0010:[<ffffffff8120a2df>]  [<ffffffff8120a2df>] rt_mutex_top_waiter kernel/locking/rtmutex_common.h:53 [inline]
RIP: 0010:[<ffffffff8120a2df>]  [<ffffffff8120a2df>] remove_waiter+0x4f/0x2e0 kernel/locking/rtmutex.c:1082
RSP: 0018:ffff8800b386f8d0  EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffff8800ba045d10 RCX: 0000000000000001
RDX: 0000000000000007 RSI: ffff8801d0b47970 RDI: 0000000000000038
RBP: ffff8800b386f908 R08: ffff8801d09d5078 R09: ffffffff839ff1c0
R10: 000000000001a9c0 R11: ffffffff831a2db8 R12: 00000000ffffffdd
R13: ffff8801d0b47970 R14: ffff8800ba045d50 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8801db600000(0063) knlGS:00000000f77aeb40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00000000f77aedb0 CR3: 00000001d1fe6000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8801d0b47a28 ffff8801d0b47970 ffff8800ba045d10 00000000ffffffdd
 ffff8800ba045d58 ffff8801d0b47970 dffffc0000000000 ffff8800b386f938
 ffffffff8120abdd ffff8801d0b479f0 ffff8800b38af9f0 ffff8801d0b47a28
Call Trace:
 [<ffffffff8120abdd>] rt_mutex_start_proxy_lock+0xbd/0x120 kernel/locking/rtmutex.c:1685
 [<ffffffff81290aa2>] futex_requeue+0xbb2/0x16b0 kernel/futex.c:1944
 [<ffffffff812933e4>] do_futex+0x204/0x1a00 kernel/futex.c:3248
 [<ffffffff81295749>] C_SYSC_futex kernel/futex_compat.c:200 [inline]
 [<ffffffff81295749>] compat_SyS_futex+0x1d9/0x2f0 kernel/futex_compat.c:174
 [<ffffffff810060fe>] do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline]
 [<ffffffff810060fe>] do_fast_syscall_32+0x31e/0xa80 arch/x86/entry/common.c:397
 [<ffffffff82715890>] sysenter_flags_fixed+0xd/0x1a
Code: 53 48 89 fb 48 83 ec 10 80 3c 02 00 0f 85 2d 02 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 7b 40 49 8d 7f 38 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 17 02 00 00 49 3b 5f 38 0f 85 f0 01 00 00 48 
RIP  [<ffffffff8120a2df>] rt_mutex_top_waiter kernel/locking/rtmutex_common.h:53 [inline]
RIP  [<ffffffff8120a2df>] remove_waiter+0x4f/0x2e0 kernel/locking/rtmutex.c:1082
 RSP <ffff8800b386f8d0>
---[ end trace c1e16e44e241aaf7 ]---