program: mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="00110200000036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0d, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f00000000c0), 0x3, 0x8200) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000001880)={&(0x7f0000001840)=[{0x4, 0x3800, 0x41, &(0x7f0000000100)="0d63d6f5d87aded1c34002d104c77a78e335f4532ed3c6045faf04071677c45d600697c039519c4fa8afcb2306868a6c1bb31cbcaafced7ffcb3d8e7e0a9567dea"}], 0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r6 = syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b41889160001010203010902220002010080fa090400000003000000090401"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x7, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, &(0x7f0000000400)={0x14, &(0x7f0000000200)={0x20, 0x23, 0xc1, {0xc1, 0xe, "9fc030b5c253037691022069403b0cd9d00025ff693cadb843bdf1701f2c6a5046ddcc203169e563c7bd13b453c6b2b0e6916c8392b26859d7ac38e9fa1febb25356906b0e3bf0a8c33edfc23a98fb6f85523895539384bb68afeb70fc40a2ec911ba409ca63d4ef327f82004bfda9517cc3953ae575e0dc10fddb2cad7b2026340632221bb11143aa1f6fc06d765967c2fbd14e6f4c3a90c8ce5fc591bef2c61851998d354b9eaebb02d85b2b6706fbdf7d4a1b6dd984a7bffd352362bdde"}}, &(0x7f0000000300)={0x0, 0x3, 0xc9, @string={0xc9, 0x3, "0b584ef5e4143bf469593402fb70ced0ed9def62ee647efd071377398c981c8fd24d22fe67bd60ee20f093446778060905cfbcd5b06437e125e5ce782442e726b006613461eef6ddc389cba8db7cb3cc6c4bbd3b146d56a2a81f038712d9ff16f5d9ada2083315c32b5902d0bd80f5db45f5cabe95fcef5fc8b978bc47c853f627dcc3e0fc79ae31dbe49009647fbdf007f87fc720470b9eceab87cb6cce3ca5ed8bcc7c08805da8ebaec25cb2e6a6518dd2a666487c8d0a0ab979d6ff337ff1ced6a31e6c517a"}}}, &(0x7f0000000d80)={0x1c, &(0x7f00000004c0)={0x0, 0x7, 0x5c, "61eb988cd02f8cdbcda39002ab729286f722312cae2c22f049be356fb67dbe0c86aa1a41a41180ffce39ac9e518c790257ca10b0b9498afb80b5717fc75ce664789e9e528e09ba387b8759a4fcc92134927d41078153719698cd1e05"}, &(0x7f0000000900)={0xa1, 0x1, 0x400, "b470122565e82ab24f111f69345a2a9d6616e07c8753fdb67822c2cb667fa7e5616cf3bfa02d8700563fd7b00ed8c3c8e62ea89977d686d6200c77f913ca747b62c3834f4cc9a6085198efb73083424cd9b9efb68743c630f4b35d063684f50f8fefdffb61e78c2fca95347f430a6f11c941b04bd9db8457cc92cda6e29b440f3afaf07dd456fe083a7e07d8bb73366e245c31e1d0bd6960686cb712a337307acba53b7572ede796fc69f0cecd9a74fbe841aed224cb9e112d0639e496302dfb35e2922e6d5119b40cedc8ffd38a6cf18b09ab653e4d63fcc26474921331698a0033f7bd2cda6fbf02b2d78c30d9a09184e85f0cc9e8717d334cd5c8f03659ea03f243d3c5731a89e8315b5351f13faa348dcb3e8c6ce40a30992d8c42b902e99b9c3a4239651a66c547ddcd24b5748bfa9c615c19d52f83702510c44dfe3ab22d652cb0adef0f126f3d9c494735c9dc39c3b2a340df0e0d8058a2f486ed59f2b1109a159b56bcea73dcda0e0c97b957fe85cda3852c8f67ac7d62a0cb0146847e1fe3596bdc639631cba9c37f8f3e4c434fbd1bd6d727bc892f5a4ccd8632cb6a13bcf99a4979b028bb62deee67172cf47ad7175903f64c15b95af7c74c619542f3df7c7eab970ae06aac266f62ac367b938b7ddc30aecc9bb33f56d279f1b56d1913b51fb824623041564268b750d6dc7b86f9f26e7f4843c24381586882027c1c752f3b55c33e21c44f813b83bd510c351ff200e86464481da111d00ffec6554ece6f4f0c6bb343dc387f19bcbb59b4ac4df38cc4619a1c36c7a52a0b19ed2998efef66d30dab0bc9c90c8d6f33cd306f6cad041e85a8e08d43f0db36677d4c4be8188c6a925d1f9fc2d64eb08ac009918c2169990c350d36a8408eb37d1ac4f1456ed00d2ce5a7832d71798fca2db227b95b2ff1b383a3a8c4bc8ef40ba110c69f0ae57cdf795578e78ad010d20b855aca443d617a6e6386c29862e376a61cd37639fee632c1e14a399d02365e2bd6f33fb9580303639dae118ec2b472e6306c1060d4db38e84aa28bfac908e815119efbe47388188dcee753f97999311c7c18f0f9e6da057bb23390101ccd636a432aef99fad967f1455aa8e6b2697ef2349f638c441a9d7051111d749c3d008acf00b40dbdb3092e18b86e4cb08247bc8dab6a79cdfb84634df3c2f87ecb9c9dd688a5b8d7d75141f8e092ba43e75a36bf744232211fa86dd93be194e11be19b0a178974857174c2f74d2c0490509a265c43d4c6878300d17ceb04ccf5033f77b6254e5e4300919c0bb8477b6fb441f792ded8674a3f0423c13ff10bf157d14464c26ae0eaf38a5fd2f76d6d782903831b2070659afa4ced4a3d95cf301c3b752ce976fb658e4edf3e44ea049f49bbdd4bba4caa96bb9a342f4672911e0000b536ee88e637fb97c218a5ef5980fbd453"}, &(0x7f0000000d40)={0x21, 0x0, 0x3, "2dec39"}}) socket$inet_sctp(0x2, 0x1, 0x84) [ 102.372770][ T4644] Bluetooth: hci0: command tx timeout [ 102.689350][ T5321] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.839764][ T5321] usb 5-1: Using ep0 maxpacket: 16 [ 102.843524][ T5321] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 102.850443][ T5321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 102.857185][ T5321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.861053][ T5321] usb 5-1: Product: syz [ 102.863146][ T5321] usb 5-1: Manufacturer: syz [ 102.865409][ T5321] usb 5-1: SerialNumber: syz [ 102.885386][ T5321] usb 5-1: config 0 descriptor?? [ 102.903448][ T5321] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 102.907544][ T5321] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 103.495402][ T5321] em28xx 5-1:0.0: chip ID is em2765 [ 104.128337][ T5321] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 104.136674][ T5323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.141816][ T5321] em28xx 5-1:0.0: board has no eeprom [ 104.147845][ T5323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.391123][ T5323] Console: switching to colour dummy device 80x25 [ 104.411265][ T4644] Bluetooth: hci0: command tx timeout [ 104.435481][ T5324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.445719][ T5324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.648276][ T5322] ------------[ cut here ]------------ [ 104.648320][ T5322] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 104.648350][ T5322] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x12e2/0x1550, CPU#0: syz.0.0/5322 [ 104.658206][ T5322] Modules linked in: [ 104.660577][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 104.664868][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.669294][ T5322] RIP: 0010:__mutex_lock+0x12e9/0x1550 [ 104.671705][ T5322] Code: 73 7a 90 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 47 02 00 00 83 3d ab 32 92 04 00 75 13 48 8d 3d ae 2e 95 04 48 c7 c6 60 10 0d 8c <67> 48 0f b9 3a 90 e9 6b ee ff ff 90 0f 0b 90 e9 3e f2 ff ff 90 0f [ 104.680216][ T5322] RSP: 0018:ffffc9000e097ae0 EFLAGS: 00010246 [ 104.682982][ T5322] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88803ef34b00 [ 104.686571][ T5322] RDX: 0000000000000000 RSI: ffffffff8c0d1060 RDI: ffffffff907d6f90 [ 104.690115][ T5322] RBP: ffffc9000e097c80 R08: ffffffff907a7383 R09: 1ffffffff20f4e70 [ 104.693622][ T5322] R10: dffffc0000000000 R11: fffffbfff20f4e71 R12: ffff888034e751c0 [ 104.697190][ T5322] R13: 0000000000000000 R14: 1ffff92001c12f70 R15: 0000000000000000 [ 104.700768][ T5322] FS: 0000555582ed7540(0000) GS:ffff88808c2ca000(0000) knlGS:0000000000000000 [ 104.704707][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.707669][ T5322] CR2: 00007f23503909c0 CR3: 000000003fd1f000 CR4: 0000000000352ef0 [ 104.711409][ T5322] Call Trace: [ 104.712974][ T5322] [ 104.714343][ T5322] ? kfree+0x1c5/0x650 [ 104.716309][ T5322] ? drm_mode_rmfb+0x561/0x7a0 [ 104.718551][ T5322] ? drm_gem_fb_destroy+0x1c9/0x200 [ 104.721526][ T5322] ? virtio_gpu_free_object+0x90/0x1d0 [ 104.724092][ T5322] ? drm_mode_rmfb+0x561/0x7a0 [ 104.726278][ T5322] ? __pfx___mutex_lock+0x10/0x10 [ 104.728598][ T5322] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.732110][ T5322] virtio_gpu_free_object+0x90/0x1d0 [ 104.734615][ T5322] drm_client_buffer_delete+0x183/0x2d0 [ 104.737172][ T5322] drm_fbdev_shmem_fb_destroy+0xb5/0xe0 [ 104.739697][ T5322] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 104.742515][ T5322] fb_release+0x11d/0x140 [ 104.744508][ T5322] ? __pfx_fb_release+0x10/0x10 [ 104.746749][ T5322] __fput+0x418/0xa50 [ 104.748589][ T5322] task_work_run+0x1d9/0x270 [ 104.750768][ T5322] ? __pfx_task_work_run+0x10/0x10 [ 104.752946][ T5322] exit_to_user_mode_loop+0x204/0x770 [ 104.755218][ T5322] ? rcu_is_watching+0x16/0xb0 [ 104.757238][ T5322] do_syscall_64+0x328/0x520 [ 104.759227][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.761848][ T5322] ? clear_bhb_loop+0x70/0xc0 [ 104.764001][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.766696][ T5322] RIP: 0033:0x7f83b379e159 [ 104.768779][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.777404][ T5322] RSP: 002b:00007fff07aabc18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 104.781031][ T5322] RAX: 0000000000000000 RBX: 00007f83b3a27da0 RCX: 00007f83b379e159 [ 104.784599][ T5322] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 104.788133][ T5322] RBP: 00007f83b3a27da0 R08: 00007f83b3a26038 R09: 0000000000000000 [ 104.791684][ T5322] R10: 0000000000ddcf40 R11: 0000000000000246 R12: 000000000001a316 [ 104.795267][ T5322] R13: 00007f83b3a2609c R14: 000000000001978f R15: 00007f83b3a26090 [ 104.798814][ T5322] [ 104.800236][ T5322] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.803243][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 104.806984][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.811363][ T5322] Call Trace: [ 104.812797][ T5322] [ 104.814096][ T5322] vpanic+0x56d/0xa60 [ 104.815936][ T5322] ? __pfx__printk+0x10/0x10 [ 104.817874][ T5322] ? __pfx_vpanic+0x10/0x10 [ 104.819898][ T5322] ? is_bpf_text_address+0x292/0x2b0 [ 104.822217][ T5322] ? is_bpf_text_address+0x26/0x2b0 [ 104.824373][ T5322] panic+0xc5/0xd0 [ 104.825935][ T5322] ? __pfx_panic+0x10/0x10 [ 104.827836][ T5322] __warn+0x315/0x4c0 [ 104.829477][ T5322] ? __mutex_lock+0x12e2/0x1550 [ 104.831507][ T5322] ? __mutex_lock+0x12e2/0x1550 [ 104.833650][ T5322] __report_bug+0x276/0x570 [ 104.835605][ T5322] ? __mutex_lock+0x12e2/0x1550 [ 104.837737][ T5322] ? __pfx___report_bug+0x10/0x10 [ 104.839861][ T5322] ? __mutex_lock+0x12ee/0x1550 [ 104.841937][ T5322] report_bug_entry+0x19b/0x290 [ 104.844029][ T5322] ? __mutex_lock+0x12e9/0x1550 [ 104.846099][ T5322] ? __mutex_lock+0x12ee/0x1550 [ 104.848181][ T5322] handle_bug+0xce/0x200 [ 104.850079][ T5322] exc_invalid_op+0x1a/0x50 [ 104.852105][ T5322] asm_exc_invalid_op+0x1a/0x20 [ 104.854164][ T5322] RIP: 0010:__mutex_lock+0x12e9/0x1550 [ 104.856501][ T5322] Code: 73 7a 90 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 47 02 00 00 83 3d ab 32 92 04 00 75 13 48 8d 3d ae 2e 95 04 48 c7 c6 60 10 0d 8c <67> 48 0f b9 3a 90 e9 6b ee ff ff 90 0f 0b 90 e9 3e f2 ff ff 90 0f [ 104.864592][ T5322] RSP: 0018:ffffc9000e097ae0 EFLAGS: 00010246 [ 104.867165][ T5322] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88803ef34b00 [ 104.870552][ T5322] RDX: 0000000000000000 RSI: ffffffff8c0d1060 RDI: ffffffff907d6f90 [ 104.874115][ T5322] RBP: ffffc9000e097c80 R08: ffffffff907a7383 R09: 1ffffffff20f4e70 [ 104.877689][ T5322] R10: dffffc0000000000 R11: fffffbfff20f4e71 R12: ffff888034e751c0 [ 104.881085][ T5322] R13: 0000000000000000 R14: 1ffff92001c12f70 R15: 0000000000000000 [ 104.884303][ T5322] ? kfree+0x1c5/0x650 [ 104.886106][ T5322] ? drm_mode_rmfb+0x561/0x7a0 [ 104.888118][ T5322] ? drm_gem_fb_destroy+0x1c9/0x200 [ 104.890303][ T5322] ? virtio_gpu_free_object+0x90/0x1d0 [ 104.892933][ T5322] ? drm_mode_rmfb+0x561/0x7a0 [ 104.895121][ T5322] ? __pfx___mutex_lock+0x10/0x10 [ 104.897207][ T5322] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.899939][ T5322] virtio_gpu_free_object+0x90/0x1d0 [ 104.902252][ T5322] drm_client_buffer_delete+0x183/0x2d0 [ 104.904720][ T5322] drm_fbdev_shmem_fb_destroy+0xb5/0xe0 [ 104.907256][ T5322] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 104.910081][ T5322] fb_release+0x11d/0x140 [ 104.912004][ T5322] ? __pfx_fb_release+0x10/0x10 [ 104.914216][ T5322] __fput+0x418/0xa50 [ 104.915984][ T5322] task_work_run+0x1d9/0x270 [ 104.917981][ T5322] ? __pfx_task_work_run+0x10/0x10 [ 104.920336][ T5322] exit_to_user_mode_loop+0x204/0x770 [ 104.922766][ T5322] ? rcu_is_watching+0x16/0xb0 [ 104.924911][ T5322] do_syscall_64+0x328/0x520 [ 104.926936][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.929539][ T5322] ? clear_bhb_loop+0x70/0xc0 [ 104.931732][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.934486][ T5322] RIP: 0033:0x7f83b379e159 [ 104.936514][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.944390][ T5322] RSP: 002b:00007fff07aabc18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 104.947778][ T5322] RAX: 0000000000000000 RBX: 00007f83b3a27da0 RCX: 00007f83b379e159 [ 104.950998][ T5322] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 104.954343][ T5322] RBP: 00007f83b3a27da0 R08: 00007f83b3a26038 R09: 0000000000000000 [ 104.957689][ T5322] R10: 0000000000ddcf40 R11: 0000000000000246 R12: 000000000001a316 [ 104.961103][ T5322] R13: 00007f83b3a2609c R14: 000000000001978f R15: 00007f83b3a26090 [ 104.964505][ T5322] [ 104.966326][ T5322] Kernel Offset: disabled [ 104.968210][ T5322] Rebooting in 86400 seconds..