program: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000001}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x307600, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) [ 102.568337][ T45] Bluetooth: hci0: command tx timeout [ 102.986831][ T5329] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.247827][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.397552][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 103.403314][ T10] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 103.408919][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.455898][ T10] usb 5-1: config 0 descriptor?? [ 103.532979][ T10] as10x_usb: device has been detected [ 103.551593][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 103.606577][ T10] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 103.678660][ T5330] ------------[ cut here ]------------ [ 103.693828][ T5330] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 103.693850][ T5330] WARNING: kernel/locking/mutex.c:593 at __mutex_lock+0x10a4/0x1300, CPU#0: syz.0.0/5330 [ 103.715680][ T5330] Modules linked in: [ 103.718018][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 103.722841][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.742014][ T5330] RIP: 0010:__mutex_lock+0x10ab/0x1300 [ 103.744928][ T5330] Code: 12 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 79 5f 04 00 75 13 48 8d 3d 1c 8f 62 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f [ 103.772636][ T5330] RSP: 0018:ffffc9000dddfa20 EFLAGS: 00010246 [ 103.792039][ T5330] RAX: 0000000000000000 RBX: 1ffff92001bbbf5c RCX: 0000000000100000 [ 103.795650][ T5330] RDX: ffffc90020001000 RSI: ffffffff8bcce0c0 RDI: ffffffff90153410 [ 103.799199][ T5330] RBP: ffffc9000dddfbd8 R08: ffffffff90121ec3 R09: 1ffffffff20243d8 [ 103.803198][ T5330] R10: dffffc0000000000 R11: fffffbfff20243d9 R12: ffff888037dd2b60 [ 103.806535][ T5330] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.821845][ T5330] FS: 00007fd4c5dcb6c0(0000) GS:ffff88808ca4e000(0000) knlGS:0000000000000000 [ 103.839753][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.847649][ T5330] CR2: 00005582e4485f60 CR3: 000000004433f000 CR4: 0000000000352ef0 [ 103.868356][ T5330] Call Trace: [ 103.870293][ T5330] [ 103.871749][ T5330] ? __mutex_lock+0x319/0x1300 [ 103.873946][ T5330] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 103.876794][ T5330] ? dmx_section_feed_allocate_filter+0x34f/0x3e0 [ 103.880588][ T5330] ? __pfx___mutex_lock+0x10/0x10 [ 103.883023][ T5330] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 103.898552][ T5330] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.901992][ T5330] ? do_raw_spin_lock+0x12b/0x2f0 [ 103.904427][ T5330] as102_dvb_dmx_start_feed+0x70/0x290 [ 103.907309][ T5330] dmx_section_feed_start_filtering+0x518/0x6c0 [ 103.910217][ T5330] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 103.925431][ T5330] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 103.928762][ T5330] dvb_demux_do_ioctl+0x470/0x540 [ 103.931558][ T5330] dvb_usercopy+0x199/0x2e0 [ 103.956512][ T5330] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 103.959488][ T5330] ? __pfx_dvb_usercopy+0x10/0x10 [ 103.962019][ T5330] ? __fget_files+0x3a0/0x420 [ 103.972773][ T5330] ? __fget_files+0x2a/0x420 [ 103.975406][ T5330] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 103.983881][ T5330] dvb_demux_ioctl+0x29/0x40 [ 103.986815][ T5330] __se_sys_ioctl+0xfc/0x170 [ 103.989433][ T5330] do_syscall_64+0x14d/0xf80 [ 104.004881][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.007806][ T5330] ? clear_bhb_loop+0x40/0x90 [ 104.010009][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.023910][ T5330] RIP: 0033:0x7fd4c4f9c799 [ 104.027248][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.048233][ T5330] RSP: 002b:00007fd4c5dcafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.065385][ T5330] RAX: ffffffffffffffda RBX: 00007fd4c5216090 RCX: 00007fd4c4f9c799 [ 104.070321][ T5330] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 104.075104][ T5330] RBP: 00007fd4c5032c99 R08: 0000000000000000 R09: 0000000000000000 [ 104.079077][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.093548][ T5330] R13: 00007fd4c5216128 R14: 00007fd4c5216090 R15: 00007ffc3afbe088 [ 104.108749][ T5330] [ 104.111979][ T5330] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.136641][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 104.141397][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.146290][ T5330] Call Trace: [ 104.147759][ T5330] [ 104.149081][ T5330] vpanic+0x56c/0xa60 [ 104.151067][ T5330] ? __pfx__printk+0x10/0x10 [ 104.162315][ T5330] ? __pfx_vpanic+0x10/0x10 [ 104.165321][ T5330] ? is_bpf_text_address+0x292/0x2b0 [ 104.180194][ T5330] ? is_bpf_text_address+0x26/0x2b0 [ 104.183761][ T5330] panic+0xc5/0xd0 [ 104.186287][ T5330] ? __pfx_panic+0x10/0x10 [ 104.200970][ T5330] __warn+0x315/0x4f0 [ 104.212043][ T5330] ? __mutex_lock+0x10a4/0x1300 [ 104.221661][ T5330] ? __mutex_lock+0x10a4/0x1300 [ 104.232309][ T5330] __report_bug+0x29a/0x540 [ 104.240915][ T5330] ? rcu_is_watching+0x15/0xb0 [ 104.244987][ T5330] ? __mutex_lock+0x10a4/0x1300 [ 104.247738][ T5330] ? __pfx___report_bug+0x10/0x10 [ 104.250177][ T5330] ? __lock_acquire+0x6b5/0x2cf0 [ 104.252676][ T5330] report_bug_entry+0x19a/0x290 [ 104.305053][ T5330] ? __mutex_lock+0x10ab/0x1300 [ 104.307133][ T5330] ? __mutex_lock+0x10b0/0x1300 [ 104.309436][ T5330] handle_bug+0xce/0x200 [ 104.323638][ T5330] exc_invalid_op+0x1a/0x50 [ 104.325950][ T5330] asm_exc_invalid_op+0x1a/0x20 [ 104.328296][ T5330] RIP: 0010:__mutex_lock+0x10ab/0x1300 [ 104.331019][ T5330] Code: 12 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 79 5f 04 00 75 13 48 8d 3d 1c 8f 62 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f [ 104.358794][ T5330] RSP: 0018:ffffc9000dddfa20 EFLAGS: 00010246 [ 104.361554][ T5330] RAX: 0000000000000000 RBX: 1ffff92001bbbf5c RCX: 0000000000100000 [ 104.365455][ T5330] RDX: ffffc90020001000 RSI: ffffffff8bcce0c0 RDI: ffffffff90153410 [ 104.369327][ T5330] RBP: ffffc9000dddfbd8 R08: ffffffff90121ec3 R09: 1ffffffff20243d8 [ 104.410537][ T5330] R10: dffffc0000000000 R11: fffffbfff20243d9 R12: ffff888037dd2b60 [ 104.430776][ T5330] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.438582][ T5330] ? __mutex_lock+0x319/0x1300 [ 104.456952][ T5330] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 104.460122][ T5330] ? dmx_section_feed_allocate_filter+0x34f/0x3e0 [ 104.472676][ T5330] ? __pfx___mutex_lock+0x10/0x10 [ 104.475236][ T5330] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 104.477700][ T5330] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.480269][ T5330] ? do_raw_spin_lock+0x12b/0x2f0 [ 104.505520][ T5330] as102_dvb_dmx_start_feed+0x70/0x290 [ 104.515898][ T5330] dmx_section_feed_start_filtering+0x518/0x6c0 [ 104.525247][ T5330] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 104.527783][ T5330] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 104.530352][ T5330] dvb_demux_do_ioctl+0x470/0x540 [ 104.532816][ T5330] dvb_usercopy+0x199/0x2e0 [ 104.545313][ T5330] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 104.547848][ T5330] ? __pfx_dvb_usercopy+0x10/0x10 [ 104.550268][ T5330] ? __fget_files+0x3a0/0x420 [ 104.585080][ T5330] ? __fget_files+0x2a/0x420 [ 104.588457][ T5330] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 104.596095][ T5330] dvb_demux_ioctl+0x29/0x40 [ 104.600815][ T5330] __se_sys_ioctl+0xfc/0x170 [ 104.605180][ T5330] do_syscall_64+0x14d/0xf80 [ 104.611820][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.622546][ T5330] ? clear_bhb_loop+0x40/0x90 [ 104.637051][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.639841][ T5330] RIP: 0033:0x7fd4c4f9c799 [ 104.642236][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.676093][ T5330] RSP: 002b:00007fd4c5dcafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.680052][ T5330] RAX: ffffffffffffffda RBX: 00007fd4c5216090 RCX: 00007fd4c4f9c799 [ 104.684078][ T5330] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 104.692375][ T5330] RBP: 00007fd4c5032c99 R08: 0000000000000000 R09: 0000000000000000 [ 104.697409][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.701338][ T5330] R13: 00007fd4c5216128 R14: 00007fd4c5216090 R15: 00007ffc3afbe088 [ 104.714857][ T5330] [ 104.716803][ T5330] Kernel Offset: disabled [ 104.719127][ T5330] Rebooting in 86400 seconds..