program: syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x1007, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) [ 89.018049][ T4654] Bluetooth: hci0: command tx timeout [ 89.350839][ T1365] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.500665][ T1365] usb 5-1: Using ep0 maxpacket: 32 [ 89.508247][ T1365] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 89.513175][ T1365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.543440][ T1365] usb 5-1: config 0 descriptor?? [ 89.633048][ T1365] as10x_usb: device has been detected [ 89.639558][ T1365] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 89.729616][ T1365] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 89.803331][ T5331] ------------[ cut here ]------------ [ 89.818443][ T5331] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 89.818460][ T5331] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x1303/0x1550, CPU#0: syz.0.0/5331 [ 89.837323][ T5331] Modules linked in: [ 89.845616][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 89.849707][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.864657][ T5331] RIP: 0010:__mutex_lock+0x130a/0x1550 [ 89.867577][ T5331] Code: 30 90 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 1b 02 00 00 83 3d da 43 85 04 00 75 13 48 8d 3d cd 5b 88 04 48 c7 c6 a0 da cc 8b <67> 48 0f b9 3a 90 e9 50 ee ff ff 90 0f 0b 90 e9 4e f2 ff ff 90 0f [ 89.882868][ T5331] RSP: 0018:ffffc90006577a20 EFLAGS: 00010246 [ 89.887428][ T5331] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000100000 [ 89.892464][ T5331] RDX: ffffc90020802000 RSI: ffffffff8bccdaa0 RDI: ffffffff903417c0 [ 89.897914][ T5331] RBP: ffffc90006577bd8 R08: ffffffff9030ffc3 R09: 1ffffffff2061ff8 [ 89.902932][ T5331] R10: dffffc0000000000 R11: fffffbfff2061ff9 R12: ffff88801fbcab30 [ 89.909315][ T5331] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000caef5c [ 89.915405][ T5331] FS: 00007f348ea8d6c0(0000) GS:ffff88808c885000(0000) knlGS:0000000000000000 [ 89.921996][ T5331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.929445][ T5331] CR2: 00007ffd58c0cff8 CR3: 0000000032d2d000 CR4: 0000000000352ef0 [ 89.945921][ T5331] Call Trace: [ 89.948015][ T5331] [ 89.949833][ T5331] ? trace_contention_end+0x3d/0x140 [ 89.953267][ T5331] ? __mutex_lock+0x319/0x1550 [ 89.962135][ T5331] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 89.966562][ T5331] ? __pfx___mutex_lock+0x10/0x10 [ 89.977430][ T5331] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 89.980909][ T5331] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 89.983433][ T5331] ? do_raw_spin_lock+0x12b/0x2f0 [ 89.996601][ T5331] as102_dvb_dmx_start_feed+0x70/0x290 [ 90.000060][ T5331] dmx_section_feed_start_filtering+0x518/0x6c0 [ 90.004414][ T5331] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 90.007034][ T5331] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 90.009289][ T5331] dvb_demux_do_ioctl+0x470/0x540 [ 90.011386][ T5331] dvb_usercopy+0x199/0x2e0 [ 90.013270][ T5331] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 90.026441][ T5331] ? __pfx_dvb_usercopy+0x10/0x10 [ 90.037254][ T5331] ? __fget_files+0x3a0/0x420 [ 90.040150][ T5331] ? __fget_files+0x2a/0x420 [ 90.043187][ T5331] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 90.051851][ T5331] dvb_demux_ioctl+0x29/0x40 [ 90.055318][ T5331] __se_sys_ioctl+0xfc/0x170 [ 90.062465][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.074398][ T5331] do_syscall_64+0x15f/0xf80 [ 90.076443][ T5331] ? trace_irq_disable+0x3b/0x140 [ 90.078564][ T5331] ? clear_bhb_loop+0x40/0x90 [ 90.080709][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.083166][ T5331] RIP: 0033:0x7f348db9cdd9 [ 90.089845][ T5331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.109724][ T5331] RSP: 002b:00007f348ea8cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.118254][ T5331] RAX: ffffffffffffffda RBX: 00007f348de15fa0 RCX: 00007f348db9cdd9 [ 90.121608][ T5331] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 90.135358][ T5331] RBP: 00007f348dc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 90.146441][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.150065][ T5331] R13: 00007f348de16038 R14: 00007f348de15fa0 R15: 00007ffd58c0d148 [ 90.158008][ T5331] [ 90.159324][ T5331] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 90.162311][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 90.176774][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.187158][ T5331] Call Trace: [ 90.189307][ T5331] [ 90.195039][ T5331] vpanic+0x56c/0xa60 [ 90.196794][ T5331] ? __pfx__printk+0x10/0x10 [ 90.198763][ T5331] ? __pfx_vpanic+0x10/0x10 [ 90.200669][ T5331] ? is_bpf_text_address+0x292/0x2b0 [ 90.203078][ T5331] ? is_bpf_text_address+0x26/0x2b0 [ 90.222202][ T5331] panic+0xc5/0xd0 [ 90.223864][ T5331] ? __pfx_panic+0x10/0x10 [ 90.225859][ T5331] __warn+0x315/0x4c0 [ 90.227567][ T5331] ? __mutex_lock+0x1303/0x1550 [ 90.229680][ T5331] ? __mutex_lock+0x1303/0x1550 [ 90.231785][ T5331] __report_bug+0x29a/0x540 [ 90.233707][ T5331] ? lock_release+0x4b/0x3c0 [ 90.241374][ T5331] ? lock_release+0x4b/0x3c0 [ 90.266696][ T5331] ? __mutex_lock+0x1303/0x1550 [ 90.269840][ T5331] ? __pfx___report_bug+0x10/0x10 [ 90.273232][ T5331] ? is_bpf_text_address+0x26/0x2b0 [ 90.276110][ T5331] ? __lock_acquire+0x6b5/0x2cf0 [ 90.279432][ T5331] report_bug_entry+0x19a/0x290 [ 90.283010][ T5331] ? __mutex_lock+0x130a/0x1550 [ 90.286049][ T5331] ? __mutex_lock+0x130f/0x1550 [ 90.290898][ T5331] handle_bug+0xce/0x200 [ 90.293729][ T5331] exc_invalid_op+0x1a/0x50 [ 90.300968][ T5331] asm_exc_invalid_op+0x1a/0x20 [ 90.306699][ T5331] RIP: 0010:__mutex_lock+0x130a/0x1550 [ 90.311120][ T5331] Code: 30 90 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 1b 02 00 00 83 3d da 43 85 04 00 75 13 48 8d 3d cd 5b 88 04 48 c7 c6 a0 da cc 8b <67> 48 0f b9 3a 90 e9 50 ee ff ff 90 0f 0b 90 e9 4e f2 ff ff 90 0f [ 90.340235][ T5331] RSP: 0018:ffffc90006577a20 EFLAGS: 00010246 [ 90.344017][ T5331] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000100000 [ 90.348839][ T5331] RDX: ffffc90020802000 RSI: ffffffff8bccdaa0 RDI: ffffffff903417c0 [ 90.352909][ T5331] RBP: ffffc90006577bd8 R08: ffffffff9030ffc3 R09: 1ffffffff2061ff8 [ 90.366688][ T5331] R10: dffffc0000000000 R11: fffffbfff2061ff9 R12: ffff88801fbcab30 [ 90.369953][ T5331] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000caef5c [ 90.374745][ T5331] ? trace_contention_end+0x3d/0x140 [ 90.387455][ T5331] ? __mutex_lock+0x319/0x1550 [ 90.390407][ T5331] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 90.393911][ T5331] ? __pfx___mutex_lock+0x10/0x10 [ 90.404641][ T5331] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 90.407930][ T5331] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 90.411438][ T5331] ? do_raw_spin_lock+0x12b/0x2f0 [ 90.424698][ T5331] as102_dvb_dmx_start_feed+0x70/0x290 [ 90.428178][ T5331] dmx_section_feed_start_filtering+0x518/0x6c0 [ 90.431057][ T5331] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 90.433928][ T5331] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 90.445804][ T5331] dvb_demux_do_ioctl+0x470/0x540 [ 90.448880][ T5331] dvb_usercopy+0x199/0x2e0 [ 90.452596][ T5331] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 90.456254][ T5331] ? __pfx_dvb_usercopy+0x10/0x10 [ 90.464921][ T5331] ? __fget_files+0x3a0/0x420 [ 90.472996][ T5331] ? __fget_files+0x2a/0x420 [ 90.475036][ T5331] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 90.477333][ T5331] dvb_demux_ioctl+0x29/0x40 [ 90.479318][ T5331] __se_sys_ioctl+0xfc/0x170 [ 90.481345][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.496266][ T5331] do_syscall_64+0x15f/0xf80 [ 90.498259][ T5331] ? trace_irq_disable+0x3b/0x140 [ 90.501262][ T5331] ? clear_bhb_loop+0x40/0x90 [ 90.507389][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.516284][ T5331] RIP: 0033:0x7f348db9cdd9 [ 90.527046][ T5331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.545432][ T5331] RSP: 002b:00007f348ea8cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.549124][ T5331] RAX: ffffffffffffffda RBX: 00007f348de15fa0 RCX: 00007f348db9cdd9 [ 90.553401][ T5331] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 90.566354][ T5331] RBP: 00007f348dc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 90.571138][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.585215][ T5331] R13: 00007f348de16038 R14: 00007f348de15fa0 R15: 00007ffd58c0d148 [ 90.590151][ T5331] [ 90.592468][ T5331] Kernel Offset: disabled [ 90.608952][ T5331] Rebooting in 86400 seconds..