program: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x2, 0x0, 0x1, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x4, 0x4}) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) [ 102.854956][ T5310] Bluetooth: hci0: command tx timeout [ 103.539866][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.689874][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 103.691641][ T10] usb 5-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 103.693946][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.799116][ T10] usb 5-1: config 0 descriptor?? [ 103.898724][ T10] as10x_usb: device has been detected [ 103.904935][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 104.030193][ T5353] ------------[ cut here ]------------ [ 104.030209][ T5353] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 104.030231][ T5353] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x132a/0x15a0, CPU#0: syz.0.0/5353 [ 104.089513][ T5353] Modules linked in: [ 104.097141][ T5353] CPU: 0 UID: 0 PID: 5353 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 104.110068][ T5353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.122484][ T5353] RIP: 0010:__mutex_lock+0x1331/0x15a0 [ 104.125048][ T5353] Code: 91 9d 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d 63 f3 98 05 00 75 13 48 8d 3d b6 f2 9b 05 48 c7 c6 e0 27 2d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f [ 104.150164][ T5353] RSP: 0018:ffffc9000f7cfa60 EFLAGS: 00010246 [ 104.167125][ T5353] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 104.181070][ T5353] RDX: ffffc9000ef52000 RSI: ffffffff8c2d27e0 RDI: ffffffff91a09150 [ 104.194780][ T5353] RBP: ffffc9000f7cfc00 R08: ffffffff919d91f3 R09: 1ffffffff233b23e [ 104.198263][ T5353] R10: dffffc0000000000 R11: fffffbfff233b23f R12: ffff88804411cb30 [ 104.221140][ T5353] R13: 0000000000000000 R14: 1ffff92001ef9f60 R15: 0000000000000000 [ 104.233019][ T5353] FS: 00007f185b9b16c0(0000) GS:ffff88808ac1d000(0000) knlGS:0000000000000000 [ 104.240456][ T5353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.255525][ T5353] CR2: 00007f185ae1eff8 CR3: 0000000045b41000 CR4: 0000000000352ef0 [ 104.261190][ T5353] Call Trace: [ 104.263405][ T5353] [ 104.264732][ T5353] ? trace_contention_end+0x3d/0x140 [ 104.267001][ T5353] ? __mutex_lock+0x305/0x15a0 [ 104.270262][ T5353] ? dmx_ts_feed_set+0x330/0x560 [ 104.274636][ T5353] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 104.280191][ T5353] ? __pfx___mutex_lock+0x10/0x10 [ 104.288722][ T5353] ? __mutex_unlock_slowpath+0x731/0x900 [ 104.294422][ T5353] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.300019][ T5353] ? preempt_schedule_thunk+0x16/0x40 [ 104.303594][ T5353] as102_dvb_dmx_start_feed+0x70/0x290 [ 104.307325][ T5353] dmx_ts_feed_start_filtering+0x129/0x220 [ 104.310581][ T5353] dvb_dmxdev_filter_start+0x434/0x10d0 [ 104.314717][ T5353] dvb_demux_do_ioctl+0x48b/0x540 [ 104.318801][ T5353] dvb_usercopy+0x199/0x2e0 [ 104.323003][ T5353] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 104.328802][ T5353] ? __pfx_dvb_usercopy+0x10/0x10 [ 104.332851][ T5353] ? __fget_files+0x2a/0x420 [ 104.335265][ T5353] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 104.337558][ T5353] dvb_demux_ioctl+0x29/0x40 [ 104.340261][ T5353] __se_sys_ioctl+0xfc/0x170 [ 104.357785][ T5353] do_syscall_64+0x166/0x520 [ 104.369437][ T5353] ? trace_irq_disable+0x3b/0x140 [ 104.373780][ T5353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.377306][ T5353] ? clear_bhb_loop+0x70/0xc0 [ 104.380160][ T5353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.389034][ T5353] RIP: 0033:0x7f185ab9f559 [ 104.397189][ T5353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.412206][ T5353] RSP: 002b:00007f185b9b0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.417405][ T5353] RAX: ffffffffffffffda RBX: 00007f185ae25fa0 RCX: 00007f185ab9f559 [ 104.422314][ T5353] RDX: 00002000000000c0 RSI: 0000000040146f2c RDI: 0000000000000004 [ 104.426545][ T5353] RBP: 00007f185ac36b20 R08: 0000000000000000 R09: 0000000000000000 [ 104.429422][ T5353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.434918][ T5353] R13: 00007f185ae26038 R14: 00007f185ae25fa0 R15: 00007ffdf7aa1ef8 [ 104.440474][ T5353] [ 104.442426][ T5353] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.447994][ T5353] CPU: 0 UID: 0 PID: 5353 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 104.453239][ T5353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.459390][ T5353] Call Trace: [ 104.461661][ T5353] [ 104.463833][ T5353] vpanic+0x56d/0xa60 [ 104.466568][ T5353] ? __pfx__printk+0x10/0x10 [ 104.470733][ T5353] ? __pfx_vpanic+0x10/0x10 [ 104.474689][ T5353] ? is_bpf_text_address+0x292/0x2b0 [ 104.476853][ T5353] ? is_bpf_text_address+0x26/0x2b0 [ 104.479052][ T5353] panic+0xc5/0xd0 [ 104.480837][ T5353] ? __pfx_panic+0x10/0x10 [ 104.495114][ T5353] __warn+0x315/0x4c0 [ 104.496950][ T5353] ? __mutex_lock+0x132a/0x15a0 [ 104.504696][ T5353] ? __mutex_lock+0x132a/0x15a0 [ 104.510602][ T5353] __report_bug+0x276/0x570 [ 104.522998][ T5353] ? __mutex_lock+0x132a/0x15a0 [ 104.525308][ T5353] ? __pfx___report_bug+0x10/0x10 [ 104.528464][ T5353] ? clockevents_program_event+0x491/0x630 [ 104.530835][ T5353] ? __lock_acquire+0x747/0x2de0 [ 104.539241][ T5353] report_bug_entry+0x19b/0x290 [ 104.542077][ T5353] ? __mutex_lock+0x1331/0x15a0 [ 104.546918][ T5353] ? __mutex_lock+0x1336/0x15a0 [ 104.550843][ T5353] handle_bug+0xce/0x200 [ 104.559454][ T5353] exc_invalid_op+0x1a/0x50 [ 104.561932][ T5353] asm_exc_invalid_op+0x1a/0x20 [ 104.566794][ T5353] RIP: 0010:__mutex_lock+0x1331/0x15a0 [ 104.573942][ T5353] Code: 91 9d 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d 63 f3 98 05 00 75 13 48 8d 3d b6 f2 9b 05 48 c7 c6 e0 27 2d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f [ 104.592250][ T5353] RSP: 0018:ffffc9000f7cfa60 EFLAGS: 00010246 [ 104.602605][ T5353] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 104.606073][ T5353] RDX: ffffc9000ef52000 RSI: ffffffff8c2d27e0 RDI: ffffffff91a09150 [ 104.613041][ T5353] RBP: ffffc9000f7cfc00 R08: ffffffff919d91f3 R09: 1ffffffff233b23e [ 104.624313][ T5353] R10: dffffc0000000000 R11: fffffbfff233b23f R12: ffff88804411cb30 [ 104.630941][ T5353] R13: 0000000000000000 R14: 1ffff92001ef9f60 R15: 0000000000000000 [ 104.644279][ T5353] ? trace_contention_end+0x3d/0x140 [ 104.646631][ T5353] ? __mutex_lock+0x305/0x15a0 [ 104.648735][ T5353] ? dmx_ts_feed_set+0x330/0x560 [ 104.676658][ T5353] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 104.679127][ T5353] ? __pfx___mutex_lock+0x10/0x10 [ 104.681434][ T5353] ? __mutex_unlock_slowpath+0x731/0x900 [ 104.694084][ T5353] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.698385][ T5353] ? preempt_schedule_thunk+0x16/0x40 [ 104.703177][ T5353] as102_dvb_dmx_start_feed+0x70/0x290 [ 104.712119][ T5353] dmx_ts_feed_start_filtering+0x129/0x220 [ 104.718322][ T5353] dvb_dmxdev_filter_start+0x434/0x10d0 [ 104.725710][ T5353] dvb_demux_do_ioctl+0x48b/0x540 [ 104.732949][ T5353] dvb_usercopy+0x199/0x2e0 [ 104.742313][ T5353] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 104.748953][ T5353] ? __pfx_dvb_usercopy+0x10/0x10 [ 104.755684][ T5353] ? __fget_files+0x2a/0x420 [ 104.764198][ T5353] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 104.775171][ T5353] dvb_demux_ioctl+0x29/0x40 [ 104.778207][ T5353] __se_sys_ioctl+0xfc/0x170 [ 104.784155][ T5353] do_syscall_64+0x166/0x520 [ 104.794762][ T5353] ? trace_irq_disable+0x3b/0x140 [ 104.798298][ T5353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.801874][ T5353] ? clear_bhb_loop+0x70/0xc0 [ 104.808372][ T5353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.813880][ T5353] RIP: 0033:0x7f185ab9f559 [ 104.819035][ T5353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.844844][ T5353] RSP: 002b:00007f185b9b0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.847894][ T5353] RAX: ffffffffffffffda RBX: 00007f185ae25fa0 RCX: 00007f185ab9f559 [ 104.863002][ T5353] RDX: 00002000000000c0 RSI: 0000000040146f2c RDI: 0000000000000004 [ 104.869209][ T5353] RBP: 00007f185ac36b20 R08: 0000000000000000 R09: 0000000000000000 [ 104.877311][ T5353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.892765][ T5353] R13: 00007f185ae26038 R14: 00007f185ae25fa0 R15: 00007ffdf7aa1ef8 [ 104.904988][ T5353] [ 104.914192][ T5353] Kernel Offset: disabled [ 104.924741][ T5353] Rebooting in 86400 seconds..