program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313"], 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt/roccatsavu0\x00', 0xe001, 0x0) [ 86.067975][ T46] Bluetooth: hci0: command tx timeout [ 86.451103][ T54] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.612488][ T54] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 86.614165][ T1255] cfg80211: failed to load regulatory.db [ 86.617142][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.617164][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.617185][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.702197][ T54] usb 5-1: config 0 descriptor?? [ 87.158554][ T54] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 87.158607][ T54] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 87.158624][ T54] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 87.158638][ T54] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 87.158653][ T54] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 87.158669][ T54] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 87.158682][ T54] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 87.158695][ T54] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 87.158712][ T54] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 87.158729][ T54] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 87.306493][ T54] savu 0003:1E7D:2D5A.0002: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 87.436629][ T5318] ------------[ cut here ]------------ [ 87.436646][ T5318] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 87.436653][ T5318] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x12e2/0x1550, CPU#0: syz.0.0/5318 [ 87.453191][ T5318] Modules linked in: [ 87.456868][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.465278][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.474744][ T5318] RIP: 0010:__mutex_lock+0x12e9/0x1550 [ 87.480481][ T5318] Code: a6 7a 90 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 47 02 00 00 83 3d 8b 35 91 04 00 75 13 48 8d 3d ee 31 94 04 48 c7 c6 60 12 0d 8c <67> 48 0f b9 3a 90 e9 6b ee ff ff 90 0f 0b 90 e9 3e f2 ff ff 90 0f [ 87.510698][ T5318] RSP: 0018:ffffc9000f0f7740 EFLAGS: 00010246 [ 87.522288][ T5318] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 87.526016][ T5318] RDX: ffffc9000f6d9000 RSI: ffffffff8c0d1260 RDI: ffffffff907da2f0 [ 87.533794][ T5318] RBP: ffffc9000f0f78e0 R08: ffffffff907aa683 R09: 1ffffffff20f54d0 [ 87.540422][ T5318] R10: dffffc0000000000 R11: fffffbfff20f54d1 R12: ffff888052d75080 [ 87.556232][ T5318] R13: 0000000000000000 R14: 1ffff92001e1eefc R15: 0000000000000000 [ 87.562171][ T5318] FS: 00007f099dcae6c0(0000) GS:ffff88808c2c0000(0000) knlGS:0000000000000000 [ 87.574555][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.583339][ T5318] CR2: 00007f263f6b6d00 CR3: 0000000012f6e000 CR4: 0000000000352ef0 [ 87.594068][ T5318] Call Trace: [ 87.596807][ T5318] [ 87.603327][ T5318] ? __mutex_lock+0x5d4/0x1550 [ 87.607444][ T5318] ? roccat_open+0xf6/0x5c0 [ 87.615125][ T5318] ? __pfx___mutex_lock+0x10/0x10 [ 87.624377][ T5318] ? __kmalloc_cache_noprof+0x321/0x600 [ 87.628097][ T5318] ? __kmalloc_cache_noprof+0x14d/0x600 [ 87.632467][ T5318] ? roccat_open+0x76/0x5c0 [ 87.636791][ T5318] roccat_open+0xf6/0x5c0 [ 87.640277][ T5318] ? do_raw_spin_unlock+0x4d/0x200 [ 87.644045][ T5318] chrdev_open+0x4d9/0x600 [ 87.648521][ T5318] ? __pfx_chrdev_open+0x10/0x10 [ 87.651985][ T5318] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 87.655153][ T5318] ? __pfx_chrdev_open+0x10/0x10 [ 87.660116][ T5318] do_dentry_open+0x816/0x1380 [ 87.664776][ T5318] vfs_open+0x3b/0x340 [ 87.667104][ T5318] ? path_openat+0x1428/0x1d60 [ 87.669635][ T5318] path_openat+0x1443/0x1d60 [ 87.671798][ T5318] do_file_open+0x23e/0x4a0 [ 87.673767][ T5318] ? __pfx_do_file_open+0x10/0x10 [ 87.678148][ T5318] ? _raw_spin_unlock+0x28/0x50 [ 87.685811][ T5318] ? alloc_fd+0x651/0x6c0 [ 87.689788][ T5318] do_sys_openat2+0x115/0x200 [ 87.692099][ T5318] ? __se_sys_futex+0x3a8/0x450 [ 87.694290][ T5318] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.696466][ T5318] ? rcu_is_watching+0x16/0xb0 [ 87.698503][ T5318] __x64_sys_openat+0x138/0x170 [ 87.700599][ T5318] do_syscall_64+0x166/0x520 [ 87.720079][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.742240][ T5318] ? clear_bhb_loop+0x70/0xc0 [ 87.745174][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.749570][ T5318] RIP: 0033:0x7f099cd9e159 [ 87.762710][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.777240][ T5318] RSP: 002b:00007f099dcadfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.783664][ T5318] RAX: ffffffffffffffda RBX: 00007f099d025fa0 RCX: 00007f099cd9e159 [ 87.790965][ T5318] RDX: 000000000000e001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 87.798095][ T5318] RBP: 00007f099ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 87.804086][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.811548][ T5318] R13: 00007f099d026038 R14: 00007f099d025fa0 R15: 00007ffe996ce128 [ 87.818971][ T5318] [ 87.822689][ T5318] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.828047][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.835261][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.845774][ T5318] Call Trace: [ 87.848752][ T5318] [ 87.852186][ T5318] vpanic+0x56d/0xa60 [ 87.860912][ T5318] ? __pfx__printk+0x10/0x10 [ 87.864449][ T5318] ? __pfx_vpanic+0x10/0x10 [ 87.866416][ T5318] ? is_bpf_text_address+0x292/0x2b0 [ 87.868519][ T5318] ? is_bpf_text_address+0x26/0x2b0 [ 87.870673][ T5318] panic+0xc5/0xd0 [ 87.872299][ T5318] ? __pfx_panic+0x10/0x10 [ 87.874433][ T5318] __warn+0x315/0x4c0 [ 87.877612][ T5318] ? __mutex_lock+0x12e2/0x1550 [ 87.880253][ T5318] ? __mutex_lock+0x12e2/0x1550 [ 87.882437][ T5318] __report_bug+0x276/0x570 [ 87.884353][ T5318] ? __mutex_lock+0x12e2/0x1550 [ 87.886452][ T5318] ? __pfx___report_bug+0x10/0x10 [ 87.889077][ T5318] report_bug_entry+0x19b/0x290 [ 87.892375][ T5318] ? __mutex_lock+0x12e9/0x1550 [ 87.896692][ T5318] ? __mutex_lock+0x12ee/0x1550 [ 87.900618][ T5318] handle_bug+0xce/0x200 [ 87.903704][ T5318] exc_invalid_op+0x1a/0x50 [ 87.908102][ T5318] asm_exc_invalid_op+0x1a/0x20 [ 87.911726][ T5318] RIP: 0010:__mutex_lock+0x12e9/0x1550 [ 87.914335][ T5318] Code: a6 7a 90 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 47 02 00 00 83 3d 8b 35 91 04 00 75 13 48 8d 3d ee 31 94 04 48 c7 c6 60 12 0d 8c <67> 48 0f b9 3a 90 e9 6b ee ff ff 90 0f 0b 90 e9 3e f2 ff ff 90 0f [ 87.936676][ T5318] RSP: 0018:ffffc9000f0f7740 EFLAGS: 00010246 [ 87.939822][ T5318] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 87.948158][ T5318] RDX: ffffc9000f6d9000 RSI: ffffffff8c0d1260 RDI: ffffffff907da2f0 [ 87.953094][ T5318] RBP: ffffc9000f0f78e0 R08: ffffffff907aa683 R09: 1ffffffff20f54d0 [ 87.958392][ T5318] R10: dffffc0000000000 R11: fffffbfff20f54d1 R12: ffff888052d75080 [ 87.964614][ T5318] R13: 0000000000000000 R14: 1ffff92001e1eefc R15: 0000000000000000 [ 87.975240][ T5318] ? __mutex_lock+0x5d4/0x1550 [ 87.979598][ T5318] ? roccat_open+0xf6/0x5c0 [ 87.984060][ T5318] ? __pfx___mutex_lock+0x10/0x10 [ 87.987716][ T5318] ? __kmalloc_cache_noprof+0x321/0x600 [ 87.990997][ T5318] ? __kmalloc_cache_noprof+0x14d/0x600 [ 87.993857][ T5318] ? roccat_open+0x76/0x5c0 [ 87.996731][ T5318] roccat_open+0xf6/0x5c0 [ 88.000692][ T5318] ? do_raw_spin_unlock+0x4d/0x200 [ 88.005605][ T5318] chrdev_open+0x4d9/0x600 [ 88.011994][ T5318] ? __pfx_chrdev_open+0x10/0x10 [ 88.014462][ T5318] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 88.021584][ T5318] ? __pfx_chrdev_open+0x10/0x10 [ 88.032250][ T5318] do_dentry_open+0x816/0x1380 [ 88.034226][ T5318] vfs_open+0x3b/0x340 [ 88.035925][ T5318] ? path_openat+0x1428/0x1d60 [ 88.038476][ T5318] path_openat+0x1443/0x1d60 [ 88.042650][ T5318] do_file_open+0x23e/0x4a0 [ 88.053983][ T5318] ? __pfx_do_file_open+0x10/0x10 [ 88.057264][ T5318] ? _raw_spin_unlock+0x28/0x50 [ 88.059178][ T5318] ? alloc_fd+0x651/0x6c0 [ 88.061010][ T5318] do_sys_openat2+0x115/0x200 [ 88.074116][ T5318] ? __se_sys_futex+0x3a8/0x450 [ 88.078910][ T5318] ? __pfx_do_sys_openat2+0x10/0x10 [ 88.081840][ T5318] ? rcu_is_watching+0x16/0xb0 [ 88.083809][ T5318] __x64_sys_openat+0x138/0x170 [ 88.085832][ T5318] do_syscall_64+0x166/0x520 [ 88.087760][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.090312][ T5318] ? clear_bhb_loop+0x70/0xc0 [ 88.103222][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.108513][ T5318] RIP: 0033:0x7f099cd9e159 [ 88.122409][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.134222][ T5318] RSP: 002b:00007f099dcadfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.143770][ T5318] RAX: ffffffffffffffda RBX: 00007f099d025fa0 RCX: 00007f099cd9e159 [ 88.154421][ T5318] RDX: 000000000000e001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 88.159359][ T5318] RBP: 00007f099ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 88.165036][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.174095][ T5318] R13: 00007f099d026038 R14: 00007f099d025fa0 R15: 00007ffe996ce128 [ 88.180650][ T5318] [ 88.184800][ T5318] Kernel Offset: disabled [ 88.188750][ T5318] Rebooting in 86400 seconds..