program: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000180)={[{@fatal_errors_bug}]}, 0x11, 0x512d, &(0x7f0000005180)="$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") r3 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000000)={{}, {@void, @actul_num={@val=0x2d, 0x7}}}) r4 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000400)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000140)={0x1, 0x6, 0x1, &(0x7f0000000100)={0x1c, "3ac071ffbc8cd0d684737d99bb8bd238954c9a216d398df0f558125211b40c65fd"}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x40}}, 0x0) [ 84.809073][ T4656] Bluetooth: hci0: command tx timeout [ 85.449201][ T5328] loop0: detected capacity change from 0 to 32768 [ 85.510081][ T5328] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.0 (5328) [ 85.571456][ T5328] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 85.581631][ T5328] BTRFS info (device loop0): using crc32c checksum algorithm [ 85.732492][ T1102] BTRFS warning (device loop0): checksum verify failed on logical 1052672 mirror 1 wanted 0xb7d14e9c found 0xeb0b2a85 level 0 [ 85.751593][ T5328] BTRFS error (device loop0): failed to read chunk root [ 85.782033][ T5328] BTRFS error (device loop0): open_ctree failed: -5 [ 86.095989][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.257109][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 86.264994][ T10] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 86.269475][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.273124][ T10] usb 5-1: Product: syz [ 86.275079][ T10] usb 5-1: Manufacturer: syz [ 86.277772][ T10] usb 5-1: SerialNumber: syz [ 86.287660][ T10] usb 5-1: config 0 descriptor?? [ 86.699979][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 86.715485][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 86.721151][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 86.725683][ T10] usb 5-1: media controller created [ 86.739063][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.826862][ T4656] Bluetooth: hci0: command tx timeout [ 86.900701][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 86.903945][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 86.917791][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 87.267132][ T5329] ------------[ cut here ]------------ [ 87.270149][ T5329] usb 5-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 87.274040][ T5329] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#0: syz.0.0/5329 [ 87.281025][ T5329] Modules linked in: [ 87.282867][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.286910][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.291407][ T5329] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 87.293955][ T5329] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 87.302256][ T5329] RSP: 0018:ffffc90004c97688 EFLAGS: 00010246 [ 87.304872][ T5329] RAX: 0000000000000000 RBX: ffff888034289000 RCX: 0000000080000280 [ 87.308451][ T5329] RDX: ffff888037a1ff40 RSI: ffffffff8c80b780 RDI: ffffffff903e6bc0 [ 87.312037][ T5329] RBP: 1ffff110025104ac R08: 00000000000000c0 R09: 0000000000000000 [ 87.315470][ T5329] R10: ffffc90004c97780 R11: fffff52000992efc R12: ffff8880403f1100 [ 87.318841][ T5329] R13: ffff888012882560 R14: 0000000080000280 R15: ffff888037a1ff40 [ 87.322115][ T5329] FS: 00007ff60fdd86c0(0000) GS:ffff88808c87b000(0000) knlGS:0000000000000000 [ 87.326179][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.328885][ T5329] CR2: 00007ff60fdd7ff8 CR3: 000000001abac000 CR4: 0000000000352ef0 [ 87.332121][ T5329] Call Trace: [ 87.333561][ T5329] [ 87.334900][ T5329] ? __init_swait_queue_head+0xa9/0x150 [ 87.337520][ T5329] usb_start_wait_urb+0x13f/0x5b0 [ 87.339753][ T5329] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 87.342134][ T5329] usb_control_msg+0x234/0x3e0 [ 87.344295][ T5329] dtv5100_i2c_msg+0x231/0x2f0 [ 87.346585][ T5329] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 87.348736][ T5329] __i2c_transfer+0x79a/0x1f70 [ 87.350865][ T5329] ? __lock_acquire+0x146e/0x2cf0 [ 87.353151][ T5329] __i2c_smbus_xfer+0x1146/0x2050 [ 87.355311][ T5329] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 87.357762][ T5329] ? lockdep_hardirqs_on+0x7a/0x110 [ 87.360091][ T5329] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 87.362598][ T5329] ? rt_mutex_lock_nested+0x15c/0x1e0 [ 87.364965][ T5329] i2c_smbus_xfer+0x1f4/0x310 [ 87.367132][ T5329] i2cdev_ioctl_smbus+0x434/0x730 [ 87.369429][ T5329] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 87.371846][ T5329] i2cdev_ioctl+0x615/0x880 [ 87.373798][ T5329] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 87.376163][ T5329] ? __fget_files+0x2a/0x420 [ 87.378095][ T5329] ? __fget_files+0x3a0/0x420 [ 87.380508][ T5329] ? bpf_lsm_file_ioctl+0x9/0x20 [ 87.382641][ T5329] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 87.384690][ T5329] __se_sys_ioctl+0xfc/0x170 [ 87.386712][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.389235][ T5329] do_syscall_64+0x15f/0x560 [ 87.391039][ T5329] ? trace_irq_disable+0x3b/0x140 [ 87.393145][ T5329] ? clear_bhb_loop+0x40/0x90 [ 87.395288][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.397903][ T5329] RIP: 0033:0x7ff60ef9ce59 [ 87.399734][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.407639][ T5329] RSP: 002b:00007ff60fdd7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.411249][ T5329] RAX: ffffffffffffffda RBX: 00007ff60f216090 RCX: 00007ff60ef9ce59 [ 87.414709][ T5329] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 0000000000000008 [ 87.418174][ T5329] RBP: 00007ff60f032d6f R08: 0000000000000000 R09: 0000000000000000 [ 87.421492][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.424986][ T5329] R13: 00007ff60f216128 R14: 00007ff60f216090 R15: 00007ffe5c1dfc48 [ 87.428451][ T5329] [ 87.429829][ T5329] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.432905][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.436774][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.440849][ T5329] Call Trace: [ 87.442194][ T5329] [ 87.443479][ T5329] vpanic+0x56c/0xa60 [ 87.445220][ T5329] ? __pfx__printk+0x10/0x10 [ 87.447237][ T5329] ? __pfx_vpanic+0x10/0x10 [ 87.449304][ T5329] ? is_bpf_text_address+0x292/0x2b0 [ 87.451622][ T5329] ? is_bpf_text_address+0x26/0x2b0 [ 87.453847][ T5329] panic+0xc5/0xd0 [ 87.455523][ T5329] ? __pfx_panic+0x10/0x10 [ 87.457555][ T5329] __warn+0x315/0x4c0 [ 87.459339][ T5329] ? usb_submit_urb+0x1053/0x18b0 [ 87.461473][ T5329] ? usb_submit_urb+0x1053/0x18b0 [ 87.463212][ T5329] __report_bug+0x29a/0x540 [ 87.465053][ T5329] ? usb_submit_urb+0x1053/0x18b0 [ 87.467113][ T5329] ? __pfx___report_bug+0x10/0x10 [ 87.469073][ T5329] ? lockdep_hardirqs_on+0x7a/0x110 [ 87.470946][ T5329] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 87.473437][ T5329] report_bug_entry+0x19a/0x290 [ 87.475618][ T5329] ? usb_submit_urb+0x1115/0x18b0 [ 87.477906][ T5329] ? usb_submit_urb+0x111a/0x18b0 [ 87.480109][ T5329] handle_bug+0xce/0x200 [ 87.482094][ T5329] exc_invalid_op+0x1a/0x50 [ 87.484196][ T5329] asm_exc_invalid_op+0x1a/0x20 [ 87.486366][ T5329] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 87.488763][ T5329] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 87.496854][ T5329] RSP: 0018:ffffc90004c97688 EFLAGS: 00010246 [ 87.498943][ T5329] RAX: 0000000000000000 RBX: ffff888034289000 RCX: 0000000080000280 [ 87.502010][ T5329] RDX: ffff888037a1ff40 RSI: ffffffff8c80b780 RDI: ffffffff903e6bc0 [ 87.505567][ T5329] RBP: 1ffff110025104ac R08: 00000000000000c0 R09: 0000000000000000 [ 87.508716][ T5329] R10: ffffc90004c97780 R11: fffff52000992efc R12: ffff8880403f1100 [ 87.512062][ T5329] R13: ffff888012882560 R14: 0000000080000280 R15: ffff888037a1ff40 [ 87.515565][ T5329] ? usb_submit_urb+0x10a4/0x18b0 [ 87.517839][ T5329] ? __init_swait_queue_head+0xa9/0x150 [ 87.520183][ T5329] usb_start_wait_urb+0x13f/0x5b0 [ 87.522317][ T5329] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 87.524701][ T5329] usb_control_msg+0x234/0x3e0 [ 87.526940][ T5329] dtv5100_i2c_msg+0x231/0x2f0 [ 87.529096][ T5329] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 87.531219][ T5329] __i2c_transfer+0x79a/0x1f70 [ 87.533332][ T5329] ? __lock_acquire+0x146e/0x2cf0 [ 87.535550][ T5329] __i2c_smbus_xfer+0x1146/0x2050 [ 87.537844][ T5329] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 87.540283][ T5329] ? lockdep_hardirqs_on+0x7a/0x110 [ 87.542555][ T5329] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 87.545228][ T5329] ? rt_mutex_lock_nested+0x15c/0x1e0 [ 87.547566][ T5329] i2c_smbus_xfer+0x1f4/0x310 [ 87.549653][ T5329] i2cdev_ioctl_smbus+0x434/0x730 [ 87.552005][ T5329] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 87.554543][ T5329] i2cdev_ioctl+0x615/0x880 [ 87.556647][ T5329] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 87.558924][ T5329] ? __fget_files+0x2a/0x420 [ 87.560997][ T5329] ? __fget_files+0x3a0/0x420 [ 87.563135][ T5329] ? bpf_lsm_file_ioctl+0x9/0x20 [ 87.565441][ T5329] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 87.567632][ T5329] __se_sys_ioctl+0xfc/0x170 [ 87.569741][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.572537][ T5329] do_syscall_64+0x15f/0x560 [ 87.574666][ T5329] ? trace_irq_disable+0x3b/0x140 [ 87.576865][ T5329] ? clear_bhb_loop+0x40/0x90 [ 87.579014][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.581675][ T5329] RIP: 0033:0x7ff60ef9ce59 [ 87.583729][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.592316][ T5329] RSP: 002b:00007ff60fdd7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.595965][ T5329] RAX: ffffffffffffffda RBX: 00007ff60f216090 RCX: 00007ff60ef9ce59 [ 87.599407][ T5329] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 0000000000000008 [ 87.602626][ T5329] RBP: 00007ff60f032d6f R08: 0000000000000000 R09: 0000000000000000 [ 87.605795][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.608988][ T5329] R13: 00007ff60f216128 R14: 00007ff60f216090 R15: 00007ffe5c1dfc48 [ 87.612123][ T5329] [ 87.613880][ T5329] Kernel Offset: disabled [ 87.615877][ T5329] Rebooting in 86400 seconds..