last executing test programs: 4.223505787s ago: executing program 4 (id=1290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0xf8, &(0x7f0000000080)="bbc877bb05a65cc222e73ab12c342033920a8e880e89196d4345c13419140d2c34acd767df4c8058e61a1cea7bec57a3fa311d9d7dc00903c35fd0dcefffade94adfba6719ce3cf23a821660ea1a70d0b7217eec886d3e5480267fae0b6495d532d99fa7b16882f9195c32993d69af1058e5ec4187b96398e7f4c79b55311fada5c15974e04bcdd2a2897dc37b0c3a29002763086519f0bf3bc87cbd252df3aca9c2de330687024b663e8da1054437be8945f65488e684c0bfb7e0e27c52812e8cf9004370b55cc97663ae5a400ddf488631f894769d240b7731004fb08a2f9c16b8cde116e9d86ed8272289a87a98db8c1eb471352d7391"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000200018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r3) r5 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r5, 0x0, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x33dc, 0x10100, 0x200}, &(0x7f0000000200), &(0x7f0000000100)) r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000380)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 3.932968143s ago: executing program 2 (id=1292): socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x8440, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$packet(0x11, 0x2, 0x300) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.678512376s ago: executing program 4 (id=1295): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000003b40)=0x1c) pselect6(0x0, 0x0, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) 3.500688416s ago: executing program 2 (id=1297): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010203296fb608229084d488ff0102030109021200010495"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x34}, 0x10) 3.103172439s ago: executing program 1 (id=1301): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010203296fb608229084d488ff0102030109021200010495008109041e800056a7f602"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000002c0)}) 2.500685797s ago: executing program 4 (id=1305): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$caif_stream(0x25, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000ffffff00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000240)='sys_enter\x00', r0, 0x0, 0x8a}, 0x22) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000000)={0x6, 0x100000001, 0x3, 0xffffffff, 0x2627bc41, 0xba4, 0x3, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x7ff, 0x7, 0x0, 0xc, 0x2, 0x6, 0x1, 0x7f}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 2.464024988s ago: executing program 3 (id=1306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e907320400000000000000eaeb", 0x22}, {&(0x7f0000000100)="b700"/12, 0xc}, {0x0}], 0x3) 2.264443248s ago: executing program 2 (id=1307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0xf8, &(0x7f0000000080)="bbc877bb05a65cc222e73ab12c342033920a8e880e89196d4345c13419140d2c34acd767df4c8058e61a1cea7bec57a3fa311d9d7dc00903c35fd0dcefffade94adfba6719ce3cf23a821660ea1a70d0b7217eec886d3e5480267fae0b6495d532d99fa7b16882f9195c32993d69af1058e5ec4187b96398e7f4c79b55311fada5c15974e04bcdd2a2897dc37b0c3a29002763086519f0bf3bc87cbd252df3aca9c2de330687024b663e8da1054437be8945f65488e684c0bfb7e0e27c52812e8cf9004370b55cc97663ae5a400ddf488631f894769d240b7731004fb08a2f9c16b8cde116e9d86ed8272289a87a98db8c1eb471352d7391"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000200018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r3) r5 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r5, 0x0, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x33dc, 0x10100, 0x200}, &(0x7f0000000200), &(0x7f0000000100)) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000380)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2.221225422s ago: executing program 4 (id=1308): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000f14010028bd7000ffdbdf250d0045006f70615f766e696300000000080003000100"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0xc004) 2.021230818s ago: executing program 4 (id=1309): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r3) r4 = syz_io_uring_setup(0x10e, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r0, 0x0, 0x0) 1.884468337s ago: executing program 1 (id=1310): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, {0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x61, 0xfd, 0x0, 0x0, 0x0, 0x3, 0x3}, {0x200003, 0x4, 0x20, 0x8, 0x6, 0x0, 0x5f, 0x1, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1.704506867s ago: executing program 0 (id=1311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 1.642571327s ago: executing program 1 (id=1312): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x3f0, &(0x7f00000003c0)={0x0, 0x794, 0x10100, 0x3, 0x1}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x43b5fc1a6955b256, 0x0, @fd_index=0x208, 0xfff, 0x0, 0x4, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 1.612754811s ago: executing program 3 (id=1313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) unshare(0x2040400) fallocate(r1, 0x44, 0x7fffffffffffffff, 0xe10c) 1.488769661s ago: executing program 3 (id=1314): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e", 0x9}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x70, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xf90, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1.317810112s ago: executing program 3 (id=1315): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000003b40)=0x1c) pselect6(0x0, 0x0, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) 1.218903889s ago: executing program 0 (id=1316): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40fffffff4200011800e000100636f6e6e6c696d6974000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c) 1.134358395s ago: executing program 2 (id=1317): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/193, 0xc1) 994.867638ms ago: executing program 2 (id=1318): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010203296fb608229084d488ff0102030109021200010495"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x34}, 0x10) 993.855657ms ago: executing program 1 (id=1319): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000f14010028bd7000ffdbdf250d0045006f70615f766e696300000000080003000100"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0xc004) 907.65611ms ago: executing program 4 (id=1320): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010203296fb608229084d488ff0102030109021200010495008109041e800056a7f602"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000002c0)=[{0x1900, 0xa000, 0x0, 0x0}], 0x1}) 906.696494ms ago: executing program 0 (id=1321): rseq(0x0, 0xfffffffffffffed3, 0x0, 0x0) 784.999756ms ago: executing program 0 (id=1322): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[@ANYBLOB="186c4084c4df4704d1150000000141815cb6124f57010200000000000000001980"], 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x0) close(r0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @default, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x6, 0x1000, 0x5, 0x3ff, 0x28, 0x6, 0xad}, 0x9c) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) 784.350929ms ago: executing program 1 (id=1323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e907320400000000000000eaeb", 0x22}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000400)}], 0x3) 219.108993ms ago: executing program 0 (id=1324): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, {0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x61, 0xfd, 0x0, 0x0, 0x0, 0x3, 0x3}, {0x200003, 0x4, 0x20, 0x8, 0x6, 0x0, 0x5f, 0x1, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 163.238214ms ago: executing program 3 (id=1325): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000700)={0x1cc, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 88.529823ms ago: executing program 3 (id=1326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 11.347222ms ago: executing program 0 (id=1327): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x6) 760.113µs ago: executing program 2 (id=1328): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0xe0dc4000) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000040)="8d", 0x1) 0s ago: executing program 1 (id=1329): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/193, 0xc1) kernel console output (not intermixed with test programs): command 0x0c1a tx timeout [ 139.657777][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 139.666525][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 139.666543][ T5882] dw2102: command 0x0e transfer failed. [ 139.666551][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 139.666562][ T5882] dw2102: command 0x0e transfer failed. [ 139.697622][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.697651][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.697690][ T49] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 139.697710][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.726429][ T9] DVB: Unable to find symbol dib7000p_attach() [ 139.726442][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 139.766394][ T49] usb 4-1: config 0 descriptor?? [ 139.970289][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 139.970310][ T5882] dw2102: command 0x0e transfer failed. [ 139.970319][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 139.970330][ T5882] dw2102: command 0x0e transfer failed. [ 139.970339][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 139.970348][ T5882] dw2102: command 0x51 transfer failed. [ 139.970353][ T5882] dvb-usb: bulk message failed: -22 (5/0) [ 139.970360][ T5882] dw2102: i2c probe for address 0x68 failed. [ 139.970365][ T5882] dvb-usb: bulk message failed: -22 (5/0) [ 139.970371][ T5882] dw2102: i2c probe for address 0x69 failed. [ 139.970376][ T5882] dvb-usb: bulk message failed: -22 (5/0) [ 139.970382][ T5882] dw2102: i2c probe for address 0x6a failed. [ 139.970388][ T5882] dw2102: probing for demodulator failed. Is the external power switched on? [ 139.970397][ T5882] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 139.987602][ T9] rc_core: IR keymap rc-dvico-mce not found [ 139.987614][ T9] Registered IR keymap rc-empty [ 139.990279][ T9] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 140.002375][ T9] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input17 [ 140.008366][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.013156][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 140.013174][ T9] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 140.056837][ T9] usb 1-1: USB disconnect, device number 5 [ 140.199080][ T49] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 140.199118][ T49] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 140.247680][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.286245][ T5882] rc_core: IR keymap rc-tt-1500 not found [ 140.286262][ T5882] Registered IR keymap rc-empty [ 140.313624][ T5882] rc rc1: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc1 [ 140.362192][ T5882] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc1/input18 [ 140.386594][ T49] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 140.392567][ T5882] dvb-usb: schedule remote query interval to 250 msecs. [ 140.392587][ T5882] dw2102: su3000_power_ctrl: 0, initialized 1 [ 140.392598][ T5882] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 140.520133][ T5882] usb 5-1: USB disconnect, device number 3 [ 140.567830][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.592321][ T49] ft260 0003:0403:6030.0002: failed to retrieve system status [ 140.592662][ T49] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -71 [ 140.640707][ T9] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 140.776146][ T49] usb 4-1: USB disconnect, device number 8 [ 140.807682][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 141.045250][ T5882] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 141.549124][ T6778] netlink: 124 bytes leftover after parsing attributes in process `syz.1.325'. [ 141.590930][ T6778] IPVS: length: 209 != 24 [ 141.628189][ T5926] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 141.689154][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.733775][ T5882] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 141.808195][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 141.813097][ T5926] usb 1-1: unable to get BOS descriptor or descriptor too short [ 141.814819][ T5926] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 141.814841][ T5926] usb 1-1: config 4 has no interface number 0 [ 141.814871][ T5926] usb 1-1: config 4 interface 30 has no altsetting 0 [ 141.854274][ T5926] usb 1-1: string descriptor 0 read error: -22 [ 141.854431][ T5926] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 141.854452][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.877605][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 141.883881][ T5882] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=30.0c [ 141.883906][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.883922][ T5882] usb 5-1: Product: syz [ 141.883934][ T5882] usb 5-1: Manufacturer: syz [ 141.883946][ T5882] usb 5-1: SerialNumber: syz [ 141.941194][ T5882] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 141.941249][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 141.974104][ T5926] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 141.974158][ T5926] dw2102: su3000_power_ctrl: 1, initialized 0 [ 141.974175][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 142.006488][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.008753][ T5882] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 142.008820][ T5882] usb 5-1: media controller created [ 142.034616][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.035584][ T5926] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 142.035638][ T5926] usb 1-1: media controller created [ 142.035662][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 142.035675][ T5926] dw2102: i2c transfer failed. [ 142.035692][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 142.035704][ T5926] dw2102: i2c transfer failed. [ 142.035720][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 142.035731][ T5926] dw2102: i2c transfer failed. [ 142.035747][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 142.035759][ T5926] dw2102: i2c transfer failed. [ 142.035773][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 142.035784][ T5926] dw2102: i2c transfer failed. [ 142.035799][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 142.035810][ T5926] dw2102: i2c transfer failed. [ 142.035819][ T5926] dvb-usb: MAC address: 02:02:02:02:02:02 [ 142.087596][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.191556][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.239455][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.323209][ T5882] usb 5-1: selecting invalid altsetting 1 [ 142.323227][ T5882] cxusb: set interface failed [ 142.323239][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 142.323255][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 142.323269][ T5882] usb 5-1: bluebird_gpio_write failed. [ 142.337577][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.338939][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 142.338960][ T5882] usb 5-1: bluebird_gpio_write failed. [ 142.413449][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 142.413467][ T5926] dw2102: command 0x0e transfer failed. [ 142.413475][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 142.413487][ T5926] dw2102: command 0x0e transfer failed. [ 142.469749][ T5882] DVB: Unable to find symbol dib7000p_attach() [ 142.469762][ T5882] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 142.577755][ T5882] rc_core: IR keymap rc-dvico-mce not found [ 142.577775][ T5882] Registered IR keymap rc-empty [ 142.602489][ T5882] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 142.605698][ T5882] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input19 [ 142.637309][ T5882] dvb-usb: schedule remote query interval to 100 msecs. [ 142.637330][ T5882] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 142.655085][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.658296][ T5882] usb 5-1: USB disconnect, device number 4 [ 142.742080][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 142.742100][ T5926] dw2102: command 0x0e transfer failed. [ 142.742109][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 142.742121][ T5926] dw2102: command 0x0e transfer failed. [ 142.742129][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 142.742140][ T5926] dw2102: command 0x51 transfer failed. [ 142.742148][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 142.742160][ T5926] dw2102: i2c probe for address 0x68 failed. [ 142.742170][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 142.742181][ T5926] dw2102: i2c probe for address 0x69 failed. [ 142.742191][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 142.742203][ T5926] dw2102: i2c probe for address 0x6a failed. [ 142.742212][ T5926] dw2102: probing for demodulator failed. Is the external power switched on? [ 142.742221][ T5926] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 142.890916][ T5852] Bluetooth: hci4: command 0x0c1a tx timeout [ 142.948014][ T5882] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 142.997386][ T6803] netlink: 44 bytes leftover after parsing attributes in process `syz.4.334'. [ 143.027645][ T5926] rc_core: IR keymap rc-tt-1500 not found [ 143.027663][ T5926] Registered IR keymap rc-empty [ 143.036822][ T5926] rc rc1: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1 [ 143.073191][ T5926] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1/input20 [ 143.119823][ T5926] dvb-usb: schedule remote query interval to 250 msecs. [ 143.119843][ T5926] dw2102: su3000_power_ctrl: 0, initialized 1 [ 143.119855][ T5926] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 143.148359][ T5926] usb 1-1: USB disconnect, device number 6 [ 143.530444][ T5926] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 143.769616][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.984974][ T6826] netlink: 124 bytes leftover after parsing attributes in process `syz.1.341'. [ 144.067034][ T6826] IPVS: length: 209 != 24 [ 144.168292][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.367671][ T5882] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 144.417685][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.527643][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 144.530776][ T5882] usb 3-1: unable to get BOS descriptor or descriptor too short [ 144.535160][ T5882] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 144.535182][ T5882] usb 3-1: config 4 has no interface number 0 [ 144.535216][ T5882] usb 3-1: config 4 interface 30 has no altsetting 0 [ 144.577665][ T5882] usb 3-1: string descriptor 0 read error: -22 [ 144.577986][ T5882] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 144.578008][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.633145][ T5882] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 144.633195][ T5882] dw2102: su3000_power_ctrl: 1, initialized 0 [ 144.633213][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 144.663015][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 144.664358][ T5882] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 144.664408][ T5882] usb 3-1: media controller created [ 144.664432][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 144.664445][ T5882] dw2102: i2c transfer failed. [ 144.664461][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 144.664473][ T5882] dw2102: i2c transfer failed. [ 144.664489][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 144.664501][ T5882] dw2102: i2c transfer failed. [ 144.664516][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 144.664527][ T5882] dw2102: i2c transfer failed. [ 144.664542][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 144.664554][ T5882] dw2102: i2c transfer failed. [ 144.664568][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 144.664579][ T5882] dw2102: i2c transfer failed. [ 144.664587][ T5882] dvb-usb: MAC address: 02:02:02:02:02:02 [ 144.727700][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.799446][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.844658][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 144.844677][ T5882] dw2102: command 0x0e transfer failed. [ 144.844686][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 144.844698][ T5882] dw2102: command 0x0e transfer failed. [ 144.967768][ T5852] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.129754][ T6842] bridge_slave_0: left allmulticast mode [ 145.129787][ T6842] bridge_slave_0: left promiscuous mode [ 145.130050][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.163632][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 145.163652][ T5882] dw2102: command 0x0e transfer failed. [ 145.163660][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 145.163672][ T5882] dw2102: command 0x0e transfer failed. [ 145.163680][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 145.163692][ T5882] dw2102: command 0x51 transfer failed. [ 145.163700][ T5882] dvb-usb: bulk message failed: -22 (5/0) [ 145.163711][ T5882] dw2102: i2c probe for address 0x68 failed. [ 145.163721][ T5882] dvb-usb: bulk message failed: -22 (5/0) [ 145.163732][ T5882] dw2102: i2c probe for address 0x69 failed. [ 145.163741][ T5882] dvb-usb: bulk message failed: -22 (5/0) [ 145.163752][ T5882] dw2102: i2c probe for address 0x6a failed. [ 145.163775][ T5882] dw2102: probing for demodulator failed. Is the external power switched on? [ 145.163785][ T5882] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 145.164313][ T6835] dvb-usb: bulk message failed: -22 (4/0) [ 145.164328][ T6835] dw2102: i2c transfer failed. [ 145.294640][ T6842] bridge_slave_1: left allmulticast mode [ 145.294671][ T6842] bridge_slave_1: left promiscuous mode [ 145.294938][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.431445][ T6842] bond0: (slave bond_slave_0): Releasing backup interface [ 145.517660][ T5882] rc_core: IR keymap rc-tt-1500 not found [ 145.517680][ T5882] Registered IR keymap rc-empty [ 145.520286][ T5882] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 145.558331][ T5882] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input21 [ 145.560989][ T5882] dvb-usb: schedule remote query interval to 250 msecs. [ 145.561008][ T5882] dw2102: su3000_power_ctrl: 0, initialized 1 [ 145.561020][ T5882] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 145.566299][ T1383] Bluetooth: hci5: Frame reassembly failed (-84) [ 145.566388][ T1383] Bluetooth: hci5: Frame reassembly failed (-84) [ 145.566465][ T1383] Bluetooth: hci5: Frame reassembly failed (-84) [ 145.620987][ T6842] bond0: (slave bond_slave_1): Releasing backup interface [ 145.621163][ T5882] usb 3-1: USB disconnect, device number 3 [ 145.827860][ T6842] team0: Port device team_slave_0 removed [ 145.870929][ T5882] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 145.914138][ T6842] team0: Port device team_slave_1 removed [ 145.916985][ T6842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.917014][ T6842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.978503][ T6842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.978536][ T6842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.045231][ T6847] team0: Mode changed to "random" [ 147.047606][ T5852] Bluetooth: hci4: command 0x0c1a tx timeout [ 147.477833][ T6882] netlink: 124 bytes leftover after parsing attributes in process `syz.2.358'. [ 147.552391][ T6882] IPVS: length: 209 != 24 [ 147.609411][ T5852] Bluetooth: hci5: command 0x1003 tx timeout [ 147.609526][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 148.789542][ T6890] uprobe: syz.1.362:6890 failed to unregister, leaking uprobe [ 149.936656][ T6907] bridge_slave_0: left allmulticast mode [ 149.936689][ T6907] bridge_slave_0: left promiscuous mode [ 149.936966][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.091945][ T6907] bridge_slave_1: left allmulticast mode [ 150.092035][ T6907] bridge_slave_1: left promiscuous mode [ 150.092304][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.417346][ T6907] bond0: (slave bond_slave_0): Releasing backup interface [ 150.510897][ T6907] bond0: (slave bond_slave_1): Releasing backup interface [ 150.864219][ T6907] team0: Port device team_slave_0 removed [ 151.019746][ T6907] team0: Port device team_slave_1 removed [ 151.041769][ T6907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.041800][ T6907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.083479][ T6907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.083499][ T6907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.152972][ T6911] team0: Mode changed to "random" [ 151.197460][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 151.214784][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 151.897681][ T5908] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 152.027636][ T5908] usb 4-1: device descriptor read/64, error -71 [ 152.087716][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 152.087748][ T5852] Bluetooth: hci5: command 0x1003 tx timeout [ 152.277736][ T5908] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 152.304782][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 152.304804][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 152.407981][ T5908] usb 4-1: device descriptor read/64, error -71 [ 152.520966][ T5908] usb usb4-port1: attempt power cycle [ 152.887773][ T5908] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 152.908929][ T5908] usb 4-1: device descriptor read/8, error -71 [ 153.063499][ T6981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.399'. [ 153.114652][ T6979] team0: Unable to change to the same mode the team is in [ 153.147932][ T5908] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 153.171205][ T5908] usb 4-1: device descriptor read/8, error -71 [ 153.201023][ T1383] Bluetooth: hci5: Frame reassembly failed (-90) [ 153.274483][ T6986] netlink: 124 bytes leftover after parsing attributes in process `syz.1.401'. [ 153.280304][ T5908] usb usb4-port1: unable to enumerate USB device [ 153.315109][ T6986] IPVS: length: 209 != 24 [ 154.276735][ T7013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.411'. [ 155.209048][ T5852] Bluetooth: hci5: command 0x1003 tx timeout [ 155.209344][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 155.432900][ T7036] netlink: 124 bytes leftover after parsing attributes in process `syz.1.421'. [ 155.553303][ T7039] IPVS: length: 209 != 24 [ 157.083826][ T5926] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 157.217766][ T5926] usb 4-1: device descriptor read/64, error -71 [ 157.487648][ T5926] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 157.637903][ T5926] usb 4-1: device descriptor read/64, error -71 [ 157.751177][ T5926] usb usb4-port1: attempt power cycle [ 158.087733][ T5926] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 158.110283][ T5926] usb 4-1: device descriptor read/8, error -71 [ 158.347609][ T5926] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 158.368919][ T5926] usb 4-1: device descriptor read/8, error -71 [ 158.436100][ T7084] netlink: 124 bytes leftover after parsing attributes in process `syz.4.440'. [ 158.478492][ T5926] usb usb4-port1: unable to enumerate USB device [ 158.527159][ T7083] IPVS: length: 209 != 24 [ 158.551835][ T7059] uprobe: syz.1.431:7059 failed to unregister, leaking uprobe [ 160.227458][ T7101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.447'. [ 160.905301][ T7117] netlink: 124 bytes leftover after parsing attributes in process `syz.4.453'. [ 160.979497][ T7117] IPVS: length: 209 != 24 [ 161.978427][ T7135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.459'. [ 162.137861][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 162.277730][ T31] usb 2-1: device descriptor read/64, error -71 [ 162.527710][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 162.667661][ T31] usb 2-1: device descriptor read/64, error -71 [ 162.784074][ T31] usb usb2-port1: attempt power cycle [ 163.147686][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 163.168353][ T31] usb 2-1: device descriptor read/8, error -71 [ 163.489991][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.552411][ T31] usb 2-1: device descriptor read/8, error -71 [ 163.563865][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 163.663173][ T31] usb usb2-port1: unable to enumerate USB device [ 163.707725][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 163.874225][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 163.876646][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 163.876681][ T9] usb 3-1: can't read configurations, error -71 [ 164.499941][ T7160] netlink: 124 bytes leftover after parsing attributes in process `syz.3.470'. [ 164.552236][ T7160] IPVS: length: 209 != 24 [ 164.570859][ T7162] fuse: Bad value for 'fd' [ 165.484681][ T7014] Set syz1 is full, maxelem 65536 reached [ 165.700380][ T7191] netlink: 80 bytes leftover after parsing attributes in process `syz.0.482'. [ 165.738633][ T7192] fuse: Bad value for 'fd' [ 166.029192][ T5859] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 166.081985][ T7204] netlink: 100 bytes leftover after parsing attributes in process `syz.2.487'. [ 166.082004][ T7204] nbd: must specify at least one socket [ 166.197609][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 166.200226][ T5859] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.202445][ T5859] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 166.202478][ T5859] usb 1-1: can't read configurations, error -61 [ 166.310550][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'. [ 166.310571][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'. [ 166.339202][ T5859] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 166.487647][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 166.490576][ T5859] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.493140][ T5859] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 166.493171][ T5859] usb 1-1: can't read configurations, error -61 [ 166.493563][ T5859] usb usb1-port1: attempt power cycle [ 166.837653][ T5859] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 166.860205][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 166.863271][ T5859] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.865471][ T5859] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 166.865503][ T5859] usb 1-1: can't read configurations, error -61 [ 166.987589][ T5859] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 167.008592][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 167.011246][ T5859] usb 1-1: unable to get BOS descriptor or descriptor too short [ 167.017213][ T5859] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 167.017243][ T5859] usb 1-1: can't read configurations, error -61 [ 167.044416][ T5859] usb usb1-port1: unable to enumerate USB device [ 167.084489][ T7236] netlink: 100 bytes leftover after parsing attributes in process `syz.1.502'. [ 167.084509][ T7236] nbd: must specify at least one socket [ 167.414442][ T7245] 9pnet_fd: Insufficient options for proto=fd [ 167.994539][ T7262] netlink: 100 bytes leftover after parsing attributes in process `syz.1.514'. [ 167.994561][ T7262] nbd: must specify at least one socket [ 168.357644][ T5908] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 168.532995][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.533049][ T5908] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 168.533067][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.587647][ T5908] usb 2-1: config 0 descriptor?? [ 168.625454][ T5908] pwc: Askey VC010 type 2 USB webcam detected. [ 169.057109][ T5908] pwc: recv_control_msg error -32 req 02 val 2b00 [ 169.058598][ T5908] pwc: recv_control_msg error -32 req 02 val 2700 [ 169.059555][ T5908] pwc: recv_control_msg error -32 req 02 val 2c00 [ 169.077649][ T5908] pwc: recv_control_msg error -32 req 04 val 1000 [ 169.079989][ T7268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.080529][ T7268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.087650][ T5908] pwc: recv_control_msg error -32 req 04 val 1300 [ 169.090388][ T5908] pwc: recv_control_msg error -32 req 04 val 1400 [ 169.093663][ T5908] pwc: recv_control_msg error -32 req 02 val 2000 [ 169.094890][ T5908] pwc: recv_control_msg error -32 req 02 val 2100 [ 169.099904][ T5908] pwc: recv_control_msg error -32 req 04 val 1500 [ 169.100852][ T5908] pwc: recv_control_msg error -32 req 02 val 2500 [ 169.101665][ T5908] pwc: recv_control_msg error -32 req 02 val 2400 [ 169.102604][ T5908] pwc: recv_control_msg error -32 req 02 val 2600 [ 169.104228][ T5908] pwc: recv_control_msg error -32 req 02 val 2900 [ 169.127643][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 169.167640][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 169.299048][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 169.301553][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 169.304403][ T31] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 169.304424][ T31] usb 3-1: config 4 has no interface number 0 [ 169.304455][ T31] usb 3-1: config 4 interface 30 has no altsetting 0 [ 169.315959][ T5908] pwc: recv_control_msg error -71 req 04 val 1100 [ 169.317674][ T5908] pwc: recv_control_msg error -71 req 04 val 1200 [ 169.329947][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.329968][ T9] usb 4-1: config 0 has no interfaces? [ 169.329994][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 169.330014][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.333929][ T5908] pwc: Registered as video103. [ 169.342107][ T31] usb 3-1: string descriptor 0 read error: -22 [ 169.342259][ T31] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 169.342278][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.413388][ T5908] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 169.452892][ T9] usb 4-1: config 0 descriptor?? [ 169.502981][ T31] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 169.503030][ T31] dw2102: su3000_power_ctrl: 1, initialized 0 [ 169.503047][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 169.516631][ T5908] usb 2-1: USB disconnect, device number 10 [ 169.585244][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 169.598339][ T31] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 169.598388][ T31] usb 3-1: media controller created [ 169.598413][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 169.598427][ T31] dw2102: i2c transfer failed. [ 169.598443][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 169.598456][ T31] dw2102: i2c transfer failed. [ 169.598470][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 169.598482][ T31] dw2102: i2c transfer failed. [ 169.598497][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 169.598509][ T31] dw2102: i2c transfer failed. [ 169.598524][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 169.598537][ T31] dw2102: i2c transfer failed. [ 169.598552][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 169.598565][ T31] dw2102: i2c transfer failed. [ 169.598574][ T31] dvb-usb: MAC address: 02:02:02:02:02:02 [ 169.706587][ T7278] dvb-usb: bulk message failed: -22 (4/0) [ 169.706606][ T7278] dw2102: i2c transfer failed. [ 169.722282][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.776626][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 169.776646][ T31] dw2102: command 0x0e transfer failed. [ 169.776654][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 169.776666][ T31] dw2102: command 0x0e transfer failed. [ 170.081444][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 170.081464][ T31] dw2102: command 0x0e transfer failed. [ 170.081473][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 170.081485][ T31] dw2102: command 0x0e transfer failed. [ 170.081492][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 170.081502][ T31] dw2102: command 0x51 transfer failed. [ 170.081511][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 170.081522][ T31] dw2102: i2c probe for address 0x68 failed. [ 170.081531][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 170.081542][ T31] dw2102: i2c probe for address 0x69 failed. [ 170.081551][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 170.081562][ T31] dw2102: i2c probe for address 0x6a failed. [ 170.081571][ T31] dw2102: probing for demodulator failed. Is the external power switched on? [ 170.081580][ T31] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 170.261391][ T31] rc_core: IR keymap rc-tt-1500 not found [ 170.261410][ T31] Registered IR keymap rc-empty [ 170.262944][ T31] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 170.266182][ T31] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input27 [ 170.320357][ T31] dvb-usb: schedule remote query interval to 250 msecs. [ 170.320379][ T31] dw2102: su3000_power_ctrl: 0, initialized 1 [ 170.320389][ T31] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 170.323406][ T31] usb 3-1: USB disconnect, device number 6 [ 170.511062][ T31] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 170.629121][ T7303] netlink: 80 bytes leftover after parsing attributes in process `syz.0.530'. [ 170.987648][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 171.147565][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 171.151377][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.153617][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 171.153649][ T31] usb 5-1: can't read configurations, error -61 [ 171.291682][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 171.437694][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 171.442288][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.444042][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 171.444074][ T31] usb 5-1: can't read configurations, error -61 [ 171.444967][ T31] usb usb5-port1: attempt power cycle [ 171.447667][ T5882] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 171.599098][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 171.605691][ T5882] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.605721][ T5882] usb 3-1: config 0 interface 0 has no altsetting 0 [ 171.605753][ T5882] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 171.605773][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.639320][ T5882] usb 3-1: config 0 descriptor?? [ 171.777699][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 171.798602][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 171.801598][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.803859][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 171.803890][ T31] usb 5-1: can't read configurations, error -61 [ 171.843864][ T5859] usb 4-1: USB disconnect, device number 17 [ 171.867632][ T5908] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 171.929137][ T31] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 171.959654][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 171.963905][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.992333][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 171.992365][ T31] usb 5-1: can't read configurations, error -61 [ 171.993126][ T31] usb usb5-port1: unable to enumerate USB device [ 172.027790][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 172.048782][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 172.051791][ T5908] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 172.051814][ T5908] usb 2-1: config 4 has no interface number 0 [ 172.051843][ T5908] usb 2-1: config 4 interface 30 has no altsetting 0 [ 172.056052][ T5908] usb 2-1: string descriptor 0 read error: -22 [ 172.056275][ T5908] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 172.056347][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.146511][ T5908] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 172.146555][ T5908] dw2102: su3000_power_ctrl: 1, initialized 0 [ 172.146573][ T5908] dvb-usb: bulk message failed: -22 (2/0) [ 172.243341][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 172.245957][ T5908] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 172.246226][ T5908] usb 2-1: media controller created [ 172.246251][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 172.246264][ T5908] dw2102: i2c transfer failed. [ 172.246280][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 172.246292][ T5908] dw2102: i2c transfer failed. [ 172.247186][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 172.247202][ T5908] dw2102: i2c transfer failed. [ 172.247221][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 172.247231][ T5908] dw2102: i2c transfer failed. [ 172.247246][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 172.247257][ T5908] dw2102: i2c transfer failed. [ 172.247273][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 172.247285][ T5908] dw2102: i2c transfer failed. [ 172.249700][ T5908] dvb-usb: MAC address: 02:02:02:02:02:02 [ 172.310805][ T5882] usbhid 3-1:0.0: can't add hid device: -71 [ 172.310923][ T5882] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 172.360817][ T5882] usb 3-1: USB disconnect, device number 7 [ 172.368250][ T7324] dvb-usb: bulk message failed: -22 (4/0) [ 172.368266][ T7324] dw2102: i2c transfer failed. [ 172.431875][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.556581][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 172.556603][ T5908] dw2102: command 0x0e transfer failed. [ 172.556612][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 172.556632][ T5908] dw2102: command 0x0e transfer failed. [ 172.857627][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 172.857649][ T5908] dw2102: command 0x0e transfer failed. [ 172.857657][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 172.857676][ T5908] dw2102: command 0x0e transfer failed. [ 172.857684][ T5908] dvb-usb: bulk message failed: -22 (1/0) [ 172.857696][ T5908] dw2102: command 0x51 transfer failed. [ 172.857704][ T5908] dvb-usb: bulk message failed: -22 (5/0) [ 172.857715][ T5908] dw2102: i2c probe for address 0x68 failed. [ 172.857726][ T5908] dvb-usb: bulk message failed: -22 (5/0) [ 172.857738][ T5908] dw2102: i2c probe for address 0x69 failed. [ 172.857748][ T5908] dvb-usb: bulk message failed: -22 (5/0) [ 172.857760][ T5908] dw2102: i2c probe for address 0x6a failed. [ 172.857769][ T5908] dw2102: probing for demodulator failed. Is the external power switched on? [ 172.857778][ T5908] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 173.017619][ T5908] rc_core: IR keymap rc-tt-1500 not found [ 173.017638][ T5908] Registered IR keymap rc-empty [ 173.020206][ T5908] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 173.042802][ T5908] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input29 [ 173.057235][ T5908] dvb-usb: schedule remote query interval to 250 msecs. [ 173.057255][ T5908] dw2102: su3000_power_ctrl: 0, initialized 1 [ 173.057266][ T5908] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 173.093860][ T5908] usb 2-1: USB disconnect, device number 11 [ 173.333872][ T5908] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 173.803494][ T7355] netlink: 84 bytes leftover after parsing attributes in process `syz.1.551'. [ 174.698618][ T1408] Bluetooth: hci5: Frame reassembly failed (-84) [ 174.764065][ T7387] netlink: 76 bytes leftover after parsing attributes in process `syz.0.565'. [ 174.782459][ T7389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.566'. [ 174.782479][ T7389] netlink: 44 bytes leftover after parsing attributes in process `syz.1.566'. [ 175.353117][ T7405] 9pnet_fd: Insufficient options for proto=fd [ 175.649756][ T7419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.580'. [ 175.649777][ T7419] netlink: 44 bytes leftover after parsing attributes in process `syz.4.580'. [ 175.690407][ T7417] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 175.704276][ T7417] Bluetooth: MGMT ver 1.23 [ 175.725805][ T7418] netlink: 76 bytes leftover after parsing attributes in process `syz.2.578'. [ 176.447674][ T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 176.631410][ T31] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 176.631436][ T31] usb 5-1: config 1 has no interface number 0 [ 176.631478][ T31] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 176.631500][ T31] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 176.631522][ T31] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.646823][ T31] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 176.646849][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.646866][ T31] usb 5-1: Product: syz [ 176.646878][ T31] usb 5-1: Manufacturer: syz [ 176.646890][ T31] usb 5-1: SerialNumber: syz [ 176.685031][ T7434] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 176.730384][ T59] Bluetooth: hci5: command 0x1003 tx timeout [ 176.732694][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 176.990621][ T31] usb 5-1: Error in usbnet_get_endpoints (-71) [ 177.069782][ T31] usb 5-1: USB disconnect, device number 9 [ 177.687685][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.690612][ T5852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 177.949802][ T7484] sctp: [Deprecated]: syz.2.607 (pid 7484) Use of int in max_burst socket option. [ 177.949802][ T7484] Use struct sctp_assoc_value instead [ 179.458301][ T7525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.626'. [ 179.677601][ T5859] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 179.767714][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.767830][ T5852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 179.771441][ T7505] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 179.831997][ T5859] usb 2-1: Using ep0 maxpacket: 16 [ 179.943718][ T5859] usb 2-1: unable to get BOS descriptor or descriptor too short [ 179.944779][ T5859] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 179.944812][ T5859] usb 2-1: can't read configurations, error -71 [ 180.246708][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'. [ 180.643466][ T7549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.636'. [ 180.742265][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 181.320234][ T7559] netlink: 100 bytes leftover after parsing attributes in process `syz.1.639'. [ 181.832658][ T7554] uprobe: syz.2.638:7554 failed to unregister, leaking uprobe [ 181.850045][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 182.247756][ T5856] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 182.407810][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 182.714931][ T5856] usb 1-1: unable to get BOS descriptor or descriptor too short [ 182.716016][ T5856] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 182.716048][ T5856] usb 1-1: can't read configurations, error -71 [ 182.798280][ T7594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.648'. [ 183.974506][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.249070][ T7618] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 185.630879][ T7627] 9pnet_fd: Insufficient options for proto=fd [ 186.594676][ T7646] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 187.287708][ T5852] Bluetooth: hci4: command 0x0c1a tx timeout [ 187.287742][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 187.554050][ T7663] netlink: 124 bytes leftover after parsing attributes in process `syz.2.679'. [ 187.696370][ T7663] IPVS: length: 209 != 24 [ 187.774311][ T7671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.681'. [ 187.774340][ T7671] netlink: 32 bytes leftover after parsing attributes in process `syz.4.681'. [ 187.912180][ T7675] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 188.157367][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 188.157413][ T7679] nbd: socks must be embedded in a SOCK_ITEM attr [ 189.279171][ T7700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.693'. [ 189.279199][ T7700] netlink: 32 bytes leftover after parsing attributes in process `syz.2.693'. [ 189.376661][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.376674][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 189.827717][ T5908] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 189.990993][ T5908] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 189.991022][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.991040][ T5908] usb 5-1: Product: syz [ 189.991053][ T5908] usb 5-1: Manufacturer: syz [ 189.991066][ T5908] usb 5-1: SerialNumber: syz [ 190.489883][ T5908] rtl8150 5-1:1.0: couldn't reset the device [ 190.491978][ T5908] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 190.525074][ T5908] usb 5-1: USB disconnect, device number 10 [ 191.326308][ T7729] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 191.447601][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 191.447643][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.447756][ T5849] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 191.457625][ T5908] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 191.621180][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 191.643448][ T5908] usb 5-1: unable to get BOS descriptor or descriptor too short [ 191.644622][ T5908] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 191.644655][ T5908] usb 5-1: can't read configurations, error -71 [ 191.713208][ T7744] netlink: 2 bytes leftover after parsing attributes in process `syz.3.711'. [ 193.529621][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 193.529740][ T7765] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 194.266449][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.266523][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.553439][ T7591] Set syz1 is full, maxelem 65536 reached [ 194.591613][ T5856] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 194.748154][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 194.786959][ T5856] usb 1-1: unable to get BOS descriptor or descriptor too short [ 194.795872][ T5856] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 194.795909][ T5856] usb 1-1: can't read configurations, error -71 [ 195.689466][ T5852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 195.731366][ T7797] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 195.777977][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 195.978373][ T31] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 196.142165][ T31] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 196.142192][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.142208][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 196.142226][ T31] usb 5-1: config 0 has no interface number 0 [ 196.143557][ T31] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 196.143582][ T31] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 196.143599][ T31] usb 5-1: Manufacturer: syz [ 196.155420][ T31] usb 5-1: config 0 descriptor?? [ 196.193218][ T31] cx231xx 5-1:0.1: New device syz @ 12 Mbps (2040:b138) with 1 interfaces [ 196.193247][ T31] cx231xx 5-1:0.1: Not found matching IAD interface [ 196.498882][ T5856] usb 5-1: USB disconnect, device number 13 [ 196.713934][ T7841] lo speed is unknown, defaulting to 1000 [ 196.714049][ T7841] lo speed is unknown, defaulting to 1000 [ 196.718968][ T7841] lo speed is unknown, defaulting to 1000 [ 196.751717][ T7841] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 196.900268][ T7841] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 197.037609][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 197.187693][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 197.267385][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 197.278323][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 197.278359][ T10] usb 4-1: can't read configurations, error -71 [ 197.408073][ T7841] lo speed is unknown, defaulting to 1000 [ 197.438090][ T7841] lo speed is unknown, defaulting to 1000 [ 197.446444][ T7841] lo speed is unknown, defaulting to 1000 [ 197.481476][ T7841] lo speed is unknown, defaulting to 1000 [ 197.498977][ T7841] lo speed is unknown, defaulting to 1000 [ 197.847726][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 197.847841][ T5852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 198.314927][ T7869] 9p: Unknown Cache mode or invalid value f [ 198.423230][ T7852] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 199.323768][ T7888] team0: Unable to change to the same mode the team is in [ 199.580849][ T7897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.778'. [ 199.927620][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.927736][ T5852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 200.239622][ T7902] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 200.972794][ T7912] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 202.007641][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 202.007760][ T5852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 202.194403][ T7946] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 202.926973][ T7951] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 204.241693][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.241811][ T5852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 204.419972][ T7981] uprobe: syz.4.811:7981 failed to unregister, leaking uprobe [ 204.531318][ T7818] Set syz1 is full, maxelem 65536 reached [ 205.104435][ T8000] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 205.207631][ T5859] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 205.323022][ T8005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.820'. [ 205.349245][ T5859] usb 3-1: device descriptor read/64, error -71 [ 205.555844][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'. [ 205.597668][ T5859] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 205.748922][ T5859] usb 3-1: device descriptor read/64, error -71 [ 205.808093][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 205.913244][ T5859] usb usb3-port1: attempt power cycle [ 205.965918][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 205.965946][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.993281][ T9] usb 2-1: config 0 descriptor?? [ 206.007912][ T9] cp210x 2-1:0.0: cp210x converter detected [ 206.247688][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.247738][ T5859] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 206.257342][ T5852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 206.283262][ T5859] usb 3-1: device descriptor read/8, error -71 [ 206.404583][ T9] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 206.405798][ T8015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.406313][ T8015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.516167][ T8028] team0: No ports can be present during mode change [ 206.537570][ T5859] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 206.541595][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 206.562591][ T5859] usb 3-1: device descriptor read/8, error -71 [ 206.611729][ T5908] usb 2-1: USB disconnect, device number 14 [ 206.632799][ T5908] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 206.668150][ T5859] usb usb3-port1: unable to enumerate USB device [ 206.818313][ T5908] cp210x 2-1:0.0: device disconnected [ 206.980360][ T8034] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 208.226755][ T8039] uprobe: syz.3.833:8039 failed to unregister, leaking uprobe [ 208.328145][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 208.329101][ T5849] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 209.054118][ T8061] team0: Unable to change to the same mode the team is in [ 209.291470][ T8070] netlink: 32 bytes leftover after parsing attributes in process `syz.3.844'. [ 209.837663][ T5908] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 209.987745][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 209.991269][ T5908] usb 1-1: unable to get BOS descriptor or descriptor too short [ 209.993077][ T5908] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 209.993100][ T5908] usb 1-1: config 4 has no interface number 0 [ 209.993130][ T5908] usb 1-1: config 4 interface 30 has no altsetting 0 [ 210.033653][ T5908] usb 1-1: string descriptor 0 read error: -22 [ 210.033813][ T5908] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 210.033834][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.103803][ T5908] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 210.103847][ T5908] dw2102: su3000_power_ctrl: 1, initialized 0 [ 210.103864][ T5908] dvb-usb: bulk message failed: -22 (2/0) [ 210.138962][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.142233][ T5908] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 210.142288][ T5908] usb 1-1: media controller created [ 210.142313][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 210.142326][ T5908] dw2102: i2c transfer failed. [ 210.142343][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 210.142355][ T5908] dw2102: i2c transfer failed. [ 210.142370][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 210.142382][ T5908] dw2102: i2c transfer failed. [ 210.142398][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 210.142409][ T5908] dw2102: i2c transfer failed. [ 210.142426][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 210.142438][ T5908] dw2102: i2c transfer failed. [ 210.142454][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 210.142466][ T5908] dw2102: i2c transfer failed. [ 210.142475][ T5908] dvb-usb: MAC address: 02:02:02:02:02:02 [ 210.791017][ T8075] dvb-usb: bulk message failed: -22 (4/0) [ 210.791038][ T8075] dw2102: i2c transfer failed. [ 210.807661][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 210.819713][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.165625][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 211.165645][ T5908] dw2102: command 0x0e transfer failed. [ 211.165654][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 211.165666][ T5908] dw2102: command 0x0e transfer failed. [ 211.477776][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 211.477798][ T5908] dw2102: command 0x0e transfer failed. [ 211.477808][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 211.477820][ T5908] dw2102: command 0x0e transfer failed. [ 211.477828][ T5908] dvb-usb: bulk message failed: -22 (1/0) [ 211.477840][ T5908] dw2102: command 0x51 transfer failed. [ 211.477849][ T5908] dvb-usb: bulk message failed: -22 (5/0) [ 211.477860][ T5908] dw2102: i2c probe for address 0x68 failed. [ 211.477871][ T5908] dvb-usb: bulk message failed: -22 (5/0) [ 211.477891][ T5908] dw2102: i2c probe for address 0x69 failed. [ 211.477901][ T5908] dvb-usb: bulk message failed: -22 (5/0) [ 211.477913][ T5908] dw2102: i2c probe for address 0x6a failed. [ 211.477922][ T5908] dw2102: probing for demodulator failed. Is the external power switched on? [ 211.477931][ T5908] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 212.087713][ T5908] rc_core: IR keymap rc-tt-1500 not found [ 212.087734][ T5908] Registered IR keymap rc-empty [ 212.117209][ T5908] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 212.135395][ T5908] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input35 [ 212.151242][ T5908] dvb-usb: schedule remote query interval to 250 msecs. [ 212.151263][ T5908] dw2102: su3000_power_ctrl: 0, initialized 1 [ 212.151274][ T5908] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 212.189165][ T5908] usb 1-1: USB disconnect, device number 15 [ 212.218881][ T8095] uprobe: syz.3.854:8095 failed to unregister, leaking uprobe [ 212.499761][ T5908] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 212.740712][ T8110] team0: No ports can be present during mode change [ 212.847640][ T5908] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 212.888311][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 213.186040][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.186071][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.186106][ T5908] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 213.186127][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.280697][ T5908] usb 1-1: config 0 descriptor?? [ 214.252253][ T5908] arvo 0003:1E7D:30D4.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 214.406537][ T5908] arvo 0003:1E7D:30D4.0003: couldn't init struct arvo_device [ 214.406598][ T5908] arvo 0003:1E7D:30D4.0003: couldn't install keyboard [ 214.464490][ T5908] arvo 0003:1E7D:30D4.0003: probe with driver arvo failed with error -71 [ 214.518195][ T5908] usb 1-1: USB disconnect, device number 16 [ 214.599170][ T8125] fido_id[8125]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 214.973487][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 215.065031][ T5908] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 215.207867][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 215.216157][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 215.236061][ T5908] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 215.236085][ T5908] usb 2-1: config 4 has no interface number 0 [ 215.236115][ T5908] usb 2-1: config 4 interface 30 has no altsetting 0 [ 215.270306][ T5908] usb 2-1: string descriptor 0 read error: -22 [ 215.270454][ T5908] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 215.270475][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.305692][ T5908] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 215.305736][ T5908] dw2102: su3000_power_ctrl: 1, initialized 0 [ 215.305754][ T5908] dvb-usb: bulk message failed: -22 (2/0) [ 215.360672][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 215.362437][ T5908] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 215.362491][ T5908] usb 2-1: media controller created [ 215.362515][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 215.362529][ T5908] dw2102: i2c transfer failed. [ 215.362546][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 215.362559][ T5908] dw2102: i2c transfer failed. [ 215.362576][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 215.362589][ T5908] dw2102: i2c transfer failed. [ 215.362604][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 215.362617][ T5908] dw2102: i2c transfer failed. [ 215.362632][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 215.362645][ T5908] dw2102: i2c transfer failed. [ 215.362661][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 215.362673][ T5908] dw2102: i2c transfer failed. [ 215.362683][ T5908] dvb-usb: MAC address: 02:02:02:02:02:02 [ 215.486765][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.505642][ T8133] dvb-usb: bulk message failed: -22 (4/0) [ 215.505659][ T8133] dw2102: i2c transfer failed. [ 215.522402][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 215.522419][ T5908] dw2102: command 0x0e transfer failed. [ 215.522428][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 215.522441][ T5908] dw2102: command 0x0e transfer failed. [ 215.827727][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 215.827749][ T5908] dw2102: command 0x0e transfer failed. [ 215.827758][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 215.827769][ T5908] dw2102: command 0x0e transfer failed. [ 215.827777][ T5908] dvb-usb: bulk message failed: -22 (1/0) [ 215.827789][ T5908] dw2102: command 0x51 transfer failed. [ 215.827797][ T5908] dvb-usb: bulk message failed: -22 (5/0) [ 215.827808][ T5908] dw2102: i2c probe for address 0x68 failed. [ 215.827819][ T5908] dvb-usb: bulk message failed: -22 (5/0) [ 215.827830][ T5908] dw2102: i2c probe for address 0x69 failed. [ 215.827840][ T5908] dvb-usb: bulk message failed: -22 (5/0) [ 215.827851][ T5908] dw2102: i2c probe for address 0x6a failed. [ 215.827860][ T5908] dw2102: probing for demodulator failed. Is the external power switched on? [ 215.827870][ T5908] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 215.837294][ T8148] team0: No ports can be present during mode change [ 216.104651][ T8012] Set syz1 is full, maxelem 65536 reached [ 216.167686][ T5908] rc_core: IR keymap rc-tt-1500 not found [ 216.167706][ T5908] Registered IR keymap rc-empty [ 216.183875][ T5908] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 216.186856][ T5908] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input36 [ 216.238017][ T5908] dvb-usb: schedule remote query interval to 250 msecs. [ 216.238037][ T5908] dw2102: su3000_power_ctrl: 0, initialized 1 [ 216.238049][ T5908] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 216.722142][ T6013] dvb-usb: bulk message failed: -22 (1/0) [ 216.722164][ T6013] dw2102: i2c transfer failed. [ 216.857431][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.877'. [ 216.968186][ T5908] usb 2-1: USB disconnect, device number 15 [ 217.049257][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.341965][ T5908] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 217.917594][ T49] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 218.018939][ T8190] team0: Unable to change to the same mode the team is in [ 218.069765][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 218.072712][ T49] usb 2-1: unable to get BOS descriptor or descriptor too short [ 218.074255][ T49] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 218.074277][ T49] usb 2-1: config 4 has no interface number 0 [ 218.074308][ T49] usb 2-1: config 4 interface 30 has no altsetting 0 [ 218.112833][ T49] usb 2-1: string descriptor 0 read error: -22 [ 218.112982][ T49] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 218.113003][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.163616][ T49] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 218.163664][ T49] dw2102: su3000_power_ctrl: 1, initialized 0 [ 218.163682][ T49] dvb-usb: bulk message failed: -22 (2/0) [ 218.191592][ T49] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 218.207133][ T49] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 218.207187][ T49] usb 2-1: media controller created [ 218.207218][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 218.207231][ T49] dw2102: i2c transfer failed. [ 218.207248][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 218.207260][ T49] dw2102: i2c transfer failed. [ 218.207278][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 218.207289][ T49] dw2102: i2c transfer failed. [ 218.207305][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 218.207317][ T49] dw2102: i2c transfer failed. [ 218.207333][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 218.207345][ T49] dw2102: i2c transfer failed. [ 218.207361][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 218.207374][ T49] dw2102: i2c transfer failed. [ 218.207384][ T49] dvb-usb: MAC address: 02:02:02:02:02:02 [ 218.338892][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.375175][ T8182] dvb-usb: bulk message failed: -22 (4/0) [ 218.375193][ T8182] dw2102: i2c transfer failed. [ 218.402766][ T49] dvb-usb: bulk message failed: -22 (3/0) [ 218.402785][ T49] dw2102: command 0x0e transfer failed. [ 218.402793][ T49] dvb-usb: bulk message failed: -22 (3/0) [ 218.402806][ T49] dw2102: command 0x0e transfer failed. [ 218.707667][ T49] dvb-usb: bulk message failed: -22 (3/0) [ 218.707687][ T49] dw2102: command 0x0e transfer failed. [ 218.707696][ T49] dvb-usb: bulk message failed: -22 (3/0) [ 218.707708][ T49] dw2102: command 0x0e transfer failed. [ 218.707717][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 218.707729][ T49] dw2102: command 0x51 transfer failed. [ 218.707737][ T49] dvb-usb: bulk message failed: -22 (5/0) [ 218.707749][ T49] dw2102: i2c probe for address 0x68 failed. [ 218.707759][ T49] dvb-usb: bulk message failed: -22 (5/0) [ 218.707771][ T49] dw2102: i2c probe for address 0x69 failed. [ 218.707782][ T49] dvb-usb: bulk message failed: -22 (5/0) [ 218.707793][ T49] dw2102: i2c probe for address 0x6a failed. [ 218.707803][ T49] dw2102: probing for demodulator failed. Is the external power switched on? [ 218.707812][ T49] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 218.757708][ T6013] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 218.888565][ T49] rc_core: IR keymap rc-tt-1500 not found [ 218.888585][ T49] Registered IR keymap rc-empty [ 218.890412][ T49] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 218.893696][ T49] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input37 [ 218.917435][ T6013] usb 5-1: Using ep0 maxpacket: 8 [ 218.920160][ T6013] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.920179][ T6013] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.920196][ T6013] usb 5-1: config 0 has no interface number 0 [ 218.920240][ T6013] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 218.920259][ T6013] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.940698][ T6013] usb 5-1: config 0 descriptor?? [ 218.997715][ T49] dvb-usb: schedule remote query interval to 250 msecs. [ 218.997736][ T49] dw2102: su3000_power_ctrl: 0, initialized 1 [ 218.997748][ T49] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 219.027602][ T49] usb 2-1: USB disconnect, device number 16 [ 219.127575][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 219.244747][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'. [ 219.308436][ T5908] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 219.458275][ T49] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 219.502459][ T5908] usb 1-1: config 0 has an invalid interface number: 215 but max is 0 [ 219.502483][ T5908] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.502501][ T5908] usb 1-1: config 0 has no interface number 0 [ 219.502545][ T5908] usb 1-1: config 0 interface 215 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 219.502565][ T5908] usb 1-1: config 0 interface 215 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 219.502604][ T5908] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=1a.b9 [ 219.502624][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.513854][ T5908] usb 1-1: config 0 descriptor?? [ 219.599334][ T6013] usb 5-1: USB disconnect, device number 14 [ 219.722488][ T5908] ushc 1-1:0.215: probe with driver ushc failed with error -110 [ 219.744423][ T8218] bond0: (slave bond_slave_1): Releasing backup interface [ 219.894989][ T5908] usb 1-1: USB disconnect, device number 17 [ 220.576886][ T8246] input input38: cannot allocate more than FF_MAX_EFFECTS effects [ 221.210960][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 221.679184][ T8232] uprobe: syz.3.911:8232 failed to unregister, leaking uprobe [ 222.497604][ T6013] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 222.652260][ T6013] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.652287][ T6013] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.657399][ T6013] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 222.657424][ T6013] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 222.700728][ T6013] usb 3-1: SerialNumber: syz [ 222.998219][ T6013] usb 3-1: 0:2 : does not exist [ 223.073464][ T6013] usb 3-1: USB disconnect, device number 12 [ 223.170752][ T6363] udevd[6363]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.367836][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 223.395421][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'. [ 224.106841][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'. [ 224.308036][ T8308] netlink: 'syz.3.943': attribute type 10 has an invalid length. [ 224.419371][ T8314] misc userio: Invalid payload size [ 224.419804][ T8314] misc userio: No port type given on /dev/userio [ 225.447618][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 225.758255][ T49] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 225.920147][ T49] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.920171][ T49] usb 4-1: config 0 has no interfaces? [ 225.920199][ T49] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 225.920220][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.935579][ T49] usb 4-1: config 0 descriptor?? [ 227.377615][ T49] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 227.527800][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 227.537986][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 227.546576][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.546599][ T49] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 227.546633][ T49] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 227.546653][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.566591][ T49] usb 3-1: config 0 descriptor?? [ 228.515739][ T49] usb 4-1: USB disconnect, device number 20 [ 228.859222][ T5908] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 229.010663][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 229.023570][ T5908] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 229.023595][ T5908] usb 2-1: config 0 has no interface number 0 [ 229.038550][ T5908] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 229.038574][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.038591][ T5908] usb 2-1: Product: syz [ 229.038603][ T5908] usb 2-1: Manufacturer: syz [ 229.038616][ T5908] usb 2-1: SerialNumber: syz [ 229.089458][ T5908] usb 2-1: config 0 descriptor?? [ 229.131143][ T5908] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 229.296755][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.991'. [ 229.423648][ T5908] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 229.608874][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 229.627945][ T5908] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 230.140685][ T1625] usb 3-1: USB disconnect, device number 13 [ 230.647707][ T49] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 230.800152][ T49] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.800178][ T49] usb 1-1: config 0 has no interfaces? [ 230.800204][ T49] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 230.800224][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.805390][ T49] usb 1-1: config 0 descriptor?? [ 230.978549][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.998'. [ 231.382396][ T31] usb 1-1: USB disconnect, device number 18 [ 231.553163][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 231.554116][ T5856] usb 2-1: USB disconnect, device number 17 [ 231.618890][ T5856] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 231.625671][ T5856] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 231.626756][ T5856] quatech2 2-1:0.51: device disconnected [ 231.737653][ T1625] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 231.890280][ T1625] usb 4-1: Using ep0 maxpacket: 16 [ 231.913345][ T1625] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.913360][ T1625] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 231.913381][ T1625] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 231.913392][ T1625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.935533][ T1625] usb 4-1: config 0 descriptor?? [ 232.473028][ T8472] team0: No ports can be present during mode change [ 232.591376][ T8481] fuse: Bad value for 'fd' [ 233.207682][ T49] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 233.357670][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 233.365952][ T49] usb 2-1: unable to get BOS descriptor or descriptor too short [ 233.368796][ T49] usb 2-1: config 0 has no interfaces? [ 233.381039][ T49] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 233.381142][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.381160][ T49] usb 2-1: Product: syz [ 233.381172][ T49] usb 2-1: Manufacturer: syz [ 233.381184][ T49] usb 2-1: SerialNumber: syz [ 233.408521][ T49] usb 2-1: config 0 descriptor?? [ 233.627862][ T49] usb 2-1: USB disconnect, device number 18 [ 234.000061][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.251455][ T8518] fuse: Bad value for 'fd' [ 234.441198][ T9] usb 4-1: USB disconnect, device number 21 [ 234.592398][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.970234][ T8528] team0: Unable to change to the same mode the team is in [ 235.309469][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.469027][ T8546] Bluetooth: hci0: unsupported parameter 233 [ 235.469052][ T8546] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 235.478583][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.696620][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.132350][ T8535] uprobe: syz.1.1035:8535 failed to unregister, leaking uprobe [ 236.387608][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 236.429893][ T1625] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 236.538222][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 236.543234][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.543289][ T9] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.543313][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 236.543345][ T9] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 236.543365][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.627626][ T1625] usb 1-1: Using ep0 maxpacket: 8 [ 236.630713][ T9] usb 5-1: config 0 descriptor?? [ 236.634958][ T1625] usb 1-1: unable to get BOS descriptor or descriptor too short [ 236.664462][ T1625] usb 1-1: config 0 has no interfaces? [ 236.677341][ T1625] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 236.677367][ T1625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.677386][ T1625] usb 1-1: Product: syz [ 236.677399][ T1625] usb 1-1: Manufacturer: syz [ 236.677411][ T1625] usb 1-1: SerialNumber: syz [ 236.684042][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 236.692079][ T1625] usb 1-1: config 0 descriptor?? [ 237.071069][ T5926] usb 1-1: USB disconnect, device number 19 [ 237.527844][ T5926] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 237.677681][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 237.702966][ T5926] usb 4-1: unable to get BOS descriptor or descriptor too short [ 237.704777][ T5926] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 237.704811][ T5926] usb 4-1: can't read configurations, error -71 [ 239.414645][ T8599] uprobe: syz.2.1059:8599 failed to unregister, leaking uprobe [ 239.504312][ T5908] usb 5-1: USB disconnect, device number 15 [ 240.127705][ T5908] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 240.279083][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 240.281991][ T5908] usb 5-1: unable to get BOS descriptor or descriptor too short [ 240.283544][ T5908] usb 5-1: config 0 has no interfaces? [ 240.307295][ T5908] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 240.307377][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.307394][ T5908] usb 5-1: Product: syz [ 240.307407][ T5908] usb 5-1: Manufacturer: syz [ 240.307419][ T5908] usb 5-1: SerialNumber: syz [ 240.350527][ T5908] usb 5-1: config 0 descriptor?? [ 240.590733][ T5926] usb 5-1: USB disconnect, device number 16 [ 240.817594][ T5856] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 240.969357][ T5856] usb 2-1: Using ep0 maxpacket: 16 [ 240.972554][ T5856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.972585][ T5856] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.972599][ T5856] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.972616][ T5856] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 240.972627][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.033731][ T5856] usb 2-1: config 0 descriptor?? [ 241.051613][ T5856] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 241.477679][ T8655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1081'. [ 242.624309][ T8653] uprobe: syz.3.1082:8653 failed to unregister, leaking uprobe [ 242.682923][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 243.888357][ T8671] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 243.937878][ T5926] usb 2-1: USB disconnect, device number 19 [ 244.247978][ T5856] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 244.407643][ T5856] usb 4-1: Using ep0 maxpacket: 8 [ 244.412594][ T5856] usb 4-1: unable to get BOS descriptor or descriptor too short [ 244.413663][ T5856] usb 4-1: config 0 has no interfaces? [ 244.415801][ T5856] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 244.415815][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.415825][ T5856] usb 4-1: Product: syz [ 244.415831][ T5856] usb 4-1: Manufacturer: syz [ 244.415839][ T5856] usb 4-1: SerialNumber: syz [ 244.428193][ T5856] usb 4-1: config 0 descriptor?? [ 244.698817][ T10] usb 4-1: USB disconnect, device number 24 [ 244.807690][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 244.967671][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 244.970301][ T9] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 244.970325][ T9] usb 1-1: config 0 has no interface number 0 [ 244.970372][ T9] usb 1-1: config 0 interface 230 has no altsetting 0 [ 245.006541][ T9] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 245.006569][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.006587][ T9] usb 1-1: Product: syz [ 245.006600][ T9] usb 1-1: Manufacturer: syz [ 245.006613][ T9] usb 1-1: SerialNumber: syz [ 245.050096][ T9] usb 1-1: config 0 descriptor?? [ 245.069693][ T9] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 245.101655][ T9] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 245.847163][ T8730] binder: 8727:8730 ioctl c0306201 200000000080 returned -14 [ 246.318369][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 246.318386][ T37] audit: type=1326 audit(1756156445.884:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8743 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb287ebe9 code=0x7ffc0000 [ 246.326200][ T37] audit: type=1326 audit(1756156445.904:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8743 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb287ebe9 code=0x7ffc0000 [ 246.380358][ T37] audit: type=1326 audit(1756156445.964:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8743 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfb287ebe9 code=0x7ffc0000 [ 246.389070][ T37] audit: type=1326 audit(1756156445.964:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8743 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb287ebe9 code=0x7ffc0000 [ 246.389119][ T37] audit: type=1326 audit(1756156445.974:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8743 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb287ebe9 code=0x7ffc0000 [ 246.390522][ T37] audit: type=1326 audit(1756156445.974:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8743 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfb287ebe9 code=0x7ffc0000 [ 246.390574][ T37] audit: type=1326 audit(1756156445.974:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8743 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb287ebe9 code=0x7ffc0000 [ 246.390614][ T37] audit: type=1326 audit(1756156445.974:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8743 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb287ebe9 code=0x7ffc0000 [ 246.524234][ T37] audit: type=1326 audit(1756156446.094:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8743 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcfb2875ba7 code=0x7ffc0000 [ 246.524284][ T37] audit: type=1326 audit(1756156446.094:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8743 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcfb281ade9 code=0x7ffc0000 [ 246.972292][ T8758] team0: Unable to change to the same mode the team is in [ 247.347930][ T9] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 247.375163][ T6363] udevd[6363]: failed to send result of seq 13746 to main daemon: Connection refused [ 247.455600][ T8771] binder: 8770:8771 ioctl c0306201 200000000080 returned -14 [ 247.498986][ T9] usb 1-1: USB disconnect, device number 20 [ 247.769306][ T8777] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 248.157280][ T8795] binder: 8794:8795 ioctl c0306201 200000000080 returned -14 [ 248.220673][ T5856] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 248.281611][ T8797] team0: No ports can be present during mode change [ 248.310658][ T8799] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 248.367608][ T5856] usb 5-1: Using ep0 maxpacket: 8 [ 248.370143][ T5856] usb 5-1: unable to get BOS descriptor or descriptor too short [ 248.371821][ T5856] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 248.371843][ T5856] usb 5-1: config 4 has no interface number 0 [ 248.371873][ T5856] usb 5-1: config 4 interface 30 has no altsetting 0 [ 248.375365][ T5856] usb 5-1: string descriptor 0 read error: -22 [ 248.375507][ T5856] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 248.375529][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.395100][ T5856] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 248.395142][ T5856] dw2102: su3000_power_ctrl: 1, initialized 0 [ 248.395159][ T5856] dvb-usb: bulk message failed: -22 (2/0) [ 248.409042][ T5856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 248.409958][ T5856] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 248.410008][ T5856] usb 5-1: media controller created [ 248.410032][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 248.410045][ T5856] dw2102: i2c transfer failed. [ 248.410061][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 248.410074][ T5856] dw2102: i2c transfer failed. [ 248.410088][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 248.410100][ T5856] dw2102: i2c transfer failed. [ 248.410116][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 248.410126][ T5856] dw2102: i2c transfer failed. [ 248.410142][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 248.410154][ T5856] dw2102: i2c transfer failed. [ 248.410170][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 248.410181][ T5856] dw2102: i2c transfer failed. [ 248.410190][ T5856] dvb-usb: MAC address: 02:02:02:02:02:02 [ 248.462703][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 248.482315][ T5856] dvb-usb: bulk message failed: -22 (3/0) [ 248.482339][ T5856] dw2102: command 0x0e transfer failed. [ 248.482348][ T5856] dvb-usb: bulk message failed: -22 (3/0) [ 248.482359][ T5856] dw2102: command 0x0e transfer failed. [ 248.687740][ T49] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 248.787565][ T5856] dvb-usb: bulk message failed: -22 (3/0) [ 248.787587][ T5856] dw2102: command 0x0e transfer failed. [ 248.787597][ T5856] dvb-usb: bulk message failed: -22 (3/0) [ 248.787608][ T5856] dw2102: command 0x0e transfer failed. [ 248.787616][ T5856] dvb-usb: bulk message failed: -22 (1/0) [ 248.787629][ T5856] dw2102: command 0x51 transfer failed. [ 248.787637][ T5856] dvb-usb: bulk message failed: -22 (5/0) [ 248.787649][ T5856] dw2102: i2c probe for address 0x68 failed. [ 248.787660][ T5856] dvb-usb: bulk message failed: -22 (5/0) [ 248.787673][ T5856] dw2102: i2c probe for address 0x69 failed. [ 248.787683][ T5856] dvb-usb: bulk message failed: -22 (5/0) [ 248.787695][ T5856] dw2102: i2c probe for address 0x6a failed. [ 248.787704][ T5856] dw2102: probing for demodulator failed. Is the external power switched on? [ 248.787714][ T5856] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 248.837548][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 248.847744][ T49] usb 2-1: unable to get BOS descriptor or descriptor too short [ 248.849754][ T49] usb 2-1: config 0 has no interfaces? [ 248.854211][ T49] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 248.854235][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.854252][ T49] usb 2-1: Product: syz [ 248.854264][ T49] usb 2-1: Manufacturer: syz [ 248.854276][ T49] usb 2-1: SerialNumber: syz [ 248.865185][ T49] usb 2-1: config 0 descriptor?? [ 248.917563][ T5856] rc_core: IR keymap rc-tt-1500 not found [ 248.917582][ T5856] Registered IR keymap rc-empty [ 248.920988][ T5856] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 248.929471][ T5856] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input40 [ 248.938108][ T5856] dvb-usb: schedule remote query interval to 250 msecs. [ 248.938126][ T5856] dw2102: su3000_power_ctrl: 0, initialized 1 [ 248.938138][ T5856] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 248.944465][ T5856] usb 5-1: USB disconnect, device number 17 [ 249.095907][ T8805] dvb-usb: bulk message failed: -22 (3/0) [ 249.095928][ T8805] dw2102: i2c transfer failed. [ 249.095936][ T8805] dvb-usb: bulk message failed: -22 (4/0) [ 249.095948][ T8805] dw2102: i2c transfer failed. [ 249.109134][ T49] usb 2-1: USB disconnect, device number 20 [ 249.201521][ T5856] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 249.376667][ T8823] binder: 8821:8823 ioctl c0306201 200000000080 returned -14 [ 249.464059][ T8825] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 249.627897][ T8833] team0: No ports can be present during mode change [ 249.772097][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 250.047676][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 250.067694][ T5856] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 250.207711][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 250.216320][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 250.218267][ T5856] usb 2-1: Using ep0 maxpacket: 8 [ 250.232851][ T5856] usb 2-1: unable to get BOS descriptor or descriptor too short [ 250.240710][ T5856] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 250.240732][ T5856] usb 2-1: config 4 has no interface number 0 [ 250.240762][ T5856] usb 2-1: config 4 interface 30 has no altsetting 0 [ 250.253717][ T5856] usb 2-1: string descriptor 0 read error: -22 [ 250.254010][ T5856] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 250.254032][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.287994][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 250.288030][ T10] usb 1-1: can't read configurations, error -71 [ 250.291234][ T5856] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 250.291283][ T5856] dw2102: su3000_power_ctrl: 1, initialized 0 [ 250.291301][ T5856] dvb-usb: bulk message failed: -22 (2/0) [ 250.303759][ T5856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 250.309540][ T5856] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 250.309591][ T5856] usb 2-1: media controller created [ 250.309616][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 250.309629][ T5856] dw2102: i2c transfer failed. [ 250.309645][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 250.309657][ T5856] dw2102: i2c transfer failed. [ 250.309672][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 250.309684][ T5856] dw2102: i2c transfer failed. [ 250.309699][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 250.309711][ T5856] dw2102: i2c transfer failed. [ 250.309726][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 250.309737][ T5856] dw2102: i2c transfer failed. [ 250.309753][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 250.312127][ T5856] dw2102: i2c transfer failed. [ 250.312141][ T5856] dvb-usb: MAC address: 02:02:02:02:02:02 [ 250.415791][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.490089][ T5856] dvb-usb: bulk message failed: -22 (3/0) [ 250.490111][ T5856] dw2102: command 0x0e transfer failed. [ 250.490119][ T5856] dvb-usb: bulk message failed: -22 (3/0) [ 250.490131][ T5856] dw2102: command 0x0e transfer failed. [ 250.678755][ T8859] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 250.745719][ T8863] binder: 8862:8863 ioctl c0306201 200000000080 returned -14 [ 250.797572][ T5856] dvb-usb: bulk message failed: -22 (3/0) [ 250.797595][ T5856] dw2102: command 0x0e transfer failed. [ 250.797603][ T5856] dvb-usb: bulk message failed: -22 (3/0) [ 250.797673][ T5856] dw2102: command 0x0e transfer failed. [ 250.797682][ T5856] dvb-usb: bulk message failed: -22 (1/0) [ 250.797694][ T5856] dw2102: command 0x51 transfer failed. [ 250.797702][ T5856] dvb-usb: bulk message failed: -22 (5/0) [ 250.797714][ T5856] dw2102: i2c probe for address 0x68 failed. [ 250.797725][ T5856] dvb-usb: bulk message failed: -22 (5/0) [ 250.797737][ T5856] dw2102: i2c probe for address 0x69 failed. [ 250.797747][ T5856] dvb-usb: bulk message failed: -22 (5/0) [ 250.797759][ T5856] dw2102: i2c probe for address 0x6a failed. [ 250.797769][ T5856] dw2102: probing for demodulator failed. Is the external power switched on? [ 250.797779][ T5856] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 250.947570][ T5856] rc_core: IR keymap rc-tt-1500 not found [ 250.947589][ T5856] Registered IR keymap rc-empty [ 250.949170][ T5856] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 250.969153][ T5856] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input41 [ 250.977660][ T49] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 250.981010][ T5856] dvb-usb: schedule remote query interval to 250 msecs. [ 250.981028][ T5856] dw2102: su3000_power_ctrl: 0, initialized 1 [ 250.981039][ T5856] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 250.985457][ T5856] usb 2-1: USB disconnect, device number 21 [ 251.125095][ T8872] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1174'. [ 251.127623][ T49] usb 3-1: Using ep0 maxpacket: 8 [ 251.130137][ T49] usb 3-1: unable to get BOS descriptor or descriptor too short [ 251.131466][ T49] usb 3-1: config 0 has no interfaces? [ 251.135797][ T49] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 251.135821][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.135838][ T49] usb 3-1: Product: syz [ 251.135857][ T49] usb 3-1: Manufacturer: syz [ 251.135869][ T49] usb 3-1: SerialNumber: syz [ 251.167318][ T49] usb 3-1: config 0 descriptor?? [ 251.218148][ T8877] IPVS: length: 209 != 24 [ 251.276000][ T5856] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 251.410499][ T49] usb 3-1: USB disconnect, device number 15 [ 251.595390][ T8892] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 251.907579][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 252.949533][ T8910] binder: 8908:8910 ioctl c0306201 200000000080 returned -14 [ 253.177685][ T49] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 253.197997][ T8921] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 253.380216][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 253.392282][ T49] usb 2-1: unable to get BOS descriptor or descriptor too short [ 253.394373][ T49] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 253.394397][ T49] usb 2-1: config 4 has no interface number 0 [ 253.394427][ T49] usb 2-1: config 4 interface 30 has no altsetting 0 [ 253.406002][ T49] usb 2-1: string descriptor 0 read error: -22 [ 253.406153][ T49] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 253.406174][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.411954][ T8929] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1198'. [ 253.494491][ T49] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 253.494552][ T49] dw2102: su3000_power_ctrl: 1, initialized 0 [ 253.494571][ T49] dvb-usb: bulk message failed: -22 (2/0) [ 253.529502][ T49] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 253.532576][ T49] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 253.532643][ T49] usb 2-1: media controller created [ 253.532668][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 253.532682][ T49] dw2102: i2c transfer failed. [ 253.532699][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 253.532711][ T49] dw2102: i2c transfer failed. [ 253.532727][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 253.532739][ T49] dw2102: i2c transfer failed. [ 253.532755][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 253.532768][ T49] dw2102: i2c transfer failed. [ 253.532784][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 253.532796][ T49] dw2102: i2c transfer failed. [ 253.532813][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 253.532824][ T49] dw2102: i2c transfer failed. [ 253.532833][ T49] dvb-usb: MAC address: 02:02:02:02:02:02 [ 254.421891][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 254.480634][ T8933] IPVS: length: 209 != 24 [ 254.589942][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.607981][ T49] dvb-usb: bulk message failed: -22 (3/0) [ 254.607999][ T49] dw2102: command 0x0e transfer failed. [ 254.608009][ T49] dvb-usb: bulk message failed: -22 (3/0) [ 254.608021][ T49] dw2102: command 0x0e transfer failed. [ 254.923566][ T49] dvb-usb: bulk message failed: -22 (3/0) [ 254.923589][ T49] dw2102: command 0x0e transfer failed. [ 254.923599][ T49] dvb-usb: bulk message failed: -22 (3/0) [ 254.923610][ T49] dw2102: command 0x0e transfer failed. [ 254.923619][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 254.923630][ T49] dw2102: command 0x51 transfer failed. [ 254.923638][ T49] dvb-usb: bulk message failed: -22 (5/0) [ 254.923650][ T49] dw2102: i2c probe for address 0x68 failed. [ 254.923661][ T49] dvb-usb: bulk message failed: -22 (5/0) [ 254.923673][ T49] dw2102: i2c probe for address 0x69 failed. [ 254.923684][ T49] dvb-usb: bulk message failed: -22 (5/0) [ 254.923695][ T49] dw2102: i2c probe for address 0x6a failed. [ 254.923705][ T49] dw2102: probing for demodulator failed. Is the external power switched on? [ 254.923713][ T49] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 255.027607][ T5856] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 255.117634][ T49] rc_core: IR keymap rc-tt-1500 not found [ 255.117655][ T49] Registered IR keymap rc-empty [ 255.119146][ T49] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 255.122186][ T49] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input42 [ 255.157216][ T49] dvb-usb: schedule remote query interval to 250 msecs. [ 255.157235][ T49] dw2102: su3000_power_ctrl: 0, initialized 1 [ 255.157247][ T49] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 255.165841][ T49] usb 2-1: USB disconnect, device number 22 [ 255.179923][ T5856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.179944][ T5856] usb 4-1: config 0 has no interfaces? [ 255.179971][ T5856] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 255.179990][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.209236][ T5856] usb 4-1: config 0 descriptor?? [ 255.433556][ T49] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 255.483463][ T8972] vivid-000: disconnect [ 255.483998][ T8971] vivid-000: reconnect [ 255.696576][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.697696][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.727638][ T49] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 255.887686][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 255.887691][ T5856] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 255.913527][ T49] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 255.913553][ T49] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.913570][ T49] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 255.913626][ T49] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.915852][ T49] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 255.915876][ T49] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 255.915893][ T49] usb 2-1: Product: syz [ 255.915904][ T49] usb 2-1: Manufacturer: syz [ 255.962131][ T49] cdc_wdm 2-1:1.0: skipping garbage [ 255.962150][ T49] cdc_wdm 2-1:1.0: skipping garbage [ 255.962726][ T49] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 256.057688][ T5856] usb 5-1: Using ep0 maxpacket: 8 [ 256.060940][ T5856] usb 5-1: unable to get BOS descriptor or descriptor too short [ 256.062484][ T5856] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 256.062505][ T5856] usb 5-1: config 4 has no interface number 0 [ 256.062535][ T5856] usb 5-1: config 4 interface 30 has no altsetting 0 [ 256.066935][ T5856] usb 5-1: string descriptor 0 read error: -22 [ 256.067079][ T5856] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 256.067099][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.080258][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 256.085729][ T5856] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 256.085772][ T5856] dw2102: su3000_power_ctrl: 1, initialized 0 [ 256.085791][ T5856] dvb-usb: bulk message failed: -22 (2/0) [ 256.100724][ T5856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 256.102003][ T5856] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 256.102055][ T5856] usb 5-1: media controller created [ 256.102078][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 256.102091][ T5856] dw2102: i2c transfer failed. [ 256.102108][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 256.102120][ T5856] dw2102: i2c transfer failed. [ 256.102135][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 256.102147][ T5856] dw2102: i2c transfer failed. [ 256.102162][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 256.102174][ T5856] dw2102: i2c transfer failed. [ 256.102189][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 256.102201][ T5856] dw2102: i2c transfer failed. [ 256.102216][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 256.102227][ T5856] dw2102: i2c transfer failed. [ 256.102237][ T5856] dvb-usb: MAC address: 02:02:02:02:02:02 [ 256.146281][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.167921][ T5856] dvb-usb: bulk message failed: -22 (3/0) [ 256.167939][ T5856] dw2102: command 0x0e transfer failed. [ 256.167948][ T5856] dvb-usb: bulk message failed: -22 (3/0) [ 256.167959][ T5856] dw2102: command 0x0e transfer failed. [ 256.179085][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.179132][ T9] usb 3-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.179155][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 256.179184][ T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 256.179202][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.198278][ T8966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.198685][ T8966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.201318][ T49] usb 2-1: USB disconnect, device number 23 [ 256.347252][ T9] usb 3-1: config 0 descriptor?? [ 256.362130][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 256.483739][ T5856] dvb-usb: bulk message failed: -22 (3/0) [ 256.483827][ T5856] dw2102: command 0x0e transfer failed. [ 256.483838][ T5856] dvb-usb: bulk message failed: -22 (3/0) [ 256.483850][ T5856] dw2102: command 0x0e transfer failed. [ 256.483859][ T5856] dvb-usb: bulk message failed: -22 (1/0) [ 256.483871][ T5856] dw2102: command 0x51 transfer failed. [ 256.483879][ T5856] dvb-usb: bulk message failed: -22 (5/0) [ 256.483891][ T5856] dw2102: i2c probe for address 0x68 failed. [ 256.483901][ T5856] dvb-usb: bulk message failed: -22 (5/0) [ 256.483913][ T5856] dw2102: i2c probe for address 0x69 failed. [ 256.483923][ T5856] dvb-usb: bulk message failed: -22 (5/0) [ 256.483935][ T5856] dw2102: i2c probe for address 0x6a failed. [ 256.483945][ T5856] dw2102: probing for demodulator failed. Is the external power switched on? [ 256.483954][ T5856] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 256.487576][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 256.588000][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1222'. [ 256.637655][ T5856] rc_core: IR keymap rc-tt-1500 not found [ 256.637675][ T5856] Registered IR keymap rc-empty [ 256.639337][ T5856] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 256.642945][ T5856] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input43 [ 256.646800][ T5856] dvb-usb: schedule remote query interval to 250 msecs. [ 256.646817][ T5856] dw2102: su3000_power_ctrl: 0, initialized 1 [ 256.646829][ T5856] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 256.652971][ T5856] usb 5-1: USB disconnect, device number 18 [ 256.859698][ T5856] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 258.402853][ T1625] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 258.548574][ T9009] uprobe: syz.1.1232:9009 failed to unregister, leaking uprobe [ 258.567775][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 258.647673][ T1625] usb 5-1: Using ep0 maxpacket: 8 [ 258.651534][ T1625] usb 5-1: unable to get BOS descriptor or descriptor too short [ 258.653067][ T1625] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 258.653089][ T1625] usb 5-1: config 4 has no interface number 0 [ 258.653118][ T1625] usb 5-1: config 4 interface 30 has no altsetting 0 [ 258.653612][ T5856] usb 4-1: USB disconnect, device number 25 [ 258.657284][ T1625] usb 5-1: string descriptor 0 read error: -22 [ 258.657557][ T1625] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 258.657580][ T1625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.703833][ T10] usb 3-1: USB disconnect, device number 16 [ 258.726209][ T1625] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 258.726256][ T1625] dw2102: su3000_power_ctrl: 1, initialized 0 [ 258.726272][ T1625] dvb-usb: bulk message failed: -22 (2/0) [ 258.752944][ T1625] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 258.761125][ T1625] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 258.761177][ T1625] usb 5-1: media controller created [ 258.761203][ T1625] dvb-usb: bulk message failed: -22 (6/0) [ 258.761217][ T1625] dw2102: i2c transfer failed. [ 258.761233][ T1625] dvb-usb: bulk message failed: -22 (6/0) [ 258.761244][ T1625] dw2102: i2c transfer failed. [ 258.761260][ T1625] dvb-usb: bulk message failed: -22 (6/0) [ 258.761272][ T1625] dw2102: i2c transfer failed. [ 258.761295][ T1625] dvb-usb: bulk message failed: -22 (6/0) [ 258.761306][ T1625] dw2102: i2c transfer failed. [ 258.761321][ T1625] dvb-usb: bulk message failed: -22 (6/0) [ 258.761333][ T1625] dw2102: i2c transfer failed. [ 258.761347][ T1625] dvb-usb: bulk message failed: -22 (6/0) [ 258.761359][ T1625] dw2102: i2c transfer failed. [ 258.761367][ T1625] dvb-usb: MAC address: 02:02:02:02:02:02 [ 258.845847][ T1625] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.026562][ T1625] dvb-usb: bulk message failed: -22 (3/0) [ 259.026580][ T1625] dw2102: command 0x0e transfer failed. [ 259.026590][ T1625] dvb-usb: bulk message failed: -22 (3/0) [ 259.026603][ T1625] dw2102: command 0x0e transfer failed. [ 259.086804][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1239'. [ 259.212613][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1239'. [ 259.327946][ T1625] dvb-usb: bulk message failed: -22 (3/0) [ 259.327967][ T1625] dw2102: command 0x0e transfer failed. [ 259.327977][ T1625] dvb-usb: bulk message failed: -22 (3/0) [ 259.327989][ T1625] dw2102: command 0x0e transfer failed. [ 259.328007][ T1625] dvb-usb: bulk message failed: -22 (1/0) [ 259.328018][ T1625] dw2102: command 0x51 transfer failed. [ 259.328026][ T1625] dvb-usb: bulk message failed: -22 (5/0) [ 259.328038][ T1625] dw2102: i2c probe for address 0x68 failed. [ 259.328047][ T1625] dvb-usb: bulk message failed: -22 (5/0) [ 259.328058][ T1625] dw2102: i2c probe for address 0x69 failed. [ 259.328067][ T1625] dvb-usb: bulk message failed: -22 (5/0) [ 259.328141][ T1625] dw2102: i2c probe for address 0x6a failed. [ 259.328151][ T1625] dw2102: probing for demodulator failed. Is the external power switched on? [ 259.328160][ T1625] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 259.569273][ T9046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1244'. [ 259.587743][ T1625] rc_core: IR keymap rc-tt-1500 not found [ 259.587761][ T1625] Registered IR keymap rc-empty [ 259.589276][ T1625] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 259.592299][ T1625] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input44 [ 259.628080][ T5856] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 259.652522][ T1625] dvb-usb: schedule remote query interval to 250 msecs. [ 259.652541][ T1625] dw2102: su3000_power_ctrl: 0, initialized 1 [ 259.652552][ T1625] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 259.679659][ T1625] usb 5-1: USB disconnect, device number 19 [ 259.770898][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1239'. [ 259.788477][ T5856] usb 2-1: Using ep0 maxpacket: 8 [ 259.828820][ T1625] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 259.855098][ T5856] usb 2-1: unable to get BOS descriptor or descriptor too short [ 259.863644][ T5856] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 259.863678][ T5856] usb 2-1: can't read configurations, error -71 [ 260.110757][ T9058] tipc: Started in network mode [ 260.110784][ T9058] tipc: Node identity eec54e6ddc14, cluster identity 4711 [ 260.111763][ T9058] tipc: Enabled bearer , priority 0 [ 260.141914][ T9058] syzkaller0: MTU too low for tipc bearer [ 260.141932][ T9058] tipc: Disabling bearer [ 260.196878][ T9062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1251'. [ 260.196898][ T9062] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1251'. [ 260.696904][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 260.705975][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 261.389380][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 261.401608][ T9064] uprobe: syz.0.1253:9064 failed to unregister, leaking uprobe [ 261.424349][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 261.427834][ T9] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 261.427856][ T9] usb 5-1: config 4 has no interface number 0 [ 261.427890][ T9] usb 5-1: config 4 interface 30 has no altsetting 0 [ 261.458418][ T9] usb 5-1: string descriptor 0 read error: -22 [ 261.458554][ T9] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 261.458573][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.515238][ T9] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 261.515281][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 261.515298][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 261.545092][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 261.561118][ T9] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 261.561174][ T9] usb 5-1: media controller created [ 261.561198][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 261.561211][ T9] dw2102: i2c transfer failed. [ 261.561228][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 261.561240][ T9] dw2102: i2c transfer failed. [ 261.561256][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 261.561268][ T9] dw2102: i2c transfer failed. [ 261.561283][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 261.561295][ T9] dw2102: i2c transfer failed. [ 261.561311][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 261.561323][ T9] dw2102: i2c transfer failed. [ 261.561339][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 261.561351][ T9] dw2102: i2c transfer failed. [ 261.561361][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 261.671854][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.677554][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 261.705585][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 261.705603][ T9] dw2102: command 0x0e transfer failed. [ 261.705612][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 261.705625][ T9] dw2102: command 0x0e transfer failed. [ 261.971035][ T9088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1262'. [ 261.971055][ T9088] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1262'. [ 262.008139][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 262.008158][ T9] dw2102: command 0x0e transfer failed. [ 262.008167][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 262.008176][ T9] dw2102: command 0x0e transfer failed. [ 262.008185][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 262.008197][ T9] dw2102: command 0x51 transfer failed. [ 262.008205][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 262.008217][ T9] dw2102: i2c probe for address 0x68 failed. [ 262.008226][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 262.008238][ T9] dw2102: i2c probe for address 0x69 failed. [ 262.008247][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 262.008259][ T9] dw2102: i2c probe for address 0x6a failed. [ 262.008269][ T9] dw2102: probing for demodulator failed. Is the external power switched on? [ 262.008278][ T9] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 262.009826][ T9086] team0: No ports can be present during mode change [ 262.177568][ T9] rc_core: IR keymap rc-tt-1500 not found [ 262.177590][ T9] Registered IR keymap rc-empty [ 262.181352][ T9] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 262.184775][ T9] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input45 [ 262.187061][ T9] dvb-usb: schedule remote query interval to 250 msecs. [ 262.187080][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 262.187091][ T9] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 262.245444][ T9] usb 5-1: USB disconnect, device number 20 [ 262.421058][ T9] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 262.519807][ T9101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1267'. [ 262.560287][ T9101] bridge0: port 3(batadv1) entered blocking state [ 262.565369][ T9101] bridge0: port 3(batadv1) entered disabled state [ 262.565584][ T9101] batadv1: entered allmulticast mode [ 262.612292][ T9101] batadv1: entered promiscuous mode [ 262.791915][ T9110] binder: 9109:9110 ioctl c0306201 200000000080 returned -14 [ 262.797055][ T9110] binder: BINDER_SET_CONTEXT_MGR already set [ 262.797069][ T9110] binder: 9109:9110 ioctl 4018620d 200000000040 returned -16 [ 262.845016][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1274'. [ 263.088818][ T1408] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 263.088839][ T1408] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 263.407665][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 263.567698][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 263.571065][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 263.573075][ T9] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 263.573099][ T9] usb 3-1: config 4 has no interface number 0 [ 263.573136][ T9] usb 3-1: config 4 interface 30 has no altsetting 0 [ 263.650416][ T9] usb 3-1: string descriptor 0 read error: -22 [ 263.650579][ T9] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 263.650603][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.720796][ T9] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 263.720851][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 263.720871][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 263.765260][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 263.788151][ T9] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 263.788204][ T9] usb 3-1: media controller created [ 263.788231][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 263.788246][ T9] dw2102: i2c transfer failed. [ 263.788263][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 263.788276][ T9] dw2102: i2c transfer failed. [ 263.788290][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 263.788303][ T9] dw2102: i2c transfer failed. [ 263.788317][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 263.788329][ T9] dw2102: i2c transfer failed. [ 263.788343][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 263.788357][ T9] dw2102: i2c transfer failed. [ 263.788373][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 263.788385][ T9] dw2102: i2c transfer failed. [ 263.788394][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 263.927337][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.952806][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 263.952826][ T9] dw2102: command 0x0e transfer failed. [ 263.952835][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 263.952848][ T9] dw2102: command 0x0e transfer failed. [ 264.161098][ T9136] team0: No ports can be present during mode change [ 264.257598][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 264.257620][ T9] dw2102: command 0x0e transfer failed. [ 264.257629][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 264.257642][ T9] dw2102: command 0x0e transfer failed. [ 264.257651][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 264.257663][ T9] dw2102: command 0x51 transfer failed. [ 264.257672][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 264.257683][ T9] dw2102: i2c probe for address 0x68 failed. [ 264.257694][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 264.257706][ T9] dw2102: i2c probe for address 0x69 failed. [ 264.257716][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 264.257727][ T9] dw2102: i2c probe for address 0x6a failed. [ 264.257738][ T9] dw2102: probing for demodulator failed. Is the external power switched on? [ 264.257748][ T9] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 264.375131][ T9145] binder: 9144:9145 ioctl c0306201 200000000080 returned -14 [ 264.457608][ T9] rc_core: IR keymap rc-tt-1500 not found [ 264.457627][ T9] Registered IR keymap rc-empty [ 264.459051][ T9] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 264.462054][ T9] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input46 [ 264.497911][ T9] dvb-usb: schedule remote query interval to 250 msecs. [ 264.497931][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 264.497942][ T9] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 264.530099][ T9] usb 3-1: USB disconnect, device number 17 [ 264.718936][ T9] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 265.657584][ T5856] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 265.667645][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 265.767966][ T9180] binder: 9179:9180 ioctl c0306201 200000000080 returned -14 [ 265.807698][ T5856] usb 3-1: Using ep0 maxpacket: 8 [ 265.817602][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 265.818881][ T5856] usb 3-1: unable to get BOS descriptor or descriptor too short [ 265.820163][ T5856] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 265.820195][ T5856] usb 3-1: can't read configurations, error -71 [ 265.820305][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 265.820330][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 265.820351][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 265.820371][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.820408][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 265.820426][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.837621][ T5926] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 265.987610][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 265.991134][ T5926] usb 2-1: unable to get BOS descriptor or descriptor too short [ 265.992767][ T5926] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 265.992787][ T5926] usb 2-1: config 4 has no interface number 0 [ 265.992816][ T5926] usb 2-1: config 4 interface 30 has no altsetting 0 [ 265.998503][ T5926] usb 2-1: string descriptor 0 read error: -22 [ 265.998647][ T5926] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 265.998667][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.035648][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1304'. [ 266.040458][ T5926] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 266.040500][ T5926] dw2102: su3000_power_ctrl: 1, initialized 0 [ 266.040518][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 266.058535][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 266.059422][ T5926] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 266.059472][ T5926] usb 2-1: media controller created [ 266.059496][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 266.059509][ T5926] dw2102: i2c transfer failed. [ 266.059525][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 266.059538][ T5926] dw2102: i2c transfer failed. [ 266.059553][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 266.059565][ T5926] dw2102: i2c transfer failed. [ 266.059580][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 266.059592][ T5926] dw2102: i2c transfer failed. [ 266.059608][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 266.059620][ T5926] dw2102: i2c transfer failed. [ 266.059643][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 266.059656][ T5926] dw2102: i2c transfer failed. [ 266.059664][ T5926] dvb-usb: MAC address: 02:02:02:02:02:02 [ 266.161636][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.197616][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 266.197659][ T9] usbtmc 1-1:16.0: can't read capabilities [ 266.249963][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 266.249981][ T5926] dw2102: command 0x0e transfer failed. [ 266.249990][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 266.250002][ T5926] dw2102: command 0x0e transfer failed. [ 266.418244][ T5882] usb 1-1: USB disconnect, device number 23 [ 266.536867][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1308'. [ 266.557597][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 266.557618][ T5926] dw2102: command 0x0e transfer failed. [ 266.557627][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 266.557639][ T5926] dw2102: command 0x0e transfer failed. [ 266.557648][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 266.557660][ T5926] dw2102: command 0x51 transfer failed. [ 266.557668][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 266.557679][ T5926] dw2102: i2c probe for address 0x68 failed. [ 266.557689][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 266.557700][ T5926] dw2102: i2c probe for address 0x69 failed. [ 266.557709][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 266.557719][ T5926] dw2102: i2c probe for address 0x6a failed. [ 266.557729][ T5926] dw2102: probing for demodulator failed. Is the external power switched on? [ 266.557738][ T5926] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 266.757566][ T5926] rc_core: IR keymap rc-tt-1500 not found [ 266.757587][ T5926] Registered IR keymap rc-empty [ 266.759042][ T5926] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 266.762085][ T5926] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input47 [ 266.770340][ T5926] dvb-usb: schedule remote query interval to 250 msecs. [ 266.770359][ T5926] dw2102: su3000_power_ctrl: 0, initialized 1 [ 266.770371][ T5926] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 266.778305][ T5926] usb 2-1: USB disconnect, device number 26 [ 267.193181][ T5926] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 267.278054][ T9205] binder: 9203:9205 ioctl c0306201 200000000080 returned -14 [ 267.278857][ T9205] binder: BINDER_SET_CONTEXT_MGR already set [ 267.278864][ T9205] binder: 9203:9205 ioctl 4018620d 200000000040 returned -16 [ 267.593912][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1316'. [ 267.852580][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1319'. [ 267.917647][ T5856] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 268.037670][ T5926] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 268.067596][ T5856] usb 3-1: Using ep0 maxpacket: 8 [ 268.078910][ T5856] usb 3-1: unable to get BOS descriptor or descriptor too short [ 268.079998][ T5856] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 268.080029][ T5856] usb 3-1: can't read configurations, error -71 [ 268.187614][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 268.190416][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 268.193478][ T5926] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 268.193492][ T5926] usb 5-1: config 4 has no interface number 0 [ 268.193511][ T5926] usb 5-1: config 4 interface 30 has no altsetting 0 [ 268.229120][ T5926] usb 5-1: string descriptor 0 read error: -22 [ 268.229265][ T5926] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 268.229285][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.251504][ T5926] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 268.251547][ T5926] dw2102: su3000_power_ctrl: 1, initialized 0 [ 268.251565][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 268.295981][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 268.298138][ T5926] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 268.298192][ T5926] usb 5-1: media controller created [ 268.298217][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 268.298230][ T5926] dw2102: i2c transfer failed. [ 268.298246][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 268.298258][ T5926] dw2102: i2c transfer failed. [ 268.298273][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 268.298285][ T5926] dw2102: i2c transfer failed. [ 268.298301][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 268.298313][ T5926] dw2102: i2c transfer failed. [ 268.298328][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 268.298340][ T5926] dw2102: i2c transfer failed. [ 268.298355][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 268.298367][ T5926] dw2102: i2c transfer failed. [ 268.298376][ T5926] dvb-usb: MAC address: 02:02:02:02:02:02 [ 268.349668][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 268.398873][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 268.398885][ T5926] dw2102: command 0x0e transfer failed. [ 268.398890][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 268.398897][ T5926] dw2102: command 0x0e transfer failed. [ 268.717526][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 268.717547][ T5926] dw2102: command 0x0e transfer failed. [ 268.717557][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 268.717569][ T5926] dw2102: command 0x0e transfer failed. [ 268.717577][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 268.717589][ T5926] dw2102: command 0x51 transfer failed. [ 268.717597][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 268.717609][ T5926] dw2102: i2c probe for address 0x68 failed. [ 268.717620][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 268.717630][ T5926] dw2102: i2c probe for address 0x69 failed. [ 268.717640][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 268.717707][ T5926] dw2102: i2c probe for address 0x6a failed. [ 268.717734][ T5926] dw2102: probing for demodulator failed. Is the external power switched on? [ 268.717743][ T5926] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 268.718282][ T9216] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 268.718302][ T9216] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 268.718335][ T9216] CPU: 1 UID: 0 PID: 9216 Comm: syz.4.1320 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 268.718357][ T9216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.718369][ T9216] RIP: 0010:su3000_i2c_transfer+0x1ad/0x1040 [ 268.718399][ T9216] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 bd b9 b9 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 5f 09 00 00 0f b6 1b 48 8b 44 24 38 42 [ 268.718414][ T9216] RSP: 0018:ffffc90006bffaa8 EFLAGS: 00010202 [ 268.718437][ T9216] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 268.718448][ T9216] RDX: ffffffff8763d935 RSI: ffffffff8e868c10 RDI: 0000000000001900 [ 268.718460][ T9216] RBP: 0000000000000000 R08: ffff88802f411dc0 R09: 0000000000000002 [ 268.718472][ T9216] R10: 0000000000000100 R11: 0000000000001a00 R12: dffffc0000000000 [ 268.718484][ T9216] R13: 1ffff11004254ff0 R14: 0000000000000001 R15: ffff8880212a7f88 [ 268.718498][ T9216] FS: 00007fcfb0ade6c0(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 268.718514][ T9216] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.718527][ T9216] CR2: 000055555a209808 CR3: 00000000372b6000 CR4: 00000000003526f0 [ 268.718542][ T9216] Call Trace: [ 268.718548][ T9216] [ 268.718563][ T9216] __i2c_transfer+0x874/0x2170 [ 268.718589][ T9216] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.718616][ T9216] ? __pfx___i2c_transfer+0x10/0x10 [ 268.718638][ T9216] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 268.718658][ T9216] ? i2c_transfer+0x11d/0x3a0 [ 268.718679][ T9216] i2c_transfer+0x25b/0x3a0 [ 268.718699][ T9216] ? __pfx_i2c_transfer+0x10/0x10 [ 268.718720][ T9216] ? _copy_from_user+0x94/0xb0 [ 268.718739][ T9216] i2cdev_ioctl_rdwr+0x460/0x740 [ 268.718764][ T9216] i2cdev_ioctl+0x64e/0x800 [ 268.718784][ T9216] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 268.718804][ T9216] ? __fget_files+0x3a6/0x420 [ 268.718825][ T9216] ? __fget_files+0x2a/0x420 [ 268.718848][ T9216] ? bpf_lsm_file_ioctl+0x9/0x20 [ 268.718869][ T9216] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 268.718889][ T9216] __se_sys_ioctl+0xfc/0x170 [ 268.718909][ T9216] do_syscall_64+0xfa/0x3b0 [ 268.718930][ T9216] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.718949][ T9216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.718967][ T9216] ? clear_bhb_loop+0x60/0xb0 [ 268.718985][ T9216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.719002][ T9216] RIP: 0033:0x7fcfb287ebe9 [ 268.719023][ T9216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.719039][ T9216] RSP: 002b:00007fcfb0ade038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.719057][ T9216] RAX: ffffffffffffffda RBX: 00007fcfb2aa5fa0 RCX: 00007fcfb287ebe9 [ 268.719071][ T9216] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 268.719083][ T9216] RBP: 00007fcfb2901e19 R08: 0000000000000000 R09: 0000000000000000 [ 268.719104][ T9216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.719115][ T9216] R13: 00007fcfb2aa6038 R14: 00007fcfb2aa5fa0 R15: 00007ffc10f0a378 [ 268.719136][ T9216] [ 268.719143][ T9216] Modules linked in: [ 268.719160][ T9216] ---[ end trace 0000000000000000 ]--- [ 268.719172][ T9216] RIP: 0010:su3000_i2c_transfer+0x1ad/0x1040 [ 268.719199][ T9216] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 bd b9 b9 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 5f 09 00 00 0f b6 1b 48 8b 44 24 38 42 [ 268.719214][ T9216] RSP: 0018:ffffc90006bffaa8 EFLAGS: 00010202 [ 268.719229][ T9216] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 268.719241][ T9216] RDX: ffffffff8763d935 RSI: ffffffff8e868c10 RDI: 0000000000001900 [ 268.719255][ T9216] RBP: 0000000000000000 R08: ffff88802f411dc0 R09: 0000000000000002 [ 268.719267][ T9216] R10: 0000000000000100 R11: 0000000000001a00 R12: dffffc0000000000 [ 268.719279][ T9216] R13: 1ffff11004254ff0 R14: 0000000000000001 R15: ffff8880212a7f88 [ 268.719293][ T9216] FS: 00007fcfb0ade6c0(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 268.719309][ T9216] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.719322][ T9216] CR2: 000055555a209808 CR3: 00000000372b6000 CR4: 00000000003526f0 [ 268.719340][ T9216] Kernel panic - not syncing: Fatal exception [ 268.719582][ T9216] Kernel Offset: disabled