0280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 20:08:55 executing program 3: r0 = fork() process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) tkill(r0, 0x2e) wait4(0xffffffffffffffff, &(0x7f0000000280), 0x40000000, &(0x7f00000002c0)) 20:08:55 executing program 5: pselect6(0x40, &(0x7f0000000080)={0x4}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={0x0}) 20:08:55 executing program 4: rt_sigaction(0x1b, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 20:08:55 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ac0900", 0x14, 0x6, 0x0, @loopback, @empty, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 20:08:55 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) openat$ipvs(0xffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = dup2(r3, r4) r6 = accept4(r4, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f00000002c0)=0x80, 0x800) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)={0x1c0, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x22}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1000000010000}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xfffffffffffffffb}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x25b2df0a}}]}, 0x1c0}}, 0x810) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x5}], 0x1, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000600)={0xa0, 0x0, 0x0, {{0x5, 0x1, 0x5, 0xed98, 0x0, 0x101, {0x0, 0x9, 0x4, 0x3, 0x7f, 0xa9a2, 0x9, 0x6, 0x9ec, 0x4000, 0x4, 0x0, 0x0, 0x1, 0x8e2e}}, {0x0, 0x8}}}, 0xa0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r7, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00 \x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe4) sendmsg$nl_route(r2, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ac0000001a0000012bbd7000090000000a801406fc04ff000021000008001900", @ANYRES32=0x0, @ANYBLOB="0800100008f7ffffffc6cb2f", @ANYRES32=r7, @ANYBLOB="050014008000000008000400", @ANYRES32=r8, @ANYBLOB="0c00090062bd1800", @ANYRES32=0x0, @ANYBLOB="360008802f89671866c1af30cb6ddfd4a80ea30126e18cecad8e707850e49873fc6c8679857edf599ff020db30f7d80560765c4d53ef0000080017000900000014000500fc02000000000000000000000000000008001700ff010000"], 0xac}, 0x1, 0x0, 0x0, 0x8810}, 0x20000012) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000024000b0e000000004000000000002000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000024000200000000000000010000000000000000000000000001000000060002008af00000"], 0x54}}, 0x0) sendto$packet(r0, &(0x7f00000000c0)="9773dca2a5fb901234561e7bcf43", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 20:08:55 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 20:08:55 executing program 0: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/power/pm_debug_messages', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 20:08:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000000c0)="18", 0x1) 20:08:55 executing program 5: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/module/spurious', 0x0, 0x0) futimesat(r0, 0x0, 0x0) 20:08:55 executing program 4: r0 = fork() tkill(r0, 0x12) [ 233.633087][ T4869] usb 2-1: Service connection timeout for: 256 [ 233.639523][ T4869] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 233.675742][ T4869] ath9k_htc: Failed to initialize the device [ 233.692314][ T267] usb 2-1: ath9k_htc: USB layer deinitialized [ 234.122478][ T267] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 234.443125][ T267] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 235.313383][ T267] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 235.322826][ T267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.331808][ T267] usb 2-1: Product: syz [ 235.336032][ T267] usb 2-1: Manufacturer: syz [ 235.340615][ T267] usb 2-1: SerialNumber: syz [ 235.384116][ T267] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 236.073063][ T267] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 236.277632][T10957] udc-core: couldn't find an available UDC or it's busy [ 236.285486][T10957] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 236.299635][T10957] udc-core: couldn't find an available UDC or it's busy [ 236.307814][T10957] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 236.517659][ T4869] usb 2-1: USB disconnect, device number 8 20:08:58 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x384, &(0x7f00000005c0)=ANY=[@ANYBLOB="f100004e8c97d9c11576d4dbc84030cf9f9374c2a5b26001f12bede84e23292f9a05145eea072c4cbff2c2ea9b50cefe5b5d17185632a01103439992d155400cb7e2cee962c2c553fe8a08bbc81a07fb5d53d2bbb738d4a2a8e7f741fb37a578a0bdd3262b8b9b59f92acff453446914773993821386a0a17e730052b72f9ac0429c1ee5dc3b27ccc438b9b5114c89d8974040587fbb47a3e724bd9ff478e4f4a92b811bd7e447e233703856d42e1fab601e053ea62f71d5c23d63d3ea9c398447367d969b35e8f7c5ff884a601a79d787d009d11fb2bece71e465d806c69318cf39ef767c51b49747a21ac654fa5d4f6e7a434e2c0000007f01004ee71db786b074528c024208f0801e564c62d7b70c860e7e03b1040731f8ad0c48c5e304a93bf9a8af74c0cf86c5a819e40aa47c0ed9813defbaf857ce2c22d220f1f086dfa678ce8902978e28ed2e55993a2f56fe285bf61af471f09fde1e06d043ce9a049ef93d1a5c20eadffe6ddb7e730b56b2f588a6c0f9e521805512c9c255ae0bf4ea0af8bfede23d9f9d6c62874bb05b15cffcf2428cbb1f9c3f549d75a7e8c38dfb20759e1c7fd005e2058c05000622f9c2b63f4fd9c22c2921148e8e83a8669cf7c48935e17db6fd3c9a14c1f7f274dc6e184ce04ff52b2928de04968e14fcc6a04220016b06d94401cf40421a189b4f6e6be7cada6ddf686987d3cf3a008956a3f81c318e3daae2fb69e5b6cb0c473ff71d6ee0cf4374edaaa988a29e973dd260049ee62b6e591606000000000000007b20b2693daa0fbe224b111412a361ebc66f0dd92cd059708d930a21175b8e25cc765e58a7727ad1bc7f7442ce18dc41f4f2bfabe8e92377d2ae44d5d68a57f7b03499df9a2f793487b9738c680b137dc940004d00004ed1bd2589d8df16ffa3f6a4f4643c3831f3265bd9a4d31993de57b2d485c251e2b0f5f6a7b8404ffa575fd54674ce725cc33dcc4e67a6920e74c03a64526bbf97f437addbb37fbdee73dcd0ff6a000000ad00004e9474e7fd8878a0347ca41f97db356e99d08f1fc69c3f005e066b5c5a7adc2523abd557cf28aca2d1bb8540585bc2e9665dd605396f40af70a521dd81b156dcb3d410751ee1629253277d63b0dd95f67dc970d73609da84ae737a6f02599e3a56fd23ffeeb7c57a0eb95d78fcaa050b3cc2c9634c343a733b99f42a974599640474124a7d91b1ae6efec0c890b887573ba77eb0436dba943dd9da2978a5ce867e81a692d4b102"]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:08:58 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 20:08:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000001a80)={0x0, 0x989680}) 20:08:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x10000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x8000000) 20:08:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000000c0)="18", 0x1) 20:08:58 executing program 4: socketpair(0x1, 0x80005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000cc0)={&(0x7f0000000300), 0xc, &(0x7f0000000c80)={0x0}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000001180), 0x4000, 0x0) 20:08:59 executing program 0: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000002080)) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f00000020c0)) openat$incfs(0xffffffffffffffff, &(0x7f0000002100)='.pending_reads\x00', 0x0, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), 0xffffffffffffffff) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_setup(0x1915, &(0x7f00000021c0)={0x0, 0x280c}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, 0x0) io_uring_setup(0x5d40, &(0x7f0000002280)={0x0, 0x507f, 0x8, 0x0, 0x0, 0x0, r0}) 20:08:59 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 20:08:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000000c0)="18", 0x1) 20:08:59 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000a80)={r0}, 0x8) 20:08:59 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 20:08:59 executing program 4: ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffff9c, 0xc080661a, 0x0) readlinkat(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=""/23, 0x17) syz_mount_image$omfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000800)=[{&(0x7f0000000180)="60fcf48d78702320c955cefa7b61b1ce670f896e8c4e0eb0e9c15c219ad84eba300fb02c6ae50b0788fb33c4500b0050338aae20b266f83036110e461fe6d65f6e7947e1d4438850359b3f3b340d42683032b467b18d2ac5abc42f966509d9e4f192ec3ccb74fd647b679e2d440c397eced8d5999afa3fde4e653717b0f149279367c8e7614f3ffcc392adede72feb241cdcd8f9c57d95f0b11c87e2c3731d15b7f51c332a6369125feee4712c9dfcd08ed3412fc2520f10ed47378a35468bb5037ed217b762aa1baa26d1ab3ab857675099b4a1f6b5a1425acab1156bcacbae7d3ea1cd330f8e8d8bddcb7d6a3d", 0xee}, {&(0x7f0000000280)="5f0d0d8eae1d55fc81b4ba495a529db40b224ff8fa47257e94007a42a0c4c864b8b78ac15de4c46337e7e076b75e3398dbafe34db0fb6fc6a3a25b777e88f29a483a632865966798211970f48e3f9c206e24804564c4d635dcaa125624b368e3718d2e73950894e23863fa6ded7150352234bb95f8fff7", 0x77, 0x1000}, {&(0x7f0000000300)="c85318d638a6ff3186fd81078af8118e215e778305522d71d0d0f2fb08b6be687aed30ded193ee63826112764b2e919693033da8af2ab8c94e92cea0a0368403182bc971", 0x44, 0x1ff}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="965752a2944569c9c3756f14121536900e79bf5512b1ccc3e0d7eccc50ca5ed61c9cfeb52de6ae074e586eae147715299e9e4d17f5364c3fc08e7d8935d3c45b3accbd59e4656c882020092edd15883a410fab46a46dca1b4655541eefa596ed761b1018362d51eef7a4972ff4affa5bac1b6fd093041c9c743887913a2ccb0a0e4ab12bd806925684428f83f59306cb0af65cfd9f43d31e7cf11999cf90f5ad42b973ead250d0db130afdf60b31d7300bb5aaab7887519589914c7214472f3f6b42e98b01f1ca22cb1d0cc7fba5eb92442ab3e01e", 0xd5, 0xfff}, {0x0}, {0x0, 0x0, 0x400}], 0x94, &(0x7f0000000900)={[{'\x00'}], [{@obj_user={'obj_user', 0x3d, '*$'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}) renameat(0xffffffffffffffff, &(0x7f0000000d00)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000d40)='./file0\x00') [ 237.376218][T11036] loop4: detected capacity change from 0 to 16 [ 237.383196][ T267] usb 2-1: Service connection timeout for: 256 [ 237.389767][ T267] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 237.416386][T11036] omfs: Invalid superblock (0) [ 237.420323][ T267] ath9k_htc: Failed to initialize the device [ 237.437829][ T4869] usb 2-1: ath9k_htc: USB layer deinitialized [ 237.496730][T11045] loop4: detected capacity change from 0 to 16 [ 237.521287][T11045] omfs: Invalid superblock (0) [ 237.793132][ T4869] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 238.083223][ T4869] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 238.933158][ T4869] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 238.944977][ T4869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.954166][ T4869] usb 2-1: Product: syz [ 238.958311][ T4869] usb 2-1: Manufacturer: syz [ 238.963849][ T4869] usb 2-1: SerialNumber: syz [ 239.004390][ T4869] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 239.603075][ T4869] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 239.811027][T11017] udc-core: couldn't find an available UDC or it's busy [ 239.818134][T11017] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 239.827102][T11017] udc-core: couldn't find an available UDC or it's busy [ 239.834514][T11017] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 240.047807][ T9519] usb 2-1: USB disconnect, device number 9 20:09:02 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x384, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:09:02 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 20:09:02 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 20:09:02 executing program 4: sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x64, 0x0, 0x0, 0x70bd2d, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0xca4}, {0x8, 0xb, 0x7}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008081}, 0x4000) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000500)="ae88bff8240b0000010200000000aff0f60e06894631b78ef7c8962c22772e108cf41bdf0000ffff825b", 0x2a}, {&(0x7f0000000680)="53000000fcffffff060000000200040000009600000000000000a40000000000348a67b68c4cc357f70b12535b38940d748bc0ec6c000000001b1bab0525dcda9f60dd168581a4095dc9fab22c7600f8d85f960511335d85", 0x58}], 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x2286, &(0x7f0000000040)) 20:09:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000000c0)="18", 0x1) 20:09:02 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) [ 240.615090][T11072] loop5: detected capacity change from 0 to 87 [ 240.637864][T11076] loop0: detected capacity change from 0 to 87 20:09:02 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000500)="ae88bff8240b0000010200000000aff0f60e06894631b78ef7c8962c22772e108cf41bdf0000ffff825b", 0x2a}, {&(0x7f0000000680)="53000000fcffffff060000000200040000009600000000000000a40000000000348a67b68c4cc357f70b12535b38940d748bc0ec6c000000001b1bab0525dcda9f60dd168581a4095dc9fab22c7600f8d85f960511335d85", 0x58}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x2286, &(0x7f0000000040)) 20:09:02 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 20:09:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x5421, &(0x7f0000000140)={0x0, @ipx={0x4, 0x0, 0x0, "0d564305e892"}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}}) [ 240.725043][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 240.725057][ T37] audit: type=1804 audit(1627675742.657:33): pid=11072 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir893602340/syzkaller.PAIxov/47/file1/bus" dev="loop5" ino=3 res=1 errno=0 [ 240.748702][T11076] attempt to access beyond end of device [ 240.748702][T11076] loop0: rw=0, want=90, limit=87 [ 240.791240][T11072] attempt to access beyond end of device [ 240.791240][T11072] loop5: rw=0, want=90, limit=87 [ 240.869226][T11092] attempt to access beyond end of device [ 240.869226][T11092] loop5: rw=2049, want=98, limit=87 [ 240.879242][ T37] audit: type=1804 audit(1627675742.657:34): pid=11076 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/54/file1/bus" dev="loop0" ino=4 res=1 errno=0 [ 240.913303][ T4869] usb 2-1: Service connection timeout for: 256 20:09:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) [ 240.921727][ T4869] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 20:09:02 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 20:09:02 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 240.969085][ T4869] ath9k_htc: Failed to initialize the device [ 240.978238][ T56] attempt to access beyond end of device [ 240.978238][ T56] loop0: rw=1, want=98, limit=87 [ 241.001157][ T9519] usb 2-1: ath9k_htc: USB layer deinitialized [ 241.069029][ T37] audit: type=1800 audit(1627675742.657:35): pid=11076 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=4 res=0 errno=0 [ 241.170183][ T37] audit: type=1800 audit(1627675742.687:36): pid=11072 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=3 res=0 errno=0 [ 241.176257][T11109] loop0: detected capacity change from 0 to 87 [ 241.206936][ T37] audit: type=1804 audit(1627675742.777:37): pid=11091 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/54/file1/bus" dev="loop0" ino=4 res=1 errno=0 [ 241.236501][ T37] audit: type=1800 audit(1627675742.777:38): pid=11091 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=4 res=0 errno=0 [ 241.258135][ T37] audit: type=1804 audit(1627675742.797:39): pid=11092 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir893602340/syzkaller.PAIxov/47/file1/bus" dev="loop5" ino=3 res=1 errno=0 [ 241.289584][ T37] audit: type=1800 audit(1627675742.797:40): pid=11092 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=3 res=0 errno=0 [ 241.326404][ T37] audit: type=1804 audit(1627675743.257:41): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/55/file1/bus" dev="loop0" ino=5 res=1 errno=0 [ 241.336235][T11109] attempt to access beyond end of device [ 241.336235][T11109] loop0: rw=0, want=90, limit=87 [ 241.378198][ T37] audit: type=1800 audit(1627675743.257:42): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=5 res=0 errno=0 [ 241.406899][ T9519] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 241.693325][ T9519] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 242.533073][ T9519] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 242.533125][ T9519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.533146][ T9519] usb 2-1: Product: syz [ 242.533163][ T9519] usb 2-1: Manufacturer: syz [ 242.533177][ T9519] usb 2-1: SerialNumber: syz [ 242.574134][ T9519] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 243.163055][ T9519] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 243.376339][T11079] udc-core: couldn't find an available UDC or it's busy [ 243.384412][T11079] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 243.394835][T11079] udc-core: couldn't find an available UDC or it's busy [ 243.402009][T11079] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 243.630301][ T4869] usb 2-1: USB disconnect, device number 10 20:09:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x384, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:09:06 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, r1+60000000}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000080)=0x1) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/59, 0x7ffff}], 0x1) 20:09:06 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 20:09:06 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 20:09:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000008600)={0x0, 0x0, 0x0}, 0x0) 20:09:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x42, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x10d082) r1 = memfd_create(&(0x7f0000001840)='\xbb\x02\xb1\xed\x97\xcb\xb1,\x116\xe0\x89]\xad\x01\xc3r%;\x99\xbck\xe7=\xfa\xf6HB\x00\x9e\xc0\xa9\xc9\x88\xc7\x82\x9a\x94g\xda\xa6q\x15\xf5\xe1\x86\x8e\x1d\xdf\x9d+,\x00\xd7h\xa4\x06jtl\x00\x00\x00\x00!\xf8\xac\xdc\x00\x00\x00\xd5\\\x01g\xfd\x92\x06\xb9|\x9d\xec\xdb\x9d\x94i`8t\xbd\xe8\xbfj~NO\xb2\x1a\xfc\xff\xff\xff\xff\xff\xff\xff\x1a\xed\xaaqE\xa8\x01\x05\x00\x00\x00\x00\x00\x00\x00\x91l\x00\x00', 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)='!', 0x1}], 0x1, 0x40ee1, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x11, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xffffff0f) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x5, 0x4, 0x0, 0x6, 0x220, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4646, 0x4, @perf_config_ext={0xfff, 0x4}, 0x1800, 0x2, 0xffffffff, 0x0, 0x6, 0xa8c2, 0x2, 0x0, 0x6, 0x0, 0x9}, 0x0, 0x10, r2, 0x8) [ 244.194445][T11142] loop5: detected capacity change from 0 to 87 20:09:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000008600)={0x0, 0x0, 0x0}, 0x0) 20:09:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x3f}) 20:09:06 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) [ 244.321819][T11142] attempt to access beyond end of device [ 244.321819][T11142] loop5: rw=0, want=90, limit=87 20:09:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000008600)={0x0, 0x0, 0x0}, 0x0) 20:09:06 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/59, 0x7ffff}], 0x1) 20:09:06 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x8440}], 0x1, &(0x7f0000000200)) [ 244.503276][ T9519] usb 2-1: Service connection timeout for: 256 [ 244.509678][ T9519] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 244.536772][ T9519] ath9k_htc: Failed to initialize the device [ 244.550697][ T4869] usb 2-1: ath9k_htc: USB layer deinitialized [ 244.923023][ T4869] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 245.203272][ T4869] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 246.003076][ T4869] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 246.012515][ T4869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.021014][ T4869] usb 2-1: Product: syz [ 246.025269][ T4869] usb 2-1: Manufacturer: syz [ 246.029995][ T4869] usb 2-1: SerialNumber: syz [ 246.073737][ T4869] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 246.683164][ T4869] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 246.889414][T11148] udc-core: couldn't find an available UDC or it's busy [ 246.896835][T11148] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 246.905812][T11148] udc-core: couldn't find an available UDC or it's busy [ 246.912886][T11148] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 247.137590][ T9490] usb 2-1: USB disconnect, device number 11 20:09:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x384, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:09:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000008600)={0x0, 0x0, 0x0}, 0x0) 20:09:09 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 20:09:09 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$incfs_size(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2c) r3 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 20:09:09 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, r1+60000000}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000080)=0x1) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/59, 0x7ffff}], 0x1) 20:09:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/59, 0x7ffff}], 0x1) 20:09:09 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000003280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 20:09:09 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) [ 247.754547][T11204] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 20:09:09 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 20:09:09 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) [ 247.953013][ T4869] usb 2-1: Service connection timeout for: 256 [ 247.959586][ T4869] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 248.000774][ T4869] ath9k_htc: Failed to initialize the device [ 248.029110][ T9490] usb 2-1: ath9k_htc: USB layer deinitialized 20:09:10 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 20:09:10 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) [ 248.393105][ T9490] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 248.683220][ T9490] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 249.483056][ T9490] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 249.492668][ T9490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.501365][ T9490] usb 2-1: Product: syz [ 249.505862][ T9490] usb 2-1: Manufacturer: syz [ 249.510499][ T9490] usb 2-1: SerialNumber: syz [ 249.553641][ T9490] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 250.133104][ T9490] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 250.338045][T11208] udc-core: couldn't find an available UDC or it's busy [ 250.347373][T11208] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 250.356173][T11208] udc-core: couldn't find an available UDC or it's busy [ 250.364027][T11208] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 250.776483][ T20] usb 2-1: USB disconnect, device number 12 20:09:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x384, &(0x7f00000005c0)=ANY=[@ANYBLOB="f100004e8c97d9c11576d4dbc84030cf9f9374c2a5b26001f12bede84e23292f9a05145eea072c4cbff2c2ea9b50cefe5b5d17185632a01103439992d155400cb7e2cee962c2c553fe8a08bbc81a07fb5d53d2bbb738d4a2a8e7f741fb37a578a0bdd3262b8b9b59f92acff453446914773993821386a0a17e730052b72f9ac0429c1ee5dc3b27ccc438b9b5114c89d8974040587fbb47a3e724bd9ff478e4f4a92b811bd7e447e233703856d42e1fab601e053ea62f71d5c23d63d3ea9c398447367d969b35e8f7c5ff884a601a79d787d009d11fb2bece71e465d806c69318cf39ef767c51b49747a21ac654fa5d4f6e7a434e2c0000007f01004ee71db786b074528c024208f0801e564c62d7b70c860e7e03b1040731f8ad0c48c5e304a93bf9a8af74c0cf86c5a819e40aa47c0ed9813defbaf857ce2c22d220f1f086dfa678ce8902978e28ed2e55993a2f56fe285bf61af471f09fde1e06d043ce9a049ef93d1a5c20eadffe6ddb7e730b56b2f588a6c0f9e521805512c9c255ae0bf4ea0af8bfede23d9f9d6c62874bb05b15cffcf2428cbb1f9c3f549d75a7e8c38dfb20759e1c7fd005e2058c05000622f9c2b63f4fd9c22c2921148e8e83a8669cf7c48935e17db6fd3c9a14c1f7f274dc6e184ce04ff52b2928de04968e14fcc6a04220016b06d94401cf40421a189b4f6e6be7cada6ddf686987d3cf3a008956a3f81c318e3daae2fb69e5b6cb0c473ff71d6ee0cf4374edaaa988a29e973dd260049ee62b6e591606000000000000007b20b2693daa0fbe224b111412a361ebc66f0dd92cd059708d930a21175b8e25cc765e58a7727ad1bc7f7442ce18dc41f4f2bfabe8e92377d2ae44d5d68a57f7b03499df9a2f793487b9738c680b137dc940004d00004ed1bd2589d8df16ffa3f6a4f4643c3831f3265bd9a4d31993de57b2d485c251e2b0f5f6a7b8404ffa575fd54674ce725cc33dcc4e67a6920e74c03a64526bbf97f437addbb37fbdee73dcd0ff6a000000ad00004e9474e7fd8878a0347ca41f97db356e99d08f1fc69c3f005e066b5c5a7adc2523abd557cf28aca2d1bb8540585bc2e9665dd605396f40af70a521dd81b156dcb3d410751ee1629253277d63b0dd95f67dc970d73609da84ae737a6f02599e3a56fd23ffeeb7c57a0eb95d78fcaa050b3cc2c9634c343a733b99f42a974599640474124a7d91b1ae6efec0c890b887573ba77eb0436dba943dd9da2978a5ce867e81a692d4b102"]) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:09:13 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 20:09:13 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, r1+60000000}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000080)=0x1) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/59, 0x7ffff}], 0x1) 20:09:13 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x2200}], 0x1, 0x0) 20:09:13 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x14, 0x0, @thr={&(0x7f00000000c0)="595f4fe5c8db10a5", 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, r1+60000000}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000080)=0x1) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/59, 0x7ffff}], 0x1) 20:09:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x8927, &(0x7f0000000140)={0x0, @ipx={0x4, 0x0, 0x0, "0d564305e892"}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}}) 20:09:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000080)) 20:09:13 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 20:09:13 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000003280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x2ffff, 0x0) 20:09:13 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) [ 251.461046][T11270] loop0: detected capacity change from 0 to 1024 [ 251.487458][T11270] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:09:13 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 20:09:13 executing program 0: perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x100001) clone(0x2000000002608100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x240, 0x378, 0x378, 0x240, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x138, 0x158, 0x52020000, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_team\x00', {0xffffff80, 0x0, 0x0, 0x0, 0x0, 0x800, 0x13}}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) [ 251.522175][T11270] EXT4-fs (loop0): orphan cleanup on readonly fs [ 251.528855][T11270] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz-executor.0: bad orphan inode 33554432 [ 251.546544][T11270] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 251.633182][ T9490] usb 2-1: Service connection timeout for: 257 [ 251.640070][ T9490] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 251.678308][ T9490] ath9k_htc: Failed to initialize the device [ 251.694005][ T20] usb 2-1: ath9k_htc: USB layer deinitialized [ 251.724401][T11289] xt_hashlimit: Unknown mode mask FFFFFF80, kernel too old? [ 252.073059][ T20] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 252.363283][ T20] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 253.263490][ T20] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 253.277650][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.286362][ T20] usb 2-1: Product: syz [ 253.290751][ T20] usb 2-1: Manufacturer: syz [ 253.299364][ T20] usb 2-1: SerialNumber: syz [ 253.343618][ T20] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 253.913065][ T20] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 254.116451][T11263] udc-core: couldn't find an available UDC or it's busy [ 254.123966][T11263] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 254.132443][T11263] udc-core: couldn't find an available UDC or it's busy [ 254.139912][T11263] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 254.556927][ T9755] usb 2-1: USB disconnect, device number 13 [ 254.903550][ T3261] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.910156][ T3261] ieee802154 phy1 wpan1: encryption failed: -22 20:09:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x384, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:09:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, @ipx={0x4, 0x0, 0x0, "0d564305e892"}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x0, 0x0, 0x0, 0x1000000}) 20:09:17 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 20:09:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$romfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x3, &(0x7f00000006c0)=[{&(0x7f00000003c0), 0x0, 0x10001}, {&(0x7f0000000400)="874681ae0507731db6cf143e70f4f0f50da9db43b4acf29d2858126edd654eb42ea453331ec7ba2a8e3de6a11f04d653ebda9d0166c6b157c9b04fd4438e055e72997fc82bf461dca2b8641cd0f5483ee0d5bb97d656cec509bad66b4f55c463ad630d4903941a74d4c04a7bef80d28f556386c47a80af754ab496134d98a696a7667108563c05b0d760a01db00e4e03005ec4b84a30dc11e13d6c7cec1bae2e9696c6f01db13a7dc78559", 0xab}, {0x0, 0x0, 0x7}], 0x808140, &(0x7f0000000740)={[{'[:'}, {}, {'port'}, {'fsuuid'}, {'127.0.0.1\x00'}], [{@dont_hash}, {@uid_lt={'uid<', 0xee01}}, {@fsname={'fsname', 0x3d, '-:*]\'-'}}, {@subj_user={'subj_user', 0x3d, '$![).),),'}}, {@audit}, {@uid_gt}]}) 20:09:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2285, &(0x7f0000000040)) 20:09:17 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000003280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x2ffff, 0x0) 20:09:17 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 20:09:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') read$eventfd(r0, 0x0, 0x0) 20:09:17 executing program 5: r0 = gettid() creat(&(0x7f0000000280)='./file0\x00', 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x191) pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x361}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rt_sigqueueinfo(r0, 0xe, 0x0) [ 255.155465][T11327] loop3: detected capacity change from 0 to 256 [ 255.196413][T11327] romfs: Unknown parameter '[:' 20:09:17 executing program 5: r0 = gettid() creat(&(0x7f0000000280)='./file0\x00', 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x191) pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x361}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rt_sigqueueinfo(r0, 0xe, 0x0) 20:09:17 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) getsockname(r0, 0x0, &(0x7f0000000380)=0x29) 20:09:17 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6eaa, 0x0, 0x0, 0x0, 0x0) [ 255.383063][ T20] usb 2-1: Service connection timeout for: 257 [ 255.389425][ T20] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 255.423961][ T20] ath9k_htc: Failed to initialize the device [ 255.438574][ T9755] usb 2-1: ath9k_htc: USB layer deinitialized [ 255.853053][ T9755] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 256.153188][ T9755] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 256.993174][ T9755] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 257.002241][ T9755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.010302][ T9755] usb 2-1: Product: syz [ 257.014531][ T9755] usb 2-1: Manufacturer: syz [ 257.019337][ T9755] usb 2-1: SerialNumber: syz [ 257.064205][ T9755] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 257.633105][ T9755] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 257.837956][T11329] udc-core: couldn't find an available UDC or it's busy [ 257.844995][T11329] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 257.854000][T11329] udc-core: couldn't find an available UDC or it's busy [ 257.860930][T11329] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 258.286237][ T9519] usb 2-1: USB disconnect, device number 14 20:09:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x384, &(0x7f00000005c0)=ANY=[@ANYBLOB="f100004e8c97d9c11576d4dbc84030cf9f9374c2a5b26001f12bede84e23292f9a05145eea072c4cbff2c2ea9b50cefe5b5d17185632a01103439992d155400cb7e2cee962c2c553fe8a08bbc81a07fb5d53d2bbb738d4a2a8e7f741fb37a578a0bdd3262b8b9b59f92acff453446914773993821386a0a17e730052b72f9ac0429c1ee5dc3b27ccc438b9b5114c89d8974040587fbb47a3e724bd9ff478e4f4a92b811bd7e447e233703856d42e1fab601e053ea62f71d5c23d63d3ea9c398447367d969b35e8f7c5ff884a601a79d787d009d11fb2bece71e465d806c69318cf39ef767c51b49747a21ac654fa5d4f6e7a434e2c0000007f01004ee71db786b074528c024208f0801e564c62d7b70c860e7e03b1040731f8ad0c48c5e304a93bf9a8af74c0cf86c5a819e40aa47c0ed9813defbaf857ce2c22d220f1f086dfa678ce8902978e28ed2e55993a2f56fe285bf61af471f09fde1e06d043ce9a049ef93d1a5c20eadffe6ddb7e730b56b2f588a6c0f9e521805512c9c255ae0bf4ea0af8bfede23d9f9d6c62874bb05b15cffcf2428cbb1f9c3f549d75a7e8c38dfb20759e1c7fd005e2058c05000622f9c2b63f4fd9c22c2921148e8e83a8669cf7c48935e17db6fd3c9a14c1f7f274dc6e184ce04ff52b2928de04968e14fcc6a04220016b06d94401cf40421a189b4f6e6be7cada6ddf686987d3cf3a008956a3f81c318e3daae2fb69e5b6cb0c473ff71d6ee0cf4374edaaa988a29e973dd260049ee62b6e591606000000000000007b20b2693daa0fbe224b111412a361ebc66f0dd92cd059708d930a21175b8e25cc765e58a7727ad1bc7f7442ce18dc41f4f2bfabe8e92377d2ae44d5d68a57f7b03499df9a2f793487b9738c680b137dc940004d00004ed1bd2589d8df16ffa3f6a4f4643c3831f3265bd9a4d31993de57b2d485c251e2b0f5f6a7b8404ffa575fd54674ce725cc33dcc4e67a6920e74c03a64526bbf97f437addbb37fbdee73dcd0ff6a000000ad00004e9474e7fd8878a0347ca41f97db356e99d08f1fc69c3f005e066b5c5a7adc2523abd557cf28aca2d1bb8540585bc2e9665dd605396f40af70a521dd81b156dcb3d410751ee1629253277d63b0dd95f67dc970d73609da84ae737a6f02599e3a56fd23ffeeb7c57a0eb95d78fcaa050b3cc2c9634c343a733b99f42a974599640474124a7d91b1ae6efec0c890b887573ba77eb0436dba943dd9da2978a5ce867e81a692d4b102"]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:09:20 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000003280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x2ffff, 0x0) 20:09:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000001380)=0xffffffffffffffff) 20:09:20 executing program 0: r0 = socket(0x0, 0x2, 0x0) setsockopt(r0, 0x0, 0x1, &(0x7f0000000080), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000004540)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1_virt_wifi\x00', 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0) r4 = socket(0x200000000000011, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) bind$packet(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000002600000428bd7000ffdbdf25000000007d9cbbecbd61a01572c5ff17539eaf56d8a3b70c125e234fa206706e52288e96ece9d4ddc400d94ad0c694c88e9bb41ce70a3f9cb634083e2f65308b5fdba19e0581b54d5e96750c3dc37b791b000ef23acd49de5d4fed2e6a7f24c76c8fa02ea45aec6960e86bdfec3f38a1f3a9d173fd965f68d256e8ef13850f9b7443f1e961b00017f126ccaf510eed8e52f3ae0e6d478836f67976b408fa285f470a2b940eb911ee1d7e5abfa7", @ANYRES64, @ANYBLOB="020001000f00090002030e0004000a006c26bbade1dfd8b3146c2a367f484e27dbba32eb3f89e2dc276881b6fe099bbb4f334dd28883c1e30f35de259673980cdea73a60856429ffbe1773a0b8fbb6362165be4c64c95930abd34fcc7077b61f13c65a4f04e5664a001d1255f9e66652f27cd3e8b964c9095d00"], 0x28}}, 0x4000) connect$inet6(r3, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f0000004d80)=[{{0x0, 0x1dee8ca, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab01120bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffff000b}}], 0x400000000000132, 0x4000000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) 20:09:20 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 20:09:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6800000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 20:09:20 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:09:20 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x7, 0x8c10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0xe15, 0xfffffffffffffff8}, 0x0, 0x9, 0x0, 0x0, 0x54, 0x2, 0x685, 0x0, 0x0, 0x0, 0xffffffffffffff7c}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 20:09:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6800000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 20:09:21 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:09:21 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6800000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 259.143523][ T9755] usb 2-1: Service connection timeout for: 257 [ 259.154565][ T9755] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 20:09:21 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 259.208840][ T9755] ath9k_htc: Failed to initialize the device [ 259.270634][ T9519] usb 2-1: ath9k_htc: USB layer deinitialized [ 259.287967][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 259.287980][ T37] audit: type=1326 audit(1627675761.217:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11404 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x0 [ 259.673770][ T9519] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 259.953098][ T9519] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 260.753139][ T9519] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 260.762877][ T9519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.771265][ T9519] usb 2-1: Product: syz [ 260.775526][ T9519] usb 2-1: Manufacturer: syz [ 260.780564][ T9519] usb 2-1: SerialNumber: syz [ 260.823793][ T9519] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 261.393092][ T9519] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 261.600826][T11396] udc-core: couldn't find an available UDC or it's busy [ 261.608318][T11396] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 262.041960][ T9799] usb 2-1: USB disconnect, device number 15 20:09:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x384, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:09:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6800000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 20:09:24 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x40) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setxattr$security_capability(0x0, 0x0, &(0x7f0000000100)=@v3={0x3000000, [{0x0, 0x40}, {0x0, 0x2}], 0xee00}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) 20:09:24 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000003280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x2ffff, 0x0) 20:09:24 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000014}, 0x40) prctl$PR_SET_PTRACER(0x59616d61, r0) ptrace$cont(0x18, r0, 0x0, 0x7bed) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f66696c653020cdd9b352b4a0e06adf1eeac2617105f8e29e23e58c507b87423a7b18791a9e112bd4be289473ec66d6c3abc9040a5e09ba0507c41918f7a6b2ffff00000000000077d61455c1a2bd583854b5b8e03c72833eff1d7be740599f50640aba324e449b0d465b825833a4e81b15291bf74bdbee867e6ebbdb02d409b19da7e21e905e056d969ecde919740778b10e6a94c648e9"], 0x191) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r3, @ANYBLOB="0100efffffff000041688c9b000008000300", @ANYRES32], 0x28}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r3, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x2d, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x1, @val=0xfffe, @void, @val="e3a0fe4af5aa2da5d388d3914a26a006"}}, @ssid={0x0, 0xf, @random="21119932db1c6d66db33ea156d6bcd"}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xb9}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x16}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x361}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) setxattr$security_capability(0x0, 0x0, &(0x7f0000000100)=@v3={0x3000000, [{0x0, 0x40}, {0x0, 0x2}], 0xee00}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rt_sigqueueinfo(r0, 0xe, 0x0) getpid() ptrace$setopts(0x4206, r0, 0x0, 0x0) 20:09:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x28000) 20:09:24 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @rand_addr=0x64010102, {[@rr={0x7, 0xb, 0x0, [@multicast1, @multicast1]}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x2, 0x10, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2}]}}}}}}}, 0x0) socket(0x0, 0xa, 0x0) socket(0x26, 0x5, 0x0) 20:09:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) 20:09:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x28000) 20:09:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x1b, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 262.903102][ T9519] usb 2-1: Service connection timeout for: 257 [ 262.911864][ T9519] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 20:09:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8911, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) [ 262.947213][ T9519] ath9k_htc: Failed to initialize the device [ 262.986725][ T9799] usb 2-1: ath9k_htc: USB layer deinitialized [ 263.029782][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.040888][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:09:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x800064d) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x3, r0, &(0x7f0000000180)={0x300}) [ 263.075868][T11478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.383170][ T9799] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 263.713316][ T9799] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 264.666293][ T9799] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 264.675660][ T9799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.684879][ T9799] usb 2-1: Product: syz [ 264.689037][ T9799] usb 2-1: Manufacturer: syz [ 264.694523][ T9799] usb 2-1: SerialNumber: syz [ 264.754096][ T9799] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 265.413160][ T9799] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 265.616917][T11456] udc-core: couldn't find an available UDC or it's busy [ 265.624882][T11456] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 266.057028][ T267] usb 2-1: USB disconnect, device number 16 20:09:28 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff) 20:09:28 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001680)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001ac0)={&(0x7f00000016c0), 0x10, &(0x7f0000001a00)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a40)="b84541720333544b8bcc4c998c0b21b1359df4bc01979d75b41477a8b93da7a2eab23ca382", 0x25}, 0x404c840) 20:09:28 executing program 5: socketpair(0x18, 0x0, 0x2, &(0x7f0000000680)) 20:09:28 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @empty}}, 0x1e) 20:09:28 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000014}, 0x40) prctl$PR_SET_PTRACER(0x59616d61, r0) ptrace$cont(0x18, r0, 0x0, 0x7bed) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f66696c653020cdd9b352b4a0e06adf1eeac2617105f8e29e23e58c507b87423a7b18791a9e112bd4be289473ec66d6c3abc9040a5e09ba0507c41918f7a6b2ffff00000000000077d61455c1a2bd583854b5b8e03c72833eff1d7be740599f50640aba324e449b0d465b825833a4e81b15291bf74bdbee867e6ebbdb02d409b19da7e21e905e056d969ecde919740778b10e6a94c648e9"], 0x191) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r3, @ANYBLOB="0100efffffff000041688c9b000008000300", @ANYRES32], 0x28}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r3, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x2d, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x1, @val=0xfffe, @void, @val="e3a0fe4af5aa2da5d388d3914a26a006"}}, @ssid={0x0, 0xf, @random="21119932db1c6d66db33ea156d6bcd"}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xb9}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x16}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x361}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) setxattr$security_capability(0x0, 0x0, &(0x7f0000000100)=@v3={0x3000000, [{0x0, 0x40}, {0x0, 0x2}], 0xee00}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rt_sigqueueinfo(r0, 0xe, 0x0) getpid() ptrace$setopts(0x4206, r0, 0x0, 0x0) 20:09:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x384, &(0x7f00000005c0)=ANY=[@ANYBLOB="f100004e8c97d9c11576d4dbc84030cf9f9374c2a5b26001f12bede84e23292f9a05145eea072c4cbff2c2ea9b50cefe5b5d17185632a01103439992d155400cb7e2cee962c2c553fe8a08bbc81a07fb5d53d2bbb738d4a2a8e7f741fb37a578a0bdd3262b8b9b59f92acff453446914773993821386a0a17e730052b72f9ac0429c1ee5dc3b27ccc438b9b5114c89d8974040587fbb47a3e724bd9ff478e4f4a92b811bd7e447e233703856d42e1fab601e053ea62f71d5c23d63d3ea9c398447367d969b35e8f7c5ff884a601a79d787d009d11fb2bece71e465d806c69318cf39ef767c51b49747a21ac654fa5d4f6e7a434e2c0000007f01004ee71db786b074528c024208f0801e564c62d7b70c860e7e03b1040731f8ad0c48c5e304a93bf9a8af74c0cf86c5a819e40aa47c0ed9813defbaf857ce2c22d220f1f086dfa678ce8902978e28ed2e55993a2f56fe285bf61af471f09fde1e06d043ce9a049ef93d1a5c20eadffe6ddb7e730b56b2f588a6c0f9e521805512c9c255ae0bf4ea0af8bfede23d9f9d6c62874bb05b15cffcf2428cbb1f9c3f549d75a7e8c38dfb20759e1c7fd005e2058c05000622f9c2b63f4fd9c22c2921148e8e83a8669cf7c48935e17db6fd3c9a14c1f7f274dc6e184ce04ff52b2928de04968e14fcc6a04220016b06d94401cf40421a189b4f6e6be7cada6ddf686987d3cf3a008956a3f81c318e3daae2fb69e5b6cb0c473ff71d6ee0cf4374edaaa988a29e973dd260049ee62b6e591606000000000000007b20b2693daa0fbe224b111412a361ebc66f0dd92cd059708d930a21175b8e25cc765e58a7727ad1bc7f7442ce18dc41f4f2bfabe8e92377d2ae44d5d68a57f7b03499df9a2f793487b9738c680b137dc940004d00004ed1bd2589d8df16ffa3f6a4f4643c3831f3265bd9a4d31993de57b2d485c251e2b0f5f6a7b8404ffa575fd54674ce725cc33dcc4e67a6920e74c03a64526bbf97f437addbb37fbdee73dcd0ff6a000000ad00004e9474e7fd8878a0347ca41f97db356e99d08f1fc69c3f005e066b5c5a7adc2523abd557cf28aca2d1bb8540585bc2e9665dd605396f40af70a521dd81b156dcb3d410751ee1629253277d63b0dd95f67dc970d73609da84ae737a6f02599e3a56fd23ffeeb7c57a0eb95d78fcaa050b3cc2c9634c343a733b99f42a974599640474124a7d91b1ae6efec0c890b887573ba77eb0436dba943dd9da2978a5ce867e81a692d4b102"]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:09:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x3, r0, &(0x7f0000000180)) 20:09:28 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) 20:09:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg$unix(r0, &(0x7f0000000400)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)=""/214, 0xd6}, {&(0x7f0000000200)=""/81, 0x51}], 0x2, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}, 0x2000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x2f, 0xd2, 0x40, 0x1, 0x6c, @mcast1, @mcast2, 0x700, 0x10, 0x1c0000, 0x7fffffff}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[@ANYBLOB="1f01889cf340d0649b35f4c1ff9deb8163389c6dd56b", @ANYRES16=0x0, @ANYBLOB="10002a25080000a910002ea44d26c70e00340001801400020067656e6576653100f800000000000000140002006970366772657461703000000000000008", @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000080)={'syztnl2\x00', 0x0}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001240), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x90000010}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4011}, 0x800c000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'ip6_vti0\x00', r3, 0x4, 0x0, 0x7, 0x6, 0xc, @dev={0xfe, 0x80, '\x00', 0xc}, @local, 0x10, 0x7, 0xff, 0x7}}) syz_genetlink_get_family_id$team(&(0x7f0000001240), r5) setsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000000)=0x7, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000600)=0x6, 0x4) sendmsg$sock(r0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001240), r7) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r7, 0x89f7, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6tnl0\x00', r3, 0x4, 0x40, 0x9, 0x4, 0x22, @mcast2, @empty, 0x1, 0x8000, 0x800, 0x1000}}) syz_genetlink_get_family_id$team(&(0x7f0000001240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 20:09:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448e0, 0x0) 20:09:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x1262, 0x0) 20:09:28 executing program 4: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000002cc0)=[{&(0x7f0000001800)="81", 0x1}, {&(0x7f0000001ac0)="0e", 0x1, 0xffffffffffffff41}, {&(0x7f0000001cc0)='2', 0x1, 0x45a3}], 0x0, 0x0) 20:09:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={0x0}}, 0x0) 20:09:28 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x4020940d, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) [ 266.920035][ T9799] usb 2-1: Service connection timeout for: 257 [ 266.928793][ T9799] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 20:09:28 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000140)=""/74) 20:09:28 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) [ 266.976401][T11542] loop4: detected capacity change from 0 to 16383 [ 267.003468][ T9799] ath9k_htc: Failed to initialize the device [ 267.009960][ T267] usb 2-1: ath9k_htc: USB layer deinitialized [ 267.118204][T11542] loop4: detected capacity change from 0 to 16383 [ 267.383423][ T9490] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 267.393104][ T267] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 267.643131][ T9490] usb 6-1: Using ep0 maxpacket: 8 [ 267.693313][ T267] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 267.803078][ T9490] usb 6-1: unable to get BOS descriptor or descriptor too short [ 267.883171][ T9490] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 268.053290][ T9490] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 268.062882][ T9490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.073174][ T9490] usb 6-1: Product: syz [ 268.077333][ T9490] usb 6-1: Manufacturer: syz [ 268.082121][ T9490] usb 6-1: SerialNumber: syz [ 268.349195][ T9490] usb 6-1: USB disconnect, device number 2 [ 268.683121][ T267] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 268.693316][ T267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.702292][ T267] usb 2-1: Product: syz [ 268.706866][ T267] usb 2-1: Manufacturer: syz [ 268.711494][ T267] usb 2-1: SerialNumber: syz [ 268.753942][ T267] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 269.413172][ T267] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 20:09:31 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) [ 269.619157][T11520] udc-core: couldn't find an available UDC or it's busy [ 269.631414][T11520] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 270.046337][ T9753] usb 2-1: USB disconnect, device number 17 20:09:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x384, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:09:32 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000001640)=[{&(0x7f00000013c0)="13", 0x1, 0xcfd8}, {&(0x7f00000014c0)='\f', 0x1, 0x100000000}], 0x0, 0x0) 20:09:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x64d) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x3, r0, &(0x7f0000000180)={0x300}) 20:09:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x401}, 0xe) 20:09:32 executing program 5: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000040)=@id, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)="ed", 0x1}], 0x1}, 0x0) 20:09:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x64d) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x3, r0, &(0x7f0000000040)={0x20002318}) 20:09:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800e}, 0x0) 20:09:32 executing program 4: syz_usb_connect$cdc_ncm(0x5, 0x12a, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x118, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "11b11e"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x17a7, 0x3, 0x40}, {0x6, 0x24, 0x1a, 0x80}, [@dmm={0x7, 0x24, 0x14, 0x7f, 0x26}, @mbim_extended={0x8}, @network_terminal={0x7}, @mdlm_detail={0xa3, 0x24, 0x13, 0x0, "fc38993f55b483ff7b571d7f6782cb608a85efec380904b09c9d7112340866a3f2455bbd4f1769813d7d10a1617fedcf4642fc33066ce1c305bb81d68d3c1b3d3728174801cc0f588a5264a366adc647c94d53f6285bccff6f3d67fcd364cffc946abcc904a1e1425f58074fc04d6a31d64b6d7f081016b9c2441e3df9c695dc7265111cdf3913c438757169a13b99d1435648f273d92b11ff9704e950d807"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xff, 0x1f}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x0, 0x0, 0x5}, 0x2, &(0x7f0000000100)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x9}]}, 0x2}) [ 270.624064][T11612] loop0: detected capacity change from 0 to 264192 20:09:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UI_SET_RELBIT(r0, 0x8927, 0x540000) [ 270.738158][T11612] loop0: detected capacity change from 0 to 264192 20:09:32 executing program 2: syz_emit_ethernet(0x26, &(0x7f00000001c0)={@broadcast, @remote, @val, {@ipv4}}, 0x0) 20:09:32 executing program 0: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x20001005}) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0xfffffffc) 20:09:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x64d) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x3, r0, &(0x7f0000000040)={0x20002318}) [ 270.913440][ T267] usb 2-1: Service connection timeout for: 257 [ 270.919820][ T267] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 270.960488][ T267] ath9k_htc: Failed to initialize the device [ 271.008897][ T9753] usb 2-1: ath9k_htc: USB layer deinitialized [ 271.033329][ T9799] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 271.293089][ T9799] usb 5-1: Using ep0 maxpacket: 16 [ 271.413741][ T9753] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 271.433673][ T9799] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.465040][ T9799] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 271.501538][ T9799] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 271.552556][ T9799] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 271.566325][ T9799] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 271.753309][ T9753] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 271.853160][ T9799] usb 5-1: string descriptor 0 read error: -22 [ 271.859569][ T9799] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.870028][ T9799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.168270][ T9799] cdc_ncm 5-1:1.0: bind() failure [ 272.176999][ T9799] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 272.194028][ T9799] cdc_ncm 5-1:1.1: bind() failure [ 272.201967][ T9799] usb 5-1: USB disconnect, device number 2 [ 272.713422][ T9753] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 272.722774][ T9753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.731367][ T9753] usb 2-1: Product: syz [ 272.735813][ T9753] usb 2-1: Manufacturer: syz [ 272.740403][ T9753] usb 2-1: SerialNumber: syz [ 272.783835][ T9753] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 273.363044][ T9753] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 273.576105][T11615] udc-core: couldn't find an available UDC or it's busy [ 273.583396][T11615] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 273.592100][T11615] udc-core: couldn't find an available UDC or it's busy [ 273.600053][T11615] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 274.017348][ T267] usb 2-1: USB disconnect, device number 18 20:09:36 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x384, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:09:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x127e, 0x0) 20:09:36 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001500)=""/217, 0xd9}], 0x4}}], 0x1, 0x0, 0x0) 20:09:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x10d082) r1 = memfd_create(&(0x7f0000001840)='\xbb\x02\xb1\xed\x97\xcb\xb1,\x116\xe0\x89]\xad\x01\xc3r%;\x99\xbck\xe7=\xfa\xf6HB\x00\x9e\xc0\xa9\xc9\x88\xc7\x82\x9a\x94g\xda\xa6q\x15\xf5\xe1\x86\x8e\x1d\xdf\x9d+,\x00\xd7h\xa4\x06jtl\x00\x00\x00\x00!\xf8\xac\xdc\x00\x00\x00\xd5\\\x01g\xfd\x92\x06\xb9|\x9d\xec\xdb\x9d\x94i`8t\xbd\xe8\xbfj~NO\xb2\x1a\xfc\xff\xff\xff\xff\xff\xff\xff\x1a\xed\xaaqE\xa8\x01\x05\x00\x00\x00\x00\x00\x00\x00\x91l\x00\x00', 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)='!', 0x1}], 0x1, 0x40ee1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800002, 0x12, r2, 0x0) pipe(&(0x7f0000000000)) write(r0, &(0x7f0000000000), 0x52698b21) 20:09:36 executing program 0: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x20001005}) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0xfffffffc) 20:09:36 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000012c0)={{0x77359400}}, 0x0) 20:09:36 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) [ 274.580603][T11712] loop0: detected capacity change from 0 to 519 20:09:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x127e, 0x0) 20:09:36 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000000), 0x4) connect$tipc(r0, &(0x7f0000000140)=@name, 0x10) 20:09:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x127e, 0x0) 20:09:36 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 20:09:36 executing program 2: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_gettime(0x0, 0x0) [ 274.823059][ T9753] usb 2-1: Service connection timeout for: 257 [ 274.832932][ T9753] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 274.883556][ T9753] ath9k_htc: Failed to initialize the device [ 274.915443][ T267] usb 2-1: ath9k_htc: USB layer deinitialized [ 275.283067][ T267] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 275.563117][ T267] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 276.403245][ T267] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 276.416660][ T267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.425775][ T267] usb 2-1: Product: syz [ 276.429935][ T267] usb 2-1: Manufacturer: syz [ 276.435066][ T267] usb 2-1: SerialNumber: syz [ 276.473693][ T267] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 277.083233][ T267] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 277.286322][T11721] udc-core: couldn't find an available UDC or it's busy [ 277.294133][T11721] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 277.302581][T11721] udc-core: couldn't find an available UDC or it's busy [ 277.309862][T11721] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 277.736898][ T7] usb 2-1: USB disconnect, device number 19 20:09:40 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x384, &(0x7f00000005c0)=ANY=[@ANYBLOB="f100004e8c97d9c11576d4dbc84030cf9f9374c2a5b26001f12bede84e23292f9a05145eea072c4cbff2c2ea9b50cefe5b5d17185632a01103439992d155400cb7e2cee962c2c553fe8a08bbc81a07fb5d53d2bbb738d4a2a8e7f741fb37a578a0bdd3262b8b9b59f92acff453446914773993821386a0a17e730052b72f9ac0429c1ee5dc3b27ccc438b9b5114c89d8974040587fbb47a3e724bd9ff478e4f4a92b811bd7e447e233703856d42e1fab601e053ea62f71d5c23d63d3ea9c398447367d969b35e8f7c5ff884a601a79d787d009d11fb2bece71e465d806c69318cf39ef767c51b49747a21ac654fa5d4f6e7a434e2c0000007f01004ee71db786b074528c024208f0801e564c62d7b70c860e7e03b1040731f8ad0c48c5e304a93bf9a8af74c0cf86c5a819e40aa47c0ed9813defbaf857ce2c22d220f1f086dfa678ce8902978e28ed2e55993a2f56fe285bf61af471f09fde1e06d043ce9a049ef93d1a5c20eadffe6ddb7e730b56b2f588a6c0f9e521805512c9c255ae0bf4ea0af8bfede23d9f9d6c62874bb05b15cffcf2428cbb1f9c3f549d75a7e8c38dfb20759e1c7fd005e2058c05000622f9c2b63f4fd9c22c2921148e8e83a8669cf7c48935e17db6fd3c9a14c1f7f274dc6e184ce04ff52b2928de04968e14fcc6a04220016b06d94401cf40421a189b4f6e6be7cada6ddf686987d3cf3a008956a3f81c318e3daae2fb69e5b6cb0c473ff71d6ee0cf4374edaaa988a29e973dd260049ee62b6e591606000000000000007b20b2693daa0fbe224b111412a361ebc66f0dd92cd059708d930a21175b8e25cc765e58a7727ad1bc7f7442ce18dc41f4f2bfabe8e92377d2ae44d5d68a57f7b03499df9a2f793487b9738c680b137dc940004d00004ed1bd2589d8df16ffa3f6a4f4643c3831f3265bd9a4d31993de57b2d485c251e2b0f5f6a7b8404ffa575fd54674ce725cc33dcc4e67a6920e74c03a64526bbf97f437addbb37fbdee73dcd0ff6a000000ad00004e9474e7fd8878a0347ca41f97db356e99d08f1fc69c3f005e066b5c5a7adc2523abd557cf28aca2d1bb8540585bc2e9665dd605396f40af70a521dd81b156dcb3d410751ee1629253277d63b0dd95f67dc970d73609da84ae737a6f02599e3a56fd23ffeeb7c57a0eb95d78fcaa050b3cc2c9634c343a733b99f42a974599640474124a7d91b1ae6efec0c890b887573ba77eb0436dba943dd9da2978a5ce867e81a692d4b102"]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:09:40 executing program 2: syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0xfffe, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x81, 0x6}, @dmm={0x7, 0x24, 0x14, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0xf6}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0xf8, 0x1}}}}}}}]}}, &(0x7f0000000900)={0x0, 0x0, 0xc, &(0x7f0000000640)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x48}]}, 0x1, [{0x0, 0x0}]}) 20:09:40 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x20) 20:09:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000340), 0x2, 0x1a5402) 20:09:40 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x127e, 0x0) 20:09:40 executing program 5: syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0xf1, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0xbd}}}}}]}}]}}, 0x0) 20:09:40 executing program 3: syz_read_part_table(0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000005680)=[{&(0x7f0000005400)='S', 0x1, 0xffffffff}], 0x0, 0x0) 20:09:40 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/cgroup\x00') 20:09:40 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000040)=@id, 0x10, 0x0}, 0x0) 20:09:40 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x7}, 0x10) 20:09:40 executing program 4: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$FUSE_LSEEK(r0, &(0x7f00000000c0)={0x18}, 0xffffffff000) [ 278.508750][T11791] loop3: detected capacity change from 0 to 264192 [ 278.585787][ T267] usb 2-1: Service connection timeout for: 257 [ 278.592166][ T267] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 278.623213][ T9519] usb 6-1: new full-speed USB device number 3 using dummy_hcd 20:09:40 executing program 0: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$FUSE_LSEEK(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) [ 278.628904][ T267] ath9k_htc: Failed to initialize the device [ 278.631221][ T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 278.660263][ T7] usb 2-1: ath9k_htc: USB layer deinitialized [ 278.943093][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 279.036890][ T7] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 279.054251][ T9519] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 279.083837][ T26] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.107409][ T26] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.130861][ T26] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 279.154904][ T26] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 279.176749][ T26] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 279.200820][ T26] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 279.273824][ T9519] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 279.289152][ T9519] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.321072][ T9519] usb 6-1: Product: syz [ 279.323241][ T7] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 279.331268][ T9519] usb 6-1: Manufacturer: syz [ 279.341741][ T9519] usb 6-1: SerialNumber: syz [ 279.423731][ T26] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.450102][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.496728][ T26] usb 3-1: Product: syz [ 279.523140][ T26] usb 3-1: Manufacturer: syz [ 279.540337][ T26] usb 3-1: SerialNumber: syz [ 279.654354][ T20] usb 6-1: USB disconnect, device number 3 [ 279.913364][ T26] cdc_ncm 3-1:1.0: bind() failure [ 279.920992][ T26] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 279.928722][ T26] cdc_ncm 3-1:1.1: bind() failure [ 279.936839][ T26] usb 3-1: USB disconnect, device number 2 [ 280.163093][ T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 280.177198][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.186408][ T7] usb 2-1: Product: syz [ 280.190725][ T7] usb 2-1: Manufacturer: syz [ 280.199351][ T7] usb 2-1: SerialNumber: syz [ 280.244311][ T7] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 280.813106][ T7] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 281.018369][T11777] udc-core: couldn't find an available UDC or it's busy [ 281.026506][T11777] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 281.036367][T11777] udc-core: couldn't find an available UDC or it's busy [ 281.044512][T11777] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 281.476914][ T9753] usb 2-1: USB disconnect, device number 20 20:09:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x384, &(0x7f00000005c0)=ANY=[@ANYBLOB="f100004e8c97d9c11576d4dbc84030cf9f9374c2a5b26001f12bede84e23292f9a05145eea072c4cbff2c2ea9b50cefe5b5d17185632a01103439992d155400cb7e2cee962c2c553fe8a08bbc81a07fb5d53d2bbb738d4a2a8e7f741fb37a578a0bdd3262b8b9b59f92acff453446914773993821386a0a17e730052b72f9ac0429c1ee5dc3b27ccc438b9b5114c89d8974040587fbb47a3e724bd9ff478e4f4a92b811bd7e447e233703856d42e1fab601e053ea62f71d5c23d63d3ea9c398447367d969b35e8f7c5ff884a601a79d787d009d11fb2bece71e465d806c69318cf39ef767c51b49747a21ac654fa5d4f6e7a434e2c0000007f01004ee71db786b074528c024208f0801e564c62d7b70c860e7e03b1040731f8ad0c48c5e304a93bf9a8af74c0cf86c5a819e40aa47c0ed9813defbaf857ce2c22d220f1f086dfa678ce8902978e28ed2e55993a2f56fe285bf61af471f09fde1e06d043ce9a049ef93d1a5c20eadffe6ddb7e730b56b2f588a6c0f9e521805512c9c255ae0bf4ea0af8bfede23d9f9d6c62874bb05b15cffcf2428cbb1f9c3f549d75a7e8c38dfb20759e1c7fd005e2058c05000622f9c2b63f4fd9c22c2921148e8e83a8669cf7c48935e17db6fd3c9a14c1f7f274dc6e184ce04ff52b2928de04968e14fcc6a04220016b06d94401cf40421a189b4f6e6be7cada6ddf686987d3cf3a008956a3f81c318e3daae2fb69e5b6cb0c473ff71d6ee0cf4374edaaa988a29e973dd260049ee62b6e591606000000000000007b20b2693daa0fbe224b111412a361ebc66f0dd92cd059708d930a21175b8e25cc765e58a7727ad1bc7f7442ce18dc41f4f2bfabe8e92377d2ae44d5d68a57f7b03499df9a2f793487b9738c680b137dc940004d00004ed1bd2589d8df16ffa3f6a4f4643c3831f3265bd9a4d31993de57b2d485c251e2b0f5f6a7b8404ffa575fd54674ce725cc33dcc4e67a6920e74c03a64526bbf97f437addbb37fbdee73dcd0ff6a000000ad00004e9474e7fd8878a0347ca41f97db356e99d08f1fc69c3f005e066b5c5a7adc2523abd557cf28aca2d1bb8540585bc2e9665dd605396f40af70a521dd81b156dcb3d410751ee1629253277d63b0dd95f67dc970d73609da84ae737a6f02599e3a56fd23ffeeb7c57a0eb95d78fcaa050b3cc2c9634c343a733b99f42a974599640474124a7d91b1ae6efec0c890b887573ba77eb0436dba943dd9da2978a5ce867e81a692d4b102"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:09:43 executing program 3: syz_read_part_table(0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000005680)=[{&(0x7f0000005400)='S', 0x1, 0xffffffff}], 0x0, 0x0) 20:09:43 executing program 5: syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0xf1, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0xbd}}}}}]}}]}}, 0x0) 20:09:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f00000008c0)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000940)=0x80) 20:09:43 executing program 0: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000001680)) 20:09:43 executing program 2: syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0xfffe, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x81, 0x6}, @dmm={0x7, 0x24, 0x14, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0xf6}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0xf8, 0x1}}}}}}}]}}, &(0x7f0000000900)={0x0, 0x0, 0xc, &(0x7f0000000640)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x48}]}, 0x1, [{0x0, 0x0}]}) 20:09:44 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, &(0x7f00000006c0), 0x10) 20:09:44 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000001640)=[{&(0x7f00000013c0)="13", 0x1, 0xcfd8}], 0x0, 0x0) 20:09:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8}]}, 0x24}}, 0x0) [ 282.132449][T11867] loop4: detected capacity change from 0 to 207 [ 282.159285][T11863] loop3: detected capacity change from 0 to 264192 20:09:44 executing program 3: syz_read_part_table(0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000005680)=[{&(0x7f0000005400)='S', 0x1, 0xffffffff}], 0x0, 0x0) [ 282.208508][T11867] loop4: detected capacity change from 0 to 207 20:09:44 executing program 4: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x64d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 20:09:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x1264, 0x0) [ 282.345880][ T9799] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 282.354192][ T267] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 282.362602][ T7] usb 2-1: Service connection timeout for: 257 [ 282.377250][ T7] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 282.412716][ T7] ath9k_htc: Failed to initialize the device [ 282.431135][ T9753] usb 2-1: ath9k_htc: USB layer deinitialized [ 282.648948][ T9799] usb 3-1: Using ep0 maxpacket: 16 [ 282.793880][ T267] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 282.807395][ T9799] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.826613][ T9799] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.836973][ T9753] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 282.853289][ T9799] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 282.870705][ T9799] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 282.882679][ T9799] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 282.899404][ T9799] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 283.023176][ T267] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 283.033097][ T267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.041493][ T267] usb 6-1: Product: syz [ 283.047210][ T267] usb 6-1: Manufacturer: syz [ 283.051959][ T267] usb 6-1: SerialNumber: syz [ 283.095547][ T9799] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.105437][ T9799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.122620][ T9799] usb 3-1: Product: syz [ 283.127377][ T9799] usb 3-1: Manufacturer: syz [ 283.132144][ T9799] usb 3-1: SerialNumber: syz [ 283.153405][ T9753] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 283.312510][ T267] usb 6-1: USB disconnect, device number 4 [ 283.423507][ T9799] cdc_ncm 3-1:1.0: bind() failure [ 283.432017][ T9799] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 283.439114][ T9799] cdc_ncm 3-1:1.1: bind() failure [ 283.453673][ T9799] usb 3-1: USB disconnect, device number 3 [ 284.083621][ T9753] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 284.093028][ T9753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.101358][ T9753] usb 2-1: Product: syz [ 284.105786][ T9753] usb 2-1: Manufacturer: syz [ 284.110376][ T9753] usb 2-1: SerialNumber: syz [ 284.153670][ T9753] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 284.853130][ T9753] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 285.057249][T11862] udc-core: couldn't find an available UDC or it's busy [ 285.065137][T11862] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 285.079902][T11862] udc-core: couldn't find an available UDC or it's busy [ 285.087595][T11862] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 285.517772][ T5] usb 2-1: USB disconnect, device number 21 20:09:47 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x384, &(0x7f00000005c0)=ANY=[@ANYBLOB="f100004e8c97d9c11576d4dbc84030cf9f9374c2a5b26001f12bede84e23292f9a05145eea072c4cbff2c2ea9b50cefe5b5d17185632a01103439992d155400cb7e2cee962c2c553fe8a08bbc81a07fb5d53d2bbb738d4a2a8e7f741fb37a578a0bdd3262b8b9b59f92acff453446914773993821386a0a17e730052b72f9ac0429c1ee5dc3b27ccc438b9b5114c89d8974040587fbb47a3e724bd9ff478e4f4a92b811bd7e447e233703856d42e1fab601e053ea62f71d5c23d63d3ea9c398447367d969b35e8f7c5ff884a601a79d787d009d11fb2bece71e465d806c69318cf39ef767c51b49747a21ac654fa5d4f6e7a434e2c0000007f01004ee71db786b074528c024208f0801e564c62d7b70c860e7e03b1040731f8ad0c48c5e304a93bf9a8af74c0cf86c5a819e40aa47c0ed9813defbaf857ce2c22d220f1f086dfa678ce8902978e28ed2e55993a2f56fe285bf61af471f09fde1e06d043ce9a049ef93d1a5c20eadffe6ddb7e730b56b2f588a6c0f9e521805512c9c255ae0bf4ea0af8bfede23d9f9d6c62874bb05b15cffcf2428cbb1f9c3f549d75a7e8c38dfb20759e1c7fd005e2058c05000622f9c2b63f4fd9c22c2921148e8e83a8669cf7c48935e17db6fd3c9a14c1f7f274dc6e184ce04ff52b2928de04968e14fcc6a04220016b06d94401cf40421a189b4f6e6be7cada6ddf686987d3cf3a008956a3f81c318e3daae2fb69e5b6cb0c473ff71d6ee0cf4374edaaa988a29e973dd260049ee62b6e591606000000000000007b20b2693daa0fbe224b111412a361ebc66f0dd92cd059708d930a21175b8e25cc765e58a7727ad1bc7f7442ce18dc41f4f2bfabe8e92377d2ae44d5d68a57f7b03499df9a2f793487b9738c680b137dc940004d00004ed1bd2589d8df16ffa3f6a4f4643c3831f3265bd9a4d31993de57b2d485c251e2b0f5f6a7b8404ffa575fd54674ce725cc33dcc4e67a6920e74c03a64526bbf97f437addbb37fbdee73dcd0ff6a000000ad00004e9474e7fd8878a0347ca41f97db356e99d08f1fc69c3f005e066b5c5a7adc2523abd557cf28aca2d1bb8540585bc2e9665dd605396f40af70a521dd81b156dcb3d410751ee1629253277d63b0dd95f67dc970d73609da84ae737a6f02599e3a56fd23ffeeb7c57a0eb95d78fcaa050b3cc2c9634c343a733b99f42a974599640474124a7d91b1ae6efec0c890b887573ba77eb0436dba943dd9da2978a5ce867e81a692d4b102"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:09:47 executing program 3: syz_read_part_table(0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000005680)=[{&(0x7f0000005400)='S', 0x1, 0xffffffff}], 0x0, 0x0) 20:09:47 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f00000013c0), &(0x7f0000003740), &(0x7f0000003780)={0x0, "0b5dc3e8001db4a54ecb5643065c107cafeed1dc067f47efdcc046badc622548f0401862d0b6b898ecd0430aacd8aafaea591b175a11e13e7551edb2415b72a8"}, 0x48, r0) keyctl$clear(0x7, r0) 20:09:47 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 20:09:47 executing program 5: syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0xf1, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0xbd}}}}}]}}]}}, 0x0) 20:09:47 executing program 2: syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0xfffe, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x81, 0x6}, @dmm={0x7, 0x24, 0x14, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0xf6}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0xf8, 0x1}}}}}}}]}}, &(0x7f0000000900)={0x0, 0x0, 0xc, &(0x7f0000000640)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x48}]}, 0x1, [{0x0, 0x0}]}) 20:09:48 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f00000013c0), &(0x7f0000003740), &(0x7f0000003780)={0x0, "0b5dc3e8001db4a54ecb5643065c107cafeed1dc067f47efdcc046badc622548f0401862d0b6b898ecd0430aacd8aafaea591b175a11e13e7551edb2415b72a8"}, 0x48, r0) keyctl$clear(0x7, r0) 20:09:48 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0xfffffffffffffeaf) 20:09:48 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1c00}], 0x1, 0x0) 20:09:48 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f00000013c0), &(0x7f0000003740), &(0x7f0000003780)={0x0, "0b5dc3e8001db4a54ecb5643065c107cafeed1dc067f47efdcc046badc622548f0401862d0b6b898ecd0430aacd8aafaea591b175a11e13e7551edb2415b72a8"}, 0x48, r0) keyctl$clear(0x7, r0) 20:09:48 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) 20:09:48 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000906010069a7005100862200000000001300030068617368586e65742c6966616365e7ff05000400000d00000900020073797a30000000000c000780080006400000000405000500020000000500010006"], 0x58}}, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xffad) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 286.343460][ T9753] usb 2-1: Service connection timeout for: 257 [ 286.352731][ T9753] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 286.363078][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 286.373137][ T9519] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 286.402270][ T9753] ath9k_htc: Failed to initialize the device [ 286.421559][ T5] usb 2-1: ath9k_htc: USB layer deinitialized [ 286.633096][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 286.743175][ T9519] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 286.763943][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.781751][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.792438][ T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 286.809406][ T7] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 286.820741][ T5] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 286.864432][ T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 286.889791][ T7] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 286.917680][ T9519] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 286.937087][ T9519] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.947998][ T9519] usb 6-1: Product: syz [ 286.952162][ T9519] usb 6-1: Manufacturer: syz [ 286.958641][ T9519] usb 6-1: SerialNumber: syz [ 287.113140][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 287.122475][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.131494][ T7] usb 3-1: Product: syz [ 287.136237][ T7] usb 3-1: Manufacturer: syz [ 287.140849][ T7] usb 3-1: SerialNumber: syz [ 287.173315][ T5] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 287.229005][ T26] usb 6-1: USB disconnect, device number 5 [ 287.453279][ T7] cdc_ncm 3-1:1.0: bind() failure [ 287.461457][ T7] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 287.481417][ T7] cdc_ncm 3-1:1.1: bind() failure [ 287.489976][ T7] usb 3-1: USB disconnect, device number 4 [ 288.143125][ T5] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 288.152569][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.161797][ T5] usb 2-1: Product: syz [ 288.166854][ T5] usb 2-1: Manufacturer: syz [ 288.171805][ T5] usb 2-1: SerialNumber: syz [ 288.223696][ T5] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 288.833079][ T5] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 289.038129][T11950] udc-core: couldn't find an available UDC or it's busy [ 289.045533][T11950] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 289.059288][T11950] udc-core: couldn't find an available UDC or it's busy [ 289.069206][T11950] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 289.507171][ T9753] usb 2-1: USB disconnect, device number 22 20:09:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@updpolicy={0xbc, 0x19, 0x707, 0x0, 0x0, {{@in6=@mcast2, @in6=@private2}}, [@tmpl={0x4}]}, 0xbc}}, 0x0) 20:09:51 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f00000013c0), &(0x7f0000003740), &(0x7f0000003780)={0x0, "0b5dc3e8001db4a54ecb5643065c107cafeed1dc067f47efdcc046badc622548f0401862d0b6b898ecd0430aacd8aafaea591b175a11e13e7551edb2415b72a8"}, 0x48, r0) keyctl$clear(0x7, r0) 20:09:51 executing program 3: add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000001180)="743509cd5a77a463a1222bd879a6bfede4b2eb8061db6bff1755bb73655609d476bab69c0c386c5de666f13eb836c04b29e10852dc6733ed714dc69ba8232cf1cce4cb4a3417f95e6cf4b91ab2fa9c6fae8f6c6159d38a57b4e04030726128838e4bcfc05ea52e91d9ef0e6495672ac4b5889aa7d1b86c1949fe4652dfc3f956eb8c2fb14895f766e43bcacf88e5cb035ad4b7847c922009c075c115bf0faa79191347b4d3ef1738f35de832a5938330a37870e420d461ecf0980c951ad707504541ec4a10eb5e8edaa82700dbb24b698133c587b6ec1a716835f341bda66eb0da1c33b50cc177687336f4b16d0aa5d695b3cf8f0b127e6afe29ce16b221e513010702455bbae386d7c52382a006e9b164b5beb557efc1f92f083d1059fed1f96ad2ba4cfb076a7c24b36c93ed5c14393499b85280ec6ef0e1bff0f24204fcec48b0f02871cdcd714e4682692c7b7792e76681daff80c5ebe4c06eb83e9409135ee952f80445ecb0135cd02e048a78658286119e2a1a904c37a99c9f199076236795d4141b25875052ba7df188dcc4f1e58eefb721cd3ed2b41c7e12c2a7f5fd3fc4b9ba2a5541d5685cb0a256f4336357f91c2debd92594d3021a4641abd13f848d78f60a7e6a68a39e422084d940ff5e4d92219c23bf003bb74e66245abba890932e840b25e4a59351f0d19c7ba84e17e092941fb414d090c7dcf479297a93111b1f82e3a7957964253f3a849d360741f0919e25eb2cd5b10ea156c6a05d44e86f3ef683be0e24ce432888898fb6de564b66f2e30b086d497a85f7581ae9aa6617ca35c5766ad0af25da2b400615ef38559464ff5d415b47e69545094fcfecc7f133dc51a4e4660e1098e75efe82edc64a6ab4d36f440305cfcf35850d5fef1f38221dd6967777b229e854d5dadc9f056fe7b07b4e12f99e18552515b4cd90d6b1d924ce1a2baac76e36310c5f17a38dab26128db4acf5b5a98d22037f77c1af27ba7ad31a6bff84e166afae6c6f87c81f3449ae7797b367e9f122e37d302b8c8efedab7938aa33c0686d74bf05e157d4817ab162b2fa51b5566b0e146f5c2615f94658336ed072d78f98187fc5a1e0b820040564594851270ba59118cee7c492d3aa28a8479077ed80f7c09110ade78aef7f5e29e30775ac284e52ff73f91fa890073b45b737ca33d2bf301fef07e5e36a6d64744e069f97d3c8c4d261917f63a9bef1ee2e418206a69354bf30133a286a68bcc139d136f4b21f1e62ff8edc0809766bb3dec68b77163bd929a479388d88ba30a45865936a21b2b58d2c7244ff697587e49bf603f208282a18c47b5f7588bd8a59406106b362675c61672768ddfa32a577964c05186d891ad7ce4f947c1c5e4956466a3a920817f3f2490d71c9c34506e36c8e96ee5da79fea86f15ba7b461fa8f5653fc0bb18497f40ed9eda3602410057019801ccf7bda514aa4cbc7e8d7f3fa9cbc00947bf3b2d593bdeab84780bbec0ae372355903f33518b4dc9db4fd6c54985b5becc3e34d7c4ba9a72a732031ac743c4c84b942061d84657728d1d1f27c82b04448031a41c7c92029a7db88a7dddbd448e39b7c029832d5b0787d9c0db4bb79527c1c12fd6a837eaa3e17c2949da386c5697d4aa809d0e4e3826737b71c4aa35e23c69bbd87b44adab530d511a7516367e11cd5b316dc1ff79e45a97b6c0a40747d4668bd270790ea62a34dd7c89fb1420031d8573480339c1f893779a9c7d6a8f21bc5d9e0c6b03326adf9c7b0ddb18cc9174565a1bc49546044db09e812f6602c40aef2dcc3946c6939f143ad4a02dadf6ec25a897e47a4a004990f6ad4db7418eeffb3c1cd5597476f86099aaa84fa270f76da79de004fee0cd268256741620147774bc637d18dbc7b6066950edc2bc44a38a2435da38e38952492e4a6c5f192ffb7567569ba8b606f3a15615d0587c3d01b8a0769a9e849abe0fcf1163d0b54993c94c18ff7688422964455552356e363dca41e087af989ad65fc77a51922fdb7c04a2c02e09d8399927d6e5414e720e2f6abac9faa2e4512a5595fade10b3bb9d1a814a84b73a15d479799ad9c471b00ab17ed3a31b954cb500f01a9c6a6041f504b56b35c3ba585e4fb5860434dbf3de4ef7e59ff4dbbd0de9e2026612bae8bccc292140148bde5ccbf95ee26e878446ab7c7581309e516c44a940e40b63d46cb23b1b0d725aee2aa10a5b6d9e3d19209c7821161d1b395b8ec5ff4e526f23ef36923874fda033303c5d4a3fe2fbfb8e761c2c78389321e75efccf90ad7dd48d22cb11d4b46fe5cb52a030e26d2b11eca08a11a357264486324a22d6daa03c792f12dc554622fca57dcf7e4987254688c61bd865c851d818efaeca0b1002ad6b158ffc7bf956ca9df0260b3e1addc3fbdedce917a096f659c1f001e985cea3b24ce74ccb94209ddca732533f6d496b7cc79dafa58c3f14d5afc53130008633e0e05ab6bd47fd1276ffda2887f30134eb76a2c3ba6eea2dd3d01460bce77144afb7ca3c934a48e90e275ef838e5238743ed3aea20baf8e675138c9d652943ed0f191cf584285ad22ee9cea454040f8159e0fa3e54cf6aee65c53d87c5fdc0f976bea9e3244987fad6d79ba0181ae3e47a495256cdbb01eee3cfbd8cb142a606ebbb4255733ecb333621339dfd3da469f936baaf8c1eb4b875c2ffeee723fc1a0d29bd5f6b17ce1fa520ddf371794a97a920ccf2e05427ef2328d34494699c9cba452998f0418f08df82409b8cc755a5378f4a69345e83a813cc3a926a5849d93962347891cea78a97afd7c05a66c3d05c53c281ea4f2edeacacb99523f4b7dc35c9e09d252ece69781b0517679f37c4fe21c1e26555e2d3713e792cbab6ce7e398e36d0cc93a78455aab655ae2ff5a1af6980c4de789c723ea4223d08eca0c1a2c538bea25bcfcc60efad6562d7da4d9f8eecc011197510d31f036b0eb44605860f4c2f020e27c93d1b4b42bca1f09f486ea449d8000695e3b8d901b3d2029fb1a36a926a599a5db9dc2d9ffb39c6edb26731c48611903878df6117a96012111b3551c822e60cdf59801e6d8c253d1cb7854bd47c86502aad6a202b45e19c39ce3c5940ef8187582b8073132790652a13d771a2d184637767dc52d048099be2c802a11e1ea3444ffbb4fc1d00966a3679c374d7cfb8122ebce1d1ad9afaa23cff6f3018c80c4cd45b7c2a021d483a3fa350a145657707e75926e51028694ca2d98d1d3cdbbc207fc49849b846987aca5c16774d716389004645aba0db7dd3a8ed96b54b58fe15791a70f761ab52571c894074dd4be26fa57c2521de65e80aba2ef944a9070e2beb10ae478b5e0fe9327b28d3079eec3cfb99517b08292ee69f5612ab379421e915bd42b011e6d65a468deb8e8b4c62401071457a92c83e26d606ce5db5ede0e4bf214684b61cb9e26cf11574a6978cd472a59607e46a4d1fb3db6069701d04802701480a384628c51783209226fbf06f6a27e90d2555cd9650e6552de5e19db89a989a794f0eed72951982b22d3dd35bba12fba3e440fdb077603723dfee9dd8b74e9ad44326e4924c5dcb61106ceffc6ffc2ec0bf6cb9e5f584cce99286f57fe66a99c272d77e0e843223f7529b5f65344cfe2ab4109071b42d908e091b19ed20b01d0606069e4d2ffbb018a09b87dcc225d3061a56622e8de669dd9a0c194be8c0813d887d9dac08dcefdbaaffe9e29d2989da02422d8d23c0b1f9a09a457092a54fa729371fcf9609d6d689af319328b9df80b9fe8798fc0bc5aa31e61b2ea1ff1eabdc6aa38cc564f38e6fce62f1b7de25b1926b62be687b3d4576b5bf56128df0d9c4865bec67227faa4270249964dfda4abd0a48c876bbeeb3fc80954e29475488085e1bbb48b8171ab3f671d53079f9b123b020fe8ecb6a4ad5144ab3b53a3068300a7d1a68fdab0ba0663fc886216fc51a24c31e6089b60b5192f34728f07042e84fd1e4f8cdf66fba17ea6ce6c2bc6a0b7c7361d787d34215f5e0ae61e9491c2b4a7ac7eb78a1685ec12e47aa0182cba101a9db4d9e2bc9e0ade75c383e4fd5246391a1d2dd87ae43111300a50ea59266f1c93f8696f92cb7671f69a6357342219bbcf8ea3937ff6b032346b6d851ef82a70ac8bd2dbf222f88c5aaae98b0412b0b56a4213d80a3f51456c0abc620fd10c5745dbabfa89c957efa4e016526b010a255943a904e45e363f1baef6408f803f26cfa4279cdb63e635a3a56a790ec3194658f56614a7a005ec0a5bf6fc1e7514784f1c21616cc0794db31f677fdb0cddc928df0a33f10e262e9bc584b4215d37d2931f5c8671b29a4e766c9cf2ca70b43eadaa2811bdd0742025e6e11fe9597b5e622ca4efadb5057cf8405813c0c78f8ef097a5a3a017fe8519ac15c8c2e5d29fbf227229b8157fc9ae59644d6c5f28593f63918003c35d0a9575967ff0f42dd4987269ec71a353991fa6a3ed01869e4004e71a98e4cc816cd54b6a5602852b20c71257ac8401b84f144f7d4de58f621f43ac46e455fbdb76587cf819fcb988e3ae38a8a1b1aaf0e603e812c04a97aae727d3aaa9a539c7f6097788b4029f23e307854ec8aefdf29d483603f0b323022c20203185057666ff782f3352749eab92c629b1b0c7b611c8d61a5de1a9e51f4d34a56b5a5869b6a85930f1c28901b2f9afb082ee9b6c5a1b8fb4a4824069b2e6991547472a98c4d3d4c46a319eab2540b61969135175d9d912ba5c39906f3b3712edbe169aed2c22d00feff325fbd99f77dd4e4a50f15ca9b06d5f2c5bc38db4363f0d22d3ce896c420070509f1eab6a4f47ff02452cf2917d148c9a9e75e13c141541c0e813220a678bc27a9db94dd45d7d545eca342a8c52e3dffc18b73cd79f7e9c7e3260249cc9b45799f7f59a0fd41d9f037260ca5139dc51f57c32f2a300cc012395e2cc30e054d26bf6a9a44edf81334d751babbe907ccebcd62c4af361ab28cebf5f203708a5bb12f8dd93aeb7f30c23b80e02b19a51ba4775355405d4d9f1bbf0190b7dd3928c6db2b63c6528e09fe523b0496b887f836cc393270c4d58c5773cd19b75ba75f524128f80829ab0b222bb10ce68793f3d6904b7e17e362c3e00b35761e43519a66abea4e78a53445f1ae7042adf32477fbaf003b4f26e72114f58771fe86f45217079839610d382c57ee57e0cffd8df033ad1534d59047759bce2b94d18786e2465e419d45368c904ff85ed901a4abf9f93321d483e7bf320f466c8c9342868bc92d1eb46fc0a01985493a229d2f63e01c3f9205ed97375ad92d6df7b5fd6c05c52e99a178b156ab872d6f97bebd79441e3e294f9a925fa2a1809f68870f9fac2d132014d0205b957acd0779e447675f3a0925afce74afee7622f93745b3e926bb700fe18f23e8d8ba366f10f0f65e662d6f56d9d5438c39a452eebb652d3012395fbe7762e919c1164652f7ed3bbbe76a85714aba0a2cc45b7a922004697bc91a207b04ab7a7e7dcf5c6d520480e830b504fddf22c2fbe9eb784adac8400340a08cca30d64b2f150acabb2829fad03d771da2c6a2f361ad9f007aa41d1b44310a1e5f69403626d8aab22cc926fc2d4a7b4d52f50f73116ef9fdca200601a2aa2c58f1bacb00bca4d71e5b36289a1778508565faf8d2b07347c131d1e6be3669ea0d2a48a9e116277e2cfc960e874635afad8dad63ba0673b9095f8f3d367aa0edfad306947268a48e45c2472db54d9e6db887ed8dc80a2278a0d05146808de1ffba63c6ad0f4d9f259c2e9e4ae30c", 0x1001, 0xfffffffffffffffb) 20:09:51 executing program 5: syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0xf1, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0xbd}}}}}]}}]}}, 0x0) 20:09:51 executing program 2: syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0xfffe, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x81, 0x6}, @dmm={0x7, 0x24, 0x14, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0xf6}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0xf8, 0x1}}}}}}}]}}, &(0x7f0000000900)={0x0, 0x0, 0xc, &(0x7f0000000640)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x48}]}, 0x1, [{0x0, 0x0}]}) 20:09:51 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x384, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:09:52 executing program 4: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) getrusage(0x1, &(0x7f00000002c0)) 20:09:52 executing program 0: clock_gettime(0x0, &(0x7f0000000140)) 20:09:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@loopback, @in6=@empty}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @multicast1}, @in={0x2, 0x0, @loopback}, @generic={0x1, "de7b72b86ab1df9b40826a63788a"}, 0x4, 0x0, 0x0, 0x0, 0x3}) 20:09:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001180)="ab", 0x1}], 0x1}}], 0x1, 0xc048000) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2000) 20:09:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x0) 20:09:52 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000740)="2860bd033249cd", 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000180)=@phonet, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/138, 0x8a}], 0x1, &(0x7f0000001780)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/95, 0x5f}], 0x45, &(0x7f0000000400)=""/210, 0xd2}}], 0x2, 0x0, &(0x7f0000000580)={0x77359400}) write$nbd(r1, &(0x7f0000000580)=ANY=[], 0x41) [ 290.298335][T12048] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:09:52 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "8b47aaa329c77bf133b67a3eb3d7ab7ba07b757bdffc494cfe373492f1f463008b03039539553ffd79a31d12e654edb5243d80354af24d9c128579e22c891ae1"}, 0x48, 0xffffffffffffffff) keyctl$get_security(0x11, r0, 0x0, 0x0) [ 290.343413][ T5] usb 2-1: Service connection timeout for: 257 [ 290.350329][ T5] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 290.382727][ T5] ath9k_htc: Failed to initialize the device 20:09:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{}, {0x0, @random="0149cab181f1"}, 0x3e, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_to_hsr\x00'}) 20:09:52 executing program 4: r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc2}, &(0x7f0000000440)={0x0, "f33763517ba609b4f10fade769360db998854b36e6c69be2881c63d47839bfaf26d7d4a299e00453b90cc1675c992691f9e8bcd06d6c8cc65e536092ccb8503f"}, 0x48, r0) keyctl$invalidate(0x15, r1) [ 290.393048][ T4869] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 290.397404][ T9519] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 290.420136][ T9753] usb 2-1: ath9k_htc: USB layer deinitialized [ 290.663140][ T9519] usb 3-1: Using ep0 maxpacket: 16 [ 290.763667][ T4869] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 290.783834][ T9753] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 290.813842][ T9519] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.824977][ T9519] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.837087][ T9519] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 290.852121][ T9519] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 290.884372][ T9519] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 290.895699][ T9519] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 290.933736][ T4869] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 290.947760][ T4869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.958953][ T4869] usb 6-1: Product: syz [ 290.970961][ T4869] usb 6-1: Manufacturer: syz [ 290.989023][ T4869] usb 6-1: SerialNumber: syz [ 291.063460][ T9753] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 291.104109][ T9519] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.116527][ T9519] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.125221][ T9519] usb 3-1: Product: syz [ 291.129396][ T9519] usb 3-1: Manufacturer: syz [ 291.134401][ T9519] usb 3-1: SerialNumber: syz 20:09:53 executing program 4: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000002700)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "40510ba1f8fd31be4d5fcf632452b1c319f5bb7d117d5fde5600010000f4bf5b2b9a622800000000000000db49875f26b9fc652b00"}, 0x48, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) [ 291.249936][ T26] usb 6-1: USB disconnect, device number 6 20:09:53 executing program 4: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000002700)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "40510ba1f8fd31be4d5fcf632452b1c319f5bb7d117d5fde5600010000f4bf5b2b9a622800000000000000db49875f26b9fc652b00"}, 0x48, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) [ 291.443174][ T9519] cdc_ncm 3-1:1.0: bind() failure [ 291.450798][ T9519] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 291.483313][ T9519] cdc_ncm 3-1:1.1: bind() failure [ 291.499462][ T9519] usb 3-1: USB disconnect, device number 5 [ 291.863353][ T9753] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 291.872706][ T9753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.882587][ T9753] usb 2-1: Product: syz [ 291.887192][ T9753] usb 2-1: Manufacturer: syz [ 291.891775][ T9753] usb 2-1: SerialNumber: syz [ 291.933659][ T9753] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 292.503095][ T9753] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 292.706472][T12034] udc-core: couldn't find an available UDC or it's busy [ 292.714206][T12034] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 292.722650][T12034] udc-core: couldn't find an available UDC or it's busy [ 292.730142][T12034] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 293.157902][ T4869] usb 2-1: USB disconnect, device number 23 20:09:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:09:55 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000040)) 20:09:55 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004080)={0x2020}, 0x2020) 20:09:55 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 20:09:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@getsadinfo={0x3c, 0x23, 0x1, 0x0, 0x0, 0x0, [@address_filter={0x28, 0x1a, {@in=@dev, @in=@remote}}]}, 0x3c}}, 0x0) 20:09:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0xc, 0x0, &(0x7f0000000040)) 20:09:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@getsadinfo={0x3c, 0x23, 0x1, 0x0, 0x0, 0x0, [@address_filter={0x28, 0x1a, {@in=@dev, @in=@remote}}]}, 0x3c}}, 0x0) 20:09:55 executing program 4: keyctl$search(0xa, 0x0, &(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, 0xfffffffffffffffc) 20:09:55 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x13, 0x0, &(0x7f0000000040)) 20:09:55 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000f00)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) 20:09:55 executing program 3: clone(0x2044800, 0x0, 0x0, 0x0, 0x0) 20:09:55 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 294.033062][ T9753] usb 2-1: Service connection timeout for: 257 [ 294.040534][ T9753] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 294.063502][ T9753] ath9k_htc: Failed to initialize the device [ 294.070568][ T4869] usb 2-1: ath9k_htc: USB layer deinitialized [ 294.475811][ T4869] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 294.783232][ T4869] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 295.746296][ T4869] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 295.755653][ T4869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.764767][ T4869] usb 2-1: Product: syz [ 295.768924][ T4869] usb 2-1: Manufacturer: syz [ 295.774217][ T4869] usb 2-1: SerialNumber: syz [ 295.823916][ T4869] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 296.423187][ T4869] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 296.626989][T12134] udc-core: couldn't find an available UDC or it's busy [ 296.634429][T12134] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 296.642753][T12134] udc-core: couldn't find an available UDC or it's busy [ 296.650141][T12134] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 297.067904][ T9519] usb 2-1: USB disconnect, device number 24 20:09:59 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:09:59 executing program 5: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 20:09:59 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000032c0)=@newsa={0x1eb0, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@XFRMA_SET_MARK_MASK={0x8}, @sec_ctx={0x1009, 0x8, {0x1005, 0x8, 0x0, 0x0, 0xffd, "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"}}, @extra_flags={0x8}, @tmpl={0x84, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private}}, 0x0, @in6=@rand_addr=' \x01\x00'}, {{@in6=@local}, 0x0, @in=@private}]}, @tmpl={0x184, 0x5, [{{@in6=@dev}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, @in=@private}, {{@in=@multicast1}, 0x0, @in=@broadcast}, {{@in=@dev}, 0x0, @in6=@loopback}, {{@in6=@remote}}, {{}, 0x0, @in=@multicast1}]}, @coaddr={0x14, 0xe, @in=@empty}, @algo_auth_trunc={0xb39, 0x14, {{'hmac(wp512-generic)\x00'}, 0x5768, 0x0, "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"}}, @algo_aead={0x4c, 0x12, {{'essiv(morus1280,sha256-ssse3)\x00'}}}]}, 0x1eb0}}, 0x0) 20:09:59 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) 20:09:59 executing program 4: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'syzkaller1\x00'}) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) close(r0) 20:09:59 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xff, 0x0, "77649942332865513e0a4b201d161e5d0bdcf44d4c834f7a1d846f2d27a1"}}}, {{@ipv6={@remote, @mcast1, [], [], 'veth1_macvtap\x00', 'rose0\x00'}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@frag={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) [ 297.634701][T12181] x_tables: duplicate underflow at hook 3 20:09:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001180)="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", 0x543}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="cc8f4bc0fae3353f12d2ac994ba3ab31ba9be761d4259e2aa0561fe311c30d847a4cb465c006a0d001", 0x29}, {&(0x7f0000000100)="ac8b93dbdda495b45ca90858eda82d0c5ef7b1318c6182a3d1a891778ba14a0367a55803308f86786005f677adb74f6b4e72a23f595405758437203517f76083111cf4eef84c5d1ad15261afb247d5ba2371dd696aa4d7a8060e3a67744a387dcbf33d6a74534928f0a3b4efdcf7e854058d78", 0x73}], 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB='X'], 0x58}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="62e59bf5d406ac22980972a61a6a80d4a78d26906afc026142937008bd403031e0d8", 0x22}], 0x1}}], 0x3, 0xc048000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$inet(r0, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=':', 0x1}], 0x1}}], 0x1, 0x4000880) 20:09:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000023c0)=@polexpire={0xc0, 0x1b, 0xfffc8b4a464d2e4f, 0x0, 0x0, {{{@in, @in=@multicast1}}}}, 0xc0}}, 0x0) 20:09:59 executing program 0: request_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0) 20:09:59 executing program 3: get_mempolicy(0x0, &(0x7f0000000040), 0x9, &(0x7f0000ffa000/0x4000)=nil, 0x3) 20:09:59 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 20:09:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) [ 297.801056][T12202] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 297.943084][ T4869] usb 2-1: Service connection timeout for: 257 [ 297.950585][ T4869] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 297.969393][ T4869] ath9k_htc: Failed to initialize the device [ 297.982426][ T9519] usb 2-1: ath9k_htc: USB layer deinitialized [ 298.353134][ T9519] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 298.633105][ T9519] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 299.433410][ T9519] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 299.442840][ T9519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.454794][ T9519] usb 2-1: Product: syz [ 299.459244][ T9519] usb 2-1: Manufacturer: syz [ 299.464187][ T9519] usb 2-1: SerialNumber: syz [ 299.503825][ T9519] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 300.073183][ T9519] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 300.276866][T12188] udc-core: couldn't find an available UDC or it's busy [ 300.284190][T12188] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 300.293508][T12188] udc-core: couldn't find an available UDC or it's busy [ 300.300623][T12188] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 300.717454][ T9753] usb 2-1: USB disconnect, device number 25 20:10:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:10:03 executing program 3: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f00000004c0)={0x2, 0x0, 0x8, 0x16, 0x2, 0xffff}) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000640), 0x8, 0x200000) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x641) syz_open_dev$evdev(0x0, 0xf6, 0x4a2800) syz_usb_disconnect(0xffffffffffffffff) write$hidraw(r1, &(0x7f0000000000)='4', 0x20000001) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000280)={0x0, 0xfffffebd, &(0x7f00000003c0)="254e6e6457b94a706f24b50b613bff3ebc5d669fcccfa7539dec9b67573fe9fe31fd712d55ac76b885d2ef5c535d1622962d706343eaf12d7abd5807823ec7ca6f45b0ed0c82289e1dc00fa40b0c6cfba5d882d2e07d943e4761e7cfcb900a43038cdee3afb200c911d20bcdab3ce19a11ac8e9d0abcef82b399e1fa04fa7f9b3dd714cbb6bb14b6172ddd199fc8e689936916cf4f0a289c4b997807b9ed9a85b6a0fd95180f1d2951b0ef77637fb1652eae221d0dfbb740e15aed38a5a018ec0c8b15614a9f2b3fca32064b0c"}) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x84762) read$hidraw(r1, 0x0, 0x0) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000340)) write$hidraw(r2, &(0x7f0000000000)="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", 0x801200) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f00000002c0)) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000200)={0x15, 0x9f, &(0x7f0000000800)="adc3f3f7ecef50adf34cdc0e79a01c284cc6a3a58b8f3722d1716df654d4219cd59f3bde575e4c4b449e1cb1b578f2f16744da00000014af54f3e1095c6c3149c986ef7c8ff425519f6bb08dd43571af4249f4df14f22d27a20bc3578532e610a7f69dd445ebde1c82d560f40b2c8a27d0bf77b6200100da7aa5ac7ed5b68447b65bb86e1400"/159}) write$hidraw(0xffffffffffffffff, &(0x7f0000000300)="c4e15d8a5341fbaa5a7d6fcba58d98b7271888", 0x13) write$hidraw(0xffffffffffffffff, &(0x7f0000000080)="17", 0x20000081) syz_open_dev$hidraw(0xfffffffffffffffc, 0x80000000, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000580)="a150aceeacac9d45fde9c5640665177fa60b97914b2d80fba91dd8e94371404e8392642391d9aa0c945f6b3a84a4591080f67ce353d71370547329c4c28889b553c89da8a4fc2fb3c39262edc13ab57c5183a4faad822df08bd756c381e8ae1367ef633897b9e03884662e25836489f835448827f06fc7d86e78af1aa541fa105a05a4f45d157aa1b761bbfad762a1079356ffeeaf9aa3319988876558af23308b2df82038e65a9bd32c48", 0xab) syz_open_dev$hidraw(&(0x7f0000000380), 0x908, 0x4102) 20:10:03 executing program 5: r0 = socket$inet(0x2, 0x8003, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x4, 0x0, 0x0) 20:10:03 executing program 2: r0 = socket$inet6(0x18, 0x1, 0x0) listen(r0, 0x0) 20:10:03 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_IOCTL(r0, 0x0, 0xfffffffffffffcd5) 20:10:03 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 20:10:03 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x0) lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) 20:10:03 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x0) acct(&(0x7f00000000c0)='./file0/../file0\x00') 20:10:03 executing program 5: select(0x40, &(0x7f0000000100)={0xdeafbead}, 0x0, 0x0, 0x0) 20:10:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f00000000c0)=0xffffffffffffffb0) 20:10:03 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 20:10:03 executing program 4: open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00') [ 301.548702][ T9519] usb 2-1: Service connection timeout for: 257 [ 301.567663][ T9519] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 301.597174][ T9519] ath9k_htc: Failed to initialize the device [ 301.612899][ T9753] usb 2-1: ath9k_htc: USB layer deinitialized [ 301.621891][ T37] audit: type=1800 audit(1627675803.547:46): pid=12272 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14390 res=0 errno=0 [ 301.735702][ T37] audit: type=1804 audit(1627675803.667:47): pid=12277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723432343830393837372F73797A6B616C6C65722E6143437961632F37322F48C7C060 dev="sda1" ino=14390 res=1 errno=0 [ 302.039033][ T9753] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 302.353175][ T9753] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 302.426420][ T37] audit: type=1800 audit(1627675804.357:48): pid=12277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14390 res=0 errno=0 [ 302.477574][ T37] audit: type=1804 audit(1627675804.407:49): pid=12279 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723432343830393837372F73797A6B616C6C65722E6143437961632F37322F48C7C060 dev="sda1" ino=14390 res=1 errno=0 [ 302.552128][T12277] syz-executor.3 (12277) used greatest stack depth: 22120 bytes left [ 303.193199][ T9753] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 303.202716][ T9753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.211572][ T9753] usb 2-1: Product: syz [ 303.219673][ T9753] usb 2-1: Manufacturer: syz [ 303.225916][ T9753] usb 2-1: SerialNumber: syz [ 303.274218][ T9753] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 303.923196][ T9753] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 304.127038][T12252] udc-core: couldn't find an available UDC or it's busy [ 304.134166][T12252] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 304.142481][T12252] udc-core: couldn't find an available UDC or it's busy [ 304.149458][T12252] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 304.566213][ T4869] usb 2-1: USB disconnect, device number 26 20:10:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:10:07 executing program 3: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f00000004c0)={0x2, 0x0, 0x8, 0x16, 0x2, 0xffff}) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000640), 0x8, 0x200000) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x641) syz_open_dev$evdev(0x0, 0xf6, 0x4a2800) syz_usb_disconnect(0xffffffffffffffff) write$hidraw(r1, &(0x7f0000000000)='4', 0x20000001) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000280)={0x0, 0xfffffebd, &(0x7f00000003c0)="254e6e6457b94a706f24b50b613bff3ebc5d669fcccfa7539dec9b67573fe9fe31fd712d55ac76b885d2ef5c535d1622962d706343eaf12d7abd5807823ec7ca6f45b0ed0c82289e1dc00fa40b0c6cfba5d882d2e07d943e4761e7cfcb900a43038cdee3afb200c911d20bcdab3ce19a11ac8e9d0abcef82b399e1fa04fa7f9b3dd714cbb6bb14b6172ddd199fc8e689936916cf4f0a289c4b997807b9ed9a85b6a0fd95180f1d2951b0ef77637fb1652eae221d0dfbb740e15aed38a5a018ec0c8b15614a9f2b3fca32064b0c"}) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x84762) read$hidraw(r1, 0x0, 0x0) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000340)) write$hidraw(r2, &(0x7f0000000000)="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", 0x801200) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f00000002c0)) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000200)={0x15, 0x9f, &(0x7f0000000800)="adc3f3f7ecef50adf34cdc0e79a01c284cc6a3a58b8f3722d1716df654d4219cd59f3bde575e4c4b449e1cb1b578f2f16744da00000014af54f3e1095c6c3149c986ef7c8ff425519f6bb08dd43571af4249f4df14f22d27a20bc3578532e610a7f69dd445ebde1c82d560f40b2c8a27d0bf77b6200100da7aa5ac7ed5b68447b65bb86e1400"/159}) write$hidraw(0xffffffffffffffff, &(0x7f0000000300)="c4e15d8a5341fbaa5a7d6fcba58d98b7271888", 0x13) write$hidraw(0xffffffffffffffff, &(0x7f0000000080)="17", 0x20000081) syz_open_dev$hidraw(0xfffffffffffffffc, 0x80000000, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000580)="a150aceeacac9d45fde9c5640665177fa60b97914b2d80fba91dd8e94371404e8392642391d9aa0c945f6b3a84a4591080f67ce353d71370547329c4c28889b553c89da8a4fc2fb3c39262edc13ab57c5183a4faad822df08bd756c381e8ae1367ef633897b9e03884662e25836489f835448827f06fc7d86e78af1aa541fa105a05a4f45d157aa1b761bbfad762a1079356ffeeaf9aa3319988876558af23308b2df82038e65a9bd32c48", 0xab) syz_open_dev$hidraw(&(0x7f0000000380), 0x908, 0x4102) 20:10:07 executing program 5: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 20:10:07 executing program 0: r0 = socket$inet(0x2, 0x8003, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1001, 0x0, 0x0) 20:10:07 executing program 2: r0 = socket$inet(0x2, 0x8003, 0x0) getsockopt(r0, 0x0, 0x7, 0x0, 0x0) 20:10:07 executing program 4: symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:10:07 executing program 0: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00') acct(0x0) 20:10:07 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xfffffffffffffd74) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setgroups(0x1, &(0x7f0000000040)=[0x0]) fchown(r2, 0x0, r1) 20:10:07 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000c06012d0000000000000000000000000e0000000069746d61703a697000000005000400000000000900020073797a3000000000240007800c0002800800218f000000fb0b0001800800014000000000080006400000200105000500020000000500010006"], 0x1}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x225ce332) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:10:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) 20:10:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) 20:10:07 executing program 5: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) [ 305.383142][ T9753] usb 2-1: Service connection timeout for: 257 [ 305.399192][ T9753] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 305.428250][ T9753] ath9k_htc: Failed to initialize the device [ 305.454921][ T4869] usb 2-1: ath9k_htc: USB layer deinitialized [ 305.481623][ T37] audit: type=1800 audit(1627675807.407:50): pid=12334 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=13923 res=0 errno=0 [ 305.620908][ T37] audit: type=1804 audit(1627675807.547:51): pid=12331 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723432343830393837372F73797A6B616C6C65722E6143437961632F37332F48C7C060 dev="sda1" ino=13923 res=1 errno=0 [ 305.843044][ T4869] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 306.159147][ T4869] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 307.003124][ T4869] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 307.012886][ T4869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.024937][ T4869] usb 2-1: Product: syz [ 307.029082][ T4869] usb 2-1: Manufacturer: syz [ 307.035984][ T4869] usb 2-1: SerialNumber: syz [ 307.087056][ T4869] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 307.723223][ T4869] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 307.927979][T12310] udc-core: couldn't find an available UDC or it's busy [ 307.935343][T12310] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 307.949724][T12310] udc-core: couldn't find an available UDC or it's busy [ 307.957163][T12310] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 308.388025][ T9519] usb 2-1: USB disconnect, device number 27 20:10:10 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:10:10 executing program 2: lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) 20:10:10 executing program 5: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x200005) uselib(&(0x7f0000000180)='./file0\x00') 20:10:10 executing program 0: pipe(&(0x7f0000000580)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x0, 0x0, 0x0) 20:10:10 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x5c, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 20:10:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x9, 0x3, 0x214, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x180, 0xffffffff, 0xffffffff, 0x180, 0xffffffff, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0xffffffff, 'veth0_to_bridge\x00', 'veth1_to_batadv\x00'}, 0x0, 0x94, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x270) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1f0, 0xcc, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x15c, 0xffffffff, 0xffffffff, 0x15c, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @remote, 0x0, 0xffffffff, 'veth0_to_bridge\x00', 'dummy0\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'team_slave_0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x24c) socket$netlink(0x10, 0x3, 0x9) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) 20:10:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_batadv\x00'}) socketpair(0x1d, 0x1, 0x6, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x28}}, 0x0) 20:10:11 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) fchdir(0xffffffffffffffff) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$autofs(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$peek(0x2, r1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f00003ca000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) 20:10:11 executing program 2: mmap$perf(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) 20:10:11 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @dev}, 0x1c) 20:10:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001180)="ab", 0x1}], 0x1}}], 0x1, 0x3c04c011) 20:10:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) [ 309.232037][T12386] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 309.233150][ T4869] usb 2-1: Service connection timeout for: 257 [ 309.338112][ T4869] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 309.350089][T12394] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 309.388343][ T4869] ath9k_htc: Failed to initialize the device [ 309.399728][ T9519] usb 2-1: ath9k_htc: USB layer deinitialized [ 309.768862][ T9519] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 310.053185][ T9519] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 310.853153][ T9519] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 310.862866][ T9519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.872409][ T9519] usb 2-1: Product: syz [ 310.877278][ T9519] usb 2-1: Manufacturer: syz [ 310.881876][ T9519] usb 2-1: SerialNumber: syz [ 310.923744][ T9519] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 311.493096][ T9519] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 311.697679][T12371] udc-core: couldn't find an available UDC or it's busy [ 311.705638][T12371] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 311.719967][T12371] udc-core: couldn't find an available UDC or it's busy [ 311.727026][T12371] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 312.159075][ T4869] usb 2-1: USB disconnect, device number 28 20:10:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:10:14 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffff0f) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 20:10:14 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000040), 0x4) 20:10:14 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') read$FUSE(r0, 0x0, 0x0) 20:10:14 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0xc441) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 20:10:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x10d082) r3 = memfd_create(&(0x7f0000001840)='\xbb\x02\xb1\xed\x97\xcb\xb1,\x116\xe0\x89]\xad\x01\xc3r%;\x99\xbck\xe7=\xfa\xf6HB\x00\x9e\xc0\xa9\xc9\x88\xc7\x82\x9a\x94g\xda\xa6q\x15\xf5\xe1\x86\x8e\x1d\xdf\x9d+,\x00\xd7h\xa4\x06jtl\x00\x00\x00\x00!\xf8\xac\xdc\x00\x00\x00\xd5\\\x01g\xfd\x92\x06\xb9|\x9d\xec\xdb\x9d\x94i`8t\xbd\xe8\xbfj~NO\xb2\x1a\xfc\xff\xff\xff\xff\xff\xff\xff\x1a\xed\xaaqE\xa8\x01\x05\x00\x00\x00\x00\x00\x00\x00\x91l\x00\x00', 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) pwritev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)='!', 0x1}], 0x1, 0x40ee1, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x11, r2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xffffff0f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) write(r2, &(0x7f0000000000), 0x52698b21) 20:10:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0x8, 0x5, &(0x7f0000b0afd8)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="00008000000000007900000000000000"], &(0x7f0000fe9000)='syzkaller\x00', 0x2, 0x3f0, &(0x7f0000e18000)=""/4096}, 0x48) 20:10:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) [ 312.749584][T12423] loop0: detected capacity change from 0 to 519 20:10:14 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x102) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1007a04, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x43e001, 0x0) close(r2) 20:10:14 executing program 3: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000300), 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) [ 312.983157][ T9519] usb 2-1: Service connection timeout for: 257 [ 312.992119][ T9519] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 313.027382][ T9519] ath9k_htc: Failed to initialize the device [ 313.043963][ T4869] usb 2-1: ath9k_htc: USB layer deinitialized 20:10:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x4800, 0x0) 20:10:15 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0xc441) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000380)=0x7fff) [ 313.413242][ T4869] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 313.693363][ T4869] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 314.503284][ T4869] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 314.513151][ T4869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.521307][ T4869] usb 2-1: Product: syz [ 314.526988][ T4869] usb 2-1: Manufacturer: syz [ 314.531567][ T4869] usb 2-1: SerialNumber: syz [ 314.573692][ T4869] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 315.153116][ T4869] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 315.360780][T12431] udc-core: couldn't find an available UDC or it's busy [ 315.367834][T12431] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 315.381635][T12431] udc-core: couldn't find an available UDC or it's busy [ 315.388694][T12431] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 315.807942][ T20] usb 2-1: USB disconnect, device number 29 20:10:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:10:18 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 20:10:18 executing program 3: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:10:18 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000080)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000080)=""/246) 20:10:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x10d082) r3 = memfd_create(&(0x7f0000001840)='\xbb\x02\xb1\xed\x97\xcb\xb1,\x116\xe0\x89]\xad\x01\xc3r%;\x99\xbck\xe7=\xfa\xf6HB\x00\x9e\xc0\xa9\xc9\x88\xc7\x82\x9a\x94g\xda\xa6q\x15\xf5\xe1\x86\x8e\x1d\xdf\x9d+,\x00\xd7h\xa4\x06jtl\x00\x00\x00\x00!\xf8\xac\xdc\x00\x00\x00\xd5\\\x01g\xfd\x92\x06\xb9|\x9d\xec\xdb\x9d\x94i`8t\xbd\xe8\xbfj~NO\xb2\x1a\xfc\xff\xff\xff\xff\xff\xff\xff\x1a\xed\xaaqE\xa8\x01\x05\x00\x00\x00\x00\x00\x00\x00\x91l\x00\x00', 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) pwritev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)='!', 0x1}], 0x1, 0x40ee1, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x11, r2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xffffff0f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) write(r2, &(0x7f0000000000), 0x52698b21) 20:10:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x10d082) r3 = memfd_create(&(0x7f0000001840)='\xbb\x02\xb1\xed\x97\xcb\xb1,\x116\xe0\x89]\xad\x01\xc3r%;\x99\xbck\xe7=\xfa\xf6HB\x00\x9e\xc0\xa9\xc9\x88\xc7\x82\x9a\x94g\xda\xa6q\x15\xf5\xe1\x86\x8e\x1d\xdf\x9d+,\x00\xd7h\xa4\x06jtl\x00\x00\x00\x00!\xf8\xac\xdc\x00\x00\x00\xd5\\\x01g\xfd\x92\x06\xb9|\x9d\xec\xdb\x9d\x94i`8t\xbd\xe8\xbfj~NO\xb2\x1a\xfc\xff\xff\xff\xff\xff\xff\xff\x1a\xed\xaaqE\xa8\x01\x05\x00\x00\x00\x00\x00\x00\x00\x91l\x00\x00', 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) pwritev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)='!', 0x1}], 0x1, 0x40ee1, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x11, r2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xffffff0f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) write(r2, &(0x7f0000000000), 0x52698b21) [ 316.346933][ T3261] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.362838][ T3261] ieee802154 phy1 wpan1: encryption failed: -22 20:10:18 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000), &(0x7f00000000c0)='\x7f\x00\x9d\x98\x06\x00\x8a\xe3\x7fs\x00\x00\xa0\xf4\xdb\xae\x00\x00\xed\x00\x00\x00\x00\x00', 0x0) [ 316.441701][T12488] loop0: detected capacity change from 0 to 519 20:10:18 executing program 3: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x40000, 0x1e, &(0x7f0000000200)=[{&(0x7f0000010000)="0042454130310100"/32, 0x20, 0x8000}, {&(0x7f0000010100)="004e535230330100"/32, 0x20, 0x9000}, {&(0x7f0000010200)="0054454130310100"/32, 0x20, 0xa000}, {&(0x7f0000010300)="01000300ce0001004b81f0010c0000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e757855444600"/128, 0x80, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1e4b3a21002a4c696e7578205544464653000000000000000000000004050000", 0xe0, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100"/32, 0x20, 0xc1e0}, {&(0x7f0000010600)="06000300eb000100e441ae010d00000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000", 0x60, 0xd000}, {&(0x7f0000010700)="000000000000000000000000000000000000000900100000002a4f5354412055444620436f6d706c69616e74000000000102000000000000001000000100000000000000000000000600000001000000002a4c696e75782055444646530000000000000000000000040500"/128, 0x80, 0xd0c0}, {&(0x7f0000010800)="0000000000000000000000000000000000100000120000000106010000000000", 0x20, 0xd1a0}, {&(0x7f0000010900)="05000300d5000100cefff0010e0000000500000001000000002b4e53523033000000000000000000000000000000000000000000000000000000000000000000001000"/96, 0x60, 0xe000}, {&(0x7f0000010a00)="000000000000000000000000000000000000000000000000040000001300000028000000002a4c696e7578205544464653000000000000000000000004050000", 0x40, 0xe0a0}, {&(0x7f0000010b00)="070003002a000100d42c10000f0000000600000001000000004000003b000000", 0x20, 0xf000}, {&(0x7f0000010c00)="04000300a20001003168f0011000000004000000002a554446204c5620496e666f00000000000000000000000102040500000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000", 0x80, 0x10000}, {&(0x7f0000010d00)="0000000000000000000000000000000000000009084c696e7578206d6b756466667320322e32000000000000000000000000000000000012084c696e757820756466746f6f6c7320322e3200000000000000000000000000000000130868747470733a2f2f6769746875622e636f6d2f70616c692f756466746f6f6c732f0022002a4c696e757820554446465300000000000000000000000405000000000000", 0xa0, 0x100e0}, {&(0x7f0000010e00)="080003000e0001000000f0011100"/32, 0x20, 0x11000}, {&(0x7f0000010f00)="09000300e5000100bd937600120000000010e4070913122c1f0e1f430100000000000000000000001700000000000000000000000000000000000000000000000000000000000000010000002e0000001900000028000000002a4c696e757820554446465300000000000000000000000405000000000000050000000200000001020102010200"/160, 0xa0, 0x12000}, {&(0x7f0000011000)="08010300e5000100f7d908000000000028000000050000000080ffffff000000", 0x20, 0x13000}, {&(0x7f0000011100)="000103003f0001000345f001010000007810e4070913142c1e4b3a210300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e757855444600000000000000", 0x80, 0x14000}, {&(0x7f0000011200)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900100000040000000000000000000000002a4f5354412055444620436f6d706c69616e7400000000010200000000000000000000000000000000000000000000001000000200"/256, 0x100, 0x140e0}, {&(0x7f0000011300)="0a010300070001000519d8000200000000000000040000000100000d00000000000001000000000000000000a57c000001000000000000002800000000000000280000000000000001000000000000007810e4070913142c1e4b3a217810e4070913142c1e4b3a217810e4070913142c1e4b3a217810e4070913142c1e4b3a2101000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e757820554446465300000000000000000000000405000000000000000000000000000000000000100000002800000003000000", 0xe0, 0x15000}, {&(0x7f0000011400)="010103000700010024c218000300000001000a00001000000200000000000000", 0x20, 0x16000}, {&(0x7f0000011500)="0a010300740001004346d8000400000000000000040000000100000400000000000001000000000000000000a53c000002000000000000000801000000000000080100000000000001000000000000000010e4070913122c1e4b3a210010e4070913122c1f0d36620010e4070913122c1e4b3a210010e4070913122c1f0d366201000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e757820554446465300000000000000000000000405000000000000000000000000000000000000100000000801000005000000", 0xe0, 0x17000}, {&(0x7f0000011600)="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"/288, 0x120, 0x18000}, {&(0x7f0000011800)="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", 0x160, 0x19000}, {&(0x7f0000011a00)="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"/1280, 0x500, 0x1a000}, {&(0x7f0000011f00)="0a010300b6000100a3f902010800000000000000040000000100000c00000000000003000000000000000000f77e000001000000000000003a000000000000003a0000000000000000000000000000000010e4070913122c1f0d36620010e4070913122c1f0d36620010e4070913122c1f0d36620010e4070913122c1f0d366201000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578205544464653000000000000000000000004050000000000001200000000000000000000003a000000010000000504000008746d70051600000873797a2d696d61676567656e393432323939353931050600000866696c6530050600000866696c653000"/288, 0x120, 0x1b000}, {&(0x7f0000012100)="0a01030029000100023dd2000900000000000000040000000100000500000000000003000000000000000000a57c000001000000000000000a000000000000000a0000000000000000000000000000000010e4070913122c1f0d36620010e4070913122c1f0d36620010e4070913122c1f0d36620010e4070913122c1f0d366201000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578205544464653000000000000000000000004050000000000001300000000000000000000000a00000073797a6b616c6c65727300"/256, 0x100, 0x1c000}, {&(0x7f0000012200)="0a010300b9000100b018d8000a00000000000000040000000100000500000000000001000000000000000000a57c000002000000000000002823000000000000282300000000000003000000000000000010e4070913122c1f0d36620010e4070913122c1f0d36620010e4070913122c1f0d36620010e4070913122c1f0d366201000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e75782055444646530000000000000000000000040500000000000014000000000000000000000010000000282300000b000000", 0xe0, 0x1d000}, {&(0x7f0000012300)="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", 0x140, 0x21000}, {&(0x7f0000012500)="020003006a0001001d17f0013f000000006000000c000000006000000c000000", 0x20, 0x3f000}], 0x0, &(0x7f0000012600)) 20:10:18 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x11) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8) [ 316.637239][T12516] loop3: detected capacity change from 0 to 1008 [ 316.663195][ T4869] usb 2-1: Service connection timeout for: 257 [ 316.669548][ T4869] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 20:10:18 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000080)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000080)=""/246) [ 316.742207][T12516] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 316.753395][ T4869] ath9k_htc: Failed to initialize the device [ 316.767347][T12516] UDF-fs: Scanning with blocksize 512 failed [ 316.776169][ T20] usb 2-1: ath9k_htc: USB layer deinitialized [ 316.790698][T12516] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 316.829443][T12516] UDF-fs: Scanning with blocksize 1024 failed 20:10:18 executing program 4: getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x8, "05000000f95d2cb9"}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="08009e"], 0x24}}, 0x0) sendfile(r2, r1, 0x0, 0x100007800) [ 316.871499][T12516] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 316.917827][T12516] UDF-fs: Scanning with blocksize 2048 failed [ 316.947758][T12516] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 316.965116][T12516] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 316.977979][T12516] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 316.989255][T12516] UDF-fs: Scanning with blocksize 4096 failed [ 317.017287][T12516] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) 20:10:19 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000080)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000080)=""/246) [ 317.068792][ T37] audit: type=1804 audit(1627675818.997:52): pid=12542 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir944026274/syzkaller.Rr89nm/99/cgroup.controllers" dev="sda1" ino=14458 res=1 errno=0 [ 317.163186][ T20] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 317.195131][T12516] loop3: detected capacity change from 0 to 1008 [ 317.221900][T12516] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 317.293850][T12516] UDF-fs: Scanning with blocksize 512 failed [ 317.304472][T12516] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 317.335964][T12516] UDF-fs: Scanning with blocksize 1024 failed [ 317.371905][T12516] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 317.391749][T12516] UDF-fs: Scanning with blocksize 2048 failed [ 317.400234][T12516] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 317.412368][T12516] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 317.446698][T12516] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 317.481515][T12516] UDF-fs: Scanning with blocksize 4096 failed [ 317.488139][ T20] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 317.509119][T12516] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 318.293120][ T20] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 318.302826][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.312450][ T20] usb 2-1: Product: syz [ 318.317058][ T20] usb 2-1: Manufacturer: syz [ 318.321636][ T20] usb 2-1: SerialNumber: syz [ 318.363827][ T20] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 318.433358][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 318.439602][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 318.446575][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 318.452789][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 318.461653][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 318.467768][ T7] Bluetooth: hci5: command 0x0406 tx timeout [ 318.943098][ T20] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 319.146398][T12493] udc-core: couldn't find an available UDC or it's busy [ 319.154275][T12493] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 319.162600][T12493] udc-core: couldn't find an available UDC or it's busy [ 319.169556][T12493] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 319.597768][ T9519] usb 2-1: USB disconnect, device number 30 20:10:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:10:22 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000080)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000080)=""/246) 20:10:22 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="02"], 0x10, 0x0) 20:10:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 20:10:22 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x1) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) 20:10:22 executing program 4: getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x8, "05000000f95d2cb9"}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="08009e"], 0x24}}, 0x0) sendfile(r2, r1, 0x0, 0x100007800) [ 320.173748][T12588] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 20:10:22 executing program 3: getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x8, "05000000f95d2cb9"}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="08009e"], 0x24}}, 0x0) sendfile(r2, r1, 0x0, 0x100007800) 20:10:22 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) bind$packet(r0, 0x0, 0x0) 20:10:22 executing program 2: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000700)) [ 320.326961][ T37] audit: type=1804 audit(1627675822.257:53): pid=12590 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir944026274/syzkaller.Rr89nm/100/cgroup.controllers" dev="sda1" ino=14473 res=1 errno=0 20:10:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 320.423481][ T20] usb 2-1: Service connection timeout for: 257 [ 320.430574][ T20] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 20:10:22 executing program 5: ioctl$sock_ifreq(0xffffffffffffffff, 0x8931, &(0x7f0000000000)={'veth0_to_bridge\x00', @ifru_map}) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x102, 0x18d}, 0x18) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f00000000c0)=0x2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x6}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20c200a2, r0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @remote}, @dev, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20c200a2, r4}) 20:10:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005f80)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}]}], {0x14, 0x10}}, 0x64}}, 0x0) [ 320.470642][ T37] audit: type=1804 audit(1627675822.397:54): pid=12608 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir424809877/syzkaller.aCCyac/84/cgroup.controllers" dev="sda1" ino=14464 res=1 errno=0 [ 320.513234][ T20] ath9k_htc: Failed to initialize the device [ 320.561874][ T9519] usb 2-1: ath9k_htc: USB layer deinitialized [ 320.614426][ T37] audit: type=1804 audit(1627675822.547:55): pid=12621 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/110/cgroup.controllers" dev="sda1" ino=14471 res=1 errno=0 [ 320.933105][ T9519] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 321.213228][ T9519] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 322.023756][ T9519] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 322.033069][ T9519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.041043][ T9519] usb 2-1: Product: syz [ 322.045577][ T9519] usb 2-1: Manufacturer: syz [ 322.050170][ T9519] usb 2-1: SerialNumber: syz [ 322.093833][ T9519] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 322.703167][ T9519] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 322.909222][T12595] udc-core: couldn't find an available UDC or it's busy [ 322.916942][T12595] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 322.926958][T12595] udc-core: couldn't find an available UDC or it's busy [ 322.935020][T12595] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 323.367602][ T7] usb 2-1: USB disconnect, device number 31 20:10:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:10:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000502) 20:10:25 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='sys_exit\x00', r1}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002d00), 0x4) 20:10:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:10:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x39, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x86\xdd'}]}]}, 0x24}}, 0x0) 20:10:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:10:25 executing program 3: syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x36, &(0x7f0000000200)=[{&(0x7f0000010000)="02020202020202027468697320697320616e206f6366733220766f6c756d650002020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202027468697320697320616e206f6366733220766f6c756d6500020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202027468697320697320616e206f6366733220766f6c756d65000202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202027468697320697320616e206f6366733220766f6c756d65000202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202024f4346535632000036f6d510ffffffff000000000080000000000000000000000000000000000000000000003100000000000000000000006bc3655f000000006bc3655f0000000000000000000000000200000000000000000000000000000036f6d51000000000000000000000000000000000000000000000000000000000f8f7b5594b070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a000000140000000000000000006bc3655f00000000000000000300000050bf000007000000050000000000000006000000000000000c0000000c0000000200000076d639680300"/8480, 0x2120}, {&(0x7f0000012200)="000000000000000000000000000000001c9373c47f3e4a6b9d808dd2d24aa9b5000000000000000000000000000000000000000000000000000100006bb9452864e8785ebce66a1600"/96, 0x60, 0x2140}, {&(0x7f0000012300)="47524f5550303100c00f007eda37000036f6d5100000000000000000000000000b0000000000000003000000000000008b4536da017f00000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff3f00"/2336, 0x920, 0x3000}, {&(0x7f0000012d00)="47524f5550303100c00f0d01f300000036f6d51000000000000000000000000008000000000000000400000000000000fff5db574a0000000000000000000000ffffff0300"/96, 0x60, 0x4000}, {&(0x7f0000012e00)="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", 0x100, 0x5000}, {&(0x7f0000012f00)="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"/896, 0x380, 0x6000}, {&(0x7f0000013300)="494e4f444530310036f6d510ffff0300000000000000000000000000000000000000000000000000a4810100110000006bc3655f000000006bc3655f000000006bc3655f0000000000000000000000000700000000000000000000000000000036f6d510000000000000000000000000000000000000000000000000000000000e6883ccdf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f300"/224, 0xe0, 0x7000}, {&(0x7f0000013400)="494e4f444530310036f6d510ffff0400000000000d010000000000000000000000d0100000000000a4810100910400006bc3655f000000006bc3655f000000006bc3655f0000000000000000000000000800000000000000000000000000000036f6d5100000000000000000000000000000000000000000000000000000000060e01e53970300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000d0100000d010100f30001000000000000000000f30000000d0100000400000000000000", 0xe0, 0x8000}, {&(0x7f0000013500)="494e4f444530310036f6d510ffff0500000000000100000000000000000000000010000000000000a4810100110000006bc3655f000000006bc3655f0000000088c3655f0000000000000000000000000900000000000000000000000000000036f6d5100000000000000000000000000000000000000000000000000000000002b6c2686b01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000010000001142000000000000", 0xe0, 0x9000}, {&(0x7f0000013600)="494e4f444530310036f6d510ffff0600000000000001000000000000000000000000100000000000a4810100110200006bc3655f000000006bc3655f000000006bc3655f0000000000000000000000000a00000000000000000000000000000036f6d51000000000000000000000000000000000000000000000000000000000181c8efed904000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000000100001101000000000000", 0xe0, 0xa000}, {&(0x7f0000013700)="494e4f444530310036f6d510ffff0700000000000080000000000000000000000000000800000000a4810100910400006bc3655f000000006bc3655f000000006bc3655f0000000000000000000000000b00000000000000000000000000000036f6d51000000000000000000000000000000000000000000000000000000000f47c43a4090100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002746000000800000007e0100f30002000000000000000000da370000007e00000300000000000000ff01000000020000007e00"/256, 0x100, 0xb000}, {&(0x7f0000013800)="494e4f444530310036f6d510ffff0800000000000600000000000000000000000060000000000000a4810100111000006bc3655f000000006bc3655f0000000088c3655f0000000000000000000000000c00000000000000000000000000000036f6d5100000000000000000000000000000000000000000000000000000000013ee4392e201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3000200000000000000000000000000000002000000124200000000000002000000040000001e4200"/256, 0x100, 0xc000}, {&(0x7f0000013900)="494e4f444530310036f6d510ffff0900000000000600000000000000000000000060000000000000a4810100111000006bc3655f000000006bc3655f0000000089c3655f0000000000000000000000000d00000000000000000000000000000036f6d51000000000000000000000000000000000000000000000000000000000b857039a1801000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f300020000000000000000000000000000000200000018420000000000000200000004000000224200"/256, 0x100, 0xd000}, {&(0x7f0000013a00)="494e4f444530310036f6d510ffff0a0000000000000000000000000000000000380f000000000000ed410200110000006bc3655f000000006bc3655f000000006bc3655f0000000000000000000000000e00000000000000000000000000000036f6d51000000000000000000000000000000000000001000000000000000000186048d6fb0500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000380f0000000000000e00000000000000100001022e0000000600000000000000280f02022e2e00"/256, 0x100, 0xe000}, {&(0x7f0000013b00)="494e4f444530310036f6d510ffff0b0000000000000000000000000000000000380f000000000000ed410200110000006bc3655f000000006bc3655f000000006bc3655f0000000000000000000000000f00000000000000000000000000000036f6d51000000000000000000000000000000000000001000000000000000000036846d3440100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000380f0000000000000f00000000000000100001022e0000000600000000000000280f02022e2e00"/256, 0x100, 0xf000}, {&(0x7f0000013c00)="494e4f444530310036f6d510ffff0c00000000000000000000000000000000000000000000000000a4810100910400006bc3655f000000006bc3655f000000006bc3655f0000000000000000000000001000000000000000000000000000000036f6d51000000000000000000000000000000000000000000000000000000000fa53fdd3d5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040100f300"/224, 0xe0, 0x10000}, {&(0x7f0000013d00)="494e4f444530310036f6d510ffff0d00000000000000000000000000000000000000000000000000a4810100910400006bc3655f000000006bc3655f000000006bc3655f0000000000000000000000001100000000000000000000000000000036f6d51000000000000000000000000000000000000000000000000000000000cb16215626020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040100f300"/224, 0xe0, 0x11000}, {&(0x7f0000013e00)="494e4f444530310036f6d510ffff0e00000000000004000000000000000000000000400000000000a4810100910400006bc3655f000000006bc3655f000000006bc3655f0000000000000000000000001200000000000000000000000000000036f6d5100000000000000000000000000000000000000000000000000000000056a4aef652030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000004000000040100f30001000000000000000000fe030000000400002642000000000000", 0xe0, 0x12000}, {&(0x7f0000013f00)="494e4f444530310036f6d510ffff0f00000000000000000000000000000000000000000000000000a4810100910400006bc3655f000000006bc3655f000000006bc3655f0000000000000000000000001300000000000000000000000000000036f6d51000000000000000000000000000000000000000000000000000000000e89ae886d3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040100f300"/224, 0xe0, 0x13000}, {&(0x7f0000014000)="494e4f444530310036f6d510ffff1000000000000020000000000000000000000000000200000000a4810100110100006bc3655f000000006bc3655f0000000075c3655f0000000000000000000000001400000000000000000000000000000036f6d51000000000000000000000000000000000000000000000000000000000a8cb27d09104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000002000001102000000000000", 0xe0, 0x14000}, {&(0x7f0000014100)="494e4f444530310036f6d510ffff1100000000000020000000000000000000000000000200000000a4810100110100006bc3655f000000006bc3655f000000007ec3655f0000000000000000000000001500000000000000000000000000000036f6d51000000000000000000000000000000000000000000000000000000000cf2b5fc2b202000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000002000001122000000000000", 0xe0, 0x15000}, {&(0x7f0000014200)="494e4f444530310036f6d510ffff1200000000000000000000000000000000000000000000000000a4810100d10000006bc3655f000000006bc3655f000000006bc3655f0000000000000000000000001600000000000000000000000000000036f6d51000000000000000000000000000000000000000000000000000000000852cac72de000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300f00"/224, 0xe0, 0x16000}, {&(0x7f0000014300)="494e4f444530310036f6d510ffff1300000000000000000000000000000000000000000000000000a4810100d10000006bc3655f000000006bc3655f000000006bc3655f0000000000000000000000001700000000000000000000000000000036f6d51000000000000000000000000000000000000000000000000000000000b46970f72d020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300f00"/224, 0xe0, 0x17000}, {&(0x7f0000014400)="494e4f444530310036f6d510ffff1400000000000000000000000000000000000000000000000000a4810100110800006bc3655f000000006bc3655f000000006bc3655f0000000000000000000000001800000000000000000000000000000036f6d51000000000000000000000000000000000000000000000000000000000d4de61142c0500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e70100"/224, 0xe0, 0x18000}, {&(0x7f0000014500)="494e4f444530310036f6d510ffff1500000000000000000000000000000000000000000000000000a4810100110800006bc3655f000000006bc3655f000000006bc3655f0000000000000000000000001900000000000000000000000000000036f6d51000000000000000000000000000000000000000000000000000000000e59bbd91df0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e70100"/224, 0xe0, 0x19000}, {&(0x7f0000014600)="494e4f444530310036f6d510ffff1600000000000200000000000000000000000020000000000000a4810100111000006bc3655f000000006bc3655f0000000088c3655f0000000000000000000000001a00000000000000000000000000000036f6d510000000000000000000000000000000000000000000000000000000008f4851f3e902000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000020000001442000000000000", 0xe0, 0x1a000}, {&(0x7f0000014700)="494e4f444530310036f6d510ffff1700000000000200000000000000000000000020000000000000a4810100111000006bc3655f000000006bc3655f0000000088c3655f0000000000000000000000001b00000000000000000000000000000036f6d5100000000000000000000000000000000000000000000000000000000026e9940dd706000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000020000001642000000000000", 0xe0, 0x1b000}, {&(0x7f0000014800)="494e4f444530310036f6d510ffff1800000000000200000000000000000000000020000000000000a4810100111000006bc3655f000000006bc3655f000000008ac3655f0000000000000000000000001c00000000000000000000000000000036f6d510000000000000000000000000000000000000000000000000000000005d39b87b5006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000020000001a42000000000000", 0xe0, 0x1c000}, {&(0x7f0000014900)="494e4f444530310036f6d510ffff1900000000000200000000000000000000000020000000000000a4810100111000006bc3655f000000006bc3655f000000008ac3655f0000000000000000000000001d00000000000000000000000000000036f6d51000000000000000000000000000000000000000000000000000000000c4514e73a004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000020000001c42000000000000", 0xe0, 0x1d000}, {&(0x7f0000014a00)="c03b399800000004000000000000100000002000000000010000000100000001000000000000000000000002000000001c9373c47f3e4a6b9d808dd2d24aa9b50000000100"/96, 0x60, 0x211000}, {&(0x7f0000014b00)="c03b399800000004000000000000100000002000000000010000000100000001000000000000000000000002000000001c9373c47f3e4a6b9d808dd2d24aa9b50000000100"/96, 0x60, 0x2211000}, {&(0x7f0000014c00)="7024f50c00000000803a0900803a090010270000060000000000000005000000380f000000000000ed410300110000006bc3655f000000006bc3655f000000006bc3655f0000000000000000000000000500000000000000000000000000000036f6d51000000000000000000000000000000000000001000000000000000000f40e2c161d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000380f0000000000000500000000000000100001022e0000000500000000000000280f02022e2e00"/256, 0x100, 0x4212000}, {&(0x7f0000014d00)="00000000000000000000000000000000000000000000000084de884ae50000000200"/64, 0x40, 0x4212fe0}, {&(0x7f0000014e00)="000000000000000000000000000000000000000000000000b6ad528d05000000c024f50c0000000001000000010000000200"/64, 0x40, 0x4213fe0}, {&(0x7f0000014f00)="00000000000000000000000000000000000000000000000090aefd31bc000000", 0x20, 0x4214fe0}, {&(0x7f0000015000)="000000000000000000000000000000000000000000000000eeffe33800000000c024f50c0000000001000000010000000200"/64, 0x40, 0x4215fe0}, {&(0x7f0000015100)="00000000000000000000000000000000000000000000000090aefd31bc000000", 0x20, 0x4216fe0}, {&(0x7f0000015200)="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"/288, 0x120, 0x4217fe0}, {&(0x7f0000015400)="000000000000000000000000000000000000000000000000c904cdac260100000200"/64, 0x40, 0x4218fe0}, {&(0x7f0000015500)="000000000000000000000000000000000000000000000000b6ad528d05000000c124f50c0000000001000000010000000200"/64, 0x40, 0x4219fe0}, {&(0x7f0000015600)="000000000000000000000000000000000000000000000000bc07256bbf000000", 0x20, 0x421afe0}, {&(0x7f0000015700)="000000000000000000000000000000000000000000000000eeffe33800000000c124f50c0000000001000000010000000200"/64, 0x40, 0x421bfe0}, {&(0x7f0000015800)="000000000000000000000000000000000000000000000000bc07256bbf000000", 0x20, 0x421cfe0}, {&(0x7f0000015900)="000000000000000000000000000000000000000000000000eeffe338000000000300"/64, 0x40, 0x421dfe0}, {&(0x7f0000015a00)="0000000000000000000000000000000000000000000000009a048ad7060000000400"/64, 0x40, 0x421efe0}, {&(0x7f0000015b00)="0000000000000000000000000000000000000000000000001f5df088060000000500"/64, 0x40, 0x421ffe0}, {&(0x7f0000015c00)="00000000000000000000000000000000000000000000000033f428d205000000000000000000000001000000000000000000000000000000000000000000000000000000000000000100"/96, 0x60, 0x4220fe0}, {&(0x7f0000015d00)="00000000000000000000000000000000000000000000000073751915020100000300"/64, 0x40, 0x4221fe0}, {&(0x7f0000015e00)="0000000000000000000000000000000000000000000000009a048ad7060000000400"/64, 0x40, 0x4222fe0}, {&(0x7f0000015f00)="0000000000000000000000000000000000000000000000001f5df088060000000500"/64, 0x40, 0x4223fe0}, {&(0x7f0000016000)="00000000000000000000000000000000000000000000000033f428d205000000000000000000000001000000000000000000000000000000000000000000000000000000000000000100"/96, 0x60, 0x4224fe0}, {&(0x7f0000016100)="000000000000000000000000000000000000000000000000737519150201000047524f555030310000010004fe03000036f6d51000000000000000000000000012000000000000002642000000000000e42f8fad0701000000000000000000000300"/128, 0x80, 0x4225fe0}, {&(0x7f0000016200)="494e4f444530310036f6d5100000010000000000000000000000000000000000380f000000000000ed410200010000008ac3655f000000008ac3655f000000008ac3655f0000000000000000000000002742000000000000000000000000000036f6d51000000000000000000000000000000000000001000000000000000000150bce7dee0400000000000000000000000000000000000026420000000000000000000000000000000000000000000000000000000000000000000000000000380f0000000000002742000000000000100001022e0000000500000000000000280f02022e2e00"/256, 0x100, 0x4227000}, {&(0x7f0000016300)="47524f5550303100c00f0002ff01010036f6d5100000000000000000000000000b00000000000000007e000000000000ae0bac207903000000000000000000000100"/96, 0x60, 0x7e00000}], 0x0, &(0x7f0000016400)) [ 323.943152][T12654] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 324.014647][ T37] audit: type=1804 audit(1627675825.947:56): pid=12653 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir893602340/syzkaller.PAIxov/93/cgroup.controllers" dev="sda1" ino=14487 res=1 errno=0 [ 324.037087][T12663] loop3: detected capacity change from 0 to 264192 20:10:26 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001680)={[], [{@context={'context', 0x3d, 'staff_u'}}]}) [ 324.089467][T12663] (syz-executor.3,12663,1):ocfs2_parse_options:1477 ERROR: Invalid heartbeat mount options [ 324.142269][T12663] (syz-executor.3,12663,1):ocfs2_fill_super:1186 ERROR: status = -22 [ 324.159351][ T37] audit: type=1804 audit(1627675826.007:57): pid=12657 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/110/cgroup.controllers" dev="sda1" ino=14493 res=1 errno=0 [ 324.183174][ T9519] usb 2-1: Service connection timeout for: 257 [ 324.192918][ T9519] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 324.212278][ T9519] ath9k_htc: Failed to initialize the device [ 324.229615][T12663] loop3: detected capacity change from 0 to 264192 [ 324.253380][ T7] usb 2-1: ath9k_htc: USB layer deinitialized [ 324.269463][T12663] (syz-executor.3,12663,1):ocfs2_parse_options:1477 ERROR: Invalid heartbeat mount options 20:10:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 324.346776][T12663] (syz-executor.3,12663,1):ocfs2_fill_super:1186 ERROR: status = -22 [ 324.357328][ T37] audit: type=1804 audit(1627675826.007:58): pid=12655 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/111/cgroup.controllers" dev="sda1" ino=14492 res=1 errno=0 20:10:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:10:26 executing program 3: socketpair(0x22, 0x3, 0x0, &(0x7f0000000700)) 20:10:26 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) libbpf: failed to find valid kernel BTF libbpf: Error loading vmlinux BTF: -3 libbpf: failed to load object 'iterators_bpf' libbpf: failed to load BPF skeleton 'iterators_bpf': -3 Failed load could be due to wrong endianness [ 324.653129][ T7] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 324.686859][ T37] audit: type=1804 audit(1627675826.617:59): pid=12683 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/111/cgroup.controllers" dev="sda1" ino=14481 res=1 errno=0 [ 324.754228][ T37] audit: type=1804 audit(1627675826.667:60): pid=12682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/112/cgroup.controllers" dev="sda1" ino=14479 res=1 errno=0 [ 325.003293][ T7] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 325.963178][ T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 325.972576][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.981430][ T7] usb 2-1: Product: syz [ 325.985731][ T7] usb 2-1: Manufacturer: syz [ 325.990326][ T7] usb 2-1: SerialNumber: syz [ 326.043698][ T7] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 326.693124][ T7] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 326.896798][T12659] udc-core: couldn't find an available UDC or it's busy [ 326.904888][T12659] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 327.337692][ T9753] usb 2-1: USB disconnect, device number 32 20:10:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:10:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xfd5b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 20:10:29 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 20:10:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:10:29 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:10:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:10:29 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 20:10:29 executing program 3: syz_mount_image$v7(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x400, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000400)) [ 328.062842][ T37] audit: type=1804 audit(1627675829.987:61): pid=12716 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/113/cgroup.controllers" dev="sda1" ino=14510 res=1 errno=0 [ 328.063984][ T37] audit: type=1804 audit(1627675829.997:62): pid=12717 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/112/cgroup.controllers" dev="sda1" ino=14509 res=1 errno=0 20:10:30 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) [ 328.172242][T12729] loop3: detected capacity change from 0 to 2 [ 328.183321][ T7] usb 2-1: Service connection timeout for: 257 [ 328.183343][ T7] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 328.183633][ T7] ath9k_htc: Failed to initialize the device [ 328.183874][ T9753] usb 2-1: ath9k_htc: USB layer deinitialized [ 328.205920][T12729] VFS: could not find a valid V7 on loop3. 20:10:30 executing program 3: syz_mount_image$v7(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x400, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000400)) [ 328.258580][T12729] loop3: detected capacity change from 0 to 2 [ 328.266716][T12729] VFS: could not find a valid V7 on loop3. 20:10:30 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) 20:10:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 328.471927][T12744] loop3: detected capacity change from 0 to 2 [ 328.553598][ T9753] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 328.573330][T12744] VFS: could not find a valid V7 on loop3. [ 328.683218][ T37] audit: type=1804 audit(1627675830.617:63): pid=12749 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/114/cgroup.controllers" dev="sda1" ino=14498 res=1 errno=0 [ 328.879287][ T9753] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 329.813092][ T9753] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 329.822689][ T9753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.831415][ T9753] usb 2-1: Product: syz [ 329.835940][ T9753] usb 2-1: Manufacturer: syz [ 329.840573][ T9753] usb 2-1: SerialNumber: syz [ 329.883566][ T9753] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 330.453071][ T9753] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 330.658060][T12720] udc-core: couldn't find an available UDC or it's busy [ 330.666274][T12720] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 331.097703][ T267] usb 2-1: USB disconnect, device number 33 20:10:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:10:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xfd5b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 20:10:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:10:33 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) 20:10:33 executing program 3: syz_mount_image$v7(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x400, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000400)) 20:10:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 331.684022][T12777] loop3: detected capacity change from 0 to 2 [ 331.726923][T12777] VFS: could not find a valid V7 on loop3. [ 331.738079][ T37] audit: type=1804 audit(1627675833.667:64): pid=12781 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/113/cgroup.controllers" dev="sda1" ino=14528 res=1 errno=0 20:10:33 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) [ 331.751130][ T37] audit: type=1804 audit(1627675833.677:65): pid=12776 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/115/cgroup.controllers" dev="sda1" ino=14533 res=1 errno=0 20:10:33 executing program 3: syz_mount_image$v7(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x400, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000400)) [ 331.943255][ T9753] usb 2-1: Service connection timeout for: 257 [ 331.943279][ T9753] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 20:10:33 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) r0 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) [ 331.943552][ T9753] ath9k_htc: Failed to initialize the device [ 331.943819][ T267] usb 2-1: ath9k_htc: USB layer deinitialized 20:10:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 332.076784][T12797] loop3: detected capacity change from 0 to 2 20:10:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000502) [ 332.108018][T12797] VFS: could not find a valid V7 on loop3. 20:10:34 executing program 3: syz_mount_image$v7(0x0, &(0x7f0000000180)='./file0\x00', 0x400, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000400)) [ 332.308409][ T37] audit: type=1804 audit(1627675834.237:66): pid=12805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/114/cgroup.controllers" dev="sda1" ino=14513 res=1 errno=0 [ 332.311302][T12809] loop3: detected capacity change from 0 to 2 [ 332.339592][ T37] audit: type=1804 audit(1627675834.267:67): pid=12806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/116/cgroup.controllers" dev="sda1" ino=14526 res=1 errno=0 [ 332.342020][ T267] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 332.653964][ T267] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 333.603131][ T267] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 333.619150][ T267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.628520][ T267] usb 2-1: Product: syz [ 333.632682][ T267] usb 2-1: Manufacturer: syz [ 333.638033][ T267] usb 2-1: SerialNumber: syz [ 333.693712][ T267] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 334.293060][ T267] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 334.507192][T12783] udc-core: couldn't find an available UDC or it's busy [ 334.514487][T12783] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 334.937414][ T20] usb 2-1: USB disconnect, device number 34 20:10:37 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:10:37 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) r0 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 20:10:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000502) 20:10:37 executing program 3: syz_mount_image$v7(0x0, &(0x7f0000000180)='./file0\x00', 0x400, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000400)) 20:10:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xfd5b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 20:10:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 335.495757][T12832] loop3: detected capacity change from 0 to 2 20:10:37 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) r0 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 20:10:37 executing program 5: ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 20:10:37 executing program 3: syz_mount_image$v7(0x0, &(0x7f0000000180)='./file0\x00', 0x400, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000400)) [ 335.592492][ T37] audit: type=1804 audit(1627675837.517:68): pid=12835 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/115/cgroup.controllers" dev="sda1" ino=14163 res=1 errno=0 20:10:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000502) 20:10:37 executing program 5: ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) [ 335.719095][ T37] audit: type=1804 audit(1627675837.567:69): pid=12844 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/117/cgroup.controllers" dev="sda1" ino=14194 res=1 errno=0 20:10:37 executing program 3: syz_mount_image$v7(&(0x7f0000000140), 0x0, 0x400, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000400)) [ 335.722128][T12849] loop3: detected capacity change from 0 to 2 [ 335.783469][ T267] usb 2-1: Service connection timeout for: 257 [ 335.783491][ T267] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 335.783773][ T267] ath9k_htc: Failed to initialize the device [ 335.784020][ T20] usb 2-1: ath9k_htc: USB layer deinitialized [ 335.943765][T12864] loop3: detected capacity change from 0 to 2 [ 335.945034][ T37] audit: type=1804 audit(1627675837.877:70): pid=12860 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/116/cgroup.controllers" dev="sda1" ino=14083 res=1 errno=0 [ 336.159250][ T20] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 336.503370][ T20] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 336.633626][ T20] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 336.641775][ T20] usb 2-1: can't read configurations, error -22 [ 336.793097][ T20] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 337.073263][ T20] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 337.194099][ T20] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 337.202741][ T20] usb 2-1: can't read configurations, error -22 [ 337.209929][ T20] usb usb2-port1: attempt power cycle [ 337.623101][ T20] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 337.753258][ T20] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 337.893292][ T20] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 337.901228][ T20] usb 2-1: can't read configurations, error -22 [ 338.053106][ T20] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 338.183193][ T20] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 338.303101][ T20] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 338.311428][ T20] usb 2-1: can't read configurations, error -22 [ 338.319470][ T20] usb usb2-port1: unable to enumerate USB device 20:10:40 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:10:40 executing program 5: ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 20:10:40 executing program 3: syz_mount_image$v7(&(0x7f0000000140), 0x0, 0x400, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000400)) 20:10:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:10:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:10:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xfd5b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 20:10:40 executing program 5: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) [ 338.623312][ T37] audit: type=1804 audit(1627675840.557:71): pid=12880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/117/cgroup.controllers" dev="sda1" ino=14289 res=1 errno=0 [ 338.630147][T12889] loop3: detected capacity change from 0 to 2 20:10:40 executing program 5: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 20:10:40 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 338.734206][ T37] audit: type=1804 audit(1627675840.667:72): pid=12890 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/118/cgroup.controllers" dev="sda1" ino=14258 res=1 errno=0 20:10:40 executing program 3: syz_mount_image$v7(&(0x7f0000000140), 0x0, 0x400, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000400)) 20:10:40 executing program 5: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) [ 338.954883][T12906] loop3: detected capacity change from 0 to 2 20:10:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:10:41 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 20:10:41 executing program 3: syz_mount_image$v7(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000400)) 20:10:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:10:41 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 20:10:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) [ 339.137524][T12914] VFS: could not find a valid V7 on loop3. [ 339.153139][ T9519] usb 2-1: new high-speed USB device number 39 using dummy_hcd 20:10:41 executing program 3: syz_mount_image$v7(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000400)) 20:10:41 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 20:10:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) [ 339.317308][ T37] audit: type=1804 audit(1627675841.247:73): pid=12922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/118/cgroup.controllers" dev="sda1" ino=14553 res=1 errno=0 [ 339.396096][ T37] audit: type=1804 audit(1627675841.277:74): pid=12924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/119/cgroup.controllers" dev="sda1" ino=14554 res=1 errno=0 [ 339.405034][T12931] VFS: could not find a valid V7 on loop3. [ 339.463286][ T9519] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 339.593314][ T9519] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 339.617493][ T9519] usb 2-1: can't read configurations, error -22 [ 339.804451][ T9519] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 340.083209][ T9519] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 340.203864][ T9519] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 340.212137][ T9519] usb 2-1: can't read configurations, error -22 [ 340.219372][ T9519] usb usb2-port1: attempt power cycle [ 340.633074][ T9519] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 340.803417][ T9519] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 340.936537][ T9519] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 340.944711][ T9519] usb 2-1: can't read configurations, error -22 [ 341.093721][ T9519] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 341.233241][ T9519] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 341.353672][ T9519] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 341.362388][ T9519] usb 2-1: can't read configurations, error -22 [ 341.370029][ T9519] usb usb2-port1: unable to enumerate USB device 20:10:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 20:10:43 executing program 3: syz_mount_image$v7(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000400)) 20:10:43 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 20:10:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:10:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:10:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:10:43 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 20:10:43 executing program 4: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfd5b) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)) [ 341.934580][T12955] VFS: could not find a valid V7 on loop3. 20:10:43 executing program 3: syz_mount_image$v7(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000400)) [ 341.995753][ T37] audit: type=1804 audit(1627675843.927:75): pid=12957 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/119/cgroup.controllers" dev="sda1" ino=14572 res=1 errno=0 20:10:44 executing program 4: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfd5b) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)) 20:10:44 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) [ 342.113433][ T37] audit: type=1804 audit(1627675843.967:76): pid=12954 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/120/cgroup.controllers" dev="sda1" ino=14571 res=1 errno=0 20:10:44 executing program 3: syz_mount_image$v7(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000400)) 20:10:44 executing program 4: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfd5b) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)) 20:10:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000502) [ 342.313168][ T9519] usb 2-1: new high-speed USB device number 43 using dummy_hcd 20:10:44 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x0) r1 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 20:10:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 342.593364][ T37] audit: type=1804 audit(1627675844.527:77): pid=12988 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/121/cgroup.controllers" dev="sda1" ino=14548 res=1 errno=0 [ 342.643763][ T9519] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 343.483185][ T9519] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 343.492795][ T9519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.501229][ T9519] usb 2-1: Product: syz [ 343.505952][ T9519] usb 2-1: Manufacturer: syz [ 343.510844][ T9519] usb 2-1: SerialNumber: syz [ 343.553858][ T9519] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 344.143129][ T9519] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 20:10:46 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:10:46 executing program 3: syz_mount_image$v7(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000400)) 20:10:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xfd5b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 20:10:46 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x0) r1 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 20:10:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000502) 20:10:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 344.356809][ T9490] usb 2-1: USB disconnect, device number 43 20:10:46 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x0) r1 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 20:10:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000502) 20:10:46 executing program 3: syz_mount_image$v7(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x400, 0x0, &(0x7f0000000200), 0x0, 0x0) [ 344.530188][ T37] audit: type=1804 audit(1627675846.457:78): pid=13016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/122/cgroup.controllers" dev="sda1" ino=14589 res=1 errno=0 20:10:46 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x0, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) [ 344.675141][T13030] loop3: detected capacity change from 0 to 2 20:10:46 executing program 3: syz_mount_image$v7(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x400, 0x0, &(0x7f0000000200), 0x0, 0x0) 20:10:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 344.890645][T13041] loop3: detected capacity change from 0 to 2 [ 345.056701][ T37] audit: type=1804 audit(1627675846.987:79): pid=13044 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/123/cgroup.controllers" dev="sda1" ino=13888 res=1 errno=0 [ 345.224038][ T9519] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 345.249829][ T9519] ath9k_htc: Failed to initialize the device [ 345.277060][ T9490] usb 2-1: ath9k_htc: USB layer deinitialized [ 345.653050][ T9490] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 345.963129][ T9490] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 346.813262][ T9490] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 346.822592][ T9490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.831094][ T9490] usb 2-1: Product: syz [ 346.835597][ T9490] usb 2-1: Manufacturer: syz [ 346.840199][ T9490] usb 2-1: SerialNumber: syz [ 346.883795][ T9490] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 20:10:49 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:10:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:10:49 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x0, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 20:10:49 executing program 3: syz_mount_image$v7(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x400, 0x0, &(0x7f0000000200), 0x0, 0x0) 20:10:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfd5b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 20:10:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 347.432050][ T9753] usb 2-1: USB disconnect, device number 44 [ 347.462062][ T9490] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 347.488334][ T9753] usb 2-1: ath9k_htc: USB layer deinitialized 20:10:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfd5b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) [ 347.529737][T13080] loop3: detected capacity change from 0 to 2 20:10:49 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x0, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) [ 347.623210][ T37] audit: type=1804 audit(1627675849.547:80): pid=13075 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/124/cgroup.controllers" dev="sda1" ino=14606 res=1 errno=0 20:10:49 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001c00), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000001c40)={0xce}) 20:10:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfd5b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 20:10:49 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x2, 0x0, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 20:10:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 347.913123][ T9753] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 348.095195][ T37] audit: type=1804 audit(1627675850.027:81): pid=13107 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/125/cgroup.controllers" dev="sda1" ino=14592 res=1 errno=0 [ 348.193399][ T9753] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 348.250298][ T37] audit: type=1804 audit(1627675850.177:82): pid=13087 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/123/cgroup.controllers" dev="sda1" ino=14608 res=1 errno=0 [ 348.993847][ T9753] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 349.003680][ T9753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.012129][ T9753] usb 2-1: Product: syz [ 349.016374][ T9753] usb 2-1: Manufacturer: syz [ 349.021764][ T9753] usb 2-1: SerialNumber: syz [ 349.073955][ T9753] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 349.643155][ T9753] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 20:10:51 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:10:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="66530700ae897094e7b126b097eaa769be6d28c41bd34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b5579c65d37237647e947e4df73950000bb3987b178b1ead5a678216d5d3568dab9af674d5cc06f3eb349fd", 0x5a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:10:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(r0, 0x0, 0xfd5b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 20:10:51 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x2, 0x0, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 20:10:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:10:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 349.858759][ T267] usb 2-1: USB disconnect, device number 45 20:10:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(r0, 0x0, 0xfd5b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 20:10:51 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x2, 0x0, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) [ 350.053515][ T37] audit: type=1804 audit(1627675851.987:83): pid=13138 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/126/cgroup.controllers" dev="sda1" ino=14626 res=1 errno=0 20:10:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(r0, 0x0, 0xfd5b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 20:10:52 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 20:10:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xfd5b) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)) 20:10:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 350.610899][ T37] audit: type=1804 audit(1627675852.537:84): pid=13165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/127/cgroup.controllers" dev="sda1" ino=14626 res=1 errno=0 [ 350.663176][ T9753] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 350.670306][ T9753] ath9k_htc: Failed to initialize the device [ 350.689412][ T267] usb 2-1: ath9k_htc: USB layer deinitialized [ 350.771704][ T37] audit: type=1804 audit(1627675852.697:85): pid=13144 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/124/cgroup.controllers" dev="sda1" ino=14624 res=1 errno=0 [ 351.063563][ T267] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 351.343234][ T267] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 352.143982][ T267] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 352.153504][ T267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.161488][ T267] usb 2-1: Product: syz [ 352.166924][ T267] usb 2-1: Manufacturer: syz [ 352.171725][ T267] usb 2-1: SerialNumber: syz [ 352.213775][ T267] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 352.793125][ T267] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 20:10:54 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:10:54 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 20:10:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xfd5b) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)) 20:10:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:10:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:10:54 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000001840)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) [ 352.945313][ T9490] usb 2-1: USB disconnect, device number 46 20:10:55 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 20:10:55 executing program 3: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x231c06d9294c1744, &(0x7f0000000500)) [ 353.132088][ T37] audit: type=1804 audit(1627675855.057:86): pid=13194 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/128/cgroup.controllers" dev="sda1" ino=14642 res=1 errno=0 20:10:55 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(0x0, r1) 20:10:55 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:10:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8001, 0x2, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000200)}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='b']) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, 0x1000) socketpair(0x0, 0x0, 0x0, &(0x7f0000004a00)) 20:10:55 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(0x0, r1) [ 353.568677][T13216] loop3: detected capacity change from 0 to 64 [ 353.617505][T13216] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 353.687408][ T37] audit: type=1804 audit(1627675855.617:87): pid=13218 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/129/cgroup.controllers" dev="sda1" ino=14639 res=1 errno=0 [ 353.760082][T13216] loop3: detected capacity change from 0 to 64 [ 353.778461][T13216] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 353.830858][ T37] audit: type=1804 audit(1627675855.757:88): pid=13199 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/125/cgroup.controllers" dev="sda1" ino=14638 res=1 errno=0 [ 353.863099][ T267] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 353.872753][ T267] ath9k_htc: Failed to initialize the device [ 353.946772][ T9490] usb 2-1: ath9k_htc: USB layer deinitialized [ 354.363053][ T9490] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 354.673403][ T9490] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 355.593135][ T9490] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 355.602278][ T9490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.611180][ T9490] usb 2-1: Product: syz [ 355.616439][ T9490] usb 2-1: Manufacturer: syz [ 355.621046][ T9490] usb 2-1: SerialNumber: syz [ 355.663742][ T9490] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 20:10:58 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:10:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xfd5b) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)) 20:10:58 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(0x0, r1) 20:10:58 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) 20:10:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:10:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 356.062729][ T9519] usb 2-1: USB disconnect, device number 47 [ 356.069030][ T9490] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 356.087732][ T9519] usb 2-1: ath9k_htc: USB layer deinitialized 20:10:58 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) 20:10:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:10:58 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/pid\x00') 20:10:58 executing program 1: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 356.270056][ T37] audit: type=1804 audit(1627675858.197:89): pid=13257 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/130/cgroup.controllers" dev="sda1" ino=14663 res=1 errno=0 20:10:58 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) 20:10:58 executing program 3: syz_mount_image$ext4(&(0x7f0000001800)='ext3\x00', &(0x7f0000001840)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000003c40)) 20:10:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:10:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xfd5b) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 20:10:58 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) 20:10:58 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, 0x0, 0x0) r2 = syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0xb00, &(0x7f00000000c0)=ANY=[]) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_mount_image$squashfs(0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x6, &(0x7f00000009c0)=[{0x0, 0x0, 0x3ff}, {&(0x7f0000003540)="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", 0x4fb}, {0x0}, {&(0x7f0000000800)="4c8b2d52299c7db1e2aea29b3389d2e16107901d08b0d56ee2008997d76e4ea4607970aec1c583dcd2f50c9c0a7d83364f76d8cd3d80ae742d64f0c36bb7d1c3c1b90e477839923ac36956292cd2c9333a921fdd2171ef3a59b1e46fd0439b48ca04dd64d090e03d0136894935e037009cb181b746f329e5a9abbb61cbd73511ed6527d9ee978f4c325009788167112bfabe97b2505566ef17f27e2c7cdd361e4994253e202ac27313bbf7015217a351f0a0fef8810368947f0374c71971dbafa5", 0xc1, 0x9}, {&(0x7f0000000900)="f2dbc9ac2dda87f3c949ccd10c2623c16b72b55ab22dd9639518cb05e1", 0x1d, 0x5}, {&(0x7f0000000600)="c2bc784e4dc5a23281994a4bbb470448d10913513159c2ebc62e240ec71a92e75e97bc0c3822753a9f20a3b10334b0f0", 0x30}], 0x20, &(0x7f0000000a80)=ANY=[]) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000003500)=[{0x0}], 0x0, 0x0) r3 = openat(r2, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x2010, r3, 0x19de5000) [ 356.743032][ T267] usb 2-1: new high-speed USB device number 48 using dummy_hcd 20:10:58 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4300, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, 0x0) 20:10:58 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x100000502) 20:10:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:10:58 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x100000502) 20:10:58 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x2, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000980)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1d1001cc2de850f1fffb2aed768634ef7e75effac2ac4c15e29fb3c18fafff8d198e312475ffa1d000000000000ad25822a17b17f463e104179c19c2ad2fbddc0777df2ec4f62826086704ddf95b43fcba468b720660208bb69031e12558284228bf73e037e2880b514a6b8a57f41fb86c26defeaf7e7230987f8ec610694e89ad37c804b9e46226ca6b9956a74a7d9ecf9be8f7ffba2f21b2dd0702c79aba387ec543ef5", 0xc2, 0xffff}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000002c0)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004090) truncate(&(0x7f00000001c0)='./file1\x00', 0x6) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c840}, 0x5) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0xc8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) [ 356.929779][T13298] loop3: detected capacity change from 0 to 264192 [ 357.017293][ T37] audit: type=1804 audit(1627675858.947:90): pid=13300 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/131/cgroup.controllers" dev="sda1" ino=14662 res=1 errno=0 [ 357.073900][ T267] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 357.095628][T13307] loop5: detected capacity change from 0 to 270 [ 357.959307][ T267] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 357.969959][ T267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.990710][ T267] usb 2-1: Product: syz [ 357.995902][ T267] usb 2-1: Manufacturer: syz [ 358.000572][ T267] usb 2-1: SerialNumber: syz [ 358.053931][ T267] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 358.703126][ T267] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 20:11:00 executing program 1: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:00 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x2, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000980)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1d1001cc2de850f1fffb2aed768634ef7e75effac2ac4c15e29fb3c18fafff8d198e312475ffa1d000000000000ad25822a17b17f463e104179c19c2ad2fbddc0777df2", 0x61, 0xffff}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000002c0)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250c000000080031002fe8000005002f0000000000060028000000000005002a000000"], 0x34}, 0x1, 0x0, 0x0, 0x4c840}, 0x5) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="bc0100", @ANYRES16=0x0, @ANYBLOB], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0xc8) socket$inet_tcp(0x2, 0x1, 0x0) 20:11:00 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x100000502) 20:11:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 20:11:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xfd5b) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 20:11:00 executing program 5: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x1, &(0x7f0000001800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0}]) [ 358.916852][ T20] usb 2-1: USB disconnect, device number 48 20:11:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) [ 359.042208][T13347] loop3: detected capacity change from 0 to 270 20:11:01 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) clone3(0x0, 0x0) msgget(0x2, 0x0) geteuid() ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb000001000800"]) [ 359.096786][ T37] audit: type=1804 audit(1627675861.027:91): pid=13343 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/132/cgroup.controllers" dev="sda1" ino=14680 res=1 errno=0 20:11:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 20:11:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:01 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x2, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000980)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1d1001cc2de850f1fffb2aed768634ef7e75effac2ac4c15e29fb3c18fafff8d198e312475ffa1d000000000000ad25822a17b17f463e104179c19c2ad2fbddc0777df2", 0x61, 0xffff}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000002c0)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250c000000080031002fe8000005002f0000000000060028000000000005002a000000"], 0x34}, 0x1, 0x0, 0x0, 0x4c840}, 0x5) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="bc0100", @ANYRES16=0x0, @ANYBLOB], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0xc8) socket$inet_tcp(0x2, 0x1, 0x0) 20:11:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) [ 359.345165][ T37] audit: type=1804 audit(1627675861.277:92): pid=13363 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/133/cgroup.controllers" dev="sda1" ino=14684 res=1 errno=0 [ 359.519075][T13372] loop3: detected capacity change from 0 to 270 [ 359.623026][ T37] audit: type=1804 audit(1627675861.547:93): pid=13373 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/134/cgroup.controllers" dev="sda1" ino=14677 res=1 errno=0 [ 359.783429][ T267] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 359.795134][ T267] ath9k_htc: Failed to initialize the device [ 359.808421][ T20] usb 2-1: ath9k_htc: USB layer deinitialized [ 360.183124][ T20] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 360.503465][ T20] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 361.313241][ T20] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 361.323070][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.331044][ T20] usb 2-1: Product: syz [ 361.335563][ T20] usb 2-1: Manufacturer: syz [ 361.340158][ T20] usb 2-1: SerialNumber: syz [ 361.383846][ T20] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 361.963105][ T20] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 20:11:03 executing program 1: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 20:11:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="b800000013000100000000000000000000000000000000000000000000000001fc000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) 20:11:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xfd5b) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 20:11:03 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) clone3(0x0, 0x0) msgget(0x2, 0x0) geteuid() ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb000001000800"]) [ 362.005549][ T267] usb 2-1: USB disconnect, device number 49 20:11:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:04 executing program 3: clone3(&(0x7f0000000580)={0x49081300, &(0x7f00000002c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:11:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 20:11:04 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, 0x0, 0x0) r2 = syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_mount_image$squashfs(&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x7, &(0x7f00000009c0)=[{0x0, 0x0, 0x3ff}, {&(0x7f0000003540)="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", 0x4f2}, {&(0x7f0000000700)="2a83d495a799af7e2db317f66c7fefc67a880c853666ba7c160936a78ac454a25fa02825e6aa52d43219132529ae1f56f7ca399aecaa328a337f7b170326d5168d05e659160fe9f7a84684fd6b06fef898ba94967e6dce4aac4293adf24ac85954605292147d955376e021a03967b5bba99bdc82146bc1b994bc3773864982bcdb96806b62e93c62e0ebca56543fda1364afb9dce2d70606a698e886a4f6b5a72bf33adc2802263b378edc1a94cd13d73afc169cb028ad5c887363fc6f59d6fc", 0xc0, 0x4}, {&(0x7f0000000500)="de9e367cd179b847963f2e08d284a28fff582b6b9e21d100e037", 0x1a, 0x9}, {&(0x7f0000000800)="4c8b2d52299c7db1e2aea29b3389d2e16107901d08b0d56ee2008997d76e4ea4607970aec1c583dcd2f50c9c0a7d83364f76d8cd3d80ae742d64f0c36bb7d1c3c1b90e477839923ac36956292cd2c9333a921fdd2171ef3a59b1e46fd0439b48ca04dd64d090e03d0136894935e037009cb181b746f329e5a9abbb61cbd73511ed6527d9ee978f4c325009788167112bfa", 0x91, 0x9}, {&(0x7f0000000900)="f2dbc9ac2dda87f3c949ccd10c2623c16b72b55ab22dd9", 0x17, 0x5}, {&(0x7f0000000600)="c2bc784e4dc5a23281994a4bbb470448d10913513159c2ebc62e240ec71a92e75e97bc0c3822753a9f20a3b10334b0f0c2ef75fbd46b297b3670ddf14e023c", 0x3f}], 0x20, &(0x7f0000000a80)=ANY=[]) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000003500)=[{0x0}], 0x0, 0x0) r3 = openat(r2, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x2010, r3, 0x19de5000) 20:11:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) [ 362.548031][T13448] loop4: detected capacity change from 0 to 264192 [ 362.983205][ T20] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 362.990352][ T20] ath9k_htc: Failed to initialize the device [ 362.997573][ T267] usb 2-1: ath9k_htc: USB layer deinitialized [ 363.383360][ T267] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 363.676040][ T267] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 364.573147][ T267] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 364.582848][ T267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.613019][ T267] usb 2-1: Product: syz [ 364.617391][ T267] usb 2-1: Manufacturer: syz [ 364.621982][ T267] usb 2-1: SerialNumber: syz [ 364.683954][ T267] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 20:11:07 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 20:11:07 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000340)=0x7) 20:11:07 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, 0x0, 0x0) r2 = syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_mount_image$squashfs(&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x7, &(0x7f00000009c0)=[{0x0, 0x0, 0x3ff}, {&(0x7f0000003540)="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", 0x4f2}, {&(0x7f0000000700)="2a83d495a799af7e2db317f66c7fefc67a880c853666ba7c160936a78ac454a25fa02825e6aa52d43219132529ae1f56f7ca399aecaa328a337f7b170326d5168d05e659160fe9f7a84684fd6b06fef898ba94967e6dce4aac4293adf24ac85954605292147d955376e021a03967b5bba99bdc82146bc1b994bc3773864982bcdb96806b62e93c62e0ebca56543fda1364afb9dce2d70606a698e886a4f6b5a72bf33adc2802263b378edc1a94cd13d73afc169cb028ad5c887363fc6f59d6fc", 0xc0, 0x4}, {&(0x7f0000000500)="de9e367cd179b847963f2e08d284a28fff582b6b9e21d100e037", 0x1a, 0x9}, {&(0x7f0000000800)="4c8b2d52299c7db1e2aea29b3389d2e16107901d08b0d56ee2008997d76e4ea4607970aec1c583dcd2f50c9c0a7d83364f76d8cd3d80ae742d64f0c36bb7d1c3c1b90e477839923ac36956292cd2c9333a921fdd2171ef3a59b1e46fd0439b48ca04dd64d090e03d0136894935e037009cb181b746f329e5a9abbb61cbd73511ed6527d9ee978f4c325009788167112bfa", 0x91, 0x9}, {&(0x7f0000000900)="f2dbc9ac2dda87f3c949ccd10c2623c16b72b55ab22dd9", 0x17, 0x5}, {&(0x7f0000000600)="c2bc784e4dc5a23281994a4bbb470448d10913513159c2ebc62e240ec71a92e75e97bc0c3822753a9f20a3b10334b0f0c2ef75fbd46b297b3670ddf14e023c", 0x3f}], 0x20, &(0x7f0000000a80)=ANY=[]) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000003500)=[{0x0}], 0x0, 0x0) r3 = openat(r2, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x2010, r3, 0x19de5000) 20:11:07 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) clone3(0x0, 0x0) msgget(0x2, 0x0) geteuid() ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb000001000800"]) 20:11:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) [ 365.100686][ T9753] usb 2-1: USB disconnect, device number 50 [ 365.106967][ T267] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 365.158424][ T9753] usb 2-1: ath9k_htc: USB layer deinitialized 20:11:07 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:07 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, 0x0, 0x0) r2 = syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_mount_image$squashfs(&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x7, &(0x7f00000009c0)=[{0x0, 0x0, 0x3ff}, {&(0x7f0000003540)="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", 0x4f2}, {&(0x7f0000000700)="2a83d495a799af7e2db317f66c7fefc67a880c853666ba7c160936a78ac454a25fa02825e6aa52d43219132529ae1f56f7ca399aecaa328a337f7b170326d5168d05e659160fe9f7a84684fd6b06fef898ba94967e6dce4aac4293adf24ac85954605292147d955376e021a03967b5bba99bdc82146bc1b994bc3773864982bcdb96806b62e93c62e0ebca56543fda1364afb9dce2d70606a698e886a4f6b5a72bf33adc2802263b378edc1a94cd13d73afc169cb028ad5c887363fc6f59d6fc", 0xc0, 0x4}, {&(0x7f0000000500)="de9e367cd179b847963f2e08d284a28fff582b6b9e21d100e037", 0x1a, 0x9}, {&(0x7f0000000800)="4c8b2d52299c7db1e2aea29b3389d2e16107901d08b0d56ee2008997d76e4ea4607970aec1c583dcd2f50c9c0a7d83364f76d8cd3d80ae742d64f0c36bb7d1c3c1b90e477839923ac36956292cd2c9333a921fdd2171ef3a59b1e46fd0439b48ca04dd64d090e03d0136894935e037009cb181b746f329e5a9abbb61cbd73511ed6527d9ee978f4c325009788167112bfa", 0x91, 0x9}, {&(0x7f0000000900)="f2dbc9ac2dda87f3c949ccd10c2623c16b72b55ab22dd9", 0x17, 0x5}, {&(0x7f0000000600)="c2bc784e4dc5a23281994a4bbb470448d10913513159c2ebc62e240ec71a92e75e97bc0c3822753a9f20a3b10334b0f0c2ef75fbd46b297b3670ddf14e023c", 0x3f}], 0x20, &(0x7f0000000a80)=ANY=[]) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000003500)=[{0x0}], 0x0, 0x0) r3 = openat(r2, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x2010, r3, 0x19de5000) [ 365.265495][T13508] loop4: detected capacity change from 0 to 264192 20:11:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:07 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x5421, &(0x7f0000000080)={0x750, {}, {0x2, 0x0, @local}, {0x2, 0x0, @empty=0xfffffffc}, 0x0, 0x0, 0x2, 0x46a}) 20:11:07 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 365.489458][T13523] loop3: detected capacity change from 0 to 264192 20:11:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:07 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x4020940d, &(0x7f0000000340)) 20:11:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:07 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x5}]}) [ 365.933057][ T20] usb 2-1: new high-speed USB device number 51 using dummy_hcd 20:11:07 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) clone3(0x0, 0x0) msgget(0x2, 0x0) geteuid() ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb000001000800"]) 20:11:07 executing program 4: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2, &(0x7f00000005c0)=[{&(0x7f0000001680)=""/226, 0xe2}, {&(0x7f0000001780)=""/145, 0x91}], 0x2, 0x0) 20:11:07 executing program 3: mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) 20:11:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:08 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000200)={'syz', 0x2}, r0) [ 366.233339][ T20] usb 2-1: too many configurations: 210, using maximum allowed: 8 20:11:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:08 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0xa912d700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f00000b5000/0x3000)=nil, 0x3000, 0x0) io_submit(0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 366.396281][ T37] audit: type=1800 audit(1627675868.317:94): pid=13538 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=14049 res=0 errno=0 [ 367.053305][ T20] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 367.067467][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.085316][ T20] usb 2-1: Product: syz [ 367.103107][ T20] usb 2-1: Manufacturer: syz [ 367.112457][ T20] usb 2-1: SerialNumber: syz [ 367.166053][ T37] audit: type=1804 audit(1627675869.097:95): pid=13577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/139/cgroup.controllers" dev="sda1" ino=13969 res=1 errno=0 [ 367.203597][ T20] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 367.784560][ T20] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 20:11:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:09 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000003d80), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0x5450, 0x0) 20:11:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {&(0x7f0000000b40)={0x10}, 0x10}], 0x3}, 0x0) 20:11:09 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) clone3(0x0, 0x0) msgget(0x2, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb000001000800"]) 20:11:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 367.997290][ T9753] usb 2-1: USB disconnect, device number 51 20:11:10 executing program 4: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0xffffffffffffff41) 20:11:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), 0x68) 20:11:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000100), 0x4) 20:11:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040), 0x4) 20:11:10 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001e00)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x0) [ 368.823180][ T20] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 368.831454][ T20] ath9k_htc: Failed to initialize the device [ 368.851358][ T9753] usb 2-1: ath9k_htc: USB layer deinitialized [ 368.859616][ T37] audit: type=1804 audit(1627675870.787:96): pid=13607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/140/cgroup.controllers" dev="sda1" ino=14703 res=1 errno=0 [ 368.999008][ T37] audit: type=1804 audit(1627675870.927:97): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/144/cgroup.controllers" dev="sda1" ino=14211 res=1 errno=0 [ 369.323098][ T9753] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 369.643362][ T9753] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 370.443162][ T9753] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 370.452587][ T9753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.461814][ T9753] usb 2-1: Product: syz [ 370.466385][ T9753] usb 2-1: Manufacturer: syz [ 370.470961][ T9753] usb 2-1: SerialNumber: syz [ 370.513822][ T9753] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 20:11:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:13 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x95605, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}]}, 0x5c, 0x0) 20:11:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000380)=""/155, 0x9b}], 0x1, 0x0, 0x0) 20:11:13 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) clone3(0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb000001000800"]) 20:11:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) [ 371.101436][ T9755] usb 2-1: USB disconnect, device number 52 [ 371.113093][ T9753] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 371.123696][ T9755] usb 2-1: ath9k_htc: USB layer deinitialized 20:11:13 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x95605, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}]}, 0x5c, 0x0) 20:11:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:13 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x95605, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}]}, 0x5c, 0x0) 20:11:13 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x95605, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}]}, 0x5c, 0x0) 20:11:13 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x95605, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}]}, 0x5c, 0x0) 20:11:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 371.643555][ T9755] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 371.933277][ T9755] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 371.977210][ T37] audit: type=1804 audit(1627675873.907:98): pid=13669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/145/cgroup.controllers" dev="sda1" ino=14718 res=1 errno=0 [ 372.753182][ T9755] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 372.767552][ T9755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.777151][ T9755] usb 2-1: Product: syz [ 372.781490][ T9755] usb 2-1: Manufacturer: syz [ 372.786476][ T9755] usb 2-1: SerialNumber: syz [ 372.823872][ T9755] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 373.403064][ T20] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 373.606006][T13670] udc-core: couldn't find an available UDC or it's busy [ 373.613978][T13670] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 373.629452][T13670] udc-core: couldn't find an available UDC or it's busy [ 373.636495][T13670] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 374.066662][ T9755] usb 2-1: USB disconnect, device number 53 20:11:16 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:16 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x95605, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}]}, 0x5c, 0x0) 20:11:16 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) 20:11:16 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x95605, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}]}, 0x5c, 0x0) 20:11:16 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb000001000800"]) 20:11:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:16 executing program 4: msgsnd(0x0, &(0x7f0000000340)={0x1}, 0x8, 0x0) 20:11:16 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) 20:11:16 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200cf69a1a9754d7d258d28669ed087533ccc45216bd274"]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0xfffffffffffffffc, r5, {0x7, 0x21, 0xfffffbd1, 0x410200, 0x1, 0x400, 0xfffff001, 0x5}}, 0x50) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSFF(r7, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, {0x6}, {0xfb, 0x7}, @period={0x0, 0x0, 0x400, 0x0, 0x0, {}, 0x0, 0x0}}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='\x00', 0x0) 20:11:16 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) 20:11:16 executing program 4: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x7) [ 374.903166][ T20] usb 2-1: Service connection timeout for: 257 [ 374.903188][ T20] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 374.903436][ T20] ath9k_htc: Failed to initialize the device 20:11:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 375.008605][ T9755] usb 2-1: ath9k_htc: USB layer deinitialized [ 375.393446][ T37] audit: type=1804 audit(1627675877.327:99): pid=13720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/146/cgroup.controllers" dev="sda1" ino=14740 res=1 errno=0 [ 375.420603][ T9755] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 375.733374][ T9755] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 376.573080][ T9755] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 376.582407][ T9755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.591158][ T9755] usb 2-1: Product: syz [ 376.595667][ T9755] usb 2-1: Manufacturer: syz [ 376.600595][ T9755] usb 2-1: SerialNumber: syz [ 376.643776][ T9755] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 377.213104][ T9755] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 377.417818][T13719] udc-core: couldn't find an available UDC or it's busy [ 377.425145][T13719] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 377.434221][T13719] udc-core: couldn't find an available UDC or it's busy [ 377.441153][T13719] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 377.783665][ T3261] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.790060][ T3261] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.858061][ T9753] usb 2-1: USB disconnect, device number 54 20:11:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:20 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000001640)=""/4095, 0xfff}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000148, 0x0, 0x0) 20:11:20 executing program 3: request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xfffffffffffffff9) 20:11:20 executing program 5: ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb000001000800"]) 20:11:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040), 0x4) 20:11:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001e00)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x0) 20:11:20 executing program 5: ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb000001000800"]) 20:11:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:11:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000080)=0x7e3451d5, 0x4) [ 378.663245][ T9755] usb 2-1: Service connection timeout for: 257 [ 378.669692][ T9755] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 378.729696][ T9755] ath9k_htc: Failed to initialize the device [ 378.762396][ T9753] usb 2-1: ath9k_htc: USB layer deinitialized [ 379.132348][ T37] audit: type=1804 audit(1627675881.057:100): pid=13777 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/147/cgroup.controllers" dev="sda1" ino=14747 res=1 errno=0 [ 379.163508][ T9753] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 379.473584][ T9753] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 380.413203][ T9753] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 380.422464][ T9753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.432234][ T9753] usb 2-1: Product: syz [ 380.437097][ T9753] usb 2-1: Manufacturer: syz [ 380.441692][ T9753] usb 2-1: SerialNumber: syz [ 380.504439][ T9753] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 381.133060][ T9753] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 381.347483][T13778] udc-core: couldn't find an available UDC or it's busy [ 381.356300][T13778] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 381.371031][T13778] udc-core: couldn't find an available UDC or it's busy [ 381.378480][T13778] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 381.797283][ T5] usb 2-1: USB disconnect, device number 55 20:11:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:24 executing program 4: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) 20:11:24 executing program 5: ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb000001000800"]) 20:11:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:24 executing program 3: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000004040)=[{&(0x7f0000003f40)=""/199, 0xc7}], 0x1, &(0x7f0000004240)=[{&(0x7f0000004080)=""/43, 0x2b}, {&(0x7f00000040c0)=""/185, 0xb9}], 0x2, 0x0) 20:11:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:24 executing program 4: r0 = getpgid(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x40) process_vm_writev(r0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/151, 0x95}, {&(0x7f0000000000)=""/68, 0x44}, {&(0x7f00000003c0)=""/197, 0xec}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/46, 0x34}], 0x5, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/50, 0x32}], 0x5c, 0x0) 20:11:24 executing program 5: r0 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb000001000800"]) 20:11:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:24 executing program 3: pipe(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000080)=',', 0x1}, {&(0x7f0000000140)="afe2d91b08fecd5d1c6bf11df788434c0c72aea00842445f00fb29279742b7a82716327686feb3b39f642150754512b0a0ae119cd51a7e7b9e6ec000aa1583", 0x3f}, {&(0x7f0000000200)="2f334f5e7740b9", 0x7}], 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0x198, 0x0, 0x1f0, 0x0, 0x0, 0x230, 0x288, 0x288, 0x288, 0x230, 0x4, 0x0, {[{{@ip={@multicast1, @multicast2, 0x0, 0x0, 'ip_vti0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0xfe01, 'bm\x00', "3b959eac5d84c743692a0fea97b731b7387ee5ffbde33d329fad7b33b3293dd238a02501c19014fb8c1073a60cc0fa43fd8048bd1e3631d576e2dfd44634b9684ceb4bb727a59e468ebf8920fcd3eaed0ea8efa633d3eec5d08eb38b0a552ac8b34fcde5e3535b6d9e87f76e6c47e03371b00e279d7297f9632d5983a8ebcd92", 0x1d}}]}, @REJECT={0x28}}, {{@ip={@multicast2, @private, 0x0, 0x0, 'syzkaller0\x00', 'vlan0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) splice(r0, 0x0, r2, 0x0, 0x2fffb, 0x0) 20:11:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) [ 382.596810][T13843] x_tables: duplicate underflow at hook 2 [ 382.663355][ T9753] usb 2-1: Service connection timeout for: 257 [ 382.669919][ T9753] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 382.719292][ T9753] ath9k_htc: Failed to initialize the device [ 382.748625][ T5] usb 2-1: ath9k_htc: USB layer deinitialized [ 383.036585][ T37] audit: type=1804 audit(1627675884.967:101): pid=13830 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/148/cgroup.controllers" dev="sda1" ino=14770 res=1 errno=0 [ 383.143088][ T5] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 383.455809][ T5] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 384.373283][ T5] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 384.382571][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.391586][ T5] usb 2-1: Product: syz [ 384.396233][ T5] usb 2-1: Manufacturer: syz [ 384.400827][ T5] usb 2-1: SerialNumber: syz [ 384.453784][ T5] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 385.113116][ T5] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 385.316550][T13829] udc-core: couldn't find an available UDC or it's busy [ 385.324160][T13829] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 385.337235][T13829] udc-core: couldn't find an available UDC or it's busy [ 385.344204][T13829] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 385.777968][ T9755] usb 2-1: USB disconnect, device number 56 20:11:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000002840)=""/4111, 0x100f) getdents(r0, 0x0, 0x0) 20:11:28 executing program 5: r0 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb000001000800"]) 20:11:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:28 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:28 executing program 5: r0 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb000001000800"]) 20:11:28 executing program 4: io_setup(0x8001, &(0x7f0000000040)=0x0) io_getevents(r0, 0xffffffffffff8000, 0x0, 0x0, 0x0) 20:11:28 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:28 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb000001000800"]) 20:11:28 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 386.593185][ T5] usb 2-1: Service connection timeout for: 257 [ 386.601242][ T5] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 386.631627][ T5] ath9k_htc: Failed to initialize the device [ 386.661446][ T9755] usb 2-1: ath9k_htc: USB layer deinitialized [ 387.026344][ T37] audit: type=1804 audit(1627675888.957:102): pid=13894 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/149/cgroup.controllers" dev="sda1" ino=14497 res=1 errno=0 [ 387.037535][ T9755] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 387.363212][ T9755] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 388.163114][ T9755] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 388.172449][ T9755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.180503][ T9755] usb 2-1: Product: syz [ 388.184765][ T9755] usb 2-1: Manufacturer: syz [ 388.189354][ T9755] usb 2-1: SerialNumber: syz [ 388.234214][ T9755] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 388.864689][ T9755] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 389.070136][T13892] udc-core: couldn't find an available UDC or it's busy [ 389.077119][T13892] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 389.086844][T13892] udc-core: couldn't find an available UDC or it's busy [ 389.094093][T13892] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 389.517300][ T9490] usb 2-1: USB disconnect, device number 57 20:11:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:31 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc6e00, 0x0) 20:11:31 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb000001000800"]) 20:11:31 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:32 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) exit_group(0x0) 20:11:32 executing program 4: prlimit64(0x0, 0x0, 0x0, &(0x7f0000000380)) 20:11:32 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb000001000800"]) 20:11:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:32 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) exit_group(0x0) [ 390.343180][ T9755] usb 2-1: Service connection timeout for: 257 [ 390.349514][ T9755] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 390.395310][ T9755] ath9k_htc: Failed to initialize the device [ 390.439469][ T9490] usb 2-1: ath9k_htc: USB layer deinitialized [ 390.823322][ T9490] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 391.133154][ T9490] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 392.033247][ T9490] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 392.042712][ T9490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.051800][ T9490] usb 2-1: Product: syz [ 392.056504][ T9490] usb 2-1: Manufacturer: syz [ 392.061093][ T9490] usb 2-1: SerialNumber: syz [ 392.104028][ T9490] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 392.713139][ T9490] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 392.918367][T13948] udc-core: couldn't find an available UDC or it's busy [ 392.925578][T13948] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 392.939400][T13948] udc-core: couldn't find an available UDC or it's busy [ 392.946646][T13948] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 393.377568][ T5] usb 2-1: USB disconnect, device number 58 20:11:35 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:35 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660", 0x77}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:35 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 20:11:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:35 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) exit_group(0x0) 20:11:35 executing program 4: request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0) 20:11:35 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:36 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 20:11:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:36 executing program 4: epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') [ 394.183198][ T9490] usb 2-1: Service connection timeout for: 257 [ 394.190910][ T9490] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 394.213690][ T9490] ath9k_htc: Failed to initialize the device [ 394.243260][ T5] usb 2-1: ath9k_htc: USB layer deinitialized [ 394.389545][ T37] audit: type=1804 audit(1627675896.317:103): pid=14031 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/153/cgroup.controllers" dev="sda1" ino=14821 res=1 errno=0 [ 394.654396][ T5] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 394.953244][ T5] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 395.913180][ T5] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 395.923308][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.931736][ T5] usb 2-1: Product: syz [ 395.936381][ T5] usb 2-1: Manufacturer: syz [ 395.940986][ T5] usb 2-1: SerialNumber: syz [ 395.983654][ T5] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 396.553084][ T5] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 396.756223][T14009] udc-core: couldn't find an available UDC or it's busy [ 396.763926][T14009] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 396.772727][T14009] udc-core: couldn't find an available UDC or it's busy [ 396.779994][T14009] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 397.199551][ T4869] usb 2-1: USB disconnect, device number 59 20:11:39 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:39 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 20:11:39 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:39 executing program 4: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x9f) 20:11:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:39 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[]) 20:11:39 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:39 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[]) [ 397.828576][ T37] audit: type=1804 audit(1627675899.757:104): pid=14069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/154/cgroup.controllers" dev="sda1" ino=14002 res=1 errno=0 20:11:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:39 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[]) 20:11:39 executing program 4: pipe(&(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSYMLINK(r0, 0x0, 0x0) [ 398.023063][ T5] usb 2-1: Service connection timeout for: 257 [ 398.036173][ T5] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 398.095023][ T5] ath9k_htc: Failed to initialize the device [ 398.124649][ T4869] usb 2-1: ath9k_htc: USB layer deinitialized [ 398.421874][ T37] audit: type=1804 audit(1627675900.347:105): pid=14088 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/159/cgroup.controllers" dev="sda1" ino=14034 res=1 errno=0 [ 398.493086][ T4869] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 398.773242][ T4869] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 399.584662][ T4869] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 399.593940][ T4869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.601917][ T4869] usb 2-1: Product: syz [ 399.607206][ T4869] usb 2-1: Manufacturer: syz [ 399.612069][ T4869] usb 2-1: SerialNumber: syz [ 399.663840][ T4869] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 400.323065][ T4869] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 400.527035][T14068] udc-core: couldn't find an available UDC or it's busy [ 400.534222][T14068] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 400.542620][T14068] udc-core: couldn't find an available UDC or it's busy [ 400.550011][T14068] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 400.977831][ T9519] usb 2-1: USB disconnect, device number 60 20:11:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000100)}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:43 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:43 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB]) 20:11:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') write$FUSE_LSEEK(r0, 0x0, 0x0) 20:11:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:43 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') write$FUSE_INIT(r0, 0x0, 0x0) 20:11:43 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB]) [ 401.613517][ T37] audit: type=1804 audit(1627675903.547:106): pid=14119 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/155/cgroup.controllers" dev="sda1" ino=14371 res=1 errno=0 20:11:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) 20:11:43 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 401.783133][ T4869] usb 2-1: Service connection timeout for: 257 [ 401.789698][ T4869] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 20:11:43 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB]) [ 401.854788][ T4869] ath9k_htc: Failed to initialize the device [ 401.898903][ T9519] usb 2-1: ath9k_htc: USB layer deinitialized [ 402.190639][ T37] audit: type=1804 audit(1627675904.117:107): pid=14124 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/160/cgroup.controllers" dev="sda1" ino=14306 res=1 errno=0 [ 402.293097][ T9519] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 402.574664][ T9519] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 403.373129][ T9519] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 403.382488][ T9519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.392113][ T9519] usb 2-1: Product: syz [ 403.400011][ T9519] usb 2-1: Manufacturer: syz [ 403.404964][ T9519] usb 2-1: SerialNumber: syz [ 403.453823][ T9519] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 404.023264][ T9519] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 404.228901][T14125] udc-core: couldn't find an available UDC or it's busy [ 404.237119][T14125] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 404.251544][T14125] udc-core: couldn't find an available UDC or it's busy [ 404.258504][T14125] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 404.687525][ T9755] usb 2-1: USB disconnect, device number 61 20:11:47 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:47 executing program 4: ioctl$TIOCMBIC(0xffffffffffffffff, 0x8004746b, &(0x7f0000000080)) clock_gettime(0x3, &(0x7f0000000040)) 20:11:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:47 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb0000"]) 20:11:47 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000100)}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:47 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:47 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/igmp6\x00') read$eventfd(r0, &(0x7f00000000c0), 0xfffffdbb) 20:11:47 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb0000"]) [ 405.370581][ T37] audit: type=1804 audit(1627675907.297:108): pid=14180 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/156/cgroup.controllers" dev="sda1" ino=14830 res=1 errno=0 20:11:47 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') read$eventfd(r0, &(0x7f00000000c0), 0x16f3) 20:11:47 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb0000"]) [ 405.543056][ T9519] usb 2-1: Service connection timeout for: 257 [ 405.556825][ T9519] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 20:11:47 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 405.617138][ T9519] ath9k_htc: Failed to initialize the device [ 405.656670][ T9755] usb 2-1: ath9k_htc: USB layer deinitialized 20:11:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) sched_setattr(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) getpid() 20:11:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:47 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 405.975300][ T37] audit: type=1804 audit(1627675907.857:109): pid=14216 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/157/cgroup.controllers" dev="sda1" ino=14828 res=1 errno=0 [ 406.023109][ T9755] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 406.241611][ T37] audit: type=1804 audit(1627675908.037:110): pid=14184 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/161/cgroup.controllers" dev="sda1" ino=14829 res=1 errno=0 [ 406.323292][ T9755] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 407.123088][ T9755] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 407.132149][ T9755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.144642][ T9755] usb 2-1: Product: syz [ 407.149275][ T9755] usb 2-1: Manufacturer: syz [ 407.156956][ T9755] usb 2-1: SerialNumber: syz [ 407.204314][ T9755] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 407.803117][ T9755] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 408.006695][T14187] udc-core: couldn't find an available UDC or it's busy [ 408.014090][T14187] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 408.022852][T14187] udc-core: couldn't find an available UDC or it's busy [ 408.030795][T14187] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 408.447875][ T26] usb 2-1: USB disconnect, device number 62 20:11:50 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000100)}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, 0x0, 0x0, 0x50b1, 0x0) 20:11:50 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb00000100"]) 20:11:50 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 409.303432][ T9755] usb 2-1: Service connection timeout for: 257 [ 409.380960][ T9755] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 20:11:51 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb00000100"]) 20:11:51 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 409.603314][ T37] audit: type=1804 audit(1627675911.527:111): pid=14264 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/158/cgroup.controllers" dev="sda1" ino=14849 res=1 errno=0 20:11:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) [ 409.665491][ T9755] ath9k_htc: Failed to initialize the device [ 409.702125][ T26] usb 2-1: ath9k_htc: USB layer deinitialized 20:11:51 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb00000100"]) 20:11:51 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 409.847652][ T37] audit: type=1804 audit(1627675911.777:112): pid=14258 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/162/cgroup.controllers" dev="sda1" ino=14843 res=1 errno=0 20:11:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, 0x0, 0x0, 0x50b1, 0x0) [ 409.951606][ T37] audit: type=1804 audit(1627675911.877:113): pid=14285 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/159/cgroup.controllers" dev="sda1" ino=14840 res=1 errno=0 [ 410.103520][ T26] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 410.573982][ T26] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 411.483556][ T26] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 411.493559][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.501543][ T26] usb 2-1: Product: syz [ 411.506525][ T26] usb 2-1: Manufacturer: syz [ 411.511116][ T26] usb 2-1: SerialNumber: syz [ 411.553779][ T26] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 20:11:53 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:53 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:53 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb0000010008"]) 20:11:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) [ 412.024967][ T4869] usb 2-1: USB disconnect, device number 63 [ 412.043118][ T26] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 412.096394][ T4869] usb 2-1: ath9k_htc: USB layer deinitialized 20:11:54 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000340), 0x0, 0x0) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1) 20:11:54 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:54 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 412.281176][ T37] audit: type=1804 audit(1627675914.207:114): pid=14342 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/160/cgroup.controllers" dev="sda1" ino=14866 res=1 errno=0 20:11:54 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 20:11:54 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000100)="b2d417f70d491de19d076193dd73e7ee", 0x10) [ 412.743382][ T4869] usb 2-1: new high-speed USB device number 64 using dummy_hcd 20:11:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:54 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:54 executing program 4: r0 = io_uring_setup(0x1b51, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)}], 0x1) 20:11:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:54 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb00000100"]) [ 412.962379][ T37] audit: type=1804 audit(1627675914.887:115): pid=14340 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/163/cgroup.controllers" dev="sda1" ino=14865 res=1 errno=0 [ 413.053354][ T4869] usb 2-1: too many configurations: 210, using maximum allowed: 8 20:11:55 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x30, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x2}}]}, 0x30}}, 0x0) syncfs(r1) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@struct={0x0, 0x4, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}]}, @union, @union, @array]}, {0x0, [0x0]}}, 0x0, 0x87}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040)) 20:11:55 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:55 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb00000100"]) [ 413.154084][ T37] audit: type=1804 audit(1627675915.087:116): pid=14374 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/161/cgroup.controllers" dev="sda1" ino=14856 res=1 errno=0 [ 413.973226][ T4869] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 413.987223][ T4869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.005546][ T4869] usb 2-1: Product: syz [ 414.014732][ T4869] usb 2-1: Manufacturer: syz [ 414.025156][ T4869] usb 2-1: SerialNumber: syz [ 414.031372][ T37] audit: type=1804 audit(1627675915.957:117): pid=14394 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/164/cgroup.controllers" dev="sda1" ino=14856 res=1 errno=0 [ 414.103934][ T4869] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 414.783034][ T4869] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 20:11:56 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:11:56 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:56 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001400)=ANY=[@ANYBLOB="5abb00000100"]) 20:11:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x0, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:11:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:11:56 executing program 4: perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x90045, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x3, 0x101}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000455000/0x2000)=nil, 0x0) mremap(&(0x7f0000dc0000/0x3000)=nil, 0x3000, 0x600000, 0x4, &(0x7f00007fc000/0x600000)=nil) semget$private(0x0, 0x4, 0x50) mremap(&(0x7f0000a38000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) r0 = semget$private(0x0, 0x0, 0x10) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000500)=""/253) semop(0x0, &(0x7f0000000200), 0x0) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x1, 0x45, 0x40, 0x7, 0x0, 0x5, 0x1040, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x982, 0x400}, 0x1a00, 0x5, 0x0, 0x3, 0x97e5, 0x0, 0xbff, 0x0, 0x80, 0x0, 0xfffffffffffffbff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x2, 0x800}], 0x1, &(0x7f0000000400)={0x0, 0x3938700}) semtimedop(0x0, &(0x7f00000002c0)=[{}, {0x2, 0xffff}, {0x3, 0x6}, {}, {0x0, 0x1fd, 0x1800}, {0x0, 0x5, 0x1800}, {}, {0x0, 0x8, 0x800}], 0x8, &(0x7f00000000c0)) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x4, 0x200, 0xfff]) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x44) semctl$IPC_RMID(0x0, 0x0, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0xffc0000b, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000540)=ANY=[]) fstatfs(r1, &(0x7f0000000200)=""/131) [ 415.006497][ T5] usb 2-1: USB disconnect, device number 64 20:11:57 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:57 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x0) [ 415.138774][T14417] loop4: detected capacity change from 0 to 264192 [ 415.218244][ T37] audit: type=1804 audit(1627675917.147:118): pid=14416 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/162/cgroup.controllers" dev="sda1" ino=14871 res=1 errno=0 20:11:57 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:11:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 415.310332][T14417] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 20:11:57 executing program 4: perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x90045, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x3, 0x101}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000455000/0x2000)=nil, 0x0) mremap(&(0x7f0000dc0000/0x3000)=nil, 0x3000, 0x600000, 0x4, &(0x7f00007fc000/0x600000)=nil) semget$private(0x0, 0x4, 0x50) mremap(&(0x7f0000a38000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) r0 = semget$private(0x0, 0x0, 0x10) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000500)=""/253) semop(0x0, &(0x7f0000000200), 0x0) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x1, 0x45, 0x40, 0x7, 0x0, 0x5, 0x1040, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x982, 0x400}, 0x1a00, 0x5, 0x0, 0x3, 0x97e5, 0x0, 0xbff, 0x0, 0x80, 0x0, 0xfffffffffffffbff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x2, 0x800}], 0x1, &(0x7f0000000400)={0x0, 0x3938700}) semtimedop(0x0, &(0x7f00000002c0)=[{}, {0x2, 0xffff}, {0x3, 0x6}, {}, {0x0, 0x1fd, 0x1800}, {0x0, 0x5, 0x1800}, {}, {0x0, 0x8, 0x800}], 0x8, &(0x7f00000000c0)) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x4, 0x200, 0xfff]) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x44) semctl$IPC_RMID(0x0, 0x0, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0xffc0000b, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000540)=ANY=[]) fstatfs(r1, &(0x7f0000000200)=""/131) 20:11:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x0, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) [ 415.621928][T14444] loop4: detected capacity change from 0 to 264192 [ 415.669451][ T37] audit: type=1804 audit(1627675917.597:119): pid=14448 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/163/cgroup.controllers" dev="sda1" ino=14874 res=1 errno=0 [ 415.720854][T14444] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 415.877960][ T4869] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 415.889571][ T4869] ath9k_htc: Failed to initialize the device [ 415.900937][ T5] usb 2-1: ath9k_htc: USB layer deinitialized [ 416.293056][ T5] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 416.615809][ T5] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 417.546727][ T5] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 417.556507][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.564994][ T5] usb 2-1: Product: syz [ 417.569151][ T5] usb 2-1: Manufacturer: syz [ 417.574122][ T5] usb 2-1: SerialNumber: syz [ 417.623972][ T5] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 20:12:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:00 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:00 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', 0x0}) 20:12:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x0, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:12:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8916, &(0x7f0000000080)={'veth0_to_team\x00', @ifru_ivalue}) [ 418.091081][ T4869] usb 2-1: USB disconnect, device number 65 [ 418.097401][ T5] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 418.109682][ T4869] usb 2-1: ath9k_htc: USB layer deinitialized 20:12:00 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x5c, 0x30, 0x103, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 20:12:00 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @private2, @mcast2, {[], {{0x600, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 20:12:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 418.301636][ T37] audit: type=1804 audit(1627675920.227:120): pid=14497 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/164/cgroup.controllers" dev="sda1" ino=14897 res=1 errno=0 20:12:00 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x88000000, 0x0, 0xc0, 0x0, 0x1a0, 0x194, 0x194, 0x1a0, 0x194, 0x3, 0x0, {[{{@ip={@empty, @remote, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@private, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) 20:12:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8805) 20:12:00 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 418.547686][T14512] xt_TCPMSS: Only works on TCP SYN packets [ 418.583041][ T4869] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 418.599787][ T37] audit: type=1804 audit(1627675920.527:121): pid=14515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/168/cgroup.controllers" dev="sda1" ino=14885 res=1 errno=0 [ 418.883372][ T4869] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 419.703466][ T4869] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 419.713115][ T4869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.721085][ T4869] usb 2-1: Product: syz [ 419.726981][ T4869] usb 2-1: Manufacturer: syz [ 419.731572][ T4869] usb 2-1: SerialNumber: syz [ 419.773670][ T4869] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 420.423094][ T4869] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 20:12:02 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x727}, 0x14}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:12:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) 20:12:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, r1, 0x35, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4, 0x7}]}, 0x18}}, 0x0) 20:12:02 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 420.641006][ T5] usb 2-1: USB disconnect, device number 66 20:12:02 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001980)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c04000024000b0f00f0ffffff00000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000e0ff0800010074626600300402000404030008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b61a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000678f00000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000003000000000000000000002100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080040000000000280001"], 0x45c}}, 0x0) 20:12:02 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(0x0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000), 0x4) [ 420.809387][ T37] audit: type=1804 audit(1627675922.737:122): pid=14545 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/165/cgroup.controllers" dev="sda1" ino=14905 res=1 errno=0 [ 420.918181][T14564] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 20:12:02 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(0x0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 420.950071][ T37] audit: type=1804 audit(1627675922.787:123): pid=14557 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/169/cgroup.controllers" dev="sda1" ino=14911 res=1 errno=0 [ 420.988133][T14568] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 20:12:03 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="76b2ce1484fba415326d43105c4584e5b3efcb4273a3b603e4edf36aa608e500090030e92e2618aee179c5617b7af50beee5ed08009b7e6a77bd7cc0aead9bb27d6d4ab503925869b0127a1ef2173a1df145bb9fddcdc019933ff9d6dfed13843679dde102de9b020000000000000017583fe7623c0cc5f76007fa83df77e9cc2806f5b24670f744edef4f1bcd87f61eb87a225cda0ded664323b7186d84534a0ae5cad732ff708f83254625c4acf9c0ba80ea7000476a69799f6c3e3c2a43dfac7b9107771e97da5234da98a842b95b08095ed4bd4940cf7c1f1471abb52ecaed4ff87d4d16a678cd141423bfd9f0d2f9fc11a479eedc6e4208f5e1f7fa61a208d10423e81cdd1e40896c449bd5a1ace4b2e4be8e25492907b6d38d054ee3f1673fd4658b0000000000000000247d04493ff4b85bb7b9e0dea3f2ca36e452eedbf39a49622900"/336, @ANYRESDEC=r1], 0x1000001bd) [ 421.463076][ T4869] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 421.470363][ T4869] ath9k_htc: Failed to initialize the device [ 421.478192][ T5] usb 2-1: ath9k_htc: USB layer deinitialized [ 421.833024][ T5] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 422.113082][ T5] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 422.923156][ T5] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 422.932832][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.941643][ T5] usb 2-1: Product: syz [ 422.946657][ T5] usb 2-1: Manufacturer: syz [ 422.951253][ T5] usb 2-1: SerialNumber: syz [ 423.003783][ T5] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 423.683045][ T5] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 20:12:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:05 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)) 20:12:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:05 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(0x0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x727}, 0x14}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:12:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "851c32e980004000000900"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xffffffff) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10000, 0x0, "4e6c0900ff0000000000be873bb9cb1e51aad2"}) [ 423.745683][ T4869] usb 2-1: USB disconnect, device number 67 20:12:05 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:05 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:05 executing program 5: r0 = socket(0x23, 0x5, 0x0) bind$802154_raw(r0, &(0x7f0000000080)={0x24, @short}, 0x14) 20:12:05 executing program 4: r0 = socket(0x18, 0x0, 0x0) getsockname$netrom(r0, 0x0, &(0x7f0000000000)) [ 423.938385][ T37] audit: type=1804 audit(1627675925.867:124): pid=14612 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/170/cgroup.controllers" dev="sda1" ino=14936 res=1 errno=0 [ 424.038722][ T37] audit: type=1804 audit(1627675925.927:125): pid=14620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/166/cgroup.controllers" dev="sda1" ino=14937 res=1 errno=0 20:12:06 executing program 5: unshare(0x6c060000) unshare(0x10000000) unshare(0x32071000) r0 = socket$inet6(0xa, 0x3, 0x3a) socket(0x18, 0x5, 0xfaf) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x6, 0x1}, 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) 20:12:06 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 424.753099][ T5] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 424.760243][ T5] ath9k_htc: Failed to initialize the device [ 424.770485][ T4869] usb 2-1: ath9k_htc: USB layer deinitialized [ 425.163083][ T4869] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 425.443114][ T4869] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 426.243065][ T4869] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 426.252885][ T4869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.261286][ T4869] usb 2-1: Product: syz [ 426.265889][ T4869] usb 2-1: Manufacturer: syz [ 426.270479][ T4869] usb 2-1: SerialNumber: syz [ 426.313772][ T4869] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 20:12:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:08 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000280)="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", 0x5fa}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x104, 0x6}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="11840209900d08233e496d5671dc71ff04291b2c1501772502bb867063f71147862a15257781bcf1d1e498104d082833914ee68afc14ac7cb85975751b8c31271948ee303aa2a34be964b8c1b95638607b2e7ec7fda28fea4caada028a39bf259538214e80b9b5c9b58b1cb36a933d64a25324566f7733ea93fc91c98fec268cb1e2148198e2ccf2463d2ae56c61ac436c336b2d421c6b512a600955c6ede3e5820165eabf2dda9e2294300485327a6d28f7913f19d79e5f478626bb6a607c2f5085c68749edc417da6cc4db8c605215575067836f62b0b3e0b49e8c321240c1b1b54babad07a7000c4eb99200b9d016f1554683b7b3323ab37f066b973d584345792feba5b719ec0413d1c37689ce927de538b4ac16687f6595120220e5205f79227e43a8eaa610c8c232bcb811b4a63eab1b87da214700408e830774dcd6318bec9ef28b9171b0492bddb09009a8d26f797713d81548e0c547b8aa7bcd844c2cfa69560deaa6188b576792cccdc09a1f94da4e4c4f05e4d053d6a2fcdb253dce696d6cd85a1aee740c2a84e3d63aa558d3db42531e2303c6e8cfc0b6e31950fcbf3021f708d47c05edcf3fcdd66226d99f1f132d73f698e0820c395f343e0d69042b6b06bf40b45ea6a8f52a32255f3c40d4e9fb93084421a6235116be29125e5afe2d8c418cedb2548db2fcade80c118af8a6be1e650517519721a5920f842662aad37473f2ba60f7ee8466f8dba829c3e17d3e618ef5768b1b0a8991c64f2e592e726bb4636d13fbd04ed71b031e1c1a27fe30325e521a9845ef1abae620cefb216c47a1e3b4db8cb1287006b9fed827fa5a944b8045a3397ba4208c5cb67117393b2f836e4e79196e05ebd7488fa76619ea0521982b9cb76a63bed4f0ffe48ceb4b2bbe4e590dec80eca4740027f855dad06313a2a0188932a2069fc70b8af0e4294a7b51b552ad72ccd5625fd2a971354bad2930eec5f41e0ae271224b8a9160d96965d372c65e4a0adcee1e8bb84406b6a5c5e4d6ed7ff529afdffcdbea58f43e7c39f8aa9845fc92c84aa8bc0eef238d19b2cd3dd0c6d52694c99f2f493b7064076b62d139837eda3d11e43ae52fb771c1585974bcc6e2adb24096fd3d5ac867afb9cfb6ed07cb34e227f00ed5541499d2e7e3b4f3da831a3b9c32de8be0f5b45e8248b5a2811bb452ca6dc7d56d87531347ad316e6e8c6bf887f70f455cdeae8dcfff004b0ed1b8fd63d1d5e55cbdf1541b87821f3c90f7d47e542ec75b132f5285862d3e9fd84f841e4d137e2735d5f23c87108bcaa591a14ab2ab43802ffb176453312420fe0e79af7236850104bc3e925b16fd0a57ee9959ae8ccc13c843365442bb462d86ead8a20c41e064e0ad286f4aa4c69d0046e5012cecf425b0df11c0b458e31804d8ffe98554afc69b475ca03cbe926806b276e19aa47b3e101b95ee2fd32b9f06a3fcf6f078ce694f9ed8fe03425446bcdd0e7c1f4d3e109bbe30020cb81b64bb0cdfd8a0d33e1143c4fbb7fef15d1059e1f20b394f69d482a1da5fd49508808c80c824a843698386b4d3c3885f063aa3c047624f93298040fbc706020d295cf3f363d42f21d327d91d101cc4758c67195a49c3b3002e14cf28a5b8899b7ef08b6713d89c7049ef594361b1d8a0c5838ff30a6a3f1b0f9f947c76d5f1629d3df215975b498bd33ddbc44798a9f76ba0c41e9ad565e44ebf3c333fade1d4306b1042c5e2e855f3e5fdcd64ce7fdf73b09044bec8a2f0cecbb00c6c76c85891478aa4bae6282541cff613f2b461cce115ba0b78c6f50f4593efe5c2ae558f6c0534db14d5b44416b08abe45c6ddf5c749aae8141e427a0a2f42b903ac71caa09e5098cc2c07d79145c7408415d8f937108d6becdbb38a2b3250c0fdf36297375aa3212c9bc8483e8d629c54a79ca55cdda720496753f27fd9e88e203594c1e28514e0d22b9c34c3e1f10253217abed40b09a533fad16c7b9b8e89d7dfd3b27d579bfc813ad2895543ada10f886c7c75010bc70345b727513fa3b7c6aa677a22e037e2bd7731148996f3a8c424075fd12aa8eb9d8f6a8fe7b2eb68934799f5063c58c1816caa4b400bb0914fc7300111c063e5c01910b0b01803a1a348f387542236d82bef6d926ba571ca0e7745e586eddf2334baeafd7b1149502e781ec45299c3f3cd34c3628057def3c012878123224e33828b216022dfebdc6a284e503868a1e4369af819fcfd4124d801386dbb123ce88d54712f6351c77aad6039b2f5ff3d0d1903c74043864fa9f801847ac8446280a31739e0215bce77c08c2477e9079f62225cf179da445e9f220560d995238f17e87dd4ce0f7ebe5f8941d5d130c2d6398e08bb893b5dd8e58701e41e75fd0182d3ebac8920aad7f4777b4e096eb5c5a17e440c0a5b95ca92bbaec63130bbc41d0cbfccb03eb6c1cffc8558bd255c2096a285346dd9600f33554acf62aef19d2776bd5d8a5a9f0a4976022b8ac1400e3f0a7fa227ebc0ad80187939562492154c708739f865a9803512a6213d5026b1febd0a20ce4b3a4d7d90dc5af3f5beaa06b8af1d19556655ac578f9266f5d3b393f24a2d112eee90f749e1f0a6e27ff2469f1cc21d5bcbf355168c62044fd1cc4861544a8175f640ad3c5bb6c81efa331822efb70b57f4110deebe68794211ee4a95c259b4eb519d887b6cfdee178758382f4f63c80b1f0b9f2337dd5a11a5b1fb04c3315ff942cf7f5d7da36c088a65f86529d003c8c9bf74392f9d897b53a422cb3b3f9e09f9936514ac100fecf3c9a573aae041ce3c86cce6dc2884053bc56a510791392bda454aa7dc580a3a7cf71c18dd57bec21c0eb143deb654d8b0fc642bbc7484dc9943c2102169a6aca278f0fd81b1b6b082b355443c8198284e3b01e9fff1c8df1895e9c9593f16438c7f737f2ab56c0f57eadfcd570c5b04b5218fc7d2c0cdca5c7ba5ff428b4fe541d4c8f6fe274d2a3290343f3d6944c918571e350caf2ec3cc9601cd5b71e8f22ff401024c51c592bf476f255b200962e2ed014ce551376235e8d220763f8c9c904570d6b6227c94d62e08b0c9bd3557b96c8ed227685fc54d43e4a05ca5996c4d8e3e5076f394b0c0bc7cdf972f996c45987ffb2d6a138a1772b7ffbeaa66ceddd34839051c61f9d87153f23823f9178b56eb016524ba862cdca9d147b5bda79553ade825d5a1b8ea3acf8c7cad88cd11b68625d367931b9a0296b228fd2c52da32d050d746942fb38dbb3d5e2ad75b7243f7340a8c0d4c7b156e030b6eb154ec6c47c1b6af307ea0e8916e21166572632321f8b4978ecd1f8b4029a6baba4da2dd984d245d1b6dd4a6f2a72acc4d90f480de489826130dd7b2a9ad79938ed6de65c7a56e0515d84302a8a8ee98c20ea32db20b231b9d00e03dd74b804e15c70ce8a6b169ffa79db7e24062b2dd3560502337bb03c8506a25ce77eaa06f9fb54aff0bab9545c32bb9a35a700361f46a3995ef929af7698bf16df9d8965f4d939f5dba6eb238c1089c25617568b29760ecbfef273b8070c3853a652d30da91cb00e0afa1c663589158711984cfe38869974c30e9b51333091cb0f5d72f5ddb0f3bc550b2787ff6fdfe0b90764f8ec319a2674d6e16ca2417b7a2144b5a4ad248fc4b2b8f74ed1957bd4f52f0db0ac4eb8f6dc62c51e16a803bff507359abdbd0ce1ee0fb936a4a060954c1a939b4b197b61311d079ef09e57e60f94fd796c12cf7e62e11bbdc11e04fc79736e42d6d2dcb02e705dc4e8e17addcc0902af4ebbf0a2f57db53cbe99bb0797137c903195de282ed02c37634181936e351f383fb590eb453e539b80c6935185ac40890c1ba70b5e2eb53235f3a983ce4608929d2609354f89fc22f80a0aa9fc0ea9af7f06e46d8b5f5d47dbd2efe1f2d0f4edee09f11b57c257ff5ecfe96ada3c5f37e1d766c5c85490d14f297e1ce65ae34909f04492e7cc955faabb205491a096147d0930ffa70b68055523e360328f26f28ff160cdb8b4785a22110191c9ecfd187267c1a4300e9370a41c73fe224f3a9c54493780b1a4ff96398f0a60f66e48ef4ad7183f71c0c4d6d9d1a57e19a56d9ed426cd4143de82ceb33011988ed079b52ab30300255e066a84959a10676c7b58515ff9bed194c784072af1062734f5d497f2be9b0ea1228f5a981e8d5d78da49da90b040d4e3a93b7f71360b25cf75fca36a4068748e1bc171dd40fa31d6f9c4c926a635f4ea4faf7511146bc5782606966aaab13a30d67cf182751149f678852da30d0f9b6ea5524a1f5ea01e77d7a74ac588ab2251cdbc9f4f8aa2cf367f0ad2178e66fbd7ab447aae12a7bc6cf3925fe99dcdf8ec95cf4576520b781dc12fe6d310978315d2e3d7dbc49c9be2fa40788ebd5fc02c6c7f566a64b7f4af7a96353265dc9e4c74c909b9a385966f4d7312fdcdfa8f5d0632c6db4a19ce696416a04e937d4a994e757eae59c07e5d3228254b35003eba32ed448516e9aa77b5b92c9ce7fff06a8f4f652d27971a46c621a6b2ee3c1adaf60d5cdfb381a4e4ac9ab7d7d72fcb2d6aa7e104255345f1e15dec8299c9c75735a01338d20f72d8b359803becef76d9ca6da029d0a795e6d4a652bf3880efeee074c81774b2971da03eff6d9516ac8a0c34b686aa1afbcb2befc79618a3dbb2bcd53da0075cdba0ddd975fd4e833291005f0fbf7b167922dc85b109e1381431e0fdc50f80b8592edd57f50f9dd950205e1a21cd3026cb30abe6d06dbec6c7cdb76d90c0e85a69aa1522281bcb3f4fc54ee443e76c7d9bf82e313f2dc3e277c699e079a847635780a5b724aca0ede72febba648de12fd14e3a78b29e9df82a19f4ed9c712e5b313c05e6908f6d4601d076afda5cf77eab4ea7c44c9d40f463fe8cde79f18170de9b087b113cfc7d467bd164564c2a8a99e4566d6f9eb1a8d5393700158fe84c109735cfe0ab45d9eb6fe61619d8538512730e015ffac07279973126e9087b209144c8797dd6b65381e616256a9cbf7771222c41618eb82d3539e7750ef0614acb4c901f88f31589d9d6d87c4b2a5361ad44155bf5476f2bc42cd2e758d478a1bcaf27c6c5607f025c8ff75913cb95eb631a690e3e6201204e616a4482a6eae323dadc0a9c22a7de1567ec3f45380bbde304cc76efd4bb0ac9f28475534eb973fc02f3f5dc73a862052f82f6d40c0821012589925ce3f2274ff2a8097b8464b44068c1505b967679bcc6b5d7e7ece9bd1880fc32531fe5d7bac9c5262a709239e477ecf44915a70aa7f984ec1bed047f3ec92a55714403c7c7503a3ac87cec792e072eefa623c56b6b33beb5ae7f5066a952cf6b0b25ab74841e5d2a9b20b1fe0cd83c3aae37eac0dd08d6a65410af956767766f2c6c12d13e87f363052e1e645c2dccd42948be835a9fe1c8892453b73cbcaa7c9222ccece11f86fba52d29d64a609da597e226e5f59e9a8301297c1e9881557a860df15ee14cf4bf70988e2cf90359587bc378adba5aa610db3cc1d6ae5fba9390b4c", 0x5}, {&(0x7f0000000840)='\x00', 0x49ed}], 0x2, 0x0, 0x0, 0x1a0}, 0xe869) 20:12:08 executing program 3: gettid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:08 executing program 5: unshare(0x6c060000) unshare(0x10000000) unshare(0x32071000) r0 = socket$inet6(0xa, 0x3, 0x3a) socket(0x18, 0x5, 0xfaf) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x6, 0x1}, 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) 20:12:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x727}, 0x14}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) [ 426.824838][ T9755] usb 2-1: USB disconnect, device number 68 [ 426.844042][ T4869] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 426.883977][ T9755] usb 2-1: ath9k_htc: USB layer deinitialized [ 426.954069][T14703] ptrace attach of "/root/syz-executor.3"[14701] was attempted by "/root/syz-executor.3"[14703] 20:12:08 executing program 3: gettid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:08 executing program 4: r0 = socket(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89b0, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 426.999875][ T37] audit: type=1804 audit(1627675928.927:126): pid=14715 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/171/cgroup.controllers" dev="sda1" ino=14954 res=1 errno=0 20:12:09 executing program 3: gettid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 427.098449][ T37] audit: type=1804 audit(1627675929.007:127): pid=14727 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/167/cgroup.controllers" dev="sda1" ino=14956 res=1 errno=0 [ 427.137302][T14732] ptrace attach of "/root/syz-executor.3"[14731] was attempted by "/root/syz-executor.3"[14732] 20:12:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:09 executing program 4: r0 = socket(0x2, 0x5, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x400300}}, 0x0) 20:12:09 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 427.398926][ T9755] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 427.416565][ T37] audit: type=1804 audit(1627675929.347:128): pid=14747 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/172/cgroup.controllers" dev="sda1" ino=14964 res=1 errno=0 20:12:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xff97) sendfile(r0, r1, &(0x7f00000001c0), 0xffff) fcntl$addseals(r1, 0x409, 0x8) [ 427.444787][T14752] ptrace attach of "/root/syz-executor.3"[14751] was attempted by "/root/syz-executor.3"[14752] [ 427.733197][ T9755] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 428.603581][ T9755] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 428.617536][ T9755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.629232][ T9755] usb 2-1: Product: syz [ 428.638234][ T9755] usb 2-1: Manufacturer: syz [ 428.645918][ T9755] usb 2-1: SerialNumber: syz [ 428.683976][ T9755] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 429.263119][ T9755] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 20:12:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:11 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:11 executing program 4: r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000040)={'veth0_to_team\x00', @ifru_data=0x0}) 20:12:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x727, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:12:11 executing program 5: socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000632177fbac141410ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) [ 429.477594][ T267] usb 2-1: USB disconnect, device number 69 20:12:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x2) [ 429.595246][T14786] ptrace attach of "/root/syz-executor.3"[14784] was attempted by "/root/syz-executor.3"[14786] 20:12:11 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 429.687871][ T37] audit: type=1804 audit(1627675931.617:129): pid=14781 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/168/cgroup.controllers" dev="sda1" ino=14976 res=1 errno=0 [ 429.802760][ T37] audit: type=1804 audit(1627675931.677:130): pid=14793 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/173/cgroup.controllers" dev="sda1" ino=14979 res=1 errno=0 20:12:11 executing program 5: syz_usb_connect(0x3, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x39, 0xa6, 0x52, 0x10, 0x5c6, 0x9224, 0x5b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x0, 0xda, 0xb4, 0xd9}}]}}]}}, 0x0) 20:12:11 executing program 3: gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 429.903515][T14800] ptrace attach of "/root/syz-executor.3"[14799] was attempted by "/root/syz-executor.3"[14800] 20:12:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:11 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$usbmon(r0, &(0x7f0000000180)=""/34, 0x22) [ 430.129739][T14812] ptrace attach of "/root/syz-executor.3"[14811] was attempted by "/root/syz-executor.3"[14812] [ 430.217414][ T37] audit: type=1804 audit(1627675932.147:131): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/174/cgroup.controllers" dev="sda1" ino=14967 res=1 errno=0 [ 430.313028][ T4869] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 430.343332][ T9755] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 430.360758][ T9755] ath9k_htc: Failed to initialize the device [ 430.388653][ T267] usb 2-1: ath9k_htc: USB layer deinitialized [ 430.593158][ T4869] usb 6-1: Using ep0 maxpacket: 16 [ 430.723687][ T4869] usb 6-1: config 0 interface 0 has no altsetting 0 [ 430.803086][ T267] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 430.893794][ T4869] usb 6-1: New USB device found, idVendor=05c6, idProduct=9224, bcdDevice= 5.b2 [ 430.913064][ T4869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.921272][ T4869] usb 6-1: Product: syz [ 430.942128][ T4869] usb 6-1: Manufacturer: syz [ 430.947445][ T4869] usb 6-1: SerialNumber: syz [ 430.953302][ T4869] usb 6-1: config 0 descriptor?? [ 431.133082][ T267] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 431.227383][ T20] usb 6-1: USB disconnect, device number 7 [ 431.953352][ T267] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 431.963257][ T267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.971241][ T267] usb 2-1: Product: syz [ 431.976681][ T267] usb 2-1: Manufacturer: syz [ 431.981433][ T267] usb 2-1: SerialNumber: syz [ 432.023791][ T267] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 20:12:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 20:12:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x727, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:12:14 executing program 3: gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:14 executing program 5: r0 = socket(0x15, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) [ 432.572767][ T4869] usb 2-1: USB disconnect, device number 70 [ 432.579506][ T267] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 432.591843][ T4869] usb 2-1: ath9k_htc: USB layer deinitialized 20:12:14 executing program 5: r0 = socket(0x15, 0x5, 0x0) connect$x25(r0, 0x0, 0x0) [ 432.676391][T14861] ptrace attach of "/root/syz-executor.3"[14860] was attempted by "/root/syz-executor.3"[14861] 20:12:14 executing program 3: gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:14 executing program 4: r0 = socket(0x23, 0x5, 0x0) bind$802154_raw(r0, 0x0, 0x0) [ 432.735747][ T37] audit: type=1804 audit(1627675934.667:132): pid=14855 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/175/cgroup.controllers" dev="sda1" ino=14145 res=1 errno=0 20:12:14 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 432.805084][T14872] ptrace attach of "/root/syz-executor.3"[14870] was attempted by "/root/syz-executor.3"[14872] 20:12:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) [ 432.882771][ T37] audit: type=1804 audit(1627675934.717:133): pid=14866 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/169/cgroup.controllers" dev="sda1" ino=14161 res=1 errno=0 20:12:14 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x5016, 0x0) 20:12:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) [ 433.128981][ T4869] usb 2-1: new high-speed USB device number 71 using dummy_hcd 20:12:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x727, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) [ 433.296945][ T37] audit: type=1804 audit(1627675935.227:134): pid=14891 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/170/cgroup.controllers" dev="sda1" ino=14083 res=1 errno=0 [ 433.413269][ T4869] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 433.533081][ T4869] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 433.550187][ T4869] usb 2-1: can't read configurations, error -22 [ 433.723084][ T4869] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 434.003659][ T4869] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 434.123054][ T4869] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 434.131594][ T4869] usb 2-1: can't read configurations, error -22 [ 434.142590][ T4869] usb usb2-port1: attempt power cycle [ 434.553003][ T4869] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 434.683113][ T4869] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 434.804467][ T4869] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 434.812567][ T4869] usb 2-1: can't read configurations, error -22 [ 434.973004][ T4869] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 435.103139][ T4869] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 435.223106][ T4869] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 435.231281][ T4869] usb 2-1: can't read configurations, error -22 [ 435.238067][ T4869] usb usb2-port1: unable to enumerate USB device 20:12:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:17 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:17 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) lstat(&(0x7f0000006380)='./file0\x00', 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000006e00)) 20:12:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) 20:12:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:12:17 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000500)={{}, {0x0, 0x7}}) 20:12:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) [ 435.837208][ T37] audit: type=1804 audit(1627675937.767:135): pid=14915 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/171/cgroup.controllers" dev="sda1" ino=14515 res=1 errno=0 20:12:17 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:17 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x23e0, 0x2, 0x0, "d2b300b8cadb212a56065cb38d28f5ebff34373029836caa151608bba591bf5e"}) [ 435.961285][ T37] audit: type=1804 audit(1627675937.767:136): pid=14917 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/176/cgroup.controllers" dev="sda1" ino=14530 res=1 errno=0 20:12:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) [ 436.083695][ T26] usb 2-1: new high-speed USB device number 75 using dummy_hcd 20:12:18 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000002c0)) [ 436.379161][ T26] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 436.503141][ T26] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 436.511785][ T26] usb 2-1: can't read configurations, error -22 [ 436.673020][ T26] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 436.953179][ T26] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 437.073099][ T26] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 437.081342][ T26] usb 2-1: can't read configurations, error -22 [ 437.089530][ T26] usb usb2-port1: attempt power cycle [ 437.513019][ T26] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 437.666119][ T26] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 437.823131][ T26] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 437.831316][ T26] usb 2-1: can't read configurations, error -22 [ 437.983106][ T26] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 438.123170][ T26] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 438.274654][ T26] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 438.287077][ T26] usb 2-1: can't read configurations, error -22 [ 438.295361][ T26] usb usb2-port1: unable to enumerate USB device 20:12:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:12:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:20 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) 20:12:20 executing program 5: socketpair(0x1d, 0x2, 0x2, &(0x7f00000020c0)) 20:12:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) 20:12:20 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:20 executing program 5: socketpair(0x1d, 0x2, 0x2, &(0x7f00000020c0)) 20:12:20 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 438.956543][ T37] audit: type=1804 audit(1627675940.887:137): pid=14962 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/172/cgroup.controllers" dev="sda1" ino=14990 res=1 errno=0 20:12:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) 20:12:21 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@un=@abs, {0x0}, 0x0}, 0xa0) [ 439.067583][ T37] audit: type=1804 audit(1627675940.887:138): pid=14969 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/177/cgroup.controllers" dev="sda1" ino=14992 res=1 errno=0 [ 439.217795][ T267] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 439.237450][ T3261] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.243777][ T3261] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.523302][ T267] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 439.653081][ T267] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 439.661288][ T267] usb 2-1: can't read configurations, error -22 [ 439.813020][ T267] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 440.093081][ T267] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 440.213145][ T267] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 440.221330][ T267] usb 2-1: can't read configurations, error -22 [ 440.232522][ T267] usb usb2-port1: attempt power cycle [ 440.663071][ T267] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 440.793347][ T267] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 440.933265][ T267] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 440.941354][ T267] usb 2-1: can't read configurations, error -22 [ 441.093023][ T267] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 441.253265][ T267] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 441.403101][ T267] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 441.411155][ T267] usb 2-1: can't read configurations, error -22 [ 441.422636][ T267] usb usb2-port1: unable to enumerate USB device 20:12:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:23 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:12:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) 20:12:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001f40), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000001f80)) 20:12:23 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) 20:12:24 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x2, [@func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @union, @enum={0x0, 0xa, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}}, 0x0, 0xd6}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/102363, 0x18fdb}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 442.059031][ T37] audit: type=1804 audit(1627675943.987:139): pid=15009 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/178/cgroup.controllers" dev="sda1" ino=15012 res=1 errno=0 20:12:24 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) [ 442.172191][ T37] audit: type=1804 audit(1627675944.037:140): pid=15013 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/173/cgroup.controllers" dev="sda1" ino=15014 res=1 errno=0 20:12:24 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 442.283163][ T9755] usb 2-1: new high-speed USB device number 83 using dummy_hcd 20:12:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x727, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) [ 442.562221][ T37] audit: type=1804 audit(1627675944.487:141): pid=15036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/174/cgroup.controllers" dev="sda1" ino=15003 res=1 errno=0 [ 442.573243][ T9755] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 443.433089][ T9755] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 443.442418][ T9755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.451580][ T9755] usb 2-1: Product: syz [ 443.456201][ T9755] usb 2-1: Manufacturer: syz [ 443.460786][ T9755] usb 2-1: SerialNumber: syz [ 443.503830][ T9755] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 444.073117][ T9755] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 444.286515][T15010] udc-core: couldn't find an available UDC or it's busy [ 444.293512][T15010] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 444.716447][ T9490] usb 2-1: USB disconnect, device number 83 20:12:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:27 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) 20:12:27 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x727, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:12:27 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001340)={0x0, r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x8, 0x0, 0x0, 0x200, 0xffffffffffffffff, 0x3}, 0x40) 20:12:27 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:27 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) 20:12:27 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x40a15766, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) [ 445.412515][ T37] audit: type=1804 audit(1627675947.337:142): pid=15062 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/179/cgroup.controllers" dev="sda1" ino=15034 res=1 errno=0 [ 445.527221][ T37] audit: type=1804 audit(1627675947.377:143): pid=15066 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/175/cgroup.controllers" dev="sda1" ino=15035 res=1 errno=0 [ 445.543106][ T9755] usb 2-1: Service connection timeout for: 257 [ 445.594256][ T9755] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 20:12:27 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) 20:12:27 executing program 5: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@random="4d9a9909cc2c", @broadcast, @val, {@ipv6}}, 0x0) [ 445.664798][ T9755] ath9k_htc: Failed to initialize the device [ 445.700572][ T9490] usb 2-1: ath9k_htc: USB layer deinitialized [ 446.093105][ T9490] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 446.373176][ T9490] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 447.173233][ T9490] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 447.182654][ T9490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.191915][ T9490] usb 2-1: Product: syz [ 447.196782][ T9490] usb 2-1: Manufacturer: syz [ 447.201364][ T9490] usb 2-1: SerialNumber: syz [ 447.243665][ T9490] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 447.823028][ T9490] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 448.027577][T15067] udc-core: couldn't find an available UDC or it's busy [ 448.034973][T15067] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 448.467611][ T5] usb 2-1: USB disconnect, device number 84 20:12:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) 20:12:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x727, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:12:30 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:30 executing program 5: syz_emit_ethernet(0x862, &(0x7f00000001c0)={@local, @broadcast, @val, {@ipv6}}, 0x0) 20:12:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:31 executing program 5: syz_emit_ethernet(0x4ea, &(0x7f00000001c0)={@local, @broadcast, @val, {@ipv6}}, 0x0) 20:12:31 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) [ 449.160557][ T37] audit: type=1804 audit(1627675951.087:144): pid=15121 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/180/cgroup.controllers" dev="sda1" ino=15047 res=1 errno=0 [ 449.244301][ T37] audit: type=1804 audit(1627675951.097:145): pid=15123 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/176/cgroup.controllers" dev="sda1" ino=15048 res=1 errno=0 20:12:31 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:31 executing program 5: lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000140)='.\x00') open$dir(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) [ 449.303678][ T9490] usb 2-1: Service connection timeout for: 257 [ 449.310111][ T9490] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 20:12:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) [ 449.365843][ T9490] ath9k_htc: Failed to initialize the device [ 449.397740][ T5] usb 2-1: ath9k_htc: USB layer deinitialized 20:12:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x0, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:12:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) 20:12:31 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:31 executing program 5: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @remote, @val, {@ipv6}}, 0x0) [ 449.761673][ T37] audit: type=1804 audit(1627675951.687:146): pid=15160 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/181/cgroup.controllers" dev="sda1" ino=15029 res=1 errno=0 [ 449.800606][ T37] audit: type=1804 audit(1627675951.727:147): pid=15165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/177/cgroup.controllers" dev="sda1" ino=15038 res=1 errno=0 [ 449.828809][ T5] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 450.143329][ T5] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 451.123272][ T5] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 451.132737][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.141055][ T5] usb 2-1: Product: syz [ 451.145793][ T5] usb 2-1: Manufacturer: syz [ 451.150416][ T5] usb 2-1: SerialNumber: syz [ 451.193742][ T5] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 451.813165][ T5] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 452.019027][T15127] udc-core: couldn't find an available UDC or it's busy [ 452.026188][T15127] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 452.457936][ T267] usb 2-1: USB disconnect, device number 85 20:12:34 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:34 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:34 executing program 5: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@random="8f33f888ae2c", @random="c716827e9238", @val, {@ipv4}}, 0x0) 20:12:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) 20:12:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x0, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:12:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:35 executing program 5: socketpair(0x23, 0x0, 0x2, &(0x7f0000000000)) 20:12:35 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) [ 453.119100][ T37] audit: type=1804 audit(1627675955.047:148): pid=15194 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/178/cgroup.controllers" dev="sda1" ino=15065 res=1 errno=0 20:12:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x0, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000502) [ 453.246459][ T37] audit: type=1804 audit(1627675955.107:149): pid=15204 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/182/cgroup.controllers" dev="sda1" ino=15049 res=1 errno=0 20:12:35 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x335bc0}], 0x4, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000380)) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) 20:12:35 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af", 0x7a}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 453.310042][ T5] usb 2-1: Service connection timeout for: 257 [ 453.317159][ T5] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 453.389090][ T5] ath9k_htc: Failed to initialize the device [ 453.428114][ T267] usb 2-1: ath9k_htc: USB layer deinitialized [ 453.524102][ T37] audit: type=1804 audit(1627675955.457:150): pid=15218 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/179/cgroup.controllers" dev="sda1" ino=15059 res=1 errno=0 [ 453.813136][ T267] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 454.163271][ T267] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 455.163160][ T267] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 455.172312][ T267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.180668][ T267] usb 2-1: Product: syz [ 455.185182][ T267] usb 2-1: Manufacturer: syz [ 455.189772][ T267] usb 2-1: SerialNumber: syz [ 455.233957][ T267] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 455.903151][ T267] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 20:12:38 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) 20:12:38 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af", 0x7a}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:12:38 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x335bc0}], 0x4, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000380)) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) [ 456.048127][ T20] usb 2-1: USB disconnect, device number 86 20:12:38 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af", 0x7a}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) [ 456.226072][ T37] audit: type=1804 audit(1627675958.157:151): pid=15258 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/183/cgroup.controllers" dev="sda1" ino=15085 res=1 errno=0 20:12:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) 20:12:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000502) [ 456.350806][ T37] audit: type=1804 audit(1627675958.217:152): pid=15263 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/180/cgroup.controllers" dev="sda1" ino=15088 res=1 errno=0 20:12:38 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74", 0xb7}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) [ 456.664054][ T37] audit: type=1804 audit(1627675958.597:153): pid=15284 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/181/cgroup.controllers" dev="sda1" ino=15079 res=1 errno=0 [ 456.993023][ T267] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 457.000077][ T267] ath9k_htc: Failed to initialize the device [ 457.027538][ T20] usb 2-1: ath9k_htc: USB layer deinitialized [ 457.407436][ T20] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 457.693111][ T20] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 458.493095][ T20] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 458.502768][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.515348][ T20] usb 2-1: Product: syz [ 458.519497][ T20] usb 2-1: Manufacturer: syz [ 458.525098][ T20] usb 2-1: SerialNumber: syz [ 458.573774][ T20] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 20:12:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:41 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74", 0xb7}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) 20:12:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000502) 20:12:41 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x335bc0}], 0x4, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000380)) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) [ 459.145473][ T26] usb 2-1: USB disconnect, device number 87 [ 459.163036][ T20] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 459.176801][ T26] usb 2-1: ath9k_htc: USB layer deinitialized 20:12:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0) 20:12:41 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74", 0xb7}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 459.325626][ T37] audit: type=1804 audit(1627675961.257:154): pid=15321 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/184/cgroup.controllers" dev="sda1" ino=15099 res=1 errno=0 20:12:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) socket(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000502) [ 459.455508][ T37] audit: type=1804 audit(1627675961.307:155): pid=15325 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/182/cgroup.controllers" dev="sda1" ino=15105 res=1 errno=0 20:12:41 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34", 0xd6}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0) 20:12:41 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34", 0xd6}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0) [ 459.700034][ T37] audit: type=1804 audit(1627675961.627:156): pid=15340 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/183/cgroup.controllers" dev="sda1" ino=15098 res=1 errno=0 20:12:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) socket(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000502) 20:12:41 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34", 0xd6}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 459.903004][ T267] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 459.929788][ T37] audit: type=1804 audit(1627675961.857:157): pid=15354 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/185/cgroup.controllers" dev="sda1" ino=15099 res=1 errno=0 [ 460.019015][ T37] audit: type=1804 audit(1627675961.947:158): pid=15362 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/184/cgroup.controllers" dev="sda1" ino=15087 res=1 errno=0 20:12:42 executing program 5: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xf, 0x0, &(0x7f00000001c0)="b95c4db708030000009e40f086ddbb", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 20:12:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 20:12:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) socket(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000502) [ 460.264228][ T267] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 460.316648][ T37] audit: type=1804 audit(1627675962.247:159): pid=15372 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/185/cgroup.controllers" dev="sda1" ino=15109 res=1 errno=0 [ 461.263129][ T267] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 461.272195][ T267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.281134][ T267] usb 2-1: Product: syz [ 461.286062][ T267] usb 2-1: Manufacturer: syz [ 461.290657][ T267] usb 2-1: SerialNumber: syz [ 461.343714][ T267] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 461.993197][ T267] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 462.197721][T15339] udc-core: couldn't find an available UDC or it's busy [ 462.204969][T15339] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 462.219445][T15339] udc-core: couldn't find an available UDC or it's busy [ 462.226720][T15339] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 462.670269][ T26] usb 2-1: USB disconnect, device number 88 20:12:45 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:45 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 20:12:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000502) 20:12:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003140)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}], 0x20}, 0x0) 20:12:45 executing program 5: socketpair(0x11, 0x3, 0x0, &(0x7f0000004d80)) 20:12:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 20:12:45 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 463.301383][ T37] audit: type=1804 audit(1627675965.227:160): pid=15395 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/186/cgroup.controllers" dev="sda1" ino=14002 res=1 errno=0 20:12:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000502) 20:12:45 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000019c0)='cgroup.controllers\x00', 0x0, 0x0) [ 463.398995][ T37] audit: type=1804 audit(1627675965.277:161): pid=15398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/186/cgroup.controllers" dev="sda1" ino=14162 res=1 errno=0 20:12:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) [ 463.543209][ T267] usb 2-1: Service connection timeout for: 257 [ 463.549781][ T267] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 463.572450][ T37] audit: type=1804 audit(1627675965.467:162): pid=15411 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/187/cgroup.controllers" dev="sda1" ino=14081 res=1 errno=0 [ 463.627786][ T267] ath9k_htc: Failed to initialize the device [ 463.646474][ T26] usb 2-1: ath9k_htc: USB layer deinitialized [ 464.013024][ T26] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 464.313153][ T26] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 465.113154][ T26] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 465.122504][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.131323][ T26] usb 2-1: Product: syz [ 465.136127][ T26] usb 2-1: Manufacturer: syz [ 465.141552][ T26] usb 2-1: SerialNumber: syz [ 465.193641][ T26] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 465.763051][ T26] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 465.966543][T15402] udc-core: couldn't find an available UDC or it's busy [ 465.973726][T15402] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 465.982353][T15402] udc-core: couldn't find an available UDC or it's busy [ 465.991487][T15402] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 466.406549][ T4869] usb 2-1: USB disconnect, device number 89 20:12:48 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:48 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000502) 20:12:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 20:12:48 executing program 5: perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x335bc0}], 0x4, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000380)) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) 20:12:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 20:12:49 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 467.031776][ T37] audit: type=1804 audit(1627675968.957:163): pid=15451 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/187/cgroup.controllers" dev="sda1" ino=14354 res=1 errno=0 20:12:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x0) [ 467.117512][ T37] audit: type=1804 audit(1627675968.997:164): pid=15453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/188/cgroup.controllers" dev="sda1" ino=14449 res=1 errno=0 20:12:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) [ 467.223126][ T26] usb 2-1: Service connection timeout for: 257 [ 467.245689][ T26] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 20:12:49 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 467.298674][ T26] ath9k_htc: Failed to initialize the device [ 467.340421][ T4869] usb 2-1: ath9k_htc: USB layer deinitialized 20:12:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) [ 467.445166][ T37] audit: type=1804 audit(1627675969.377:165): pid=15472 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/189/cgroup.controllers" dev="sda1" ino=14529 res=1 errno=0 [ 467.733111][ T4869] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 468.043315][ T4869] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 469.023150][ T4869] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 469.032734][ T4869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.041218][ T4869] usb 2-1: Product: syz [ 469.045756][ T4869] usb 2-1: Manufacturer: syz [ 469.050362][ T4869] usb 2-1: SerialNumber: syz [ 469.093678][ T4869] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 469.693102][ T4869] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 469.898980][T15459] udc-core: couldn't find an available UDC or it's busy [ 469.906420][T15459] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 469.920424][T15459] udc-core: couldn't find an available UDC or it's busy [ 469.927386][T15459] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 470.356880][ T20] usb 2-1: USB disconnect, device number 90 20:12:52 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:52 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x0) 20:12:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) 20:12:52 executing program 5: perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x335bc0}], 0x4, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000380)) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) 20:12:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) 20:12:53 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4", 0xf1}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 471.021857][ T37] audit: type=1804 audit(1627675972.947:166): pid=15510 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/188/cgroup.controllers" dev="sda1" ino=14786 res=1 errno=0 20:12:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x0) 20:12:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) [ 471.176302][ T37] audit: type=1804 audit(1627675972.997:167): pid=15513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/190/cgroup.controllers" dev="sda1" ino=14849 res=1 errno=0 [ 471.223385][ T4869] usb 2-1: Service connection timeout for: 257 [ 471.229730][ T4869] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 20:12:53 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4", 0xf1}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 471.280949][ T4869] ath9k_htc: Failed to initialize the device [ 471.331957][ T20] usb 2-1: ath9k_htc: USB layer deinitialized 20:12:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) [ 471.391669][ T37] audit: type=1804 audit(1627675973.317:168): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322713894/syzkaller.929pzN/191/cgroup.controllers" dev="sda1" ino=14643 res=1 errno=0 [ 471.729136][ T20] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 472.063237][ T20] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 472.973229][ T20] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 472.982690][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.991938][ T20] usb 2-1: Product: syz [ 472.996612][ T20] usb 2-1: Manufacturer: syz [ 473.001522][ T20] usb 2-1: SerialNumber: syz [ 473.064197][ T20] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 473.783548][ T20] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 20:12:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:55 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4", 0xf1}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) 20:12:55 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:55 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x17, 0x0, 0x6, 0x1, 0x0, 0x1}, 0x40) 20:12:55 executing program 5: perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x335bc0}], 0x4, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000380)) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) [ 473.945770][ T26] usb 2-1: USB disconnect, device number 91 20:12:56 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x17, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 20:12:56 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992f", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) [ 474.122060][ T37] audit: type=1804 audit(1627675976.047:169): pid=15568 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/189/cgroup.controllers" dev="sda1" ino=15124 res=1 errno=0 20:12:56 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) 20:12:56 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992f", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}]}]}]}, 0x2c}}, 0x0) [ 474.823163][ T20] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 474.830228][ T20] ath9k_htc: Failed to initialize the device [ 474.839534][ T26] usb 2-1: ath9k_htc: USB layer deinitialized [ 475.243106][ T26] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 475.543457][ T26] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 476.343848][ T26] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 476.353155][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.361137][ T26] usb 2-1: Product: syz [ 476.366570][ T26] usb 2-1: Manufacturer: syz [ 476.371467][ T26] usb 2-1: SerialNumber: syz [ 476.413836][ T26] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 20:12:58 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:12:58 executing program 0: bpf$MAP_CREATE(0xa, &(0x7f0000000580), 0x40) 20:12:58 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992f", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 20:12:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:12:58 executing program 5: socketpair(0x10, 0x2, 0x9, &(0x7f0000000000)) [ 477.010219][ T267] usb 2-1: USB disconnect, device number 92 [ 477.027914][ T26] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 477.079347][ T267] usb 2-1: ath9k_htc: USB layer deinitialized 20:12:59 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:12:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 20:12:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg(0xffffffffffffff9c, &(0x7f00000004c0)={&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000940)=""/150, 0x96}, {&(0x7f0000000a00)=""/95, 0x5f}, {&(0x7f0000000a80)=""/162, 0xa2}], 0x5, &(0x7f0000000bc0)=""/204, 0xcc, 0x3}, 0x0) sendmsg(r0, &(0x7f0000000780)={&(0x7f0000000cc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x4}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)}], 0x1, &(0x7f0000001140)=[{0x20, 0x0, 0x0, "7917bc0d8dcf79090e90"}], 0x20, 0x4}, 0x4) socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000580)='./file0/file0\x00', &(0x7f00000019c0), 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500), 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x0, &(0x7f0000000800)='./file0/file0\x00', &(0x7f0000001480), 0x4000, &(0x7f00000014c0)=ANY=[@ANYBLOB='\x00']) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000140), 0x2001001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00), 0x2001001, &(0x7f0000000580)=ANY=[]) 20:12:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x3b6af0}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x17, &(0x7f0000000400)=[{&(0x7f0000000340)="4f15a39a2df43b14ed5f2c578d4db055ee07f5a3d802cf8b50b4e7df21e18cb5fc59569f9e048c6343d4d93a8de61654aea60f37d00726bbbaf8413fa35f711e8ebd6b86b0d049ac43de63ad10d251b4fdb14d20706d042b10384fce5ec562f80eea2946c9cfc7f1078325732582af6da35442dfadaacf63643c41a7e5f882e09016d46b27739751f7cb3c9747d087919a9ce3b13b0c9a2774a54d8d5a2c5053ac2eebb14cad"}, {&(0x7f0000000240)="ae61a8d192171409dc2c19809ce70f90c61b402d89906f876fbb89196fa57c9dd7ed6fe73d4a9a050d32416a7e622c1c9943ab04d4e7db1546fab943d95d0a7057459e2d58c83e7f97ddda17b3aff67efc92f873b90a00b5d3c8226357fc7dce76f9ccb0c757e1f3f3d77ab2c382b1f474dbfc9f"}], 0x47, &(0x7f0000000000), 0x0, 0xb9efff7f}, 0x0) [ 477.218498][ T37] audit: type=1804 audit(1627675979.147:170): pid=15634 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/190/cgroup.controllers" dev="sda1" ino=15142 res=1 errno=0 20:12:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 20:12:59 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 477.544267][ T267] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 477.823214][ T267] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 478.623255][ T267] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 478.632705][ T267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.641058][ T267] usb 2-1: Product: syz [ 478.645547][ T267] usb 2-1: Manufacturer: syz [ 478.650179][ T267] usb 2-1: SerialNumber: syz [ 478.693776][ T267] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 479.263130][ T267] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 479.467899][T15632] udc-core: couldn't find an available UDC or it's busy [ 479.475097][T15632] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 479.489823][T15632] udc-core: couldn't find an available UDC or it's busy [ 479.496833][T15632] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 479.927665][ T9753] usb 2-1: USB disconnect, device number 93 20:13:02 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:13:02 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:13:02 executing program 0: perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48) close(r0) 20:13:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:13:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) 20:13:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x3b6af0}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x17, &(0x7f0000000400)=[{&(0x7f0000000340)="4f15a39a2df43b14ed5f2c578d4db055ee07f5a3d802cf8b50b4e7df21e18cb5fc59569f9e048c6343d4d93a8de61654aea60f37d00726bbbaf8413fa35f711e8ebd6b86b0d049ac43de63ad10d251b4fdb14d20706d042b10384fce5ec562f80eea2946c9cfc7f1078325732582af6da35442dfadaacf63643c41a7e5f882e09016d46b27739751f7cb3c9747d087919a9ce3b13b0c9a2774a54d8d5a2c5053ac2eebb14cad"}, {&(0x7f0000000240)="ae61a8d192171409dc2c19809ce70f90c61b402d89906f876fbb89196fa57c9dd7ed6fe73d4a9a050d32416a7e622c1c9943ab04d4e7db1546fab943d95d0a7057459e2d58c83e7f97ddda17b3aff67efc92f873b90a00b5d3c8226357fc7dce76f9ccb0c757e1f3f3d77ab2c382b1f474dbfc9f"}], 0x47, &(0x7f0000000000), 0x0, 0xb9efff7f}, 0x0) 20:13:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) 20:13:02 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:13:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x3b6af0}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x17, &(0x7f0000000400)=[{&(0x7f0000000340)="4f15a39a2df43b14ed5f2c578d4db055ee07f5a3d802cf8b50b4e7df21e18cb5fc59569f9e048c6343d4d93a8de61654aea60f37d00726bbbaf8413fa35f711e8ebd6b86b0d049ac43de63ad10d251b4fdb14d20706d042b10384fce5ec562f80eea2946c9cfc7f1078325732582af6da35442dfadaacf63643c41a7e5f882e09016d46b27739751f7cb3c9747d087919a9ce3b13b0c9a2774a54d8d5a2c5053ac2eebb14cad"}, {&(0x7f0000000240)="ae61a8d192171409dc2c19809ce70f90c61b402d89906f876fbb89196fa57c9dd7ed6fe73d4a9a050d32416a7e622c1c9943ab04d4e7db1546fab943d95d0a7057459e2d58c83e7f97ddda17b3aff67efc92f873b90a00b5d3c8226357fc7dce76f9ccb0c757e1f3f3d77ab2c382b1f474dbfc9f"}], 0x47, &(0x7f0000000000), 0x0, 0xb9efff7f}, 0x0) [ 480.626539][ T37] audit: type=1804 audit(1627675982.557:171): pid=15684 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/191/cgroup.controllers" dev="sda1" ino=15157 res=1 errno=0 20:13:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) [ 480.744014][ T267] usb 2-1: Service connection timeout for: 257 [ 480.750300][ T267] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 20:13:02 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 480.801861][ T267] ath9k_htc: Failed to initialize the device 20:13:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x0) [ 480.851601][ T9753] usb 2-1: ath9k_htc: USB layer deinitialized [ 481.228305][ T9753] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 481.533395][ T9753] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 482.333400][ T9753] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 482.342735][ T9753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.351531][ T9753] usb 2-1: Product: syz [ 482.355862][ T9753] usb 2-1: Manufacturer: syz [ 482.360450][ T9753] usb 2-1: SerialNumber: syz [ 482.403838][ T9753] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 482.973140][ T9753] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 483.176692][T15690] udc-core: couldn't find an available UDC or it's busy [ 483.184103][T15690] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 483.192512][T15690] udc-core: couldn't find an available UDC or it's busy [ 483.199979][T15690] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 483.627159][ T5] usb 2-1: USB disconnect, device number 94 20:13:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:13:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x0) 20:13:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:13:06 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:13:06 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x4c, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000037000504d24380648c73940d0135fc60060012400c0002000300000037153e370a0001805a256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x300}, 0x0) 20:13:06 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000051c0)) [ 484.178598][T15741] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 20:13:06 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:13:06 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x17, 0x2, 0x0, 0x1, 0x0, 0x1}, 0x40) 20:13:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:13:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x0) [ 484.335120][T15741] device Z0 entered promiscuous mode [ 484.362108][T15755] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 20:13:06 executing program 0: socket$kcm(0x10, 0x0, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x40000d) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000480)=""/23) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) [ 484.388115][T15755] device Z1 entered promiscuous mode 20:13:06 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 484.513232][ T9753] usb 2-1: Service connection timeout for: 257 [ 484.519919][ T9753] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 484.563772][ T9753] ath9k_htc: Failed to initialize the device [ 484.608260][ T5] usb 2-1: ath9k_htc: USB layer deinitialized [ 484.613243][ T37] audit: type=1804 audit(1627675986.537:172): pid=15769 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/193/cgroup.controllers" dev="sda1" ino=15167 res=1 errno=0 [ 484.983223][ T5] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 485.314072][ T5] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 486.113134][ T5] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 486.122857][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.131189][ T5] usb 2-1: Product: syz [ 486.136041][ T5] usb 2-1: Manufacturer: syz [ 486.140633][ T5] usb 2-1: SerialNumber: syz [ 486.183897][ T5] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 486.763099][ T5] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 486.968178][T15751] udc-core: couldn't find an available UDC or it's busy [ 486.975278][T15751] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 486.989311][T15751] udc-core: couldn't find an available UDC or it's busy [ 486.996322][T15751] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 487.427875][ T9753] usb 2-1: USB disconnect, device number 95 20:13:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:13:09 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x4c, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000037000504d24380648c73940d0135fc60060012400c0002000300000037153e370a0001805a256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x300}, 0x0) 20:13:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}]}]}, 0x2c}}, 0x0) 20:13:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:13:09 executing program 0: socket$kcm(0x10, 0x0, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x40000d) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000480)=""/23) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) 20:13:09 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:13:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}]}]}, 0x2c}}, 0x0) [ 488.041055][T15809] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 488.115506][T15809] device Z2 entered promiscuous mode 20:13:10 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 488.142403][ T37] audit: type=1804 audit(1627675990.067:173): pid=15810 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/194/cgroup.controllers" dev="sda1" ino=15187 res=1 errno=0 20:13:10 executing program 5: socket$kcm(0x10, 0x0, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x40000d) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000480)=""/23) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) 20:13:10 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 488.263173][ T5] usb 2-1: Service connection timeout for: 257 [ 488.269557][ T5] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 20:13:10 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00'}) 20:13:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}]}]}, 0x2c}}, 0x0) [ 488.325128][ T5] ath9k_htc: Failed to initialize the device [ 488.366858][ T9753] usb 2-1: ath9k_htc: USB layer deinitialized [ 488.733084][ T9753] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 489.033148][ T9753] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 489.863307][ T9753] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 489.872527][ T9753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.880688][ T9753] usb 2-1: Product: syz [ 489.884979][ T9753] usb 2-1: Manufacturer: syz [ 489.889565][ T9753] usb 2-1: SerialNumber: syz [ 489.933763][ T9753] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 490.503136][ T9753] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 490.716715][T15813] udc-core: couldn't find an available UDC or it's busy [ 490.724201][T15813] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 490.738359][T15813] udc-core: couldn't find an available UDC or it's busy [ 490.746417][T15813] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 491.170692][ T5] usb 2-1: USB disconnect, device number 96 20:13:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:13:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}]}]}, 0x2c}}, 0x0) 20:13:13 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:13:13 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00'}) 20:13:13 executing program 5: perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0xfff}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x270, &(0x7f0000000200)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x5f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r0}, 0xc) 20:13:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:13:13 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:13:13 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00'}) 20:13:13 executing program 4: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) [ 491.831073][ T37] audit: type=1804 audit(1627675993.757:174): pid=15864 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/195/cgroup.controllers" dev="sda1" ino=15199 res=1 errno=0 20:13:13 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/1347], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x29, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001980)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)='-emy.lv\x86]\xc4\xbe\xcd'}, 0x30) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socket$kcm(0x29, 0x5, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x2, 0x11) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 20:13:13 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:13:13 executing program 4: socketpair(0x23, 0x5, 0x0, &(0x7f00000000c0)) [ 492.023205][ T9753] usb 2-1: Service connection timeout for: 257 [ 492.029749][ T9753] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 492.082880][ T9753] ath9k_htc: Failed to initialize the device [ 492.111903][ T5] usb 2-1: ath9k_htc: USB layer deinitialized [ 492.533083][ T5] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 492.863343][ T5] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 493.733182][ T5] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 493.742611][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.751048][ T5] usb 2-1: Product: syz [ 493.755481][ T5] usb 2-1: Manufacturer: syz [ 493.760071][ T5] usb 2-1: SerialNumber: syz [ 493.803910][ T5] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 494.383133][ T5] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 494.587721][T15873] udc-core: couldn't find an available UDC or it's busy [ 494.594820][T15873] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 494.603345][T15873] udc-core: couldn't find an available UDC or it's busy [ 494.610523][T15873] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 495.029716][ T20] usb 2-1: USB disconnect, device number 97 20:13:17 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:13:17 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00'}) 20:13:17 executing program 4: socketpair(0x23, 0x5, 0x0, &(0x7f00000000c0)) 20:13:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:13:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:13:17 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000001c0)="d183c92a6caefbbd28d2a4e51925d34c7f37ada119db1f769fbbee6357240b82180fa20909c232487e", 0x29) 20:13:17 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:13:17 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x5, &(0x7f0000000000)="8f", 0x1) 20:13:17 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00'}) 20:13:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x5451, 0x0) [ 495.725127][ T37] audit: type=1804 audit(1627675997.657:175): pid=15926 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/196/cgroup.controllers" dev="sda1" ino=15222 res=1 errno=0 20:13:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) [ 495.863154][ T5] usb 2-1: Service connection timeout for: 257 [ 495.869835][ T5] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 20:13:17 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00'}) 20:13:17 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 495.918445][ T5] ath9k_htc: Failed to initialize the device [ 495.957484][ T20] usb 2-1: ath9k_htc: USB layer deinitialized 20:13:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x643, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x40305839, 0x0) 20:13:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0xa, &(0x7f0000000000)=0x5, 0x4) 20:13:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 496.270955][ T37] audit: type=1804 audit(1627675998.197:176): pid=15965 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/197/cgroup.controllers" dev="sda1" ino=14033 res=1 errno=0 [ 496.323127][ T20] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 496.618168][ T20] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 497.434535][ T20] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 497.444134][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.452516][ T20] usb 2-1: Product: syz [ 497.457127][ T20] usb 2-1: Manufacturer: syz [ 497.461723][ T20] usb 2-1: SerialNumber: syz [ 497.503642][ T20] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 498.073133][ T20] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 498.276772][T15931] udc-core: couldn't find an available UDC or it's busy [ 498.284037][T15931] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 498.292436][T15931] udc-core: couldn't find an available UDC or it's busy [ 498.299588][T15931] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 498.719990][ T9519] usb 2-1: USB disconnect, device number 98 20:13:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x17, 0xc1, &(0x7f0000000300)="6b8cdedeccb4b99b1e4ee07ea87ec4d78b5178e4f221a09849cdcedc58ab47958c5f3a4457394dc44cb030206ec4584668986002e6b1f4be2270ca8e8e2e2866cb30bcb1606be85764fbcb0342ab0d9839b5a73b17cb64b93d66af45895d1b55d86c877035871d840bd116a16c9728f300c3e63a7b8772fa4f55cc9ae7b40e2688d1cf84327832f20b2ba04e8bb6a94fa6ba121542acff92d523e60dd1a1e12226b7533f41217d243b274ae64f4e42b23960cc4a2db5fbd89b224b10c8a17cbe02"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:13:21 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00'}) 20:13:21 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:13:21 executing program 5: r0 = socket$inet(0x2, 0x3, 0x7) ioctl$sock_SIOCGIFCONF(r0, 0x4020940d, &(0x7f0000000100)) 20:13:21 executing program 4: r0 = socket$inet(0x2, 0x3, 0x7) ioctl$sock_SIOCGIFCONF(r0, 0x8983, 0x0) 20:13:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:13:21 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(0x0, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:13:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x88d41) ioctl$SG_SET_TIMEOUT(r0, 0x5450, 0x0) 20:13:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00'}) 20:13:21 executing program 4: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="c599d63237791c011dd27d"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 20:13:21 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = gettid() sendmsg$unix(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x40}, 0x0) 20:13:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 499.489361][T16014] ptrace attach of "/root/syz-executor.4"[16011] was attempted by "/root/syz-executor.4"[16014] [ 499.543375][ T20] usb 2-1: Service connection timeout for: 257 [ 499.550141][ T20] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 499.590490][ T20] ath9k_htc: Failed to initialize the device [ 499.609178][ T9519] usb 2-1: ath9k_htc: USB layer deinitialized [ 499.640715][ T37] audit: type=1804 audit(1627676001.567:177): pid=16018 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/199/cgroup.controllers" dev="sda1" ino=14129 res=1 errno=0 [ 499.973151][ T9519] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 500.263454][ T9519] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 500.665263][ T3261] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.671772][ T3261] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.073231][ T9519] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 501.083191][ T9519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.091357][ T9519] usb 2-1: Product: syz [ 501.097782][ T9519] usb 2-1: Manufacturer: syz [ 501.102378][ T9519] usb 2-1: SerialNumber: syz [ 501.143912][ T9519] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 501.713155][ T9519] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 501.917878][T16000] udc-core: couldn't find an available UDC or it's busy [ 501.925506][T16000] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 501.934775][T16000] udc-core: couldn't find an available UDC or it's busy [ 501.941711][T16000] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 502.359988][ T5] usb 2-1: USB disconnect, device number 99 20:13:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00'}) 20:13:24 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(0x0, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:13:24 executing program 4: sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 20:13:24 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000080)) 20:13:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:13:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000100)='\a'}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4fa, [{{0x9, 0x2, 0xffffffc5}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, "09b551396f365a7be15c4a6c224f1341d52f89df541241f0064534e5c5ae3fa1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "f90f810c"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, "e6d2bf8472101b6e0035c281b3412f06dc8c8f874429477da118afabdd17adbf"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 20:13:24 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(0x0, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 20:13:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x64}}, 0x0) 20:13:24 executing program 4: r0 = socket$inet(0x2, 0x3, 0x7) ioctl$sock_SIOCGIFCONF(r0, 0x89e0, 0x0) 20:13:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00'}) 20:13:25 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 503.053604][ T37] audit: type=1804 audit(1627676004.977:178): pid=16062 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir909715708/syzkaller.j89kQX/200/cgroup.controllers" dev="sda1" ino=14498 res=1 errno=0 20:13:25 executing program 4: r0 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0xf5ffffff) ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffff, 0x0, "e469782670889d85b44a1907b1c5c92215c686"}) 20:13:25 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) 20:13:25 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00'}) [ 503.233297][ T9519] usb 2-1: Service connection timeout for: 257 [ 503.245220][ T9519] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 20:13:25 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="66530700ae897094e7b126b097eaa7be6d28c41b9d4f64d34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b1055f69a37237647e947e4df739526ecbb3987b178b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2121945b0d79bb5efadeaad6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86cc1d507694a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731ed21fb541b7a2cc83eb76be0952aea033004c34140385d3135a259470f3b7daeac815daf1bc482dee541c06871fb4992fa7", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) [ 503.302373][ T9519] ath9k_htc: Failed to initialize the device [ 503.340936][ T5] usb 2-1: ath9k_htc: USB layer deinitialized 20:13:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 20:13:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) [ 503.548264][T16076] ------------[ cut here ]------------ [ 503.555494][T16076] WARNING: CPU: 1 PID: 16076 at fs/io_uring.c:1546 io_poll_double_wake+0x4fb/0x760 [ 503.564866][T16076] Modules linked in: [ 503.568744][T16076] CPU: 1 PID: 16076 Comm: syz-executor.4 Not tainted 5.14.0-rc3-syzkaller #0 [ 503.577502][T16076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.587546][T16076] RIP: 0010:io_poll_double_wake+0x4fb/0x760 [ 503.593439][T16076] Code: e2 db ff f0 41 ff 4c 24 5c 0f 94 c3 31 ff 89 de e8 4a b4 95 ff 84 db b8 01 00 00 00 0f 84 6f fc ff ff 89 04 24 e8 f5 ad 95 ff <0f> 0b 8b 04 24 e9 5d fc ff ff e8 e6 ad 95 ff 4c 89 e5 e9 a1 fb ff [ 503.613211][T16076] RSP: 0018:ffffc9000194fc20 EFLAGS: 00010093 [ 503.619261][T16076] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 503.627214][T16076] RDX: ffff88801b421c40 RSI: ffffffff81dfecfb RDI: 0000000000000003 [ 503.635169][T16076] RBP: ffff888033946e1c R08: 0000000000000001 R09: 0000000000000001 [ 503.643125][T16076] R10: ffffffff81dfece6 R11: 0000000000000000 R12: ffff888033946dc0 [ 503.651087][T16076] R13: 0000000000000000 R14: ffff888033946df0 R15: ffff8880277f7fa0 [ 503.659043][T16076] FS: 00000000014ef400(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 503.667958][T16076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.674524][T16076] CR2: 0000000000540198 CR3: 000000002a73c000 CR4: 0000000000350ee0 [ 503.682480][T16076] Call Trace: [ 503.685915][T16076] __wake_up_common+0x147/0x650 [ 503.690763][T16076] __wake_up_common_lock+0xd0/0x130 [ 503.695947][T16076] ? __wake_up_common+0x650/0x650 [ 503.701131][T16076] ? rwlock_bug.part.0+0x90/0x90 [ 503.706052][T16076] ? _raw_spin_unlock_irq+0x1f/0x40 [ 503.711502][T16076] pty_close+0x224/0x4f0 [ 503.715727][T16076] ? ptmx_open+0x360/0x360 [ 503.720216][T16076] tty_release+0x45e/0x1200 [ 503.724703][T16076] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 503.731101][T16076] __fput+0x288/0x920 [ 503.735064][T16076] ? tty_release_struct+0xe0/0xe0 [ 503.740076][T16076] task_work_run+0xdd/0x1a0 [ 503.744564][T16076] exit_to_user_mode_prepare+0x27e/0x290 [ 503.750184][T16076] syscall_exit_to_user_mode+0x19/0x60 [ 503.755630][T16076] do_syscall_64+0x42/0xb0 [ 503.760117][T16076] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 503.765991][T16076] RIP: 0033:0x4193fb [ 503.769867][T16076] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 503.789549][T16076] RSP: 002b:00007ffd30e2ed50 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 503.797952][T16076] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004193fb [ 503.805906][T16076] RDX: 0000000000000000 RSI: ffffffff817bbe21 RDI: 0000000000000004 [ 503.813947][T16076] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2c124858 [ 503.821985][T16076] R10: 0000000000000be6 R11: 0000000000000293 R12: 000000000056cb00 [ 503.829938][T16076] R13: 000000000056cb00 R14: 000000000056bf80 R15: 000000000007ade8 [ 503.837893][T16076] ? trace_hardirqs_on+0x51/0x1c0 [ 503.842909][T16076] Kernel panic - not syncing: panic_on_warn set ... [ 503.849470][T16076] CPU: 1 PID: 16076 Comm: syz-executor.4 Not tainted 5.14.0-rc3-syzkaller #0 [ 503.858297][T16076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.868334][T16076] Call Trace: [ 503.871595][T16076] dump_stack_lvl+0xcd/0x134 [ 503.876174][T16076] panic+0x306/0x73d [ 503.880055][T16076] ? __warn_printk+0xf3/0xf3 [ 503.884643][T16076] ? __warn.cold+0x1a/0x44 [ 503.889133][T16076] ? io_poll_double_wake+0x4fb/0x760 [ 503.894404][T16076] __warn.cold+0x35/0x44 [ 503.898634][T16076] ? io_poll_double_wake+0x4fb/0x760 [ 503.903904][T16076] report_bug+0x1bd/0x210 [ 503.908216][T16076] handle_bug+0x3c/0x60 [ 503.912440][T16076] exc_invalid_op+0x14/0x40 [ 503.917018][T16076] asm_exc_invalid_op+0x12/0x20 [ 503.921850][T16076] RIP: 0010:io_poll_double_wake+0x4fb/0x760 [ 503.927729][T16076] Code: e2 db ff f0 41 ff 4c 24 5c 0f 94 c3 31 ff 89 de e8 4a b4 95 ff 84 db b8 01 00 00 00 0f 84 6f fc ff ff 89 04 24 e8 f5 ad 95 ff <0f> 0b 8b 04 24 e9 5d fc ff ff e8 e6 ad 95 ff 4c 89 e5 e9 a1 fb ff [ 503.947320][T16076] RSP: 0018:ffffc9000194fc20 EFLAGS: 00010093 [ 503.953371][T16076] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 503.961410][T16076] RDX: ffff88801b421c40 RSI: ffffffff81dfecfb RDI: 0000000000000003 [ 503.969361][T16076] RBP: ffff888033946e1c R08: 0000000000000001 R09: 0000000000000001 [ 503.977314][T16076] R10: ffffffff81dfece6 R11: 0000000000000000 R12: ffff888033946dc0 [ 503.985265][T16076] R13: 0000000000000000 R14: ffff888033946df0 R15: ffff8880277f7fa0 [ 503.993217][T16076] ? io_poll_double_wake+0x4e6/0x760 [ 503.998493][T16076] ? io_poll_double_wake+0x4fb/0x760 [ 504.003940][T16076] __wake_up_common+0x147/0x650 [ 504.008783][T16076] __wake_up_common_lock+0xd0/0x130 [ 504.013969][T16076] ? __wake_up_common+0x650/0x650 [ 504.018981][T16076] ? rwlock_bug.part.0+0x90/0x90 [ 504.023900][T16076] ? _raw_spin_unlock_irq+0x1f/0x40 [ 504.029087][T16076] pty_close+0x224/0x4f0 [ 504.033314][T16076] ? ptmx_open+0x360/0x360 [ 504.037714][T16076] tty_release+0x45e/0x1200 [ 504.042203][T16076] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 504.048433][T16076] __fput+0x288/0x920 [ 504.052398][T16076] ? tty_release_struct+0xe0/0xe0 [ 504.057406][T16076] task_work_run+0xdd/0x1a0 [ 504.061999][T16076] exit_to_user_mode_prepare+0x27e/0x290 [ 504.067708][T16076] syscall_exit_to_user_mode+0x19/0x60 [ 504.073154][T16076] do_syscall_64+0x42/0xb0 [ 504.077553][T16076] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 504.083427][T16076] RIP: 0033:0x4193fb [ 504.087301][T16076] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 504.107222][T16076] RSP: 002b:00007ffd30e2ed50 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 504.115623][T16076] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004193fb [ 504.123576][T16076] RDX: 0000000000000000 RSI: ffffffff817bbe21 RDI: 0000000000000004 [ 504.131528][T16076] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2c124858 [ 504.139480][T16076] R10: 0000000000000be6 R11: 0000000000000293 R12: 000000000056cb00 [ 504.147431][T16076] R13: 000000000056cb00 R14: 000000000056bf80 R15: 000000000007ade8 [ 504.155386][T16076] ? trace_hardirqs_on+0x51/0x1c0 [ 504.160398][T16076] [ 504.160404][T16076] ====================================================== [ 504.160411][T16076] WARNING: possible circular locking dependency detected [ 504.160418][T16076] 5.14.0-rc3-syzkaller #0 Not tainted [ 504.160424][T16076] ------------------------------------------------------ [ 504.160431][T16076] syz-executor.4/16076 is trying to acquire lock: [ 504.160437][T16076] ffffffff8b88a760 (console_owner){-...}-{0:0}, at: console_unlock+0x2e6/0xc40 [ 504.160458][T16076] [ 504.160462][T16076] but task is already holding lock: [ 504.160467][T16076] ffff8880825cb528 (&tty->write_wait){-.-.}-{2:2}, at: __wake_up_common_lock+0xb4/0x130 [ 504.160488][T16076] [ 504.160491][T16076] which lock already depends on the new lock. [ 504.160496][T16076] [ 504.160499][T16076] [ 504.160503][T16076] the existing dependency chain (in reverse order) is: [ 504.160508][T16076] [ 504.160511][T16076] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 504.160529][T16076] _raw_spin_lock_irqsave+0x39/0x50 [ 504.160535][T16076] __wake_up_common_lock+0xb4/0x130 [ 504.160540][T16076] tty_port_default_wakeup+0x26/0x40 [ 504.160546][T16076] serial8250_tx_chars+0x4f3/0xad0 [ 504.160552][T16076] serial8250_handle_irq.part.0+0x305/0x3a0 [ 504.160558][T16076] serial8250_default_handle_irq+0xb2/0x220 [ 504.160563][T16076] serial8250_interrupt+0xfd/0x200 [ 504.160569][T16076] __handle_irq_event_percpu+0x303/0x8f0 [ 504.160575][T16076] handle_irq_event+0x102/0x280 [ 504.160580][T16076] handle_edge_irq+0x25f/0xd00 [ 504.160585][T16076] __common_interrupt+0x9d/0x210 [ 504.160590][T16076] common_interrupt+0x9f/0xd0 [ 504.160595][T16076] asm_common_interrupt+0x1e/0x40 [ 504.160601][T16076] acpi_idle_do_entry+0x1c6/0x250 [ 504.160606][T16076] acpi_idle_enter+0x361/0x500 [ 504.160611][T16076] cpuidle_enter_state+0x1b1/0xc80 [ 504.160617][T16076] cpuidle_enter+0x4a/0xa0 [ 504.160621][T16076] do_idle+0x3e8/0x590 [ 504.160626][T16076] cpu_startup_entry+0x14/0x20 [ 504.160631][T16076] start_kernel+0x47a/0x49b [ 504.160636][T16076] secondary_startup_64_no_verify+0xb0/0xbb [ 504.160641][T16076] [ 504.160644][T16076] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 504.160662][T16076] _raw_spin_lock_irqsave+0x39/0x50 [ 504.160667][T16076] serial8250_console_write+0x91a/0xb70 [ 504.160673][T16076] console_unlock+0x859/0xc40 [ 504.160678][T16076] vprintk_emit+0x1ca/0x560 [ 504.160683][T16076] vprintk+0x8d/0x260 [ 504.160687][T16076] printk+0xba/0xed [ 504.160692][T16076] register_console+0x55f/0x780 [ 504.160697][T16076] univ8250_console_init+0x3a/0x46 [ 504.160702][T16076] console_init+0x3c1/0x58d [ 504.160707][T16076] start_kernel+0x30b/0x49b [ 504.160712][T16076] secondary_startup_64_no_verify+0xb0/0xbb [ 504.160717][T16076] [ 504.160720][T16076] -> #0 (console_owner){-...}-{0:0}: [ 504.160738][T16076] __lock_acquire+0x2a07/0x54a0 [ 504.160743][T16076] lock_acquire+0x1ab/0x510 [ 504.160748][T16076] console_unlock+0x359/0xc40 [ 504.160753][T16076] vprintk_emit+0x1ca/0x560 [ 504.160758][T16076] vprintk+0x8d/0x260 [ 504.160762][T16076] printk+0xba/0xed [ 504.160767][T16076] report_bug.cold+0x72/0xab [ 504.160772][T16076] handle_bug+0x3c/0x60 [ 504.160776][T16076] exc_invalid_op+0x14/0x40 [ 504.160781][T16076] asm_exc_invalid_op+0x12/0x20 [ 504.160786][T16076] io_poll_double_wake+0x4fb/0x760 [ 504.160792][T16076] __wake_up_common+0x147/0x650 [ 504.160797][T16076] __wake_up_common_lock+0xd0/0x130 [ 504.160802][T16076] pty_close+0x224/0x4f0 [ 504.160807][T16076] tty_release+0x45e/0x1200 [ 504.160812][T16076] __fput+0x288/0x920 [ 504.160816][T16076] task_work_run+0xdd/0x1a0 [ 504.160822][T16076] exit_to_user_mode_prepare+0x27e/0x290 [ 504.160828][T16076] syscall_exit_to_user_mode+0x19/0x60 [ 504.160833][T16076] do_syscall_64+0x42/0xb0 [ 504.160838][T16076] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 504.160843][T16076] [ 504.160847][T16076] other info that might help us debug this: [ 504.160851][T16076] [ 504.160854][T16076] Chain exists of: [ 504.160857][T16076] console_owner --> &port_lock_key --> &tty->write_wait [ 504.160881][T16076] [ 504.160885][T16076] Possible unsafe locking scenario: [ 504.160889][T16076] [ 504.160892][T16076] CPU0 CPU1 [ 504.160898][T16076] ---- ---- [ 504.160902][T16076] lock(&tty->write_wait); [ 504.160913][T16076] lock(&port_lock_key); [ 504.160926][T16076] lock(&tty->write_wait); [ 504.160938][T16076] lock(console_owner); [ 504.160948][T16076] [ 504.160950][T16076] *** DEADLOCK *** [ 504.160954][T16076] [ 504.160957][T16076] 3 locks held by syz-executor.4/16076: [ 504.160962][T16076] #0: ffff8880825c91c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_lock+0xbd/0x120 [ 504.160985][T16076] #1: ffff8880825cb528 (&tty->write_wait){-.-.}-{2:2}, at: __wake_up_common_lock+0xb4/0x130 [ 504.161009][T16076] #2: ffffffff8b96ab40 (console_lock){+.+.}-{0:0}, at: vprintk+0x8d/0x260 [ 504.161032][T16076] [ 504.161035][T16076] stack backtrace: [ 504.161040][T16076] CPU: 1 PID: 16076 Comm: syz-executor.4 Not tainted 5.14.0-rc3-syzkaller #0 [ 504.161048][T16076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.161056][T16076] Call Trace: [ 504.161059][T16076] dump_stack_lvl+0xcd/0x134 [ 504.161064][T16076] check_noncircular+0x25f/0x2e0 [ 504.161069][T16076] ? stack_trace_consume_entry+0x160/0x160 [ 504.161074][T16076] ? print_circular_bug+0x1e0/0x1e0 [ 504.161079][T16076] ? memcpy+0x39/0x60 [ 504.161084][T16076] ? lockdep_lock+0xc6/0x200 [ 504.161088][T16076] ? call_rcu_zapped+0xb0/0xb0 [ 504.161093][T16076] __lock_acquire+0x2a07/0x54a0 [ 504.161098][T16076] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 504.161103][T16076] lock_acquire+0x1ab/0x510 [ 504.161108][T16076] ? console_unlock+0x2e6/0xc40 [ 504.161112][T16076] ? lock_release+0x720/0x720 [ 504.161117][T16076] ? lock_downgrade+0x6e0/0x6e0 [ 504.161122][T16076] ? do_raw_spin_lock+0x120/0x2b0 [ 504.161126][T16076] ? rwlock_bug.part.0+0x90/0x90 [ 504.161131][T16076] console_unlock+0x359/0xc40 [ 504.161136][T16076] ? console_unlock+0x2e6/0xc40 [ 504.161141][T16076] ? devkmsg_read+0x7d0/0x7d0 [ 504.161145][T16076] ? lock_release+0x720/0x720 [ 504.161149][T16076] ? vprintk+0x8d/0x260 [ 504.161154][T16076] vprintk_emit+0x1ca/0x560 [ 504.161158][T16076] vprintk+0x8d/0x260 [ 504.161162][T16076] printk+0xba/0xed [ 504.161166][T16076] ? record_print_text.cold+0x16/0x16 [ 504.161172][T16076] ? finish_task_switch.isra.0+0x22d/0xa50 [ 504.161177][T16076] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 504.161183][T16076] ? __lock_acquire+0x162f/0x54a0 [ 504.161188][T16076] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 504.161193][T16076] ? report_bug.cold+0x66/0xab [ 504.161198][T16076] ? io_poll_double_wake+0x4fb/0x760 [ 504.161203][T16076] report_bug.cold+0x72/0xab [ 504.161207][T16076] handle_bug+0x3c/0x60 [ 504.161211][T16076] exc_invalid_op+0x14/0x40 [ 504.161216][T16076] asm_exc_invalid_op+0x12/0x20 [ 504.161221][T16076] RIP: 0010:io_poll_double_wake+0x4fb/0x760 [ 504.161230][T16076] Code: e2 db ff f0 41 ff 4c 24 5c 0f 94 c3 31 ff 89 de e8 4a b4 95 ff 84 db b8 01 00 00 00 0f 84 6f fc ff ff 89 04 24 e8 f5 ad 95 ff <0f> 0b 8b 04 24 e9 5d fc ff ff e8 e6 ad 95 ff 4c 89 e5 e9 a1 fb ff [ 504.161244][T16076] RSP: 0018:ffffc9000194fc20 EFLAGS: 00010093 [ 504.161253][T16076] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 504.161266][T16076] RDX: ffff88801b421c40 RSI: ffffffff81dfecfb RDI: 0000000000000003 [ 504.161273][T16076] RBP: ffff888033946e1c R08: 0000000000000001 R09: 0000000000000001 [ 504.161281][T16076] R10: ffffffff81dfece6 R11: 0000000000000000 R12: ffff888033946dc0 [ 504.161288][T16076] R13: 0000000000000000 R14: ffff888033946df0 R15: ffff8880277f7fa0 [ 504.161295][T16076] ? io_poll_double_wake+0x4e6/0x760 [ 504.161300][T16076] ? io_poll_double_wake+0x4fb/0x760 [ 504.161305][T16076] __wake_up_common+0x147/0x650 [ 504.161310][T16076] __wake_up_common_lock+0xd0/0x130 [ 504.161315][T16076] ? __wake_up_common+0x650/0x650 [ 504.161320][T16076] ? rwlock_bug.part.0+0x90/0x90 [ 504.161325][T16076] ? _raw_spin_unlock_irq+0x1f/0x40 [ 504.161329][T16076] pty_close+0x224/0x4f0 [ 504.161334][T16076] ? ptmx_open+0x360/0x360 [ 504.161338][T16076] tty_release+0x45e/0x1200 [ 504.161343][T16076] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 504.161348][T16076] __fput+0x288/0x920 [ 504.161352][T16076] ? tty_release_struct+0xe0/0xe0 [ 504.161357][T16076] task_work_run+0xdd/0x1a0 [ 504.161362][T16076] exit_to_user_mode_prepare+0x27e/0x290 [ 504.161367][T16076] syscall_exit_to_user_mode+0x19/0x60 [ 504.161372][T16076] do_syscall_64+0x42/0xb0 [ 504.161377][T16076] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 504.161382][T16076] RIP: 0033:0x4193fb [ 504.161390][T16076] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 504.161404][T16076] RSP: 002b:00007ffd30e2ed50 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 504.161416][T16076] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004193fb [ 504.161423][T16076] RDX: 0000000000000000 RSI: ffffffff817bbe21 RDI: 0000000000000004 [ 504.161431][T16076] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2c124858 [ 504.161438][T16076] R10: 0000000000000be6 R11: 0000000000000293 R12: 000000000056cb00 [ 504.161446][T16076] R13: 000000000056cb00 R14: 000000000056bf80 R15: 000000000007ade8 [ 504.161452][T16076] ? trace_hardirqs_on+0x51/0x1c0 [ 504.167547][T16076] Kernel Offset: disabled [ 505.099994][T16076] Rebooting in 86400 seconds..