80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01003f000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 696.975408][T21447] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 696.985283][T21448] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 697.009786][T21447] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:08 executing program 1: syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_clone(0x459a2400, 0x0, 0xfffffffffffffe22, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getgid() syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000040)={0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="15f7e48666d012e7443ecb4c6eef415411af567196f71b972df15479029fb438ad4575f106d7e62cabae09e7a17d87be2a3c26bba9dc93bdb4d851dd5ded6d98a6a7a31afe5cdcf359ff5ad8c788759df58675507aea6065713e5a10b77541181d44ff3aabf9816b6e99d83c8b2cf668f59572a620fa2b64056382ffe0a65886cf887f60", @ANYRES32, @ANYBLOB="16d1a79ecca438ff41ed4d5b8d923fc2f2c570c8905c3c2525b70be43f6f3e0e4c4947077166d463fc5ccb8dc1f853ce1af36cd0c1f7076a05aad47dd0da3a99771270ca3da531cd24c2cc37e12dd96d3bb5b2d2f34b13b607b6a84d38fb36e2402a8567cbf404010913d8184c757bc9df2da495c27c5a4faec5bfe7a079486bc3db07379f039710883bf6fd5d168d4f4254f199c32a1a729e27"], 0x30}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, 0x0) [ 697.194856][T21456] geneve1 speed is unknown, defaulting to 1000 04:45:08 executing program 1: r0 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000001380)={'syz', 0x3}, &(0x7f00000013c0)='I', 0x1, 0xfffffffffffffffc) keyctl$describe(0x6, r0, 0x0, 0x0) 04:45:08 executing program 1: mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0) 04:45:08 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[{&(0x7f00000003c0)="ec", 0x1, 0x7fff}], 0x0, 0x0) [ 697.703699][T21466] loop1: detected capacity change from 0 to 127 04:45:08 executing program 1: ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) r0 = syz_clone(0x40100000, 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)="ec58295f35ab64c94bb8f310f33f55637c6833785fc5f68b0df25218b41661221598b68cab6b0c") r1 = syz_open_procfs(r0, &(0x7f0000000280)='net/psched\x00') r2 = gettid() syz_open_procfs(r2, 0x0) syz_open_procfs(r2, 0x0) syz_open_procfs(r2, &(0x7f0000000180)='net/stat\x00') ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0x5452, 0x0) 04:45:08 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01c003000000000000007e"], 0x20}}, 0x0) 04:45:08 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:08 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010a00000000000000007e"], 0x20}}, 0x0) 04:45:08 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010048000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 697.873009][ T6763] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 697.948481][T21473] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 697.993649][T21473] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 698.056955][T21471] geneve1 speed is unknown, defaulting to 1000 04:45:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0xc0, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x0) 04:45:09 executing program 1: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r0) 04:45:09 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000026c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 04:45:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 04:45:09 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01004c000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:09 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010005000000000000007e"], 0x20}}, 0x0) 04:45:09 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010e00000000000000007e"], 0x20}}, 0x0) 04:45:09 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 698.869340][T21488] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 698.924714][T21488] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x30, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_FILTER={0x4}, @NFACCT_BYTES={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}}, 0x0) 04:45:10 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 04:45:10 executing program 1: syz_usb_connect$uac1(0x0, 0x8f, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "fc583c8b43"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x7}, @format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x8}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x37, &(0x7f0000000300)={0x5, 0xf, 0x37, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "bb0caf96e58f6d293f402eff5b4a405d"}, @ext_cap={0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x0, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x1}]}}) [ 699.641756][ T3676] usb 2-1: new high-speed USB device number 8 using dummy_hcd 04:45:10 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="011353000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:10 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:10 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010006000000000000007e"], 0x20}}, 0x0) 04:45:10 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010f00000000000000007e"], 0x20}}, 0x0) [ 699.854447][T21508] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 699.887153][T21511] __nla_validate_parse: 8 callbacks suppressed [ 699.887173][T21511] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:45:11 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="014800000000000000007e"], 0x20}}, 0x0) 04:45:11 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010060000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 699.903235][ T3676] usb 2-1: Using ep0 maxpacket: 32 [ 699.907665][T21508] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 699.983583][T21514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 699.987300][T21515] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 700.104065][ T3676] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 700.123576][ T3676] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 700.306279][ T3676] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 700.321468][ T3676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.337438][ T3676] usb 2-1: Product: syz [ 700.342087][ T3676] usb 2-1: Manufacturer: syz [ 700.347028][ T3676] usb 2-1: SerialNumber: syz 04:45:11 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="014c00000000000000007e"], 0x20}}, 0x0) 04:45:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010007000000000000007e"], 0x20}}, 0x0) 04:45:11 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010068000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 700.681827][ T3676] usb 2-1: 0:2 : does not exist [ 700.756151][ T3676] usb 2-1: USB disconnect, device number 8 [ 700.761203][T21520] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 700.811347][T21525] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 700.821536][T21526] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 700.822969][T21520] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 700.855299][T21520] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:12 executing program 1: syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') 04:45:12 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000002500)={{0x5, 0x1, 0x18}, './file0\x00'}) 04:45:12 executing program 1: ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000000)={@id, 0x40, 0x0, '\x00', @b}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2) getdents64(0xffffffffffffffff, &(0x7f0000000140)=""/34, 0x22) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) [ 701.270718][T21531] autofs4:pid:21531:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(5.1), cmd(0xc0189374) [ 701.285489][T21531] autofs4:pid:21531:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) 04:45:12 executing program 1: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0xab6}], 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='barrier,order=r']) [ 701.459691][T21535] loop1: detected capacity change from 0 to 10 [ 701.518248][T21535] NILFS (loop1): couldn't find nilfs on the device 04:45:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000f0", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:12 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="016000000000000000007e"], 0x20}}, 0x0) 04:45:12 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01006c000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:12 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010009000000000000007e"], 0x20}}, 0x0) 04:45:12 executing program 1: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0xab6}], 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='barrier,order=r']) [ 701.770821][T21539] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 701.795501][T21542] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000002", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 701.819350][T21543] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 701.826244][T21539] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 701.861856][T21545] loop1: detected capacity change from 0 to 10 [ 701.864495][T21539] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000003", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 701.916632][T21545] NILFS (loop1): couldn't find nilfs on the device 04:45:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 04:45:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000004", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000005", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:13 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189436, &(0x7f00000026c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:45:13 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000280)="e1", 0x1, 0xca9e}, {&(0x7f0000000380)="7f", 0x1}, {&(0x7f0000000500)="b8", 0x1}, {&(0x7f0000000580)="e4", 0x1}, {&(0x7f0000000640)="e3", 0x1, 0x8000000000000000}], 0x0, 0x0) 04:45:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000006", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 702.402437][T21560] loop1: detected capacity change from 0 to 8192 04:45:13 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="016800000000000000007e"], 0x20}}, 0x0) 04:45:13 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010074000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:13 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000e000000000000007e"], 0x20}}, 0x0) 04:45:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\a', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:13 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) [ 702.700226][T21567] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:45:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0xa, &(0x7f0000000300)=[{0x0}, {&(0x7f00000000c0)="c8", 0x1}], 0x2}, 0x0) 04:45:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\b', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 702.752796][T21571] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:45:14 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\t', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:14 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x1}, 0xfffffffffffffffc) [ 702.883009][T21571] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:14 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\n', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 04:45:14 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000e", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:14 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="016c00000000000000007e"], 0x20}}, 0x0) 04:45:14 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01007a000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0xf0}, 0x0) 04:45:14 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000010", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:14 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000f000000000000007e"], 0x20}}, 0x0) 04:45:14 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00H', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) [ 703.663078][T21595] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 703.725234][T21595] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:14 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00L', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00`', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00h', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00l', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 704.181735][T19934] usb 2-1: new high-speed USB device number 9 using dummy_hcd 04:45:15 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="017400000000000000007e"], 0x20}}, 0x0) 04:45:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00t', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:15 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100f0000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:15 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="014811000000000000007e"], 0x20}}, 0x0) 04:45:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00z', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 704.568470][T21616] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 704.582034][T19934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.613434][T19934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.625632][T21616] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000f0", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 704.656051][T19934] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 704.694302][T19934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.746706][T19934] usb 2-1: config 0 descriptor?? 04:45:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 705.259609][T19934] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 705.294973][T19934] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 04:45:16 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000b4", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 705.695192][T19934] usb 2-1: USB disconnect, device number 9 04:45:17 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:17 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000030000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:17 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01001f000000000000007e"], 0x20}}, 0x0) 04:45:17 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="017a00000000000000007e"], 0x20}}, 0x0) 04:45:17 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 706.271310][T21637] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 706.271809][T21635] __nla_validate_parse: 8 callbacks suppressed [ 706.271825][T21635] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 706.287513][T21636] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 706.290791][T21634] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 706.308662][T21637] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 706.621658][ T3680] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 707.042112][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.067972][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 04:45:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010020000000000000007e"], 0x20}}, 0x0) 04:45:18 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01ffffe00000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:18 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01f000000000000000007e"], 0x20}}, 0x0) 04:45:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 707.109993][ T3680] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 707.164254][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.204214][T21643] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:18 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01fffff00000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 707.213512][ T3680] usb 2-1: config 0 descriptor?? [ 707.228466][T21646] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:45:18 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000100000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 707.262510][T21648] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 707.283439][T21648] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 707.397290][T21652] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 707.693877][ T3680] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 707.719535][ T3680] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 04:45:19 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010003000000000000007e"], 0x20}}, 0x0) [ 708.141187][T21655] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 708.153989][ T3680] usb 2-1: USB disconnect, device number 10 [ 708.188539][T21655] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 708.198367][T21655] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:19 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01003f000000000000007e"], 0x20}}, 0x0) 04:45:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:19 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000200000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:19 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 708.772500][T21658] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 708.788942][T21659] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:45:20 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000300000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:20 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:20 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010048000000000000007e"], 0x20}}, 0x0) 04:45:20 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01f203000000000000007e"], 0x20}}, 0x0) [ 709.081791][T19934] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 709.092853][T21670] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 709.102882][T21671] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 709.115632][T21670] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 709.443586][T19934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.471641][T19934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.481424][T19934] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 709.501727][T19934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.523527][T19934] usb 2-1: config 0 descriptor?? 04:45:21 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:21 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000400000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:21 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="011148000000000000007e"], 0x20}}, 0x0) 04:45:21 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010005000000000000007e"], 0x20}}, 0x0) [ 710.003784][T19934] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 710.035848][T19934] arvo 0003:1E7D:30D4.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 710.053692][T21676] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 710.086103][T21676] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 710.475986][T19934] usb 2-1: USB disconnect, device number 11 04:45:21 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000500000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 710.935592][T21684] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 710.945754][T21684] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:22 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:22 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01004c000000000000007e"], 0x20}}, 0x0) 04:45:22 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010006000000000000007e"], 0x20}}, 0x0) 04:45:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000092", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00f', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 711.371750][ T3680] usb 2-1: new high-speed USB device number 12 using dummy_hcd 04:45:22 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010007000000000000007e"], 0x20}}, 0x0) 04:45:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000008c", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:22 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000600000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 711.772280][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.811247][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 04:45:22 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010060000000000000007e"], 0x20}}, 0x0) [ 711.844616][ T3680] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 711.882104][T21701] __nla_validate_parse: 8 callbacks suppressed [ 711.882123][T21701] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 711.903256][T21704] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 711.914041][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.915155][T21705] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:45:23 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000008d", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 711.942756][ T3680] usb 2-1: config 0 descriptor?? [ 711.951575][T21704] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 711.971935][T21704] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:23 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 712.444398][ T3680] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 712.472371][ T3680] arvo 0003:1E7D:30D4.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 712.888630][T19936] usb 2-1: USB disconnect, device number 12 04:45:24 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) 04:45:24 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:24 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010068000000000000007e"], 0x20}}, 0x0) 04:45:24 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000700000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:24 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010009000000000000007e"], 0x20}}, 0x0) [ 713.529519][T21718] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 713.532867][T21717] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 713.541082][T21719] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 713.549292][T21714] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 713.581780][T21719] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 713.892742][ T3680] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 714.271847][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.290843][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.307441][ T3680] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 714.321779][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:45:25 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000a000000000000007e"], 0x20}}, 0x0) 04:45:25 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000800000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:25 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01006c000000000000007e"], 0x20}}, 0x0) [ 714.385138][ T3680] usb 2-1: config 0 descriptor?? 04:45:25 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 714.431029][T21723] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 714.470234][T21726] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 714.480000][T21727] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 714.480631][T21723] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 714.500787][T21723] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 714.874084][ T3680] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 714.894124][ T3680] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 715.101859][ T3680] arvo 0003:1E7D:30D4.0005: couldn't init struct arvo_device [ 715.118201][ T3680] arvo 0003:1E7D:30D4.0005: couldn't install keyboard [ 715.150432][ T3680] arvo: probe of 0003:1E7D:30D4.0005 failed with error -71 [ 715.184602][ T3680] usb 2-1: USB disconnect, device number 13 04:45:26 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:26 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000900000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:26 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000e000000000000007e"], 0x20}}, 0x0) [ 715.380860][T21734] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 715.388741][T21736] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 715.400313][T21734] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:26 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) 04:45:26 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010074000000000000007e"], 0x20}}, 0x0) [ 715.955209][T20053] usb 2-1: new high-speed USB device number 14 using dummy_hcd 04:45:27 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000e00000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:27 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01007a000000000000007e"], 0x20}}, 0x0) 04:45:27 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000f000000000000007e"], 0x20}}, 0x0) 04:45:27 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 716.318439][T21744] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 716.342075][T20053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.354406][T21744] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 716.364186][T20053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.376900][T20053] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 716.388458][T20053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.409583][T20053] usb 2-1: config 0 descriptor?? [ 716.893787][T20053] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 716.934927][T20053] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 04:45:28 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="016710000000000000007e"], 0x20}}, 0x0) 04:45:28 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000001f00000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 717.101784][T20053] arvo 0003:1E7D:30D4.0006: couldn't init struct arvo_device [ 717.111537][T20053] arvo 0003:1E7D:30D4.0006: couldn't install keyboard [ 717.126950][T20053] arvo: probe of 0003:1E7D:30D4.0006 failed with error -71 04:45:28 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0103c0000000000000007e"], 0x20}}, 0x0) 04:45:28 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 717.202616][T20053] usb 2-1: USB disconnect, device number 14 04:45:28 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01001f000000000000007e"], 0x20}}, 0x0) 04:45:28 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100f0000000000000007e"], 0x20}}, 0x0) [ 717.247514][T21756] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 717.263959][T21758] __nla_validate_parse: 5 callbacks suppressed [ 717.263975][T21758] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 717.289129][T21756] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 717.330103][T21761] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 717.357482][T21763] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:28 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) [ 717.921716][T19934] usb 2-1: new high-speed USB device number 15 using dummy_hcd 04:45:29 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000030000000000007e"], 0x20}}, 0x0) 04:45:29 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\f', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:29 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000002000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:29 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010020000000000000007e"], 0x20}}, 0x0) [ 718.187764][T21768] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 718.218653][T21772] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 718.221465][T21768] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:45:29 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 718.245154][T21773] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 718.271550][T21768] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 718.291916][T19934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.313864][T19934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.337803][T19934] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 718.360464][T19934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.400496][T19934] usb 2-1: config 0 descriptor?? [ 718.893779][T19934] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 718.930463][T19934] arvo 0003:1E7D:30D4.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 04:45:30 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040030000000000007e"], 0x20}}, 0x0) 04:45:30 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:30 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000043300000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:30 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01003f000000000000007e"], 0x20}}, 0x0) [ 719.098301][T21778] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 719.107176][T21783] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 719.117208][T19934] arvo 0003:1E7D:30D4.0007: couldn't init struct arvo_device [ 719.117401][T21784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 719.127148][T19934] arvo 0003:1E7D:30D4.0007: couldn't install keyboard [ 719.135172][T21782] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 719.154765][T19934] arvo: probe of 0003:1E7D:30D4.0007 failed with error -71 [ 719.161184][T21782] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 719.186123][T19934] usb 2-1: USB disconnect, device number 15 04:45:30 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:31 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010003400000000000007e"], 0x20}}, 0x0) 04:45:31 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000003f00000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:31 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010048000000000000007e"], 0x20}}, 0x0) 04:45:31 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 719.961929][ T3680] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 720.029288][T21792] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 720.037484][T21793] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 720.062248][T21793] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 720.391905][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.403418][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.414832][ T3680] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 720.424727][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.438148][ T3680] usb 2-1: config 0 descriptor?? 04:45:32 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01ffffe00000000000007e"], 0x20}}, 0x0) 04:45:32 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:32 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01004c000000000000007e"], 0x20}}, 0x0) 04:45:32 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000004800000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:32 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01fffff00000000000007e"], 0x20}}, 0x0) [ 720.963750][T21802] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 720.989265][T21802] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:32 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000100000000007e"], 0x20}}, 0x0) [ 721.020188][ T3680] usbhid 2-1:0.0: can't add hid device: -71 [ 721.027123][ T3680] usbhid: probe of 2-1:0.0 failed with error -71 [ 721.045022][ T3680] usb 2-1: USB disconnect, device number 16 04:45:32 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:32 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000200000000007e"], 0x20}}, 0x0) 04:45:32 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000004c00000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:32 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010060000000000000007e"], 0x20}}, 0x0) 04:45:32 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000010", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 721.793389][ T3680] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 721.873317][T21813] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:45:33 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000010", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 721.916381][T21813] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:33 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\v', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:33 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000089", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:33 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000003", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:33 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 722.201845][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.218923][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.237331][ T3680] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 722.252005][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.272764][ T3680] usb 2-1: config 0 descriptor?? 04:45:33 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="011067000000000000007e"], 0x20}}, 0x0) 04:45:33 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00|', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 722.808718][T21834] __nla_validate_parse: 8 callbacks suppressed [ 722.808736][T21834] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 722.835514][ T3680] usbhid 2-1:0.0: can't add hid device: -71 [ 722.841528][ T3680] usbhid: probe of 2-1:0.0 failed with error -71 [ 722.865004][T21834] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 722.873409][ T3680] usb 2-1: USB disconnect, device number 17 [ 722.906569][T21834] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:34 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000135300000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:34 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000300000000007e"], 0x20}}, 0x0) 04:45:34 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00}', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 723.340100][T21837] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 723.351220][T21839] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:45:34 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00~', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:34 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000007f", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:34 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000080", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:34 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000081", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:34 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010068000000000000007e"], 0x20}}, 0x0) 04:45:34 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000082", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:34 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000400000000007e"], 0x20}}, 0x0) 04:45:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000006000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 723.671772][ T3680] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 723.745052][T21856] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 723.769781][T21858] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 723.772847][T21856] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 723.779708][T21859] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 723.822194][T21856] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 724.083765][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.107754][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.123231][ T3680] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 724.139328][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.152831][ T3680] usb 2-1: config 0 descriptor?? [ 724.701786][ T3680] usbhid 2-1:0.0: can't add hid device: -71 [ 724.710937][ T3680] usbhid: probe of 2-1:0.0 failed with error -71 [ 724.728978][ T3680] usb 2-1: USB disconnect, device number 18 04:45:36 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000083", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:36 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000006800000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:36 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000500000000007e"], 0x20}}, 0x0) 04:45:36 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01006c000000000000007e"], 0x20}}, 0x0) 04:45:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000084", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 725.181400][T21867] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 725.188919][T21869] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 725.200908][T21868] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000085", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 725.232364][T21867] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 725.243642][T21867] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000086", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000087", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000088", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000089", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 725.481800][T19936] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 725.851917][T19936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.871664][T19936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.881451][T19936] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 725.921693][T19936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.960443][T19936] usb 2-1: config 0 descriptor?? [ 726.501887][T19936] usbhid 2-1:0.0: can't add hid device: -71 [ 726.507904][T19936] usbhid: probe of 2-1:0.0 failed with error -71 [ 726.533439][T19936] usb 2-1: USB disconnect, device number 19 04:45:38 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:38 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000ff", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:38 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000600000000007e"], 0x20}}, 0x0) 04:45:38 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010074000000000000007e"], 0x20}}, 0x0) 04:45:38 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000006c00000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 726.997672][T21892] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 727.006777][T21891] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:45:38 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000ff", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:38 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 727.045610][T21891] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 727.291709][T19934] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 727.658060][T19934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.682661][T19934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.704242][T19934] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 727.724986][T19934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.755777][T19934] usb 2-1: config 0 descriptor?? 04:45:38 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:38 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01007a000000000000007e"], 0x20}}, 0x0) 04:45:38 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000700000000007e"], 0x20}}, 0x0) 04:45:38 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000007400000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 727.930004][T21908] __nla_validate_parse: 2 callbacks suppressed [ 727.930024][T21908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 727.935648][T21909] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 727.938628][T21907] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 727.965304][T21908] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 727.975288][T21908] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 728.291737][T19934] usbhid 2-1:0.0: can't add hid device: -71 [ 728.297767][T19934] usbhid: probe of 2-1:0.0 failed with error -71 [ 728.328963][T19934] usb 2-1: USB disconnect, device number 20 04:45:39 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:39 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:39 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100f0000000000000007e"], 0x20}}, 0x0) 04:45:39 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000007a00000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:39 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000800000000007e"], 0x20}}, 0x0) [ 728.865215][T21914] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 728.889601][T21917] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 728.908908][T21920] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 728.919828][T21917] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 728.924747][T21919] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 729.121738][ T3680] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 729.541934][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.560895][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.586102][ T3680] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 729.595769][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.619014][ T3680] usb 2-1: config 0 descriptor?? 04:45:40 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000900000000007e"], 0x20}}, 0x0) 04:45:40 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0103f2000000000000007e"], 0x20}}, 0x0) 04:45:40 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01ffffff9e00000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:40 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:40 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000030000000000007e"], 0x20}}, 0x0) 04:45:40 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01fffffff000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 729.797231][T21923] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 729.811509][T21925] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 729.834256][T21925] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:41 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100e0ffff00000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 729.908779][T21931] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 729.986771][T21935] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 730.181823][ T3680] usbhid 2-1:0.0: can't add hid device: -71 [ 730.189229][ T3680] usbhid: probe of 2-1:0.0 failed with error -71 [ 730.222291][ T3680] usb 2-1: USB disconnect, device number 21 04:45:41 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:41 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000e00000000007e"], 0x20}}, 0x0) 04:45:41 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100f0ffff00000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:41 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040030000000000007e"], 0x20}}, 0x0) 04:45:41 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 730.722239][T21944] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 730.723177][T21943] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 730.748279][T21944] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:42 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:42 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000f00000000007e"], 0x20}}, 0x0) 04:45:42 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010003400000000000007e"], 0x20}}, 0x0) 04:45:42 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:42 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="017fffffff00000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:42 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="019effffff00000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 731.615575][T21952] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 731.651792][T21952] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:42 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:43 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:43 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000001f00000000007e"], 0x20}}, 0x0) 04:45:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:43 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01f0ffffff00000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:43 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01ffffe00000000000007e"], 0x20}}, 0x0) [ 732.544154][T21968] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 732.554191][T21968] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:43 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01fffff00000000000007e"], 0x20}}, 0x0) 04:45:43 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000100000000007e"], 0x20}}, 0x0) 04:45:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:44 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:44 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000300007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:44 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000200000000007e"], 0x20}}, 0x0) 04:45:44 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000002000000000007e"], 0x20}}, 0x0) [ 733.488309][T21986] __nla_validate_parse: 8 callbacks suppressed [ 733.488330][T21986] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 733.495601][T21989] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 733.516357][T21990] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 733.525938][T21988] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 733.536620][T21989] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:45 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:45 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000300000000007e"], 0x20}}, 0x0) 04:45:45 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000003f00000000007e"], 0x20}}, 0x0) 04:45:45 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:45 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000ffffe000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 734.405249][T21999] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 734.438194][T22004] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 734.448495][T22003] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 734.466775][T22005] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 734.471879][T22003] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 734.484740][ T3680] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 734.713319][ T3680] usb 2-1: device descriptor read/64, error 18 [ 734.992757][ T3680] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 735.191823][ T3680] usb 2-1: device descriptor read/64, error 18 04:45:46 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000004800000000007e"], 0x20}}, 0x0) 04:45:46 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01fffffffffffff000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:46 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000400000000007e"], 0x20}}, 0x0) 04:45:46 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:46 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000001007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 735.322993][ T3680] usb usb2-port1: attempt power cycle [ 735.336493][T22012] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 735.347681][T22013] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 735.358370][T22014] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 735.376850][T22013] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 735.409215][T22016] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 735.771818][ T3680] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 735.893249][ T3680] usb 2-1: Invalid ep0 maxpacket: 0 [ 736.051880][ T3680] usb 2-1: new high-speed USB device number 25 using dummy_hcd 04:45:47 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000500000000007e"], 0x20}}, 0x0) [ 736.157469][ T3680] usb 2-1: Invalid ep0 maxpacket: 0 [ 736.175306][ T3680] usb usb2-port1: unable to enumerate USB device 04:45:47 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000002007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 736.238580][T22020] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 736.255189][T22022] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 736.265028][T22022] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:48 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000114800000000007e"], 0x20}}, 0x0) 04:45:48 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:48 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000529c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000022c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000022c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000022c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052bc0)={0xfffffffffffffff8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "b4fc729d4fa804"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000053bc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000053dc0)={0x2, [{}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "967d39fd362f1a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000022c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000054dc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000054fc0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {0x0, r5}, {0x0, r8}, {}, {r9}, {}, {0x0, r11}, {0x0, r12}, {0x0, r13}, {r14}, {0x0, r16}], 0x7, "f62b39dec69fa8"}) 04:45:48 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000600000000007e"], 0x20}}, 0x0) 04:45:48 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000003007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:48 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000529c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000022c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000022c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000022c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052bc0)={0xfffffffffffffff8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "b4fc729d4fa804"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000053bc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000053dc0)={0x2, [{}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "967d39fd362f1a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000022c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000054dc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000054fc0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {0x0, r5}, {0x0, r8}, {}, {r9}, {}, {0x0, r11}, {0x0, r12}, {0x0, r13}, {r14}, {0x0, r16}], 0x7, "f62b39dec69fa8"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [], 0x0, "8bebeb894f74c3"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000529c0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000022c0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "8bebeb894f74c3"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000022c0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "8bebeb894f74c3"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000022c0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x0, "8bebeb894f74c3"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052bc0)={0xfffffffffffffff8, [], 0x8, "b4fc729d4fa804"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000053bc0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000053dc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "967d39fd362f1a"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000022c0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}], 0x0, "8bebeb894f74c3"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000054dc0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000054fc0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {0x0, r5}, {0x0, r8}, {}, {r9}, {}, {0x0, r11}, {0x0, r12}, {0x0, r13}, {r14}, {0x0, r16}], 0x7, "f62b39dec69fa8"}) (async) [ 737.246085][T22031] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 737.266071][T22031] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:48 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "8bebeb894f74c3"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000529c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000022c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000022c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "8bebeb894f74c3"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000022c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x0, "8bebeb894f74c3"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052bc0)={0xfffffffffffffff8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "b4fc729d4fa804"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000053bc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000053dc0)={0x2, [{}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "967d39fd362f1a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000022c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}], 0x0, "8bebeb894f74c3"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000054dc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000054fc0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {0x0, r5}, {0x0, r8}, {}, {r9}, {}, {0x0, r11}, {0x0, r12}, {0x0, r13}, {r14}, {0x0, r16}], 0x7, "f62b39dec69fa8"}) 04:45:48 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) openat$cgroup_ro(r0, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) 04:45:48 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) 04:45:48 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) openat$cgroup_ro(r0, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) (async) 04:45:48 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x4, 0xf3, 0x80, 0x4, @private0, @mcast1, 0x10, 0x7, 0xf049}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x40080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) [ 737.671783][ T3680] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 737.861722][ T3680] usb 2-1: device descriptor read/64, error 18 [ 738.131808][ T3680] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 738.321690][ T3680] usb 2-1: device descriptor read/64, error 18 [ 738.441936][ T3680] usb usb2-port1: attempt power cycle [ 738.861755][ T3680] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 738.962020][ T3680] usb 2-1: Invalid ep0 maxpacket: 0 [ 739.121747][ T3680] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 739.211950][ T3680] usb 2-1: Invalid ep0 maxpacket: 0 [ 739.217349][ T3680] usb usb2-port1: unable to enumerate USB device 04:45:51 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:51 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x4, 0xf3, 0x80, 0x4, @private0, @mcast1, 0x10, 0x7, 0xf049}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x40080) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) 04:45:51 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000004007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:51 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000004c00000000007e"], 0x20}}, 0x0) 04:45:51 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:51 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000700000000007e"], 0x20}}, 0x0) [ 740.325717][T22069] __nla_validate_parse: 4 callbacks suppressed [ 740.325735][T22069] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 740.343773][T22071] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 740.351440][T22077] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 740.365899][T22076] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:45:51 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x4, 0xf3, 0x80, 0x4, @private0, @mcast1, 0x10, 0x7, 0xf049}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x40080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x4, 0xf3, 0x80, 0x4, @private0, @mcast1, 0x10, 0x7, 0xf049}}) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x40080) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) (async) [ 740.376508][T22071] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:51 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 04:45:51 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 04:45:51 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 04:45:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)}, {&(0x7f0000000140)=""/245, 0xf5}], 0x2) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) [ 740.791831][T21518] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 741.012822][T21518] usb 2-1: device descriptor read/64, error 18 04:45:52 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000006000000000007e"], 0x20}}, 0x0) [ 741.207100][T22104] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 741.217592][T22104] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 741.230684][T22104] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 741.301740][T21518] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 741.491736][T21518] usb 2-1: device descriptor read/64, error 18 [ 741.611979][T21518] usb usb2-port1: attempt power cycle [ 742.052729][T21518] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 742.172622][T21518] usb 2-1: Invalid ep0 maxpacket: 0 [ 742.331662][T21518] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 742.431861][T21518] usb 2-1: Invalid ep0 maxpacket: 0 [ 742.437265][T21518] usb usb2-port1: unable to enumerate USB device 04:45:54 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:54 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000800000000007e"], 0x20}}, 0x0) 04:45:54 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:54 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000005007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)}, {&(0x7f0000000140)=""/245, 0xf5}], 0x2) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)}, {&(0x7f0000000140)=""/245, 0xf5}], 0x2) (async) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) (async) 04:45:54 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000006800000000007e"], 0x20}}, 0x0) [ 743.454624][T22112] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 743.454824][T22111] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 743.477070][T22113] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 743.492171][T22114] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 743.499265][T22113] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 743.871702][ T31] usb 2-1: new high-speed USB device number 34 using dummy_hcd 04:45:55 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:55 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000006007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 744.241868][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 744.254919][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 744.269272][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:45:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)}, {&(0x7f0000000140)=""/245, 0xf5}], 0x2) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)}, {&(0x7f0000000140)=""/245, 0xf5}], 0x2) (async) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) (async) 04:45:55 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000900000000007e"], 0x20}}, 0x0) 04:45:55 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000006c00000000007e"], 0x20}}, 0x0) [ 744.336560][ T31] usb 2-1: config 0 descriptor?? [ 744.370543][T22126] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 744.394200][ T31] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 744.397495][T22132] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 744.410928][T22128] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 744.413793][T22127] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 744.434295][T22128] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:56 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000007400000000007e"], 0x20}}, 0x0) [ 745.280841][T22140] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 745.292446][T22140] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:57 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:45:57 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000a00000000007e"], 0x20}}, 0x0) 04:45:57 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000007007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:45:57 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:45:57 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x4e, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/223, 0xdf}], 0x1, 0x7, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 04:45:57 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000007a00000000007e"], 0x20}}, 0x0) [ 746.512097][T19934] usb 2-1: USB disconnect, device number 34 [ 746.546272][T22147] __nla_validate_parse: 1 callbacks suppressed [ 746.546291][T22147] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:45:57 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x4e, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) (async, rerun: 64) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/223, 0xdf}], 0x1, 0x7, 0x0) (async, rerun: 64) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) (rerun: 64) [ 746.552494][T22151] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 746.553193][T22151] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 746.564400][T22149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 746.595188][T22151] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:45:57 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x4e, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) (async) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/223, 0xdf}], 0x1, 0x7, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 04:45:57 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 04:45:57 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) execveat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) 04:45:57 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 04:45:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001500010000000000000000000200000002"], 0x2c}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000380)={{}, "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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x400, 0x40) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f00000001c0)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0xfffffffffffffcd1, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x59}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x20) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x320, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x11f9, 0x2b}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40088c8) [ 746.853371][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.859754][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.942066][T22178] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 746.961736][T19934] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 747.351948][T19934] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 747.398833][T19934] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 747.426431][T19934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.440674][T19934] usb 2-1: config 0 descriptor?? [ 747.494768][T19934] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 04:46:00 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:00 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01ffffff9e00000000007e"], 0x20}}, 0x0) 04:46:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001500010000000000000000000200000002"], 0x2c}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000380)={{}, "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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x400, 0x40) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f00000001c0)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0xfffffffffffffcd1, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x59}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x20) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x320, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x11f9, 0x2b}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40088c8) 04:46:00 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:00 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000008007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:00 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000e00000000007e"], 0x20}}, 0x0) [ 749.575171][T21518] usb 2-1: USB disconnect, device number 35 [ 749.627590][T22186] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 749.630973][T22187] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 749.645581][T22189] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:46:00 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000003c000000000007e"], 0x20}}, 0x0) [ 749.686080][T22189] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 749.698375][T22189] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001500010000000000000000000200000002"], 0x2c}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000380)={{}, "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"}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async, rerun: 32) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x400, 0x40) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f00000001c0)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0xfffffffffffffcd1, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x59}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x20) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x320, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x11f9, 0x2b}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40088c8) 04:46:00 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 04:46:00 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) [ 749.750392][T22198] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 749.766716][T22200] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 04:46:00 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 04:46:01 executing program 5: sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4040) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a00), 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xc0, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc0}}, 0x20004010) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000580)={0x3b4, r3, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_TX_RATES={0xd0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x6, 0x4, 0x3ff, 0xf7e5, 0x101]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x400, 0x7fff, 0x1ff, 0x0, 0x6, 0x1f, 0x91]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x7f, 0x9, 0x9, 0x8, 0x1, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x87f9, 0x4, 0x417, 0x9, 0x7, 0x5, 0x1f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x81, 0x80, 0x8, 0xd0c9, 0x4, 0xffff, 0x8]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x9, 0x4, 0x6, 0x7a, 0x1b, 0x36, 0x6, 0x48, 0x6, 0x48, 0x9, 0x1, 0xd, 0x24, 0x5, 0x30, 0x1b, 0x48, 0x1, 0x3, 0x3, 0x24, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x7e, 0x6, 0x4, 0x8, 0x800, 0x7, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xba4b, 0x1ff, 0x5, 0x3, 0x5, 0x6, 0x100, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x8, 0x8, 0x2c, 0x4, 0x5, 0x760, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x2bc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x1}, {0x1, 0x1}, {0x4, 0x8}, {0x6, 0xa}, {0x2, 0x8}, {0x5}, {0x5, 0x6}, {0x3, 0x6}, {0x2}, {0x2, 0x3}, {0x7, 0x5}, {}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x7, 0xa}, {0x4, 0x7}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x5, 0x2}, {0x2, 0x2}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x6}, {0x6, 0x5}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x5}, {0x1, 0x7}, {0x6, 0x5}, {0x2, 0x5}, {0x6, 0x8}, {0x1, 0x8}, {0x3, 0x5}, {0x4, 0x8}, {0x0, 0xa}, {0x2}, {0x6, 0x8}, {0x3, 0x1}, {0x2, 0xa}, {0x2, 0x8}, {0x7, 0xa}, {0x6, 0x2}, {0x7, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x3, 0xa}, {0x7, 0xa}, {0x1, 0x6}, {0x5, 0x2}, {0x6, 0x3}, {}, {0x7, 0x3}, {0x0, 0x7}, {0x4, 0x8}, {0x2, 0x2}, {0x0, 0x4}, {0x3, 0x5}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x8}, {0x6, 0x9}, {0x0, 0x2}, {0x3, 0x1}, {0x1, 0x4}, {0x7, 0x9}, {0x2, 0x1}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x7, 0x3}, {0x7, 0x4}, {0x5, 0x9}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x114, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4b, 0x8d71, 0x9, 0x279, 0x2, 0x3f, 0x7]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x3}, {0x0, 0x8}, {0x4, 0x6}, {0x4, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x3}, {0x5, 0x2}, {0x6, 0x4}, {0x4, 0x9}, {0x7, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x4}, {0x2, 0x9}, {0x3, 0x9}, {0x3, 0x6}, {0x7, 0x5}, {0x7, 0x4}, {0x7, 0x7}, {0x4, 0x6}, {0x1}, {0x1, 0x3}, {0x1, 0x7}, {0x4, 0x1}, {0x7, 0x2}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0x2}, {0x3}, {0x7, 0x8}, {0x2, 0x5}, {0x6, 0x1}, {0x3, 0x2}, {0x1, 0x4}, {0x6, 0xa}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0x6}, {0x5, 0x7}, {0x4, 0x2}, {0x6, 0x1}, {0x6, 0x5}, {0x7, 0x7}, {0x5, 0x8}, {0x1, 0xa}, {0x1, 0xa}, {0x1, 0x1}, {0x4, 0xa}, {0x7, 0x6}, {0x2, 0x5}, {0x6, 0xa}, {0x7, 0x2}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x4, 0x3}, {0x2, 0x4}, {0x7, 0x6}, {0x2, 0x8}, {0x3, 0x8}, {0x6, 0x1}, {0x1, 0x6}, {0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x5, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x7, 0x1}, {0x2, 0xa}, {0x6, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x1, 0xa}, {0x7, 0x2}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x9}, {0x6, 0x5}, {0x0, 0x4}, {0x5, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x3, 0x3}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0xa}, {0x1, 0x9}, {0x5}, {0x6, 0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x6, 0x7}, {0x5, 0x3}, {0x6, 0x8}, {0x6, 0x5}, {0x6, 0x6}, {0x6, 0xa}, {0x1}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x6}, {0x2}, {0x3, 0x5}, {0x4, 0xa}, {0x2, 0x4}, {0x2, 0x8}, {0x2, 0x3}, {0x5, 0x8}, {0x6, 0x1}, {0x0, 0x2}, {0x4, 0x2}, {0x1, 0x7}, {0x2, 0xa}, {0x0, 0x8}, {0x5, 0x2}, {0x3, 0x6}, {0x6, 0xa}, {0x7, 0x3}, {0x0, 0x7}, {0x6, 0x4}, {0x3, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x2}, {0x7, 0x7}, {0x0, 0x1}, {0x1, 0x3}, {0x4, 0x1}, {0x6, 0x9}, {0x1, 0x2}, {0x3, 0x4}, {0x2, 0xa}, {0x3, 0x6}, {0x2, 0x2}, {0x0, 0x9}, {0x2, 0x3}, {0x5, 0x5}, {0x2, 0x2}, {0x2, 0xa}, {0x5, 0x6}, {0x3, 0x5}, {0x1, 0x6}, {0x6, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x6}, {0x3, 0xa}, {0x0, 0x8}, {0x2, 0x6}, {0x0, 0xa}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0x1}, {0x7, 0x9}, {0x3, 0x7}, {0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x3, 0x4}, {0x2}, {0x2, 0x3}, {0x0, 0x5}, {0x1}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0xc, 0x24, 0x3, 0x12, 0xb, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x40, 0x85da, 0x6, 0x6, 0x101, 0x5, 0x4]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xfff, 0x8, 0x4, 0xfff, 0x0, 0x8, 0x1]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x1b, 0x1, 0x2, 0x2, 0x6, 0x6, 0x4, 0x5, 0x6c, 0x36, 0x9, 0x6c, 0x18, 0xb]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x1c}, {0x0, 0x6}, {0x3, 0x2}, {0x7, 0x8}, {0x1, 0x7}, {0x0, 0x1}, {0x6, 0x8}, {0x6, 0x8}, {0x6, 0x2}, {0x6, 0x4}, {0x4, 0x2}, {0x5, 0x4}, {0x2, 0x6}, {0x1}, {0x2, 0x7}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0x7}, {0x3, 0x8}, {0x0, 0xa}, {0x5, 0x5}, {0x5, 0x3}, {0x1, 0x6}, {0x2, 0x6}, {0x5, 0x6}, {0x5}, {0x6, 0x8}, {0x6, 0x8}, {0x0, 0x9}, {0x1}, {0x6, 0x6}, {0x1, 0x3}, {0x4, 0x7}, {0x5, 0x4}, {0x4, 0x2}, {0x6, 0x8}, {0x0, 0x9}, {0x5, 0x9}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0x3}, {}, {0x0, 0x2}, {0x4, 0x2}, {0x4, 0x8}, {0x0, 0x8}, {0x5}, {0x5, 0x4}, {0x1, 0xa}, {0x7, 0x4}, {0x5, 0x4}, {0x4, 0x2}, {0x2, 0x1}, {0x1, 0x8}, {0x4, 0x5}, {0x1, 0x7}, {0x0, 0x5}, {0x6}, {0x0, 0x6}, {0x7, 0x1}, {0x1, 0x6}, {0x1, 0x2}, {0x3, 0xa}, {0x7, 0x4}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x9, 0x6c, 0x16, 0x1b, 0x12, 0x36, 0x2, 0x5, 0x5, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0xfffb, 0x6, 0x4, 0x4, 0x101, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x59a, 0x5, 0xb97, 0x7, 0x4d71, 0x0, 0x5, 0x4]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x0, 0xfff, 0x40, 0x9be3, 0x9, 0x4, 0xb6a6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfa, 0x4, 0x6, 0x4, 0x2b35, 0x3, 0x9]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x2, 0x16, 0x9, 0x12, 0x1, 0x24, 0x60, 0xb, 0x30, 0x6c, 0x24, 0xb, 0x30, 0xb, 0x6, 0x60, 0xb, 0x1b, 0x3, 0x9, 0x1b, 0x12, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5f, 0x7, 0x0, 0x0, 0x79ec, 0x3, 0x6]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x248, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x64}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0xfc, 0x5b, "edb01fcfa4f2de70b2b220bfd23280e03f48068d6b312d459d11a1e1d7aa079656a09cd3af64e62f6b33604e51ca93ab27289de1d4b1d6f92dcd168bd9a188f997cb93549c21131693050aa2919d11d6cd1ff8070221e0b91f293b39d92a954c806085be14fcb39b85cdf53ab38d3dff6a0c3a008706cbe1ef6988574b66eec7cc03af787b6271fc297f3bca14ac7fc494eccf5d13aaf9cc6d9cbdbe705a361d36ee8c4b531b97fcb5356b4e4558703e5f3dc2d61d162ccada44e49cf226858ae2f6af0f771eb88de28ce1e790c0cc3f7bb1e333a37f3758335962af6c00cc4e6c4c034220cc748b1b76a978afb2af8900aac1556df3dbdb"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffa}, @NL80211_ATTR_FRAME_MATCH={0xb0, 0x5b, "25bdf8e271a12cbd5de831337ff21b5f2697eb65fbfa7cb9f2422791e3503e4b3f473eca17de7515c3cafcff0fd2a41b6dfa45c9b94dfe58445fa28265390f99a806c18421f154c43cd6fc6ce7dfa55dabb2264b20a94ea3b7e0a10710b6b21de11d6f05c46c339a96b187821da8f2c43f73401e6024326e3d691f9672c5ebd02e113e0eca298ee139a0c6f400b58196380723522374e59db112e5b318f7cef880c445a06c21b36a86789348"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x59, 0x5b, "f2b9eb74fa95cce637057e1554966c91fd019fcc18d532ccc7968a69c07581f07c0e8199869fafb0e0eea1fdc27b460578e0f00e81994e0c8e9d986b2516187360d4963bd133967fbe8cf7d6a3cca26a21e65c1ec8"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}]}, 0x248}, 0x1, 0x0, 0x0, 0x90}, 0x24004041) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000100), 0x12) [ 750.051977][T21518] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 750.461931][T21518] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 750.474970][T21518] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 750.491694][T21518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.521326][T21518] usb 2-1: config 0 descriptor?? [ 750.564567][T21518] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 04:46:03 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:03 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000f00000000007e"], 0x20}}, 0x0) 04:46:03 executing program 5: sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4040) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x40}}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a00), 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xc0, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc0}}, 0x20004010) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000580)={0x3b4, r3, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_TX_RATES={0xd0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x6, 0x4, 0x3ff, 0xf7e5, 0x101]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x400, 0x7fff, 0x1ff, 0x0, 0x6, 0x1f, 0x91]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x7f, 0x9, 0x9, 0x8, 0x1, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x87f9, 0x4, 0x417, 0x9, 0x7, 0x5, 0x1f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x81, 0x80, 0x8, 0xd0c9, 0x4, 0xffff, 0x8]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x9, 0x4, 0x6, 0x7a, 0x1b, 0x36, 0x6, 0x48, 0x6, 0x48, 0x9, 0x1, 0xd, 0x24, 0x5, 0x30, 0x1b, 0x48, 0x1, 0x3, 0x3, 0x24, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x7e, 0x6, 0x4, 0x8, 0x800, 0x7, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xba4b, 0x1ff, 0x5, 0x3, 0x5, 0x6, 0x100, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x8, 0x8, 0x2c, 0x4, 0x5, 0x760, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x2bc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x1}, {0x1, 0x1}, {0x4, 0x8}, {0x6, 0xa}, {0x2, 0x8}, {0x5}, {0x5, 0x6}, {0x3, 0x6}, {0x2}, {0x2, 0x3}, {0x7, 0x5}, {}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x7, 0xa}, {0x4, 0x7}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x5, 0x2}, {0x2, 0x2}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x6}, {0x6, 0x5}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x5}, {0x1, 0x7}, {0x6, 0x5}, {0x2, 0x5}, {0x6, 0x8}, {0x1, 0x8}, {0x3, 0x5}, {0x4, 0x8}, {0x0, 0xa}, {0x2}, {0x6, 0x8}, {0x3, 0x1}, {0x2, 0xa}, {0x2, 0x8}, {0x7, 0xa}, {0x6, 0x2}, {0x7, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x3, 0xa}, {0x7, 0xa}, {0x1, 0x6}, {0x5, 0x2}, {0x6, 0x3}, {}, {0x7, 0x3}, {0x0, 0x7}, {0x4, 0x8}, {0x2, 0x2}, {0x0, 0x4}, {0x3, 0x5}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x8}, {0x6, 0x9}, {0x0, 0x2}, {0x3, 0x1}, {0x1, 0x4}, {0x7, 0x9}, {0x2, 0x1}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x7, 0x3}, {0x7, 0x4}, {0x5, 0x9}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x114, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4b, 0x8d71, 0x9, 0x279, 0x2, 0x3f, 0x7]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x3}, {0x0, 0x8}, {0x4, 0x6}, {0x4, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x3}, {0x5, 0x2}, {0x6, 0x4}, {0x4, 0x9}, {0x7, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x4}, {0x2, 0x9}, {0x3, 0x9}, {0x3, 0x6}, {0x7, 0x5}, {0x7, 0x4}, {0x7, 0x7}, {0x4, 0x6}, {0x1}, {0x1, 0x3}, {0x1, 0x7}, {0x4, 0x1}, {0x7, 0x2}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0x2}, {0x3}, {0x7, 0x8}, {0x2, 0x5}, {0x6, 0x1}, {0x3, 0x2}, {0x1, 0x4}, {0x6, 0xa}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0x6}, {0x5, 0x7}, {0x4, 0x2}, {0x6, 0x1}, {0x6, 0x5}, {0x7, 0x7}, {0x5, 0x8}, {0x1, 0xa}, {0x1, 0xa}, {0x1, 0x1}, {0x4, 0xa}, {0x7, 0x6}, {0x2, 0x5}, {0x6, 0xa}, {0x7, 0x2}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x4, 0x3}, {0x2, 0x4}, {0x7, 0x6}, {0x2, 0x8}, {0x3, 0x8}, {0x6, 0x1}, {0x1, 0x6}, {0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x5, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x7, 0x1}, {0x2, 0xa}, {0x6, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x1, 0xa}, {0x7, 0x2}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x9}, {0x6, 0x5}, {0x0, 0x4}, {0x5, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x3, 0x3}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0xa}, {0x1, 0x9}, {0x5}, {0x6, 0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x6, 0x7}, {0x5, 0x3}, {0x6, 0x8}, {0x6, 0x5}, {0x6, 0x6}, {0x6, 0xa}, {0x1}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x6}, {0x2}, {0x3, 0x5}, {0x4, 0xa}, {0x2, 0x4}, {0x2, 0x8}, {0x2, 0x3}, {0x5, 0x8}, {0x6, 0x1}, {0x0, 0x2}, {0x4, 0x2}, {0x1, 0x7}, {0x2, 0xa}, {0x0, 0x8}, {0x5, 0x2}, {0x3, 0x6}, {0x6, 0xa}, {0x7, 0x3}, {0x0, 0x7}, {0x6, 0x4}, {0x3, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x2}, {0x7, 0x7}, {0x0, 0x1}, {0x1, 0x3}, {0x4, 0x1}, {0x6, 0x9}, {0x1, 0x2}, {0x3, 0x4}, {0x2, 0xa}, {0x3, 0x6}, {0x2, 0x2}, {0x0, 0x9}, {0x2, 0x3}, {0x5, 0x5}, {0x2, 0x2}, {0x2, 0xa}, {0x5, 0x6}, {0x3, 0x5}, {0x1, 0x6}, {0x6, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x6}, {0x3, 0xa}, {0x0, 0x8}, {0x2, 0x6}, {0x0, 0xa}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0x1}, {0x7, 0x9}, {0x3, 0x7}, {0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x3, 0x4}, {0x2}, {0x2, 0x3}, {0x0, 0x5}, {0x1}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0xc, 0x24, 0x3, 0x12, 0xb, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x40, 0x85da, 0x6, 0x6, 0x101, 0x5, 0x4]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xfff, 0x8, 0x4, 0xfff, 0x0, 0x8, 0x1]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x1b, 0x1, 0x2, 0x2, 0x6, 0x6, 0x4, 0x5, 0x6c, 0x36, 0x9, 0x6c, 0x18, 0xb]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x1c}, {0x0, 0x6}, {0x3, 0x2}, {0x7, 0x8}, {0x1, 0x7}, {0x0, 0x1}, {0x6, 0x8}, {0x6, 0x8}, {0x6, 0x2}, {0x6, 0x4}, {0x4, 0x2}, {0x5, 0x4}, {0x2, 0x6}, {0x1}, {0x2, 0x7}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0x7}, {0x3, 0x8}, {0x0, 0xa}, {0x5, 0x5}, {0x5, 0x3}, {0x1, 0x6}, {0x2, 0x6}, {0x5, 0x6}, {0x5}, {0x6, 0x8}, {0x6, 0x8}, {0x0, 0x9}, {0x1}, {0x6, 0x6}, {0x1, 0x3}, {0x4, 0x7}, {0x5, 0x4}, {0x4, 0x2}, {0x6, 0x8}, {0x0, 0x9}, {0x5, 0x9}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0x3}, {}, {0x0, 0x2}, {0x4, 0x2}, {0x4, 0x8}, {0x0, 0x8}, {0x5}, {0x5, 0x4}, {0x1, 0xa}, {0x7, 0x4}, {0x5, 0x4}, {0x4, 0x2}, {0x2, 0x1}, {0x1, 0x8}, {0x4, 0x5}, {0x1, 0x7}, {0x0, 0x5}, {0x6}, {0x0, 0x6}, {0x7, 0x1}, {0x1, 0x6}, {0x1, 0x2}, {0x3, 0xa}, {0x7, 0x4}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x9, 0x6c, 0x16, 0x1b, 0x12, 0x36, 0x2, 0x5, 0x5, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0xfffb, 0x6, 0x4, 0x4, 0x101, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x59a, 0x5, 0xb97, 0x7, 0x4d71, 0x0, 0x5, 0x4]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x0, 0xfff, 0x40, 0x9be3, 0x9, 0x4, 0xb6a6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfa, 0x4, 0x6, 0x4, 0x2b35, 0x3, 0x9]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x2, 0x16, 0x9, 0x12, 0x1, 0x24, 0x60, 0xb, 0x30, 0x6c, 0x24, 0xb, 0x30, 0xb, 0x6, 0x60, 0xb, 0x1b, 0x3, 0x9, 0x1b, 0x12, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5f, 0x7, 0x0, 0x0, 0x79ec, 0x3, 0x6]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x248, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x64}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0xfc, 0x5b, "edb01fcfa4f2de70b2b220bfd23280e03f48068d6b312d459d11a1e1d7aa079656a09cd3af64e62f6b33604e51ca93ab27289de1d4b1d6f92dcd168bd9a188f997cb93549c21131693050aa2919d11d6cd1ff8070221e0b91f293b39d92a954c806085be14fcb39b85cdf53ab38d3dff6a0c3a008706cbe1ef6988574b66eec7cc03af787b6271fc297f3bca14ac7fc494eccf5d13aaf9cc6d9cbdbe705a361d36ee8c4b531b97fcb5356b4e4558703e5f3dc2d61d162ccada44e49cf226858ae2f6af0f771eb88de28ce1e790c0cc3f7bb1e333a37f3758335962af6c00cc4e6c4c034220cc748b1b76a978afb2af8900aac1556df3dbdb"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffa}, @NL80211_ATTR_FRAME_MATCH={0xb0, 0x5b, "25bdf8e271a12cbd5de831337ff21b5f2697eb65fbfa7cb9f2422791e3503e4b3f473eca17de7515c3cafcff0fd2a41b6dfa45c9b94dfe58445fa28265390f99a806c18421f154c43cd6fc6ce7dfa55dabb2264b20a94ea3b7e0a10710b6b21de11d6f05c46c339a96b187821da8f2c43f73401e6024326e3d691f9672c5ebd02e113e0eca298ee139a0c6f400b58196380723522374e59db112e5b318f7cef880c445a06c21b36a86789348"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x59, 0x5b, "f2b9eb74fa95cce637057e1554966c91fd019fcc18d532ccc7968a69c07581f07c0e8199869fafb0e0eea1fdc27b460578e0f00e81994e0c8e9d986b2516187360d4963bd133967fbe8cf7d6a3cca26a21e65c1ec8"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}]}, 0x248}, 0x1, 0x0, 0x0, 0x90}, 0x24004041) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000100), 0x12) 04:46:03 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:03 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01fffffff000000000007e"], 0x20}}, 0x0) 04:46:03 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000009007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 752.678740][T20052] usb 2-1: USB disconnect, device number 36 [ 752.735414][T22224] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 752.741094][T22228] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 752.754770][T22226] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:03 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100e0ffff00000000007e"], 0x20}}, 0x0) 04:46:03 executing program 5: sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4040) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a00), 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xc0, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc0}}, 0x20004010) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000580)={0x3b4, r3, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_TX_RATES={0xd0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x6, 0x4, 0x3ff, 0xf7e5, 0x101]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x400, 0x7fff, 0x1ff, 0x0, 0x6, 0x1f, 0x91]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x7f, 0x9, 0x9, 0x8, 0x1, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x87f9, 0x4, 0x417, 0x9, 0x7, 0x5, 0x1f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x81, 0x80, 0x8, 0xd0c9, 0x4, 0xffff, 0x8]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x9, 0x4, 0x6, 0x7a, 0x1b, 0x36, 0x6, 0x48, 0x6, 0x48, 0x9, 0x1, 0xd, 0x24, 0x5, 0x30, 0x1b, 0x48, 0x1, 0x3, 0x3, 0x24, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x7e, 0x6, 0x4, 0x8, 0x800, 0x7, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xba4b, 0x1ff, 0x5, 0x3, 0x5, 0x6, 0x100, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x8, 0x8, 0x2c, 0x4, 0x5, 0x760, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x2bc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x1}, {0x1, 0x1}, {0x4, 0x8}, {0x6, 0xa}, {0x2, 0x8}, {0x5}, {0x5, 0x6}, {0x3, 0x6}, {0x2}, {0x2, 0x3}, {0x7, 0x5}, {}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x7, 0xa}, {0x4, 0x7}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x5, 0x2}, {0x2, 0x2}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x6}, {0x6, 0x5}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x5}, {0x1, 0x7}, {0x6, 0x5}, {0x2, 0x5}, {0x6, 0x8}, {0x1, 0x8}, {0x3, 0x5}, {0x4, 0x8}, {0x0, 0xa}, {0x2}, {0x6, 0x8}, {0x3, 0x1}, {0x2, 0xa}, {0x2, 0x8}, {0x7, 0xa}, {0x6, 0x2}, {0x7, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x3, 0xa}, {0x7, 0xa}, {0x1, 0x6}, {0x5, 0x2}, {0x6, 0x3}, {}, {0x7, 0x3}, {0x0, 0x7}, {0x4, 0x8}, {0x2, 0x2}, {0x0, 0x4}, {0x3, 0x5}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x8}, {0x6, 0x9}, {0x0, 0x2}, {0x3, 0x1}, {0x1, 0x4}, {0x7, 0x9}, {0x2, 0x1}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x7, 0x3}, {0x7, 0x4}, {0x5, 0x9}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x114, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4b, 0x8d71, 0x9, 0x279, 0x2, 0x3f, 0x7]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x3}, {0x0, 0x8}, {0x4, 0x6}, {0x4, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x3}, {0x5, 0x2}, {0x6, 0x4}, {0x4, 0x9}, {0x7, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x4}, {0x2, 0x9}, {0x3, 0x9}, {0x3, 0x6}, {0x7, 0x5}, {0x7, 0x4}, {0x7, 0x7}, {0x4, 0x6}, {0x1}, {0x1, 0x3}, {0x1, 0x7}, {0x4, 0x1}, {0x7, 0x2}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0x2}, {0x3}, {0x7, 0x8}, {0x2, 0x5}, {0x6, 0x1}, {0x3, 0x2}, {0x1, 0x4}, {0x6, 0xa}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0x6}, {0x5, 0x7}, {0x4, 0x2}, {0x6, 0x1}, {0x6, 0x5}, {0x7, 0x7}, {0x5, 0x8}, {0x1, 0xa}, {0x1, 0xa}, {0x1, 0x1}, {0x4, 0xa}, {0x7, 0x6}, {0x2, 0x5}, {0x6, 0xa}, {0x7, 0x2}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x4, 0x3}, {0x2, 0x4}, {0x7, 0x6}, {0x2, 0x8}, {0x3, 0x8}, {0x6, 0x1}, {0x1, 0x6}, {0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x5, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x7, 0x1}, {0x2, 0xa}, {0x6, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x1, 0xa}, {0x7, 0x2}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x9}, {0x6, 0x5}, {0x0, 0x4}, {0x5, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x3, 0x3}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0xa}, {0x1, 0x9}, {0x5}, {0x6, 0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x6, 0x7}, {0x5, 0x3}, {0x6, 0x8}, {0x6, 0x5}, {0x6, 0x6}, {0x6, 0xa}, {0x1}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x6}, {0x2}, {0x3, 0x5}, {0x4, 0xa}, {0x2, 0x4}, {0x2, 0x8}, {0x2, 0x3}, {0x5, 0x8}, {0x6, 0x1}, {0x0, 0x2}, {0x4, 0x2}, {0x1, 0x7}, {0x2, 0xa}, {0x0, 0x8}, {0x5, 0x2}, {0x3, 0x6}, {0x6, 0xa}, {0x7, 0x3}, {0x0, 0x7}, {0x6, 0x4}, {0x3, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x2}, {0x7, 0x7}, {0x0, 0x1}, {0x1, 0x3}, {0x4, 0x1}, {0x6, 0x9}, {0x1, 0x2}, {0x3, 0x4}, {0x2, 0xa}, {0x3, 0x6}, {0x2, 0x2}, {0x0, 0x9}, {0x2, 0x3}, {0x5, 0x5}, {0x2, 0x2}, {0x2, 0xa}, {0x5, 0x6}, {0x3, 0x5}, {0x1, 0x6}, {0x6, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x6}, {0x3, 0xa}, {0x0, 0x8}, {0x2, 0x6}, {0x0, 0xa}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0x1}, {0x7, 0x9}, {0x3, 0x7}, {0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x3, 0x4}, {0x2}, {0x2, 0x3}, {0x0, 0x5}, {0x1}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0xc, 0x24, 0x3, 0x12, 0xb, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x40, 0x85da, 0x6, 0x6, 0x101, 0x5, 0x4]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xfff, 0x8, 0x4, 0xfff, 0x0, 0x8, 0x1]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x1b, 0x1, 0x2, 0x2, 0x6, 0x6, 0x4, 0x5, 0x6c, 0x36, 0x9, 0x6c, 0x18, 0xb]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x1c}, {0x0, 0x6}, {0x3, 0x2}, {0x7, 0x8}, {0x1, 0x7}, {0x0, 0x1}, {0x6, 0x8}, {0x6, 0x8}, {0x6, 0x2}, {0x6, 0x4}, {0x4, 0x2}, {0x5, 0x4}, {0x2, 0x6}, {0x1}, {0x2, 0x7}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0x7}, {0x3, 0x8}, {0x0, 0xa}, {0x5, 0x5}, {0x5, 0x3}, {0x1, 0x6}, {0x2, 0x6}, {0x5, 0x6}, {0x5}, {0x6, 0x8}, {0x6, 0x8}, {0x0, 0x9}, {0x1}, {0x6, 0x6}, {0x1, 0x3}, {0x4, 0x7}, {0x5, 0x4}, {0x4, 0x2}, {0x6, 0x8}, {0x0, 0x9}, {0x5, 0x9}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0x3}, {}, {0x0, 0x2}, {0x4, 0x2}, {0x4, 0x8}, {0x0, 0x8}, {0x5}, {0x5, 0x4}, {0x1, 0xa}, {0x7, 0x4}, {0x5, 0x4}, {0x4, 0x2}, {0x2, 0x1}, {0x1, 0x8}, {0x4, 0x5}, {0x1, 0x7}, {0x0, 0x5}, {0x6}, {0x0, 0x6}, {0x7, 0x1}, {0x1, 0x6}, {0x1, 0x2}, {0x3, 0xa}, {0x7, 0x4}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x9, 0x6c, 0x16, 0x1b, 0x12, 0x36, 0x2, 0x5, 0x5, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0xfffb, 0x6, 0x4, 0x4, 0x101, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x59a, 0x5, 0xb97, 0x7, 0x4d71, 0x0, 0x5, 0x4]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x0, 0xfff, 0x40, 0x9be3, 0x9, 0x4, 0xb6a6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfa, 0x4, 0x6, 0x4, 0x2b35, 0x3, 0x9]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x2, 0x16, 0x9, 0x12, 0x1, 0x24, 0x60, 0xb, 0x30, 0x6c, 0x24, 0xb, 0x30, 0xb, 0x6, 0x60, 0xb, 0x1b, 0x3, 0x9, 0x1b, 0x12, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5f, 0x7, 0x0, 0x0, 0x79ec, 0x3, 0x6]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x248, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x64}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0xfc, 0x5b, "edb01fcfa4f2de70b2b220bfd23280e03f48068d6b312d459d11a1e1d7aa079656a09cd3af64e62f6b33604e51ca93ab27289de1d4b1d6f92dcd168bd9a188f997cb93549c21131693050aa2919d11d6cd1ff8070221e0b91f293b39d92a954c806085be14fcb39b85cdf53ab38d3dff6a0c3a008706cbe1ef6988574b66eec7cc03af787b6271fc297f3bca14ac7fc494eccf5d13aaf9cc6d9cbdbe705a361d36ee8c4b531b97fcb5356b4e4558703e5f3dc2d61d162ccada44e49cf226858ae2f6af0f771eb88de28ce1e790c0cc3f7bb1e333a37f3758335962af6c00cc4e6c4c034220cc748b1b76a978afb2af8900aac1556df3dbdb"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffa}, @NL80211_ATTR_FRAME_MATCH={0xb0, 0x5b, "25bdf8e271a12cbd5de831337ff21b5f2697eb65fbfa7cb9f2422791e3503e4b3f473eca17de7515c3cafcff0fd2a41b6dfa45c9b94dfe58445fa28265390f99a806c18421f154c43cd6fc6ce7dfa55dabb2264b20a94ea3b7e0a10710b6b21de11d6f05c46c339a96b187821da8f2c43f73401e6024326e3d691f9672c5ebd02e113e0eca298ee139a0c6f400b58196380723522374e59db112e5b318f7cef880c445a06c21b36a86789348"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x59, 0x5b, "f2b9eb74fa95cce637057e1554966c91fd019fcc18d532ccc7968a69c07581f07c0e8199869fafb0e0eea1fdc27b460578e0f00e81994e0c8e9d986b2516187360d4963bd133967fbe8cf7d6a3cca26a21e65c1ec8"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}]}, 0x248}, 0x1, 0x0, 0x0, 0x90}, 0x24004041) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000100), 0x12) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4040) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000009c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x40}}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a00), 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xc0, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc0}}, 0x20004010) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000580)={0x3b4, r3, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_TX_RATES={0xd0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x6, 0x4, 0x3ff, 0xf7e5, 0x101]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x400, 0x7fff, 0x1ff, 0x0, 0x6, 0x1f, 0x91]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x7f, 0x9, 0x9, 0x8, 0x1, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x87f9, 0x4, 0x417, 0x9, 0x7, 0x5, 0x1f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x81, 0x80, 0x8, 0xd0c9, 0x4, 0xffff, 0x8]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x9, 0x4, 0x6, 0x7a, 0x1b, 0x36, 0x6, 0x48, 0x6, 0x48, 0x9, 0x1, 0xd, 0x24, 0x5, 0x30, 0x1b, 0x48, 0x1, 0x3, 0x3, 0x24, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x7e, 0x6, 0x4, 0x8, 0x800, 0x7, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xba4b, 0x1ff, 0x5, 0x3, 0x5, 0x6, 0x100, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x8, 0x8, 0x2c, 0x4, 0x5, 0x760, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x2bc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x1}, {0x1, 0x1}, {0x4, 0x8}, {0x6, 0xa}, {0x2, 0x8}, {0x5}, {0x5, 0x6}, {0x3, 0x6}, {0x2}, {0x2, 0x3}, {0x7, 0x5}, {}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x7, 0xa}, {0x4, 0x7}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x5, 0x2}, {0x2, 0x2}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x6}, {0x6, 0x5}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x5}, {0x1, 0x7}, {0x6, 0x5}, {0x2, 0x5}, {0x6, 0x8}, {0x1, 0x8}, {0x3, 0x5}, {0x4, 0x8}, {0x0, 0xa}, {0x2}, {0x6, 0x8}, {0x3, 0x1}, {0x2, 0xa}, {0x2, 0x8}, {0x7, 0xa}, {0x6, 0x2}, {0x7, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x3, 0xa}, {0x7, 0xa}, {0x1, 0x6}, {0x5, 0x2}, {0x6, 0x3}, {}, {0x7, 0x3}, {0x0, 0x7}, {0x4, 0x8}, {0x2, 0x2}, {0x0, 0x4}, {0x3, 0x5}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x8}, {0x6, 0x9}, {0x0, 0x2}, {0x3, 0x1}, {0x1, 0x4}, {0x7, 0x9}, {0x2, 0x1}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x7, 0x3}, {0x7, 0x4}, {0x5, 0x9}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x114, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4b, 0x8d71, 0x9, 0x279, 0x2, 0x3f, 0x7]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x3}, {0x0, 0x8}, {0x4, 0x6}, {0x4, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x3}, {0x5, 0x2}, {0x6, 0x4}, {0x4, 0x9}, {0x7, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x4}, {0x2, 0x9}, {0x3, 0x9}, {0x3, 0x6}, {0x7, 0x5}, {0x7, 0x4}, {0x7, 0x7}, {0x4, 0x6}, {0x1}, {0x1, 0x3}, {0x1, 0x7}, {0x4, 0x1}, {0x7, 0x2}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0x2}, {0x3}, {0x7, 0x8}, {0x2, 0x5}, {0x6, 0x1}, {0x3, 0x2}, {0x1, 0x4}, {0x6, 0xa}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0x6}, {0x5, 0x7}, {0x4, 0x2}, {0x6, 0x1}, {0x6, 0x5}, {0x7, 0x7}, {0x5, 0x8}, {0x1, 0xa}, {0x1, 0xa}, {0x1, 0x1}, {0x4, 0xa}, {0x7, 0x6}, {0x2, 0x5}, {0x6, 0xa}, {0x7, 0x2}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x4, 0x3}, {0x2, 0x4}, {0x7, 0x6}, {0x2, 0x8}, {0x3, 0x8}, {0x6, 0x1}, {0x1, 0x6}, {0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x5, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x7, 0x1}, {0x2, 0xa}, {0x6, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x1, 0xa}, {0x7, 0x2}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x9}, {0x6, 0x5}, {0x0, 0x4}, {0x5, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x3, 0x3}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0xa}, {0x1, 0x9}, {0x5}, {0x6, 0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x6, 0x7}, {0x5, 0x3}, {0x6, 0x8}, {0x6, 0x5}, {0x6, 0x6}, {0x6, 0xa}, {0x1}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x6}, {0x2}, {0x3, 0x5}, {0x4, 0xa}, {0x2, 0x4}, {0x2, 0x8}, {0x2, 0x3}, {0x5, 0x8}, {0x6, 0x1}, {0x0, 0x2}, {0x4, 0x2}, {0x1, 0x7}, {0x2, 0xa}, {0x0, 0x8}, {0x5, 0x2}, {0x3, 0x6}, {0x6, 0xa}, {0x7, 0x3}, {0x0, 0x7}, {0x6, 0x4}, {0x3, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x2}, {0x7, 0x7}, {0x0, 0x1}, {0x1, 0x3}, {0x4, 0x1}, {0x6, 0x9}, {0x1, 0x2}, {0x3, 0x4}, {0x2, 0xa}, {0x3, 0x6}, {0x2, 0x2}, {0x0, 0x9}, {0x2, 0x3}, {0x5, 0x5}, {0x2, 0x2}, {0x2, 0xa}, {0x5, 0x6}, {0x3, 0x5}, {0x1, 0x6}, {0x6, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x6}, {0x3, 0xa}, {0x0, 0x8}, {0x2, 0x6}, {0x0, 0xa}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0x1}, {0x7, 0x9}, {0x3, 0x7}, {0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x3, 0x4}, {0x2}, {0x2, 0x3}, {0x0, 0x5}, {0x1}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0xc, 0x24, 0x3, 0x12, 0xb, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x40, 0x85da, 0x6, 0x6, 0x101, 0x5, 0x4]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xfff, 0x8, 0x4, 0xfff, 0x0, 0x8, 0x1]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x1b, 0x1, 0x2, 0x2, 0x6, 0x6, 0x4, 0x5, 0x6c, 0x36, 0x9, 0x6c, 0x18, 0xb]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x1c}, {0x0, 0x6}, {0x3, 0x2}, {0x7, 0x8}, {0x1, 0x7}, {0x0, 0x1}, {0x6, 0x8}, {0x6, 0x8}, {0x6, 0x2}, {0x6, 0x4}, {0x4, 0x2}, {0x5, 0x4}, {0x2, 0x6}, {0x1}, {0x2, 0x7}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0x7}, {0x3, 0x8}, {0x0, 0xa}, {0x5, 0x5}, {0x5, 0x3}, {0x1, 0x6}, {0x2, 0x6}, {0x5, 0x6}, {0x5}, {0x6, 0x8}, {0x6, 0x8}, {0x0, 0x9}, {0x1}, {0x6, 0x6}, {0x1, 0x3}, {0x4, 0x7}, {0x5, 0x4}, {0x4, 0x2}, {0x6, 0x8}, {0x0, 0x9}, {0x5, 0x9}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0x3}, {}, {0x0, 0x2}, {0x4, 0x2}, {0x4, 0x8}, {0x0, 0x8}, {0x5}, {0x5, 0x4}, {0x1, 0xa}, {0x7, 0x4}, {0x5, 0x4}, {0x4, 0x2}, {0x2, 0x1}, {0x1, 0x8}, {0x4, 0x5}, {0x1, 0x7}, {0x0, 0x5}, {0x6}, {0x0, 0x6}, {0x7, 0x1}, {0x1, 0x6}, {0x1, 0x2}, {0x3, 0xa}, {0x7, 0x4}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x9, 0x6c, 0x16, 0x1b, 0x12, 0x36, 0x2, 0x5, 0x5, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0xfffb, 0x6, 0x4, 0x4, 0x101, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x59a, 0x5, 0xb97, 0x7, 0x4d71, 0x0, 0x5, 0x4]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x0, 0xfff, 0x40, 0x9be3, 0x9, 0x4, 0xb6a6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfa, 0x4, 0x6, 0x4, 0x2b35, 0x3, 0x9]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x2, 0x16, 0x9, 0x12, 0x1, 0x24, 0x60, 0xb, 0x30, 0x6c, 0x24, 0xb, 0x30, 0xb, 0x6, 0x60, 0xb, 0x1b, 0x3, 0x9, 0x1b, 0x12, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5f, 0x7, 0x0, 0x0, 0x79ec, 0x3, 0x6]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x248, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x64}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0xfc, 0x5b, "edb01fcfa4f2de70b2b220bfd23280e03f48068d6b312d459d11a1e1d7aa079656a09cd3af64e62f6b33604e51ca93ab27289de1d4b1d6f92dcd168bd9a188f997cb93549c21131693050aa2919d11d6cd1ff8070221e0b91f293b39d92a954c806085be14fcb39b85cdf53ab38d3dff6a0c3a008706cbe1ef6988574b66eec7cc03af787b6271fc297f3bca14ac7fc494eccf5d13aaf9cc6d9cbdbe705a361d36ee8c4b531b97fcb5356b4e4558703e5f3dc2d61d162ccada44e49cf226858ae2f6af0f771eb88de28ce1e790c0cc3f7bb1e333a37f3758335962af6c00cc4e6c4c034220cc748b1b76a978afb2af8900aac1556df3dbdb"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffa}, @NL80211_ATTR_FRAME_MATCH={0xb0, 0x5b, "25bdf8e271a12cbd5de831337ff21b5f2697eb65fbfa7cb9f2422791e3503e4b3f473eca17de7515c3cafcff0fd2a41b6dfa45c9b94dfe58445fa28265390f99a806c18421f154c43cd6fc6ce7dfa55dabb2264b20a94ea3b7e0a10710b6b21de11d6f05c46c339a96b187821da8f2c43f73401e6024326e3d691f9672c5ebd02e113e0eca298ee139a0c6f400b58196380723522374e59db112e5b318f7cef880c445a06c21b36a86789348"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x59, 0x5b, "f2b9eb74fa95cce637057e1554966c91fd019fcc18d532ccc7968a69c07581f07c0e8199869fafb0e0eea1fdc27b460578e0f00e81994e0c8e9d986b2516187360d4963bd133967fbe8cf7d6a3cca26a21e65c1ec8"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}]}, 0x248}, 0x1, 0x0, 0x0, 0x90}, 0x24004041) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r10, &(0x7f0000000100), 0x12) (async) [ 752.780527][T22228] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:03 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x8, 0x0, 0x0, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) inotify_init1(0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x40000080, 0x0, 0x0, &(0x7f0000002600), &(0x7f0000002640), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) sendfile(r3, r0, 0x0, 0xff) [ 752.845057][T22237] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 752.919895][T22245] geneve1 speed is unknown, defaulting to 1000 04:46:04 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x8, 0x0, 0x0, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) inotify_init1(0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x40000080, 0x0, 0x0, &(0x7f0000002600), &(0x7f0000002640), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) sendfile(r3, r0, 0x0, 0xff) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x8, 0x0, 0x0, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) inotify_init1(0x0) (async) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) (async) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_clone(0x40000080, 0x0, 0x0, &(0x7f0000002600), &(0x7f0000002640), 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) (async) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) (async) sendfile(r3, r0, 0x0, 0xff) (async) [ 753.020848][T22249] geneve1 speed is unknown, defaulting to 1000 [ 753.096249][T22250] geneve1 speed is unknown, defaulting to 1000 [ 753.121740][T20052] usb 2-1: new high-speed USB device number 37 using dummy_hcd 04:46:04 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x8, 0x0, 0x0, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) inotify_init1(0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x40000080, 0x0, 0x0, &(0x7f0000002600), &(0x7f0000002640), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) sendfile(r3, r0, 0x0, 0xff) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x8, 0x0, 0x0, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) inotify_init1(0x0) (async) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) (async) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_clone(0x40000080, 0x0, 0x0, &(0x7f0000002600), &(0x7f0000002640), 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) (async) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) (async) sendfile(r3, r0, 0x0, 0xff) (async) [ 753.247908][T22261] geneve1 speed is unknown, defaulting to 1000 [ 753.297060][T22260] syz-executor.5: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 753.315215][T22260] CPU: 0 PID: 22260 Comm: syz-executor.5 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef #0 [ 753.325748][T22260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.335819][T22260] Call Trace: [ 753.339105][T22260] [ 753.342039][T22260] dump_stack_lvl+0xcd/0x134 [ 753.346650][T22260] warn_alloc.cold+0x9b/0x189 [ 753.351337][T22260] ? zone_watermark_ok_safe+0x290/0x290 [ 753.356899][T22260] ? __vmalloc_node_range+0x7bf/0x1060 [ 753.362361][T22260] __vmalloc_node_range+0xe1e/0x1060 [ 753.367667][T22260] ? vfree_atomic+0xe0/0xe0 [ 753.372180][T22260] ? rcu_read_lock_sched_held+0x3a/0x70 [ 753.377740][T22260] ? kmem_cache_alloc_node+0x3ce/0x590 [ 753.383213][T22260] ? kernel_clone+0xe7/0xab0 [ 753.387798][T22260] copy_process+0x926/0x7300 [ 753.392398][T22260] ? kernel_clone+0xe7/0xab0 [ 753.396999][T22260] ? lock_chain_count+0x20/0x20 [ 753.401865][T22260] ? lock_chain_count+0x20/0x20 [ 753.406706][T22260] ? find_held_lock+0x2d/0x110 [ 753.411461][T22260] ? __cleanup_sighand+0xb0/0xb0 [ 753.416411][T22260] ? lock_downgrade+0x6e0/0x6e0 [ 753.421252][T22260] ? __lock_acquire+0x1655/0x5470 [ 753.426265][T22260] ? kernel_clone+0x314/0xab0 [ 753.430951][T22260] kernel_clone+0xe7/0xab0 [ 753.435377][T22260] ? create_io_thread+0xf0/0xf0 [ 753.440235][T22260] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 753.446206][T22260] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 753.452184][T22260] ? find_held_lock+0x2d/0x110 [ 753.456964][T22260] __do_sys_clone+0xc8/0x110 [ 753.461557][T22260] ? kernel_clone+0xab0/0xab0 [ 753.466238][T22260] ? lock_downgrade+0x6e0/0x6e0 [ 753.471086][T22260] ? syscall_enter_from_user_mode+0x21/0x70 [ 753.476990][T22260] do_syscall_64+0x35/0xb0 [ 753.481415][T22260] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 753.487302][T22260] RIP: 0033:0x7f991b29e481 [ 753.491708][T22260] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 753.511305][T22260] RSP: 002b:00007ffc44610118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 753.519711][T22260] RAX: ffffffffffffffda RBX: 00007f9919b2b700 RCX: 00007f991b29e481 [ 753.527700][T22260] RDX: 00007f9919b2b9d0 RSI: 00007f9919b2b2f0 RDI: 00000000003d0f00 [ 753.535676][T22260] RBP: 00007ffc44610360 R08: 00007f9919b2b700 R09: 00007f9919b2b700 04:46:04 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000001f00000000007e"], 0x20}}, 0x0) [ 753.543633][T22260] R10: 00007f9919b2b9d0 R11: 0000000000000206 R12: 00007ffc446101ce [ 753.551600][T22260] R13: 00007ffc446101cf R14: 00007f9919b2b300 R15: 0000000000022000 [ 753.559587][T22260] [ 753.581138][T22260] Mem-Info: [ 753.586949][T22260] active_anon:2598 inactive_anon:165681 isolated_anon:0 [ 753.586949][T22260] active_file:4464 inactive_file:7579 isolated_file:0 [ 753.586949][T22260] unevictable:768 dirty:0 writeback:0 [ 753.586949][T22260] slab_reclaimable:21708 slab_unreclaimable:108378 [ 753.586949][T22260] mapped:27951 shmem:4346 pagetables:921 bounce:0 [ 753.586949][T22260] kernel_misc_reclaimable:0 [ 753.586949][T22260] free:1291243 free_pcp:10282 free_cma:0 [ 753.651387][T22260] Node 0 active_anon:10384kB inactive_anon:663580kB active_file:17776kB inactive_file:30316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111804kB dirty:0kB writeback:0kB shmem:14908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 538624kB writeback_tmp:0kB kernel_stack:10268kB pagetables:3476kB all_unreclaimable? no [ 753.680248][T22270] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 753.695584][T22260] Node 1 active_anon:8kB inactive_anon:932kB active_file:80kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:8kB all_unreclaimable? no [ 753.700464][T22270] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 753.725376][T22260] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 753.742914][T22270] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 753.762318][T22260] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 753.776538][T22260] Node 0 DMA32 free:1203252kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:10384kB inactive_anon:663580kB active_file:17776kB inactive_file:30316kB unevictable:1536kB writepending:0kB present:3129332kB managed:2716692kB mlocked:0kB bounce:0kB free_pcp:38624kB local_pcp:16884kB free_cma:0kB [ 753.815217][T22260] lowmem_reserve[]: 0 0 0 0 0 [ 753.819971][T22260] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 753.846770][T20052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.857939][T22260] lowmem_reserve[]: 0 0 0 0 0 [ 753.862789][T20052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.873838][T22260] Node 1 Normal free:3949188kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:80kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 753.906540][T20052] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 753.912663][T22260] lowmem_reserve[]: [ 753.915738][T20052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.916315][T22260] 0 [ 753.922204][T20052] usb 2-1: config 0 descriptor?? [ 753.938829][T22260] 0 0 0 0 [ 753.941976][T22260] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 753.958402][T22260] Node 0 DMA32: 4279*4kB (UME) 1575*8kB (UME) 1308*16kB (UME) 957*32kB (UME) 245*64kB (UME) 45*128kB (UME) 10*256kB (UM) 3*512kB (UM) 1*1024kB (E) 3*2048kB (M) 266*4096kB (UM) = 1203508kB [ 753.979057][T22260] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 753.991129][T22260] Node 1 Normal: 95*4kB (UME) 195*8kB (UM) 139*16kB (UME) 74*32kB (UME) 52*64kB (UE) 44*128kB (UM) 12*256kB (UE) 5*512kB (UE) 0*1024kB 2*2048kB (M) 958*4096kB (M) = 3949188kB [ 754.004336][T20052] usbhid 2-1:0.0: can't add hid device: -22 [ 754.010073][T22260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 754.023920][T20052] usbhid: probe of 2-1:0.0 failed with error -22 [ 754.024893][T22260] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 754.043502][T22260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 754.053671][T22260] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 754.063460][T22260] 16389 total pagecache pages [ 754.068305][T22260] 0 pages in swap cache [ 754.073051][T22260] Swap cache stats: add 0, delete 0, find 0/0 [ 754.079237][T22260] Free swap = 0kB [ 754.083498][T22260] Total swap = 0kB [ 754.087275][T22260] 2097051 pages RAM [ 754.091112][T22260] 0 pages HighMem/MovableOnly [ 754.099339][T22260] 384533 pages reserved [ 754.103877][T22260] 0 pages cma reserved 04:46:06 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:06 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100f0ffff00000000007e"], 0x20}}, 0x0) 04:46:06 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000e007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 04:46:06 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000002000000000007e"], 0x20}}, 0x0) [ 755.773192][ T31] usb 2-1: USB disconnect, device number 37 04:46:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) [ 755.832888][T22280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 755.833196][T22281] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 755.858714][T22282] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 755.872900][T22275] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:46:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) (async) [ 755.901837][T22275] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:07 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001500010000000000000000000200000002"], 0x2c}}, 0x0) fchdir(r2) 04:46:07 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001500010000000000000000000200000002"], 0x2c}}, 0x0) (async) fchdir(r2) [ 756.058628][T22296] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 04:46:07 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001500010000000000000000000200000002"], 0x2c}}, 0x0) (async) fchdir(r2) [ 756.117589][T22298] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 04:46:07 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = accept$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000200)=0x1c) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x7b) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) [ 756.173526][T22301] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 756.302730][ T31] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 756.733072][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.744062][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.754266][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 756.764647][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.775872][ T31] usb 2-1: config 0 descriptor?? [ 756.824526][ T31] usbhid 2-1:0.0: can't add hid device: -22 [ 756.830519][ T31] usbhid: probe of 2-1:0.0 failed with error -22 04:46:10 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:10 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:10 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000003f00000000007e"], 0x20}}, 0x0) 04:46:10 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000001f007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:10 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="017fffffff00000000007e"], 0x20}}, 0x0) 04:46:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = accept$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000200)=0x1c) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x7b) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) [ 758.914115][T21518] usb 2-1: USB disconnect, device number 38 [ 758.958363][T22309] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 758.964838][T22315] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 758.988392][T22314] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:10 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="019effffff00000000007e"], 0x20}}, 0x0) 04:46:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = accept$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000200)=0x1c) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x7b) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) accept$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000200)=0x1c) (async) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x7b) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x12}) (async) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) (async) [ 759.013634][T22309] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 04:46:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) [ 759.076607][T22325] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:46:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 04:46:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_mount_image$ubifs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x3, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="459703a99bf5f10b7d9f500d2b34bea48eb411a9899a30e319678709a7a1d52219cf4a23959578262b21050d820ddf80e43b9f755ca1f6ab469e970c2d3e55e2e760a90e26c1ae96b35b3f2edb18916ff1f5a9fdbf34551b0b33640828b09839d33746287eed40de4159029cecace5f70aa1f8abb8641336073224db6e1901171e33bf5ae4b5bdb6befc29ad218744e5e67d22bf92", 0x95, 0x7}, {&(0x7f0000000200)="8679795b9472b45a9198b90218c87a1daab13e2e4bd65e2ce856f35387fc804eb5", 0x21, 0x4}], 0x2000004, &(0x7f0000000280)={[{@compr_zstd}, {@compr_zlib}, {@no_chk_data_crc}, {@no_bulk_read}], [{@fowner_lt={'fowner<', 0xee00}}, {@dont_hash}, {@smackfshat={'smackfshat', 0x3d, '\x9c\xac\xdb%}^\xdf[%$'}}, {@subj_role={'subj_role', 0x3d, '>}'}}, {@fowner_lt={'fowner<', 0xee00}}, {@dont_measure}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@dont_appraise}, {@context={'context', 0x3d, 'staff_u'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000380)={0x0, 0x1000, 0x0, [0x6, 0x8, 0x5, 0x7fff, 0x3], [0x9, 0x6, 0xfffffffffffffffa, 0x100000000, 0x2, 0x7, 0x7fffffff, 0x2, 0xff, 0x10001, 0xffffffffffffffc0, 0x100, 0x0, 0xfc, 0x6, 0x96, 0x2df1, 0x21f816c, 0x1, 0x2000000, 0x6, 0x0, 0x2, 0x8000, 0x4, 0x800, 0xffffffff, 0x3, 0x4, 0x6, 0xcc, 0x931, 0x2, 0x8, 0x8, 0x8, 0x800, 0x3, 0x4, 0x3, 0xffffffff, 0xa9a9, 0x8, 0xfffffffeffffffff, 0x4000000000000000, 0x7, 0x2, 0x8, 0x0, 0x9, 0x8, 0x3, 0x6fbaf120, 0x40, 0x8001, 0x80000001, 0x0, 0x6, 0x9, 0x20c, 0x2, 0x44d4, 0x6, 0x7, 0x64, 0x400, 0xfffffffffffff801, 0x1ff, 0x100, 0x10000, 0x1f, 0x8001, 0x8, 0x0, 0x0, 0x1, 0x4, 0x3, 0x3, 0x1000, 0x6, 0xffff, 0x8, 0x33, 0x8, 0x10001, 0x341, 0x10000, 0x4, 0x7b4, 0x4, 0x6, 0x100000001, 0x0, 0x7, 0xa0b, 0xffff, 0x1, 0x3ff, 0x1, 0x7fff, 0xffffffffffffd13e, 0xa556, 0x9, 0x4, 0x7, 0x800, 0x8001, 0x6, 0x2, 0xe7f, 0xffff, 0x7, 0x6, 0x93f8000, 0x6, 0x9, 0x3f, 0x7, 0xfbec, 0x4]}) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) [ 759.223735][T22342] UBIFS error (pid: 22342): cannot open "/dev/loop5", error -22 [ 759.431688][T21518] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 759.861993][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.873009][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.883598][T21518] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 759.893281][T21518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.903431][T21518] usb 2-1: config 0 descriptor?? [ 759.948798][T21518] usbhid 2-1:0.0: can't add hid device: -22 [ 759.954931][T21518] usbhid: probe of 2-1:0.0 failed with error -22 04:46:13 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:13 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_mount_image$ubifs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x3, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="459703a99bf5f10b7d9f500d2b34bea48eb411a9899a30e319678709a7a1d52219cf4a23959578262b21050d820ddf80e43b9f755ca1f6ab469e970c2d3e55e2e760a90e26c1ae96b35b3f2edb18916ff1f5a9fdbf34551b0b33640828b09839d33746287eed40de4159029cecace5f70aa1f8abb8641336073224db6e1901171e33bf5ae4b5bdb6befc29ad218744e5e67d22bf92", 0x95, 0x7}, {&(0x7f0000000200)="8679795b9472b45a9198b90218c87a1daab13e2e4bd65e2ce856f35387fc804eb5", 0x21, 0x4}], 0x2000004, &(0x7f0000000280)={[{@compr_zstd}, {@compr_zlib}, {@no_chk_data_crc}, {@no_bulk_read}], [{@fowner_lt={'fowner<', 0xee00}}, {@dont_hash}, {@smackfshat={'smackfshat', 0x3d, '\x9c\xac\xdb%}^\xdf[%$'}}, {@subj_role={'subj_role', 0x3d, '>}'}}, {@fowner_lt={'fowner<', 0xee00}}, {@dont_measure}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@dont_appraise}, {@context={'context', 0x3d, 'staff_u'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000380)={0x0, 0x1000, 0x0, [0x6, 0x8, 0x5, 0x7fff, 0x3], [0x9, 0x6, 0xfffffffffffffffa, 0x100000000, 0x2, 0x7, 0x7fffffff, 0x2, 0xff, 0x10001, 0xffffffffffffffc0, 0x100, 0x0, 0xfc, 0x6, 0x96, 0x2df1, 0x21f816c, 0x1, 0x2000000, 0x6, 0x0, 0x2, 0x8000, 0x4, 0x800, 0xffffffff, 0x3, 0x4, 0x6, 0xcc, 0x931, 0x2, 0x8, 0x8, 0x8, 0x800, 0x3, 0x4, 0x3, 0xffffffff, 0xa9a9, 0x8, 0xfffffffeffffffff, 0x4000000000000000, 0x7, 0x2, 0x8, 0x0, 0x9, 0x8, 0x3, 0x6fbaf120, 0x40, 0x8001, 0x80000001, 0x0, 0x6, 0x9, 0x20c, 0x2, 0x44d4, 0x6, 0x7, 0x64, 0x400, 0xfffffffffffff801, 0x1ff, 0x100, 0x10000, 0x1f, 0x8001, 0x8, 0x0, 0x0, 0x1, 0x4, 0x3, 0x3, 0x1000, 0x6, 0xffff, 0x8, 0x33, 0x8, 0x10001, 0x341, 0x10000, 0x4, 0x7b4, 0x4, 0x6, 0x100000001, 0x0, 0x7, 0xa0b, 0xffff, 0x1, 0x3ff, 0x1, 0x7fff, 0xffffffffffffd13e, 0xa556, 0x9, 0x4, 0x7, 0x800, 0x8001, 0x6, 0x2, 0xe7f, 0xffff, 0x7, 0x6, 0x93f8000, 0x6, 0x9, 0x3f, 0x7, 0xfbec, 0x4]}) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) syz_mount_image$ubifs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x3, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="459703a99bf5f10b7d9f500d2b34bea48eb411a9899a30e319678709a7a1d52219cf4a23959578262b21050d820ddf80e43b9f755ca1f6ab469e970c2d3e55e2e760a90e26c1ae96b35b3f2edb18916ff1f5a9fdbf34551b0b33640828b09839d33746287eed40de4159029cecace5f70aa1f8abb8641336073224db6e1901171e33bf5ae4b5bdb6befc29ad218744e5e67d22bf92", 0x95, 0x7}, {&(0x7f0000000200)="8679795b9472b45a9198b90218c87a1daab13e2e4bd65e2ce856f35387fc804eb5", 0x21, 0x4}], 0x2000004, &(0x7f0000000280)={[{@compr_zstd}, {@compr_zlib}, {@no_chk_data_crc}, {@no_bulk_read}], [{@fowner_lt={'fowner<', 0xee00}}, {@dont_hash}, {@smackfshat={'smackfshat', 0x3d, '\x9c\xac\xdb%}^\xdf[%$'}}, {@subj_role={'subj_role', 0x3d, '>}'}}, {@fowner_lt={'fowner<', 0xee00}}, {@dont_measure}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@dont_appraise}, {@context={'context', 0x3d, 'staff_u'}}]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000380)={0x0, 0x1000, 0x0, [0x6, 0x8, 0x5, 0x7fff, 0x3], [0x9, 0x6, 0xfffffffffffffffa, 0x100000000, 0x2, 0x7, 0x7fffffff, 0x2, 0xff, 0x10001, 0xffffffffffffffc0, 0x100, 0x0, 0xfc, 0x6, 0x96, 0x2df1, 0x21f816c, 0x1, 0x2000000, 0x6, 0x0, 0x2, 0x8000, 0x4, 0x800, 0xffffffff, 0x3, 0x4, 0x6, 0xcc, 0x931, 0x2, 0x8, 0x8, 0x8, 0x800, 0x3, 0x4, 0x3, 0xffffffff, 0xa9a9, 0x8, 0xfffffffeffffffff, 0x4000000000000000, 0x7, 0x2, 0x8, 0x0, 0x9, 0x8, 0x3, 0x6fbaf120, 0x40, 0x8001, 0x80000001, 0x0, 0x6, 0x9, 0x20c, 0x2, 0x44d4, 0x6, 0x7, 0x64, 0x400, 0xfffffffffffff801, 0x1ff, 0x100, 0x10000, 0x1f, 0x8001, 0x8, 0x0, 0x0, 0x1, 0x4, 0x3, 0x3, 0x1000, 0x6, 0xffff, 0x8, 0x33, 0x8, 0x10001, 0x341, 0x10000, 0x4, 0x7b4, 0x4, 0x6, 0x100000001, 0x0, 0x7, 0xa0b, 0xffff, 0x1, 0x3ff, 0x1, 0x7fff, 0xffffffffffffd13e, 0xa556, 0x9, 0x4, 0x7, 0x800, 0x8001, 0x6, 0x2, 0xe7f, 0xffff, 0x7, 0x6, 0x93f8000, 0x6, 0x9, 0x3f, 0x7, 0xfbec, 0x4]}) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) (async) 04:46:13 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000004800000000007e"], 0x20}}, 0x0) 04:46:13 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000020007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:13 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01f0ffffff00000000007e"], 0x20}}, 0x0) 04:46:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 761.979458][T21518] usb 2-1: USB disconnect, device number 39 [ 762.024835][T22350] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 762.028444][T22351] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 762.049610][T22352] UBIFS error (pid: 22352): cannot open "/dev/loop5", error -22 [ 762.057872][T22354] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:46:13 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_mount_image$ubifs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x3, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="459703a99bf5f10b7d9f500d2b34bea48eb411a9899a30e319678709a7a1d52219cf4a23959578262b21050d820ddf80e43b9f755ca1f6ab469e970c2d3e55e2e760a90e26c1ae96b35b3f2edb18916ff1f5a9fdbf34551b0b33640828b09839d33746287eed40de4159029cecace5f70aa1f8abb8641336073224db6e1901171e33bf5ae4b5bdb6befc29ad218744e5e67d22bf92", 0x95, 0x7}, {&(0x7f0000000200)="8679795b9472b45a9198b90218c87a1daab13e2e4bd65e2ce856f35387fc804eb5", 0x21, 0x4}], 0x2000004, &(0x7f0000000280)={[{@compr_zstd}, {@compr_zlib}, {@no_chk_data_crc}, {@no_bulk_read}], [{@fowner_lt={'fowner<', 0xee00}}, {@dont_hash}, {@smackfshat={'smackfshat', 0x3d, '\x9c\xac\xdb%}^\xdf[%$'}}, {@subj_role={'subj_role', 0x3d, '>}'}}, {@fowner_lt={'fowner<', 0xee00}}, {@dont_measure}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@dont_appraise}, {@context={'context', 0x3d, 'staff_u'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000380)={0x0, 0x1000, 0x0, [0x6, 0x8, 0x5, 0x7fff, 0x3], [0x9, 0x6, 0xfffffffffffffffa, 0x100000000, 0x2, 0x7, 0x7fffffff, 0x2, 0xff, 0x10001, 0xffffffffffffffc0, 0x100, 0x0, 0xfc, 0x6, 0x96, 0x2df1, 0x21f816c, 0x1, 0x2000000, 0x6, 0x0, 0x2, 0x8000, 0x4, 0x800, 0xffffffff, 0x3, 0x4, 0x6, 0xcc, 0x931, 0x2, 0x8, 0x8, 0x8, 0x800, 0x3, 0x4, 0x3, 0xffffffff, 0xa9a9, 0x8, 0xfffffffeffffffff, 0x4000000000000000, 0x7, 0x2, 0x8, 0x0, 0x9, 0x8, 0x3, 0x6fbaf120, 0x40, 0x8001, 0x80000001, 0x0, 0x6, 0x9, 0x20c, 0x2, 0x44d4, 0x6, 0x7, 0x64, 0x400, 0xfffffffffffff801, 0x1ff, 0x100, 0x10000, 0x1f, 0x8001, 0x8, 0x0, 0x0, 0x1, 0x4, 0x3, 0x3, 0x1000, 0x6, 0xffff, 0x8, 0x33, 0x8, 0x10001, 0x341, 0x10000, 0x4, 0x7b4, 0x4, 0x6, 0x100000001, 0x0, 0x7, 0xa0b, 0xffff, 0x1, 0x3ff, 0x1, 0x7fff, 0xffffffffffffd13e, 0xa556, 0x9, 0x4, 0x7, 0x800, 0x8001, 0x6, 0x2, 0xe7f, 0xffff, 0x7, 0x6, 0x93f8000, 0x6, 0x9, 0x3f, 0x7, 0xfbec, 0x4]}) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) syz_mount_image$ubifs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x3, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="459703a99bf5f10b7d9f500d2b34bea48eb411a9899a30e319678709a7a1d52219cf4a23959578262b21050d820ddf80e43b9f755ca1f6ab469e970c2d3e55e2e760a90e26c1ae96b35b3f2edb18916ff1f5a9fdbf34551b0b33640828b09839d33746287eed40de4159029cecace5f70aa1f8abb8641336073224db6e1901171e33bf5ae4b5bdb6befc29ad218744e5e67d22bf92", 0x95, 0x7}, {&(0x7f0000000200)="8679795b9472b45a9198b90218c87a1daab13e2e4bd65e2ce856f35387fc804eb5", 0x21, 0x4}], 0x2000004, &(0x7f0000000280)={[{@compr_zstd}, {@compr_zlib}, {@no_chk_data_crc}, {@no_bulk_read}], [{@fowner_lt={'fowner<', 0xee00}}, {@dont_hash}, {@smackfshat={'smackfshat', 0x3d, '\x9c\xac\xdb%}^\xdf[%$'}}, {@subj_role={'subj_role', 0x3d, '>}'}}, {@fowner_lt={'fowner<', 0xee00}}, {@dont_measure}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@dont_appraise}, {@context={'context', 0x3d, 'staff_u'}}]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000380)={0x0, 0x1000, 0x0, [0x6, 0x8, 0x5, 0x7fff, 0x3], [0x9, 0x6, 0xfffffffffffffffa, 0x100000000, 0x2, 0x7, 0x7fffffff, 0x2, 0xff, 0x10001, 0xffffffffffffffc0, 0x100, 0x0, 0xfc, 0x6, 0x96, 0x2df1, 0x21f816c, 0x1, 0x2000000, 0x6, 0x0, 0x2, 0x8000, 0x4, 0x800, 0xffffffff, 0x3, 0x4, 0x6, 0xcc, 0x931, 0x2, 0x8, 0x8, 0x8, 0x800, 0x3, 0x4, 0x3, 0xffffffff, 0xa9a9, 0x8, 0xfffffffeffffffff, 0x4000000000000000, 0x7, 0x2, 0x8, 0x0, 0x9, 0x8, 0x3, 0x6fbaf120, 0x40, 0x8001, 0x80000001, 0x0, 0x6, 0x9, 0x20c, 0x2, 0x44d4, 0x6, 0x7, 0x64, 0x400, 0xfffffffffffff801, 0x1ff, 0x100, 0x10000, 0x1f, 0x8001, 0x8, 0x0, 0x0, 0x1, 0x4, 0x3, 0x3, 0x1000, 0x6, 0xffff, 0x8, 0x33, 0x8, 0x10001, 0x341, 0x10000, 0x4, 0x7b4, 0x4, 0x6, 0x100000001, 0x0, 0x7, 0xa0b, 0xffff, 0x1, 0x3ff, 0x1, 0x7fff, 0xffffffffffffd13e, 0xa556, 0x9, 0x4, 0x7, 0x800, 0x8001, 0x6, 0x2, 0xe7f, 0xffff, 0x7, 0x6, 0x93f8000, 0x6, 0x9, 0x3f, 0x7, 0xfbec, 0x4]}) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) (async) [ 762.095354][T22355] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 762.119524][T22355] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) write$cgroup_pid(r3, &(0x7f0000000140)=r4, 0x12) [ 762.131039][T22359] UBIFS error (pid: 22359): cannot open "/dev/loop5", error -22 04:46:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) write$cgroup_pid(r3, &(0x7f0000000140)=r4, 0x12) 04:46:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) write$cgroup_pid(r3, &(0x7f0000000140)=r4, 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) (async) write$cgroup_pid(r3, &(0x7f0000000140)=r4, 0x12) (async) 04:46:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000c00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000880)={0x14}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000073afc9581c4d0a463ac651cf8c5f6a6ca26b64c17ddbe3aa286f6f81a0317436ebbfb0a5bde1e3cdf6254bf89835d2d53073ca3fe07e27e1c38db2a6841203b10a3f7b", @ANYRES16=r4, @ANYRES32=r2], 0x20}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x33d3}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x37b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x37895c91}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x123001, 0x0) r6 = gettid() write$cgroup_pid(r5, &(0x7f0000000100)=r6, 0x12) [ 762.241377][T22363] UBIFS error (pid: 22363): cannot open "/dev/loop5", error -22 [ 762.451878][T21518] usb 2-1: new high-speed USB device number 40 using dummy_hcd 04:46:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000c00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000880)={0x14}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000073afc9581c4d0a463ac651cf8c5f6a6ca26b64c17ddbe3aa286f6f81a0317436ebbfb0a5bde1e3cdf6254bf89835d2d53073ca3fe07e27e1c38db2a6841203b10a3f7b", @ANYRES16=r4, @ANYRES32=r2], 0x20}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x33d3}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x37b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x37895c91}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x123001, 0x0) r6 = gettid() write$cgroup_pid(r5, &(0x7f0000000100)=r6, 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000c00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000880)={0x14}, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000073afc9581c4d0a463ac651cf8c5f6a6ca26b64c17ddbe3aa286f6f81a0317436ebbfb0a5bde1e3cdf6254bf89835d2d53073ca3fe07e27e1c38db2a6841203b10a3f7b", @ANYRES16=r4, @ANYRES32=r2], 0x20}}, 0x0) (async) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x33d3}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x37b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x37895c91}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) (async) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x123001, 0x0) (async) gettid() (async) write$cgroup_pid(r5, &(0x7f0000000100)=r6, 0x12) (async) [ 762.821844][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.833036][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.844136][T21518] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 762.859901][T21518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.893541][T21518] usb 2-1: config 0 descriptor?? [ 763.451793][T21518] usbhid 2-1:0.0: can't add hid device: -71 [ 763.457857][T21518] usbhid: probe of 2-1:0.0 failed with error -71 [ 763.466749][T21518] usb 2-1: USB disconnect, device number 40 04:46:15 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000c00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000880)={0x14}, 0x14}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000073afc9581c4d0a463ac651cf8c5f6a6ca26b64c17ddbe3aa286f6f81a0317436ebbfb0a5bde1e3cdf6254bf89835d2d53073ca3fe07e27e1c38db2a6841203b10a3f7b", @ANYRES16=r4, @ANYRES32=r2], 0x20}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x33d3}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x37b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x37895c91}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) (async) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x123001, 0x0) (async) r6 = gettid() write$cgroup_pid(r5, &(0x7f0000000100)=r6, 0x12) 04:46:15 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000004c00000000007e"], 0x20}}, 0x0) 04:46:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:15 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000433007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:15 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000300007e"], 0x20}}, 0x0) [ 763.932553][T22397] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 763.942274][T22401] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 763.950127][T22394] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 763.969354][T22390] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:46:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x4, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3f}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) [ 763.979205][T22390] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x4, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3f}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) (async) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 04:46:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x4, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3f}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 04:46:15 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_freezer_state(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 04:46:15 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_freezer_state(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x12}) (async) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$cgroup_freezer_state(r2, &(0x7f0000000040), 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) 04:46:15 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_freezer_state(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x12}) (async) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$cgroup_freezer_state(r2, &(0x7f0000000040), 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) [ 764.237786][T21518] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 764.612003][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.628100][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.638257][T21518] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 764.655994][T21518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.667631][T21518] usb 2-1: config 0 descriptor?? [ 765.211798][T21518] usbhid 2-1:0.0: can't add hid device: -71 [ 765.217931][T21518] usbhid: probe of 2-1:0.0 failed with error -71 [ 765.227681][T21518] usb 2-1: USB disconnect, device number 41 04:46:16 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:16 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000003f007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x50, 0x48}}}}, [@key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8141) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) 04:46:16 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000034000007e"], 0x20}}, 0x0) 04:46:16 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000006000000000007e"], 0x20}}, 0x0) 04:46:16 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 765.690887][T22440] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 765.702228][T22439] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 765.703446][T22436] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:46:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x50, 0x48}}}}, [@key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8141) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) [ 765.744038][T22436] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 765.753263][T22442] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:46:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x50, 0x48}}}}, [@key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8141) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) 04:46:16 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001500010000000000000000000200000002"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 04:46:17 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001500010000000000000000000200000002"], 0x2c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) [ 765.889979][T22453] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 04:46:17 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001500010000000000000000000200000002"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001500010000000000000000000200000002"], 0x2c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) (async) [ 765.952329][T22457] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 04:46:17 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) [ 766.001910][T21518] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 766.039356][T22461] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 766.371897][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.393227][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.406769][T21518] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 766.417845][T21518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.434556][T21518] usb 2-1: config 0 descriptor?? [ 766.971809][T21518] usbhid 2-1:0.0: can't add hid device: -71 [ 766.977835][T21518] usbhid: probe of 2-1:0.0 failed with error -71 [ 766.990412][T21518] usb 2-1: USB disconnect, device number 42 04:46:18 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:18 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) 04:46:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000ffffe000007e"], 0x20}}, 0x0) 04:46:18 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000106700000000007e"], 0x20}}, 0x0) 04:46:18 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000048007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 767.454600][T22476] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 767.466645][T22479] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 767.471549][T22478] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 767.487281][T22480] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:46:18 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) [ 767.524459][T22478] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r3, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2f}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040040}, 0x4040080) r4 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) 04:46:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r3, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2f}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040040}, 0x4040080) (async) r4 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) 04:46:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r3, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2f}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040040}, 0x4040080) r4 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r3, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2f}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040040}, 0x4040080) (async) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) (async) 04:46:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x20, 0x0, 0x604, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x69d}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x610682, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000100), 0x12) 04:46:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x20, 0x0, 0x604, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x69d}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x610682, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}]}, 0x30}}, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r1) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x20, 0x0, 0x604, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x69d}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c001) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x610682, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r0) (async) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r6, &(0x7f0000000100), 0x12) (async) [ 767.831870][T21518] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 768.191938][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.209883][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.227322][T21518] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 768.237535][T21518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.260628][T21518] usb 2-1: config 0 descriptor?? [ 768.802991][T21518] usbhid 2-1:0.0: can't add hid device: -71 [ 768.809011][T21518] usbhid: probe of 2-1:0.0 failed with error -71 [ 768.822811][T21518] usb 2-1: USB disconnect, device number 43 04:46:20 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000004c007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}]}, 0x30}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r1) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x20, 0x0, 0x604, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x69d}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c001) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 32) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x610682, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r0) (rerun: 64) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000100), 0x12) 04:46:20 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000006800000000007e"], 0x20}}, 0x0) 04:46:20 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01fffffffffffff000007e"], 0x20}}, 0x0) 04:46:20 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:20 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 769.272195][T22519] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 769.289188][T22522] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:20 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000001007e"], 0x20}}, 0x0) [ 769.317121][T22519] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:20 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) 04:46:20 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) 04:46:20 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) 04:46:20 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001500010000000000000000000200000002"], 0x2c}}, 0x0) copy_file_range(r0, &(0x7f0000000040)=0x9028, r2, &(0x7f00000000c0)=0x8, 0x20, 0x0) 04:46:20 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001500010000000000000000000200000002"], 0x2c}}, 0x0) (async) copy_file_range(r0, &(0x7f0000000040)=0x9028, r2, &(0x7f00000000c0)=0x8, 0x20, 0x0) [ 769.611725][T21518] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 770.051831][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.063066][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.074086][T21518] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 770.083544][T21518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:46:21 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000001353007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:21 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001500010000000000000000000200000002"], 0x2c}}, 0x0) (async) copy_file_range(r0, &(0x7f0000000040)=0x9028, r2, &(0x7f00000000c0)=0x8, 0x20, 0x0) 04:46:21 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:21 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000006c00000000007e"], 0x20}}, 0x0) [ 770.123828][T21518] usb 2-1: config 0 descriptor?? [ 770.180715][T22553] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 770.200746][T22553] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 770.691785][T21518] usbhid 2-1:0.0: can't add hid device: -71 [ 770.697803][T21518] usbhid: probe of 2-1:0.0 failed with error -71 [ 770.711383][T21518] usb 2-1: USB disconnect, device number 44 04:46:22 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:22 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000002007e"], 0x20}}, 0x0) 04:46:22 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 04:46:22 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000060007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:22 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000007400000000007e"], 0x20}}, 0x0) 04:46:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 771.172933][T22566] __nla_validate_parse: 7 callbacks suppressed [ 771.172953][T22566] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 771.196885][T22568] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 771.202293][T22565] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:46:22 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) [ 771.216514][T22569] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 771.231495][T22565] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:22 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 04:46:22 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 04:46:22 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) (async, rerun: 64) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (rerun: 64) 04:46:22 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 04:46:22 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = getpgid(0x0) process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/122, 0x7a}], 0x1, &(0x7f0000001500)=[{&(0x7f0000000100)=""/30, 0xff94}, {0x0}], 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) sendfile(r1, r1, &(0x7f0000000040)=0x7, 0x401) [ 771.492183][T21518] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 771.851825][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.863066][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.873131][T21518] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 771.882553][T21518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.897700][T21518] usb 2-1: config 0 descriptor?? [ 772.445598][T21518] usbhid 2-1:0.0: can't add hid device: -71 [ 772.451727][T21518] usbhid: probe of 2-1:0.0 failed with error -71 [ 772.466936][T21518] usb 2-1: USB disconnect, device number 45 04:46:23 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:23 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000068007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:23 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:23 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = getpgid(0x0) process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/122, 0x7a}], 0x1, &(0x7f0000001500)=[{&(0x7f0000000100)=""/30, 0xff94}, {0x0}], 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) sendfile(r1, r1, &(0x7f0000000040)=0x7, 0x401) 04:46:23 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000003007e"], 0x20}}, 0x0) 04:46:23 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000007a00000000007e"], 0x20}}, 0x0) [ 772.911069][T22603] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 772.923626][T22602] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 772.945197][T22604] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:46:24 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r2 = getpgid(0x0) process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/122, 0x7a}], 0x1, &(0x7f0000001500)=[{&(0x7f0000000100)=""/30, 0xff94}, {0x0}], 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) sendfile(r1, r1, &(0x7f0000000040)=0x7, 0x401) [ 772.955697][T22601] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 772.965457][T22604] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010002007f20160000da001000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x20040, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) 04:46:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010002007f20160000da001000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x20040, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) 04:46:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010002007f20160000da001000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x20040, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010002007f20160000da001000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x12}) (async) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x20040, 0x0) (async) openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) (async) 04:46:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) 04:46:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) [ 773.231673][T19934] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 773.591923][T19934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.603056][T19934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.613024][T19934] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 773.622228][T19934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.642499][T19934] usb 2-1: config 0 descriptor?? [ 774.201751][T19934] usbhid 2-1:0.0: can't add hid device: -71 [ 774.207783][T19934] usbhid: probe of 2-1:0.0 failed with error -71 [ 774.221010][T19934] usb 2-1: USB disconnect, device number 46 04:46:25 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:25 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01ffffff9e00000000007e"], 0x20}}, 0x0) 04:46:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r1) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) (async) 04:46:25 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000006c007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:25 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000004007e"], 0x20}}, 0x0) 04:46:25 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:25 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01fffffff000000000007e"], 0x20}}, 0x0) [ 774.690559][T22637] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 774.706776][T22639] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:46:25 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0xfffffffffffff184, 0x44000) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="39f0e661", @ANYRES16=r4, @ANYBLOB="04002bbd7000fcdbdf250900000008000680040005003400028008000200000000000800020002000000040004001c00038008000100090000000800010005000000080002006fe50000e09695ed3147f44e5475fcf43f031c3bb4cc400c5e0592c36b01d657f9ef072de492f68c44c398b372ed0bc1a6a48ed9a13412a6ddbbeb105362685082468b4e7076083490cbc64b112139c15da2689fbec4c2cb57fb1f1a57a0840b1099db0d8193bb09d42c60039823d528c1d93d128c8f"], 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x4080) [ 774.733618][T22641] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 774.751705][T22639] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:25 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000003f200000000007e"], 0x20}}, 0x0) 04:46:25 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0xfffffffffffff184, 0x44000) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="39f0e661", @ANYRES16=r4, @ANYBLOB="04002bbd7000fcdbdf250900000008000680040005003400028008000200000000000800020002000000040004001c00038008000100090000000800010005000000080002006fe50000e09695ed3147f44e5475fcf43f031c3bb4cc400c5e0592c36b01d657f9ef072de492f68c44c398b372ed0bc1a6a48ed9a13412a6ddbbeb105362685082468b4e7076083490cbc64b112139c15da2689fbec4c2cb57fb1f1a57a0840b1099db0d8193bb09d42c60039823d528c1d93d128c8f"], 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x4080) 04:46:26 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0xfffffffffffff184, 0x44000) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="39f0e661", @ANYRES16=r4, @ANYBLOB="04002bbd7000fcdbdf250900000008000680040005003400028008000200000000000800020002000000040004001c00038008000100090000000800010005000000080002006fe50000e09695ed3147f44e5475fcf43f031c3bb4cc400c5e0592c36b01d657f9ef072de492f68c44c398b372ed0bc1a6a48ed9a13412a6ddbbeb105362685082468b4e7076083490cbc64b112139c15da2689fbec4c2cb57fb1f1a57a0840b1099db0d8193bb09d42c60039823d528c1d93d128c8f"], 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x4080) [ 774.895912][T22660] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x800, 0x9, 0x8, 0x718}, {0x100, 0x0, 0x3, 0x7fffffff}, {0x6, 0x7f, 0x2, 0x40}, {0x1166, 0x6, 0x7, 0x6}]}) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) [ 775.041739][T21518] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 775.421896][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.438263][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.448445][T21518] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 775.463757][T21518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.474102][T21518] usb 2-1: config 0 descriptor?? [ 776.031734][T21518] usbhid 2-1:0.0: can't add hid device: -71 [ 776.037728][T21518] usbhid: probe of 2-1:0.0 failed with error -71 [ 776.046921][T21518] usb 2-1: USB disconnect, device number 47 04:46:27 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:27 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x800, 0x9, 0x8, 0x718}, {0x100, 0x0, 0x3, 0x7fffffff}, {0x6, 0x7f, 0x2, 0x40}, {0x1166, 0x6, 0x7, 0x6}]}) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x12}) (async) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x800, 0x9, 0x8, 0x718}, {0x100, 0x0, 0x3, 0x7fffffff}, {0x6, 0x7f, 0x2, 0x40}, {0x1166, 0x6, 0x7, 0x6}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) (async) 04:46:27 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000005007e"], 0x20}}, 0x0) 04:46:27 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000074007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:27 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100e0ffff00000000007e"], 0x20}}, 0x0) [ 776.538515][T22679] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 776.548160][T22674] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 776.560303][T22678] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 776.572955][T22681] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:46:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x800, 0x9, 0x8, 0x718}, {0x100, 0x0, 0x3, 0x7fffffff}, {0x6, 0x7f, 0x2, 0x40}, {0x1166, 0x6, 0x7, 0x6}]}) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x12}) (async) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x800, 0x9, 0x8, 0x718}, {0x100, 0x0, 0x3, 0x7fffffff}, {0x6, 0x7f, 0x2, 0x40}, {0x1166, 0x6, 0x7, 0x6}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) (async) [ 776.585398][T22678] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:27 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 04:46:27 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 04:46:27 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) 04:46:27 executing program 5: clock_adjtime(0x2, &(0x7f0000000000)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x9, 0x7ffffffe, 0x5, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd7, 0x4, 0x0, 0x8001, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x20}) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x1, 0x102, 0x10}, 0x18) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x81, 0x0, 0x9, 0x10, @remote, @mcast1, 0x7, 0x10, 0xb2c, 0x8}}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40088c0) r5 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) r6 = dup2(r5, r2) openat$cgroup(r6, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) [ 776.852121][T21518] usb 2-1: new high-speed USB device number 48 using dummy_hcd 04:46:28 executing program 5: clock_adjtime(0x2, &(0x7f0000000000)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x9, 0x7ffffffe, 0x5, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd7, 0x4, 0x0, 0x8001, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x20}) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x1, 0x102, 0x10}, 0x18) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x81, 0x0, 0x9, 0x10, @remote, @mcast1, 0x7, 0x10, 0xb2c, 0x8}}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40088c0) r5 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) (async) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) (async) r6 = dup2(r5, r2) openat$cgroup(r6, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) [ 777.254066][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.269565][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.279849][T21518] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 777.289328][T21518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.307506][T21518] usb 2-1: config 0 descriptor?? [ 777.901776][T21518] usbhid 2-1:0.0: can't add hid device: -71 [ 777.907760][T21518] usbhid: probe of 2-1:0.0 failed with error -71 [ 777.926526][T21518] usb 2-1: USB disconnect, device number 48 04:46:29 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:29 executing program 5: clock_adjtime(0x2, &(0x7f0000000000)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x9, 0x7ffffffe, 0x5, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd7, 0x4, 0x0, 0x8001, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x20}) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x1, 0x102, 0x10}, 0x18) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x81, 0x0, 0x9, 0x10, @remote, @mcast1, 0x7, 0x10, 0xb2c, 0x8}}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40088c0) (async) r5 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) r6 = dup2(r5, r2) openat$cgroup(r6, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) 04:46:29 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:29 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000007a007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:29 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000006007e"], 0x20}}, 0x0) 04:46:29 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100f0ffff00000000007e"], 0x20}}, 0x0) [ 778.383887][T22725] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 778.396986][T22723] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 778.403955][T22726] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 778.407320][T22725] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 778.424530][T22730] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:46:29 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000480), 0x12) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x3eae05}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000500010000000000000000000200000002"], 0x2c}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x2000, 0xfffffffc}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_pid(r6, &(0x7f0000000140), 0x12) [ 778.601563][T22737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=22737 comm=syz-executor.5 [ 778.621320][T22735] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 04:46:29 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000480), 0x12) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x3eae05}) (async) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000500010000000000000000000200000002"], 0x2c}}, 0x0) (async, rerun: 32) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) (rerun: 32) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x2000, 0xfffffffc}}) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 64) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x12}) (async, rerun: 64) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) write$cgroup_pid(r6, &(0x7f0000000140), 0x12) [ 778.711742][T20053] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 778.806149][T22740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=22740 comm=syz-executor.5 [ 778.830849][T22740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=22740 comm=syz-executor.5 [ 778.844701][T22740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=22740 comm=syz-executor.5 [ 778.858346][T22740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=22740 comm=syz-executor.5 04:46:30 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000480), 0x12) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x3eae05}) (async, rerun: 64) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000000)=0x3) (async, rerun: 64) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000500010000000000000000000200000002"], 0x2c}}, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) (async, rerun: 64) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x2000, 0xfffffffc}}) (rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x12}) (async, rerun: 32) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) write$cgroup_pid(r6, &(0x7f0000000140), 0x12) [ 779.101775][T20053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.107141][T22750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=22750 comm=syz-executor.5 [ 779.122079][T20053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.127623][T22749] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 779.143417][T20053] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 779.153279][T20053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.169854][T20053] usb 2-1: config 0 descriptor?? 04:46:30 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000007007e"], 0x20}}, 0x0) 04:46:30 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000ffffff9e007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:30 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) [ 779.275956][T22755] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 779.308072][T22755] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 779.330037][T22758] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 779.340191][T22755] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 779.731828][T20053] usbhid 2-1:0.0: can't add hid device: -71 [ 779.737786][T20053] usbhid: probe of 2-1:0.0 failed with error -71 [ 779.755088][T20053] usb 2-1: USB disconnect, device number 49 04:46:31 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:31 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:31 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="017fffffff00000000007e"], 0x20}}, 0x0) 04:46:31 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) 04:46:31 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000008007e"], 0x20}}, 0x0) 04:46:31 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000fffffff0007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:31 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="019effffff00000000007e"], 0x20}}, 0x0) [ 780.224723][T22771] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 780.250051][T22774] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 780.260659][T22773] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:46:31 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) [ 780.293270][T22773] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:31 executing program 5: mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000002840)=0x2, 0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="2c0000001500010000000000000041ae704636c386451300000200000002"], 0x2c}}, 0x0) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000001c00)=""/161) sendmmsg(r3, &(0x7f0000002780), 0x0, 0x40001) openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 04:46:31 executing program 5: mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000002840)=0x2, 0x6, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="2c0000001500010000000000000041ae704636c386451300000200000002"], 0x2c}}, 0x0) (async) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000001c00)=""/161) (async) sendmmsg(r3, &(0x7f0000002780), 0x0, 0x40001) openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 04:46:31 executing program 5: mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000002840)=0x2, 0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="2c0000001500010000000000000041ae704636c386451300000200000002"], 0x2c}}, 0x0) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000001c00)=""/161) sendmmsg(r3, &(0x7f0000002780), 0x0, 0x40001) openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000002840)=0x2, 0x6, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x12}) (async) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="2c0000001500010000000000000041ae704636c386451300000200000002"], 0x2c}}, 0x0) (async) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000001c00)=""/161) (async) sendmmsg(r3, &(0x7f0000002780), 0x0, 0x40001) (async) openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) 04:46:31 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) [ 780.575521][T20052] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 780.942962][T20052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.953932][T20052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.963852][T20052] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 780.973100][T20052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.992300][T20052] usb 2-1: config 0 descriptor?? [ 781.551773][T20052] usbhid 2-1:0.0: can't add hid device: -71 [ 781.557776][T20052] usbhid: probe of 2-1:0.0 failed with error -71 [ 781.567242][T20052] usb 2-1: USB disconnect, device number 50 04:46:33 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:33 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) 04:46:33 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01f0ffffff00000000007e"], 0x20}}, 0x0) 04:46:33 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000007fffffff007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:33 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:33 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000009007e"], 0x20}}, 0x0) [ 782.033961][T22806] __nla_validate_parse: 1 callbacks suppressed [ 782.033981][T22806] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 782.059791][T22809] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 782.072311][T22810] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:33 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) [ 782.088455][T22809] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 782.099485][T22809] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:33 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000000c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r3, r4, 0x7}, 0x10) 04:46:33 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x12}) (async) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000000c0)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r3, r4, 0x7}, 0x10) 04:46:33 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 64) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000000c0)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x12}) (async) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = dup2(r0, r1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r3, r4, 0x7}, 0x10) 04:46:33 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = signalfd4(r2, &(0x7f00000000c0)={[0x800]}, 0x8, 0x40800) r4 = ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{r3, 0x0, 0x1000000, 0x100000000}, {r3, 0x0, 0x100000000}]}) readv(r4, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/249, 0xf9}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/246, 0xf6}, {&(0x7f00000013c0)=""/180, 0xb4}, {&(0x7f0000001480)}, {&(0x7f00000014c0)=""/46, 0x2e}, {&(0x7f0000001500)=""/233, 0xe9}], 0x7) write$cgroup_pid(r1, &(0x7f0000000100), 0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 04:46:33 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = signalfd4(r2, &(0x7f00000000c0)={[0x800]}, 0x8, 0x40800) r4 = ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{r3, 0x0, 0x1000000, 0x100000000}, {r3, 0x0, 0x100000000}]}) readv(r4, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/249, 0xf9}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/246, 0xf6}, {&(0x7f00000013c0)=""/180, 0xb4}, {&(0x7f0000001480)}, {&(0x7f00000014c0)=""/46, 0x2e}, {&(0x7f0000001500)=""/233, 0xe9}], 0x7) write$cgroup_pid(r1, &(0x7f0000000100), 0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) signalfd4(r2, &(0x7f00000000c0)={[0x800]}, 0x8, 0x40800) (async) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{r3, 0x0, 0x1000000, 0x100000000}, {r3, 0x0, 0x100000000}]}) (async) readv(r4, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/249, 0xf9}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/246, 0xf6}, {&(0x7f00000013c0)=""/180, 0xb4}, {&(0x7f0000001480)}, {&(0x7f00000014c0)=""/46, 0x2e}, {&(0x7f0000001500)=""/233, 0xe9}], 0x7) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x5) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) [ 782.388422][T20052] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 782.791798][T20052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.803075][T20052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.813239][T20052] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 782.822602][T20052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.842494][T20052] usb 2-1: config 0 descriptor?? [ 783.391794][T20052] usbhid 2-1:0.0: can't add hid device: -71 [ 783.397921][T20052] usbhid: probe of 2-1:0.0 failed with error -71 [ 783.410632][T20052] usb 2-1: USB disconnect, device number 51 04:46:34 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:34 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = signalfd4(r2, &(0x7f00000000c0)={[0x800]}, 0x8, 0x40800) r4 = ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{r3, 0x0, 0x1000000, 0x100000000}, {r3, 0x0, 0x100000000}]}) readv(r4, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/249, 0xf9}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/246, 0xf6}, {&(0x7f00000013c0)=""/180, 0xb4}, {&(0x7f0000001480)}, {&(0x7f00000014c0)=""/46, 0x2e}, {&(0x7f0000001500)=""/233, 0xe9}], 0x7) write$cgroup_pid(r1, &(0x7f0000000100), 0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 04:46:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100f0ffffffffffff007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:34 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:34 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000300007e"], 0x20}}, 0x0) 04:46:34 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000e007e"], 0x20}}, 0x0) 04:46:35 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) [ 783.907566][T22844] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 783.909857][T22846] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 783.927712][T22842] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 783.937462][T22845] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 783.945234][T22846] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:35 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 04:46:35 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) 04:46:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 04:46:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x12}) (async) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) [ 784.167093][T20052] usb 2-1: new high-speed USB device number 52 using dummy_hcd 04:46:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x12}) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x12}) (async) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) (async) [ 784.531768][T20052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.543403][T20052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.553379][T20052] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 784.562569][T20052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.573219][T20052] usb 2-1: config 0 descriptor?? [ 785.131759][T20052] usbhid 2-1:0.0: can't add hid device: -71 [ 785.137722][T20052] usbhid: probe of 2-1:0.0 failed with error -71 [ 785.146216][T20052] usb 2-1: USB disconnect, device number 52 04:46:36 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x10800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) 04:46:36 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010002000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:36 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000f007e"], 0x20}}, 0x0) 04:46:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:36 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000034000007e"], 0x20}}, 0x0) [ 785.615274][T22885] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 785.625010][T22884] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 785.644821][T22888] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:46:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x10800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r0) (async) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) [ 785.662049][T22887] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 785.670802][T22888] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x10800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x10800, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) fcntl$dupfd(r2, 0x406, r0) (async) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) (async) 04:46:36 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) read$usbmon(r0, &(0x7f00000000c0)=""/158, 0x9e) 04:46:36 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/time\x00') 04:46:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x16}}, 0x14}}, 0x0) 04:46:37 executing program 5: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000725000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@dstype3], 0x1) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) [ 785.962000][T21518] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 786.411792][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.423026][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.442882][T21518] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 786.455521][T21518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.468270][T21518] usb 2-1: config 0 descriptor?? [ 787.051796][T21518] usbhid 2-1:0.0: can't add hid device: -71 [ 787.057791][T21518] usbhid: probe of 2-1:0.0 failed with error -71 [ 787.071471][T21518] usb 2-1: USB disconnect, device number 53 04:46:38 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:38 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000000d00), 0x2c40, 0x0) 04:46:38 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010003000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:38 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000001f007e"], 0x20}}, 0x0) 04:46:38 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000ffffe000007e"], 0x20}}, 0x0) 04:46:38 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 787.539411][ T25] audit: type=1400 audit(1644468398.644:423): avc: denied { append } for pid=22912 comm="syz-executor.5" name="autofs" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 787.547322][T22921] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 787.566804][T22916] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:38 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000080)={0x0, "e5fec76660963826fca0830166df9191e9621719dea1ba6ca3a132fdba72c55d"}) [ 787.594369][T22917] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 787.607323][T22918] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 787.611191][T22921] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:38 executing program 5: ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, 0x0) 04:46:38 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000002500)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:46:38 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0045878, 0x0) 04:46:38 executing program 5: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x3903000000000000, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x80, 0x9c, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x8b}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x1c, &(0x7f0000000500)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "5203210fe27b4a24fe00"}]}}) [ 787.871841][ T3676] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 788.123355][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 788.241824][ T3676] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.260535][ T3676] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.270473][ T3676] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 788.279802][ T3676] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.299341][ T3676] usb 2-1: config 0 descriptor?? 04:46:39 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010004000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 788.373028][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 788.444932][T22937] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 788.455498][T22937] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 788.465667][T22937] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 788.571888][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 788.581543][ T31] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 788.752020][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 788.761231][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.769806][ T31] usb 6-1: Product: syz [ 788.774277][ T31] usb 6-1: Manufacturer: syz [ 788.778960][ T31] usb 6-1: SerialNumber: syz [ 788.841805][ T3676] usbhid 2-1:0.0: can't add hid device: -71 [ 788.847951][ T3676] usbhid: probe of 2-1:0.0 failed with error -71 [ 788.861169][ T3676] usb 2-1: USB disconnect, device number 54 [ 789.117178][ T31] usb 6-1: USB disconnect, device number 4 04:46:40 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:40 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:40 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01fffffffffffff000007e"], 0x20}}, 0x0) 04:46:40 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000020007e"], 0x20}}, 0x0) 04:46:40 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010005000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:40 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000001007e"], 0x20}}, 0x0) [ 789.353910][T22943] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 789.354199][T22945] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 789.373643][T22946] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 789.393959][T22943] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 789.415553][T22950] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:40 executing program 5: sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x45200000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 789.656901][ T31] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 789.698200][T22953] geneve1 speed is unknown, defaulting to 1000 04:46:40 executing program 5: syz_open_dev$hiddev(&(0x7f00000006c0), 0x0, 0x0) 04:46:40 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000026c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:46:40 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x1008000, &(0x7f0000000700)=ANY=[@ANYBLOB="6e725f696e6f6465733d302c6d6f64653d30303030303030303030303011", @ANYBLOB="2c6f626a5f726f6c653d2c736d61636b66736861743d1de75c7e2c5b5d2f2c646566636f6e746578743d73"]) [ 789.869100][T22960] tmpfs: Bad value for 'mode' 04:46:41 executing program 5: socketpair(0x29, 0x0, 0x0, &(0x7f0000000280)) 04:46:41 executing program 5: statx(0xffffffffffffff9c, 0x0, 0x0, 0x8, 0x0) syz_mount_image$efs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ufs(&(0x7f0000000840), &(0x7f0000000880)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001900), 0x0, &(0x7f0000001940)) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) [ 790.021944][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.038664][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.059553][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 790.070693][T22964] ufs: ufs was compiled with read-only support, can't be mounted as read-write [ 790.087627][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.108609][ T31] usb 2-1: config 0 descriptor?? [ 790.671768][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 790.677778][ T31] usbhid: probe of 2-1:0.0 failed with error -71 [ 790.697301][ T31] usb 2-1: USB disconnect, device number 55 04:46:42 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:42 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010006000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:42 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000000)={0x7, 0x401}) syz_clone(0x40100000, &(0x7f0000000040)="539e7058a37ae62a8f30cc8748aa3b6edf1377a1f7434458044802e252fef115428256a193571ba862a4981336", 0x2d, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)="ec58295f35ab64c94bb8f310f33f55637c6833785fc5f68b0df25218b41661221598b68cab") r1 = syz_open_procfs(0x0, 0x0) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000180)='net/stat\x00') ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0x5452, 0x0) 04:46:42 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000002007e"], 0x20}}, 0x0) 04:46:42 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000003f007e"], 0x20}}, 0x0) 04:46:42 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 791.182961][T22970] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 791.212757][T22972] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 791.226704][T22975] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 791.237233][T22970] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 791.267962][T22971] geneve1 speed is unknown, defaulting to 1000 [ 791.277606][T22970] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:42 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, &(0x7f0000000140)) 04:46:42 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) [ 791.515284][T19936] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 791.538111][ T25] audit: type=1400 audit(1644468402.644:424): avc: denied { create } for pid=22982 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 04:46:42 executing program 5: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000002300), 0x0, &(0x7f0000002380)) [ 791.641758][ T25] audit: type=1400 audit(1644468402.694:425): avc: denied { ioctl } for pid=22982 comm="syz-executor.5" path="socket:[95113]" dev="sockfs" ino=95113 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 791.664591][T22985] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock 04:46:42 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x6, 0x0, &(0x7f0000000400)) [ 791.798544][ T25] audit: type=1400 audit(1644468402.904:426): avc: denied { getopt } for pid=22986 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 04:46:42 executing program 5: r0 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x50}) 04:46:43 executing program 5: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x5312000, &(0x7f0000000440)) [ 791.969812][T19936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.981106][T19936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.048066][T19936] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 792.089175][T19936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.106617][T19936] usb 2-1: config 0 descriptor?? [ 792.671852][T19936] usbhid 2-1:0.0: can't add hid device: -71 [ 792.677998][T19936] usbhid: probe of 2-1:0.0 failed with error -71 [ 792.686632][T19936] usb 2-1: USB disconnect, device number 56 04:46:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:44 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:44 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010007000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:44 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000048007e"], 0x20}}, 0x0) 04:46:44 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000003007e"], 0x20}}, 0x0) 04:46:44 executing program 5: fstat(0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) getuid() syz_clone(0x81020000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 793.152978][T22999] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 793.162940][T22998] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 793.177639][T23000] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 793.189097][T23001] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:46:44 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x7, 0x0, &(0x7f0000000400)) [ 793.208524][T23001] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:44 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) 04:46:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 04:46:44 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f0000000400)) [ 793.491685][T19936] usb 2-1: new high-speed USB device number 57 using dummy_hcd 04:46:44 executing program 5: socketpair(0x29, 0x5, 0x0, &(0x7f0000000080)) 04:46:44 executing program 5: socketpair(0x29, 0x5, 0x7d3, &(0x7f0000000080)) [ 793.873739][T19936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.894960][T19936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.919827][T19936] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 793.938467][T19936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.954352][T19936] usb 2-1: config 0 descriptor?? [ 794.521791][T19936] usbhid 2-1:0.0: can't add hid device: -71 [ 794.527837][T19936] usbhid: probe of 2-1:0.0 failed with error -71 [ 794.547539][T19936] usb 2-1: USB disconnect, device number 57 04:46:46 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/4125, 0x101d, 0x0, 0x0}, &(0x7f0000000280)=0x40) 04:46:46 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:46 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000004007e"], 0x20}}, 0x0) 04:46:46 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000001148007e"], 0x20}}, 0x0) 04:46:46 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 795.002323][T23021] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 795.015318][T23024] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:46:46 executing program 5: openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/block/ram2', 0x4000, 0x0) 04:46:46 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x2, 0x0, &(0x7f0000000400)) [ 795.033516][ T25] audit: type=1400 audit(1644468406.144:427): avc: denied { map } for pid=23018 comm="syz-executor.5" path="socket:[94104]" dev="sockfs" ino=94104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 795.047207][T23024] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 795.073293][T23025] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 795.083867][T23026] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:46:46 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x60, 0x0, 0x0) 04:46:46 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f0000000400)) 04:46:46 executing program 5: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000002300)=[{&(0x7f0000000280)="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", 0x1ff, 0x1}], 0x0, &(0x7f0000002380)) [ 795.311667][T20052] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 795.341414][T23041] loop5: detected capacity change from 0 to 1 [ 795.356405][T23041] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock 04:46:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x894c, 0x0) [ 795.681797][T20052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.692975][T20052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.703087][T20052] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 795.712423][T20052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.723688][T20052] usb 2-1: config 0 descriptor?? [ 796.461955][T20052] usbhid 2-1:0.0: can't add hid device: -71 [ 796.467978][T20052] usbhid: probe of 2-1:0.0 failed with error -71 [ 796.477786][T20052] usb 2-1: USB disconnect, device number 58 04:46:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:48 executing program 5: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$damon_monitor_on(r0, &(0x7f0000000040), 0x3) 04:46:48 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010009000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:48 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000004c007e"], 0x20}}, 0x0) 04:46:48 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000005007e"], 0x20}}, 0x0) 04:46:48 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 796.968751][T23046] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 796.974529][T23051] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 796.978579][T23050] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 796.989228][T23053] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:46:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0xb, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) 04:46:48 executing program 5: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x40, &(0x7f0000000200), 0x0, &(0x7f0000000340)={0x637}, 0x0, 0x0) [ 797.019432][T23046] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 797.291743][ T3680] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 797.701908][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.713271][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.727359][ T3680] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 797.737060][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.748609][ T3680] usb 2-1: config 0 descriptor?? 04:46:48 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:48 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000060007e"], 0x20}}, 0x0) 04:46:48 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000e000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:48 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000006007e"], 0x20}}, 0x0) [ 797.874823][T23064] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 797.890659][T23067] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 797.900357][T23064] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 798.522354][ T3680] usbhid 2-1:0.0: can't add hid device: -71 [ 798.528369][ T3680] usbhid: probe of 2-1:0.0 failed with error -71 [ 798.539542][ T3680] usb 2-1: USB disconnect, device number 59 04:46:50 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:50 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0xf08, 0x453, 0x0, 0x0, 0x0, "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", ["", "", ""]}, 0xf08}, 0x1, 0x0, 0x0, 0x20004004}, 0x48000) 04:46:50 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000068007e"], 0x20}}, 0x0) 04:46:50 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010048000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:50 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000007007e"], 0x20}}, 0x0) 04:46:50 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000ff", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 799.014907][T23076] __nla_validate_parse: 2 callbacks suppressed [ 799.014928][T23076] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 799.033952][T23071] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 799.052066][T23079] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 799.065352][ T25] audit: type=1107 audit(1644468410.174:428): pid=23073 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=' +DP3u扔+GGs;p{L08:oEBSEd[QI%ΰ?xΈ%F\MȉYvO7C BN2&D4F&xL 01NԑGS{T "]U)es\3 [ 799.065352][ T25] ,A U&xr%\l椨$𙑂Ũoi=(k\OslM, [ 799.065352][ T25] a'P5*b' 04:46:50 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000ff", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000000)) [ 799.107807][T23071] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 799.124558][T23071] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:50 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:50 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0xec4, 0x453, 0x0, 0x0, 0x0, "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"}, 0xf}}, 0x0) 04:46:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x24, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) 04:46:50 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x8941, 0x0) [ 799.391790][T19936] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 799.782082][T19936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.793134][T19936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.803540][T19936] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 799.813034][T19936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.841431][T19936] usb 2-1: config 0 descriptor?? [ 800.591742][T19936] usbhid 2-1:0.0: can't add hid device: -71 [ 800.597710][T19936] usbhid: probe of 2-1:0.0 failed with error -71 [ 800.613862][T19936] usb 2-1: USB disconnect, device number 60 04:46:52 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:52 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000ff", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:52 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x8}) 04:46:52 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000006c007e"], 0x20}}, 0x0) 04:46:52 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01004c000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:52 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000008007e"], 0x20}}, 0x0) [ 801.085610][T23100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 801.103004][T23104] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 801.118936][T23101] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:52 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r0, 0x0, &(0x7f0000000000)=0xffffffffffffff6f) 04:46:52 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000ff", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:52 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0}, 0x1, 0x0, 0x7}, 0x0) [ 801.129609][T23104] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 801.154830][T23104] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:52 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000ff", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:52 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000ff", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x15, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) [ 801.402001][T19936] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 801.771764][T19936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.782872][T19936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.792981][T19936] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 801.802324][T19936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.821896][T19936] usb 2-1: config 0 descriptor?? [ 802.303913][T19936] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 802.312552][T19936] arvo 0003:1E7D:30D4.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 802.521798][T19936] arvo 0003:1E7D:30D4.0008: couldn't init struct arvo_device [ 802.530320][T19936] arvo 0003:1E7D:30D4.0008: couldn't install keyboard [ 802.539383][T19936] arvo: probe of 0003:1E7D:30D4.0008 failed with error -71 [ 802.549305][T19936] usb 2-1: USB disconnect, device number 61 04:46:54 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:54 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x40086602, &(0x7f0000000100)={0xa}) 04:46:54 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:54 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000074007e"], 0x20}}, 0x0) 04:46:54 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010060000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:54 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000009007e"], 0x20}}, 0x0) [ 803.047224][T23124] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 803.052583][T23128] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 803.072474][T23126] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:54 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xbebe6d4efe007d3f, 0xffffffffffffffff, 0x0) [ 803.087530][ T25] audit: type=1400 audit(1644468414.194:429): avc: denied { setattr } for pid=23120 comm="syz-executor.5" path="/dev/video36" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 803.111880][T23127] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 803.127290][T23128] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x11, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) 04:46:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x8915, &(0x7f0000000280)={{0x2, 0x0, @multicast1}, {0x0, @local}, 0x0, {0x2, 0x0, @empty}, 'veth1_to_hsr\x00'}) 04:46:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000280)={{0x2, 0x0, @multicast1}, {0x0, @local}, 0x28, {0x2, 0x0, @empty}, 'veth1_to_hsr\x00'}) 04:46:54 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0205647, &(0x7f00000000c0)={0x1000000, @sliced}) 04:46:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0xc, 0x0, 0x0) [ 803.388567][T19936] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 803.762015][T19936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.773194][T19936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.783365][T19936] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 803.793042][T19936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.807964][T19936] usb 2-1: config 0 descriptor?? [ 804.296979][T19936] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 804.304853][T19936] arvo 0003:1E7D:30D4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 804.511770][T19936] arvo 0003:1E7D:30D4.0009: couldn't init struct arvo_device [ 804.519198][T19936] arvo 0003:1E7D:30D4.0009: couldn't install keyboard [ 804.531439][T19936] arvo: probe of 0003:1E7D:30D4.0009 failed with error -71 [ 804.547871][T19936] usb 2-1: USB disconnect, device number 62 04:46:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "14ee"}, 0x0}) 04:46:56 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000a007e"], 0x20}}, 0x0) 04:46:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4}]}}}}}) 04:46:56 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:56 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010068000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:56 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000007a007e"], 0x20}}, 0x0) [ 805.068905][T23153] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 805.069785][T23156] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 805.090925][T23155] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 805.103676][T23156] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:56 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x8954, &(0x7f0000000280)={{0x2, 0x0, @multicast1}, {0x0, @local}, 0x0, {0x2, 0x0, @empty}, 'veth1_to_hsr\x00'}) [ 805.111979][T23154] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:56 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x5452, &(0x7f0000000280)={{0x2, 0x0, @multicast1}, {0x0, @local}, 0x0, {0x2, 0x0, @empty}, 'veth1_to_hsr\x00'}) 04:46:56 executing program 5: r0 = socket(0x11, 0x2, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x107, 0x3, 0x0, 0x0) 04:46:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0xb, 0x0, 0x0) [ 805.246698][ T25] audit: type=1400 audit(1644468416.354:430): avc: denied { getopt } for pid=23164 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 04:46:56 executing program 5: getitimer(0xd70e30951872c061, 0x0) 04:46:56 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x890b, &(0x7f0000000280)={{0x2, 0x0, @multicast1}, {0x0, @local}, 0x0, {0x2, 0x0, @empty}, 'veth1_to_hsr\x00'}) [ 805.411900][ T3680] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 805.771830][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.783023][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.793163][ T3680] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 805.802636][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.820327][ T3680] usb 2-1: config 0 descriptor?? [ 806.303822][ T3680] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 806.314853][ T3680] arvo 0003:1E7D:30D4.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 806.521904][ T3680] arvo 0003:1E7D:30D4.000A: couldn't init struct arvo_device [ 806.530885][ T3680] arvo 0003:1E7D:30D4.000A: couldn't install keyboard [ 806.538871][ T3680] arvo: probe of 0003:1E7D:30D4.000A failed with error -71 [ 806.548523][ T3680] usb 2-1: USB disconnect, device number 63 04:46:58 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:46:58 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01006c000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:46:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x16, 0x0, 0x0) 04:46:58 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000ffffff9e007e"], 0x20}}, 0x0) 04:46:58 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000e007e"], 0x20}}, 0x0) 04:46:58 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000007f", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x34) [ 807.074804][T23177] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 807.080798][T23180] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 807.100602][T23182] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:46:58 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000097", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 807.122594][T23182] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:46:58 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x2, 0x1}) [ 807.166871][T23182] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:46:58 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000009e", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:46:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x89a0, &(0x7f0000000280)={{0x2, 0x0, @multicast1}, {0x6, @local}, 0x28, {0x2, 0x0, @empty}, 'veth1_to_hsr\x00'}) 04:46:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x89a0, &(0x7f0000000280)={{0x2, 0x0, @multicast1}, {0x6, @local}, 0x28, {0x2, 0x0, @empty}, 'veth1_to_hsr\x00'}) [ 807.401813][ T3680] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 807.802456][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.813515][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.823432][ T3680] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 807.832605][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.845214][ T3680] usb 2-1: config 0 descriptor?? [ 808.283874][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.290227][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.343102][ T3680] arvo 0003:1E7D:30D4.000B: unknown main item tag 0x0 [ 808.354686][ T3680] arvo 0003:1E7D:30D4.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 808.561745][ T3680] arvo 0003:1E7D:30D4.000B: couldn't init struct arvo_device [ 808.569177][ T3680] arvo 0003:1E7D:30D4.000B: couldn't install keyboard [ 808.578157][ T3680] arvo: probe of 0003:1E7D:30D4.000B failed with error -71 [ 808.597401][ T3680] usb 2-1: USB disconnect, device number 64 04:47:00 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:47:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x89a0, &(0x7f0000000280)={{0x2, 0x0, @multicast1}, {0x6, @local}, 0x28, {0x2, 0x0, @empty}, 'veth1_to_hsr\x00'}) 04:47:00 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000e4", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:00 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000f007e"], 0x20}}, 0x0) 04:47:00 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010074000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:00 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000003c0007e"], 0x20}}, 0x0) [ 809.112101][T23203] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 809.135602][T23205] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:47:00 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000f0", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x89a0, &(0x7f0000000280)={{0x2, 0x0, @multicast1}, {0x6, @local}, 0x28, {0x2, 0x0, @empty}, 'veth1_to_hsr\x00'}) [ 809.153476][T23203] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 809.156080][T23207] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 809.190905][T23203] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:00 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000f6", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:00 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000540), 0x0, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000580)={0x2, "dc61acb48465582516b1f72a904ea6375b716fec2e87689fc0108a28519ebb6c"}) 04:47:00 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000fd", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:00 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 809.431703][ T3680] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 809.841983][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.858054][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.869142][ T3680] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 809.887028][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.899801][ T3680] usb 2-1: config 0 descriptor?? [ 810.393907][ T3680] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 810.401783][ T3680] arvo 0003:1E7D:30D4.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 810.611779][ T3680] arvo 0003:1E7D:30D4.000C: couldn't init struct arvo_device [ 810.620642][ T3680] arvo 0003:1E7D:30D4.000C: couldn't install keyboard [ 810.632963][ T3680] arvo: probe of 0003:1E7D:30D4.000C failed with error -71 [ 810.652166][ T3680] usb 2-1: USB disconnect, device number 65 04:47:02 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:47:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:47:02 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000fffffff0007e"], 0x20}}, 0x0) 04:47:02 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000ff", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:02 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000001f007e"], 0x20}}, 0x0) 04:47:02 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01007a000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 811.169364][T23228] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 811.179132][T23229] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 811.190270][T23230] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:47:02 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0xc0189436, &(0x7f0000000280)={{0x2, 0x0, @multicast1}, {0x0, @local}, 0x0, {0x2, 0x0, @empty}, 'veth1_to_hsr\x00'}) [ 811.211543][T23228] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 811.226493][T23228] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, 0x0) 04:47:02 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x401c5820, &(0x7f0000000100)={0x14}) 04:47:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x890d, 0x0) 04:47:02 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x0, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "1d"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6}, {0x6, 0x24, 0x1a, 0x0, 0x36}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xe1}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x81}, 0x25, &(0x7f0000000100)={0x5, 0xf, 0x25, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "ea144409d7a1afc57ec644adfe4db6b9"}]}, 0x3, [{0x0, 0x0}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x0, 0x0}]}) [ 811.486655][T20052] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 811.761902][T19934] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 811.883004][T20052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.894539][T20052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.905194][T20052] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 811.914573][T20052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.927776][T20052] usb 2-1: config 0 descriptor?? [ 812.241847][T19934] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.252824][T19934] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.265656][T19934] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 812.275619][T19934] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 812.285662][T19934] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 812.295917][T19934] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 812.424046][T20052] arvo 0003:1E7D:30D4.000D: unknown main item tag 0x0 [ 812.437757][T20052] arvo 0003:1E7D:30D4.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 812.551781][T19934] usb 6-1: string descriptor 0 read error: -22 [ 812.558011][T19934] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 812.567949][T19934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.631808][T20052] arvo 0003:1E7D:30D4.000D: couldn't init struct arvo_device [ 812.639372][T20052] arvo 0003:1E7D:30D4.000D: couldn't install keyboard [ 812.648082][T20052] arvo: probe of 0003:1E7D:30D4.000D failed with error -71 [ 812.670026][T20052] usb 2-1: USB disconnect, device number 66 [ 812.851879][T19934] cdc_ncm 6-1:1.0: bind() failure [ 812.859599][T19934] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 812.866534][T19934] cdc_ncm 6-1:1.1: bind() failure [ 812.882609][T19934] usb 6-1: USB disconnect, device number 5 04:47:04 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:47:04 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100f0000000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:04 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:04 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000007fffffff007e"], 0x20}}, 0x0) 04:47:04 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000020007e"], 0x20}}, 0x0) [ 813.182545][T23252] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 813.183631][T23249] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 813.194845][T23253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 813.214387][T23249] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 813.214601][T23255] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:47:04 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 813.385660][ T25] audit: type=1400 audit(1644468424.494:431): avc: denied { bind } for pid=23258 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 04:47:04 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 813.418361][ T25] audit: type=1400 audit(1644468424.494:432): avc: denied { connect } for pid=23258 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 04:47:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x6, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) 04:47:04 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, {0x0, @link_local}, 0x0, {0x2, 0x0, @private}}) [ 813.511965][T19934] usb 2-1: new high-speed USB device number 67 using dummy_hcd 04:47:04 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0}, 0x1, 0x0, 0x700000000000000}, 0x0) 04:47:04 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0205647, &(0x7f00000000c0)={0xf010000, @sliced}) 04:47:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}) [ 813.891824][T19934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.904033][T19934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.914506][T19934] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 813.923965][T19934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.942484][T19934] usb 2-1: config 0 descriptor?? [ 814.423281][T19934] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 814.439370][T19934] arvo 0003:1E7D:30D4.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 814.641830][T19934] arvo 0003:1E7D:30D4.000E: couldn't init struct arvo_device [ 814.649259][T19934] arvo 0003:1E7D:30D4.000E: couldn't install keyboard [ 814.657330][T19934] arvo: probe of 0003:1E7D:30D4.000E failed with error -71 [ 814.666987][T19934] usb 2-1: USB disconnect, device number 67 04:47:06 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:47:06 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000ffffffff007e"], 0x20}}, 0x0) 04:47:06 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x8941, &(0x7f0000000280)={{0x2, 0x0, @multicast1}, {0x0, @local}, 0x0, {0x2, 0x0, @empty}, 'veth1_to_hsr\x00'}) 04:47:06 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000003f007e"], 0x20}}, 0x0) 04:47:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000ff", @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:06 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000030000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x21, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) [ 815.182865][T23276] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 815.184354][T23280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 815.193035][T23274] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:47:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:06 executing program 5: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x40, &(0x7f0000000600), &(0x7f0000000640)={0x9}, &(0x7f0000000680)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0x0) [ 815.251261][T23276] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 815.286035][T23276] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x12, 0x0, 0x0) 04:47:06 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x1a2177}, 0x0) 04:47:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x23, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) [ 815.531805][ T3680] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 815.934023][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.946738][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.956939][ T3680] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 815.966313][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.979672][ T3680] usb 2-1: config 0 descriptor?? [ 816.473976][ T3680] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 816.482995][ T3680] arvo 0003:1E7D:30D4.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 816.691841][ T3680] arvo 0003:1E7D:30D4.000F: couldn't init struct arvo_device [ 816.699289][ T3680] arvo 0003:1E7D:30D4.000F: couldn't install keyboard [ 816.707559][ T3680] arvo: probe of 0003:1E7D:30D4.000F failed with error -71 [ 816.727766][ T3680] usb 2-1: USB disconnect, device number 68 04:47:08 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:47:08 executing program 5: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x40, &(0x7f0000000600), &(0x7f0000000640)={0x9}, &(0x7f0000000680)={0xc10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0x0) 04:47:08 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100f0ffffffffffff007e"], 0x20}}, 0x0) 04:47:08 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000048007e"], 0x20}}, 0x0) 04:47:08 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:08 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010033040000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 817.220796][T23303] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 817.247616][T23305] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 817.253802][T23307] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:47:08 executing program 5: getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f00000000c0)) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) [ 817.272496][T23308] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 817.292946][T23308] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:08 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x2, &(0x7f0000000200)=@string={0x2}}]}) [ 817.571764][ T3676] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 817.681685][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 817.972031][ T3676] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.983110][ T3676] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.995230][ T3676] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 818.004563][ T3676] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.015335][ T3676] usb 2-1: config 0 descriptor?? 04:47:09 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000050000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:09 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000004c007e"], 0x20}}, 0x0) 04:47:09 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010002000000000000007e"], 0x20}}, 0x0) 04:47:09 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 818.089831][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.107269][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.128217][T23319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 818.137354][T23321] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 818.148396][ T31] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 818.161538][T23322] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 818.162373][ T31] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 818.181385][T23319] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 818.182150][ T31] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 818.201271][T23319] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 818.213043][ T31] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 818.402083][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 818.416058][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.426821][ T31] usb 6-1: Product: syz [ 818.431131][ T31] usb 6-1: SerialNumber: syz [ 818.514843][ T3676] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 818.533587][ T3676] arvo 0003:1E7D:30D4.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 818.711851][ T31] cdc_ncm 6-1:1.0: bind() failure [ 818.727250][ T31] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 818.734392][ T3676] arvo 0003:1E7D:30D4.0010: couldn't init struct arvo_device [ 818.741986][ T3676] arvo 0003:1E7D:30D4.0010: couldn't install keyboard [ 818.748909][ T31] cdc_ncm 6-1:1.1: bind() failure [ 818.755410][ T3676] arvo: probe of 0003:1E7D:30D4.0010 failed with error -71 [ 818.774293][ T31] usb 6-1: USB disconnect, device number 6 [ 818.791115][ T3676] usb 2-1: USB disconnect, device number 69 04:47:10 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0}) 04:47:10 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000060000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:10 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:10 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010003000000000000007e"], 0x20}}, 0x0) 04:47:10 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000060007e"], 0x20}}, 0x0) 04:47:10 executing program 5: socket(0x10, 0x3, 0x8000) [ 819.278364][T23333] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 819.281832][T23334] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 819.307248][T23330] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:47:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000200)={0x17bf, 0x995}) [ 819.337653][T23335] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 819.348067][T23333] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x11, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) 04:47:10 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0xc0405602, &(0x7f0000000100)={0x0, {0x8}}) 04:47:10 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x895d, 0x0) 04:47:10 executing program 5: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x40, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)={0xc10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={[0x6]}, 0x8}) [ 819.631997][T19934] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 820.042084][T19934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.053220][T19934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.064049][T19934] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 820.073485][T19934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:47:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010004000000000000007e"], 0x20}}, 0x0) [ 820.094621][T19934] usb 2-1: config 0 descriptor?? [ 820.168104][T23350] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 820.179305][T23350] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 820.190339][T23350] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 820.643981][T19934] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 820.652208][T19934] arvo 0003:1E7D:30D4.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 820.861869][T19934] arvo 0003:1E7D:30D4.0011: couldn't init struct arvo_device [ 820.869270][T19934] arvo 0003:1E7D:30D4.0011: couldn't install keyboard [ 820.879981][T19934] arvo: probe of 0003:1E7D:30D4.0011 failed with error -5 [ 821.069002][T19936] usb 2-1: USB disconnect, device number 70 04:47:12 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0}) 04:47:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:12 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000070000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:12 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000001067007e"], 0x20}}, 0x0) 04:47:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x29, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) 04:47:12 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010005000000000000007e"], 0x20}}, 0x0) 04:47:12 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0x2}) [ 821.632672][T23358] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 821.662124][T23358] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:12 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$pptp(r0, 0x0, 0x0) 04:47:12 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x890b, 0x0) 04:47:12 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x1) read$eventfd(r0, 0x0, 0x0) 04:47:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}}}}) [ 821.831555][ T25] audit: type=1400 audit(1644468432.934:433): avc: denied { write } for pid=23370 comm="syz-executor.5" name="mice" dev="devtmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 04:47:13 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000280)={{0x4, 0x0, @multicast1}, {0x0, @local}, 0x0, {0x2, 0x0, @empty}, 'veth1_to_hsr\x00'}) [ 821.931844][ T31] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 822.331969][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.343111][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.355432][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 822.365252][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.376033][ T31] usb 2-1: config 0 descriptor?? [ 822.843743][ T31] arvo 0003:1E7D:30D4.0012: unknown main item tag 0x0 [ 822.851508][ T31] arvo 0003:1E7D:30D4.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 823.052651][ T31] arvo 0003:1E7D:30D4.0012: couldn't init struct arvo_device [ 823.060080][ T31] arvo 0003:1E7D:30D4.0012: couldn't install keyboard [ 823.068342][ T31] arvo: probe of 0003:1E7D:30D4.0012 failed with error -5 [ 823.257132][ T31] usb 2-1: USB disconnect, device number 71 04:47:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0}) 04:47:14 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:14 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0xc0405602, &(0x7f0000000100)={0x0, {0x2}}) 04:47:14 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000068007e"], 0x20}}, 0x0) 04:47:14 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010006000000000000007e"], 0x20}}, 0x0) 04:47:14 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000090000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 823.814436][T23377] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 823.816432][T23380] __nla_validate_parse: 3 callbacks suppressed [ 823.816450][T23380] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 823.841250][T23385] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:47:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x13, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) 04:47:15 executing program 5: openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000300)={0x4, 0x5, {0x60d, @struct={0x0, 0x8000}, 0x0, 0xff8, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x8c, 0x0, [0x8001, 0x2, 0x0, 0x0, 0x6, 0x6a27e22a]}, {0x54a, @struct={0x7f, 0x9}, 0x0, 0x6, 0x3, 0x4, 0xfa5, 0xfffffffffffffc07, 0x1, @struct={0x7fff}, 0x80, 0x8, [0xfffffffffffffffe, 0x15, 0xfffffffffffff847, 0x101, 0xffffffff, 0xfffffffffffffff9]}, {0xf085, @struct={0x1, 0x81}, 0x0, 0x401, 0x2, 0x0, 0x0, 0x20, 0x9c, @struct={0x9}, 0xfe7b, 0x7, [0x100000001, 0x80000000, 0x9, 0x3d7, 0xfffffffffffffff9, 0x7]}, {0x3000000000000000, 0x2, 0x9}}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002340)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000025c0)={0x2020}, 0x2020) [ 823.857136][T23384] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 823.861128][T23377] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x4, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) 04:47:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x4, 0x0, 0x0) 04:47:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x13, 0x0, 0x0) 04:47:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x35ef, &(0x7f0000000080)={0x0, 0xf199}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 824.141966][T20052] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 824.551882][T20052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.563167][T20052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.573412][T20052] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 824.582799][T20052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.594311][T20052] usb 2-1: config 0 descriptor?? [ 825.073864][T20052] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 825.081842][T20052] arvo 0003:1E7D:30D4.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 825.291988][T20052] arvo 0003:1E7D:30D4.0013: couldn't init struct arvo_device [ 825.299487][T20052] arvo 0003:1E7D:30D4.0013: couldn't install keyboard [ 825.307590][T20052] arvo: probe of 0003:1E7D:30D4.0013 failed with error -5 [ 825.506134][T20052] usb 2-1: USB disconnect, device number 72 04:47:17 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x1, "14"}, 0x0}) 04:47:17 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010007000000000000007e"], 0x20}}, 0x0) 04:47:17 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x7, &(0x7f0000000100)=@framed={{}, [@map_val, @map_val]}, &(0x7f0000001240)='GPL\x00', 0x5, 0xd0, &(0x7f0000000000)=""/208, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:47:17 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000e0000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:17 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:17 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000006c007e"], 0x20}}, 0x0) [ 826.047363][T23409] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 826.059530][T23408] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 826.077861][T23407] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:47:17 executing program 5: syz_io_uring_setup(0x5df3, &(0x7f0000000000)={0x0, 0x13f6, 0x8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 826.094849][T23412] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 826.096543][T23409] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:17 executing program 5: r0 = fsopen(&(0x7f0000000040)='cpuset\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='\x00', 0x0, r0) 04:47:17 executing program 5: r0 = syz_io_uring_setup(0x5df3, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0xb, 0x0, 0x0) 04:47:17 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x11, 0x5d00, &(0x7f0000001200)=@raw=[@call], &(0x7f0000001240)='GPL\x00', 0x5, 0xd7, &(0x7f0000001280)=""/215, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:47:17 executing program 5: connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0xfffff000}}, './file0\x00'}) accept$unix(r1, &(0x7f0000000480), &(0x7f0000000500)=0x6e) r2 = eventfd2(0x0, 0x800) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmmsg$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000cc0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000005c0)) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000cc0)) r5 = syz_open_dev$swradio(&(0x7f0000000540), 0x1, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r6 = syz_clone(0x40840280, &(0x7f0000000140)="187935e0db058487b9580164978d5e2822e6d879cfdcab024df8408fab69e7754a67b9fb0da46e02f507bbfe3881aa294b44f3d4e95e539485421e5dbf39c782ad1914f79bbd557833d4743be4748fdcb151263d3e1399c9a68956f9184855887acab87bb1b8a4b0a2dfbb2c82a7a7b46ddf6d803694caaa4fe287a85c5606c0ac77", 0x82, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="d3683f3922294ed1d145a73bb78f3fb806c2ee3e2ae5e996c23beed5e213adf367b838ede8a9dda0b14c4801663cac11611c7ab1c96689237548d4911cc3efbf090db46f44eec4ffbcb6c1eb0a959ce90bac9dde0c007286dee3052b592aa4add12181ed40e93480742cac69d423b896766058e64ebf3ef18717201f") r7 = syz_clone(0x800000, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000180)) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r7, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)="4b930b9350062a9d372fd29593c6af83502d25bb3a27e9b11bf79d51e42c7fc7732067d328", 0x25}], 0x1, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r2]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0xc0}, 0x20000004) [ 826.354441][T21518] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 826.425314][T23424] geneve1 speed is unknown, defaulting to 1000 04:47:17 executing program 5: unshare(0x2000400) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0xa, &(0x7f0000000100)=0x2, 0x4) [ 826.579872][ T25] audit: type=1400 audit(1644468437.684:434): avc: denied { setopt } for pid=23427 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 826.772058][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.783271][T21518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.793374][T21518] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 826.806140][T21518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.817988][T21518] usb 2-1: config 0 descriptor?? [ 827.323836][T21518] arvo 0003:1E7D:30D4.0014: unknown main item tag 0x0 [ 827.332889][T21518] arvo 0003:1E7D:30D4.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 827.531816][T21518] arvo 0003:1E7D:30D4.0014: couldn't init struct arvo_device [ 827.539261][T21518] arvo 0003:1E7D:30D4.0014: couldn't install keyboard [ 827.547320][T21518] arvo: probe of 0003:1E7D:30D4.0014 failed with error -5 [ 827.751817][T19936] usb 2-1: USB disconnect, device number 73 04:47:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x1, "14"}, 0x0}) 04:47:19 executing program 5: connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0xfffff000}}, './file0\x00'}) accept$unix(r1, &(0x7f0000000480), &(0x7f0000000500)=0x6e) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmmsg$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000cc0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000cc0)) r4 = syz_open_dev$swradio(&(0x7f0000000540), 0x1, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = syz_clone(0x40840280, &(0x7f0000000140)="187935e0db058487b9580164978d5e2822e6d879cfdcab024df8408fab69e7754a67b9fb0da46e02f507bbfe3881aa294b44f3d4e95e539485421e5dbf39c782ad1914f79bbd557833d4743be4748fdcb151263d3e1399c9a68956f9184855887aca", 0x62, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)="4b930b9350062a9d372fd29593c6af83502d25bb3a27e9b11bf79d51e42c7fc7732067d328", 0x25}], 0x1, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0xc0}, 0x20000004) 04:47:19 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:19 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010053130000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:19 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000074007e"], 0x20}}, 0x0) 04:47:19 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008000000000000007e"], 0x20}}, 0x0) [ 828.340620][T23438] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 828.342006][T23437] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 828.354313][T23436] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 828.374449][T23434] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 828.395562][T23436] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 828.411442][T23435] geneve1 speed is unknown, defaulting to 1000 04:47:19 executing program 5: syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_clone(0x40840280, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="d3683f3922294ed1d145a73bb78f3fb806c2ee3e2ae5e996c23beed5e213adf367b8") [ 828.563674][T23445] geneve1 speed is unknown, defaulting to 1000 04:47:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002180)="1e", 0x1) 04:47:19 executing program 5: connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0xfffff000}}, './file0\x00'}) accept$unix(r1, &(0x7f0000000480), &(0x7f0000000500)=0x6e) r2 = eventfd2(0x0, 0x800) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmmsg$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000cc0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000005c0)) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000cc0)) r5 = syz_open_dev$swradio(&(0x7f0000000540), 0x1, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r6 = syz_clone(0x40840280, &(0x7f0000000140)="187935e0db058487b9580164978d5e2822e6d879cfdcab024df8408fab69e7754a67b9fb0da46e02f507bbfe3881aa294b44f3d4e95e539485421e5dbf39c782ad1914f79bbd557833d4743be4748fdcb151263d3e1399c9a68956f9184855887acab87bb1b8a4b0a2dfbb2c82a7a7b46ddf", 0x72, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="d3683f3922294ed1d145a73bb78f3fb806c2ee3e2ae5e996c23beed5e213adf367b838ede8a9dda0b14c4801663cac11611c7ab1c96689237548d4911cc3efbf090db46f44eec4ffbcb6c1eb0a959ce90bac9dde0c007286dee3052b592aa4add12181ed40e93480742cac69d423b896766058e64ebf3ef18717201f") r7 = syz_clone(0x800000, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000180)) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r7, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)="4b930b9350062a9d372fd29593c6af83502d25bb3a27e9b11bf79d51e42c7fc7732067d328", 0x25}], 0x1, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r2]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0xc0}, 0x20000004) [ 828.688387][T19936] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 828.789673][T23450] geneve1 speed is unknown, defaulting to 1000 04:47:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000007ec0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c, 0x0}}], 0x1, 0x900) 04:47:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000059c0)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2, 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)="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", 0xfc}, {&(0x7f0000000380)="563add02896169", 0x7}], 0x2}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)="92c9e76e0bb86a400c87441aafe6409976512bdc84f54b749f9fa41e966958a51a98833f451edcbe7e8b032b17a9f364156444154ed9f62aeacb30c5da7f9f999f3d7f88eed589e96a04d4982bc8fcf263f6320818e48fb7c70dcf60b1dea5b62b75386ac5bb7619ba4eeb7f241362dceb12c6e3c210e2e780f3e2fd7aca9e5c1b99cafc0b291ea73571b62b5796165bec40ce1cb07bcc5a912dd561ec674c1bb86549aede26387a1130a8a333e694d255c51af6edd7ccd88ce75130b0a20310953ab275e52e092404857437dbb675134a8fac8688279073cfd98555738574434f24cd54569be7b440704457c7e599e5f8ed4979c8fb91c32fb9a128", 0xfc}, {&(0x7f0000000440)="35adff5307ea75161cf43eae3d05324b4d85bddb591ca62cb21dc4687ec9b8df9f5b511ebdcef6b32c9ec0c67db21a145d6e70ef8245402b8a242d920447b6d2ef2994fe795c5fc5b16257", 0x4b}], 0x2}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000c40)="27d8242f9aeb74c8d53b40e91a897381fb8c1aaeb9dba58081effe1aad90631109136389e3a6cdd40cab5abb6dc3ea7daf6ab793195423bff1e47b9563d1be5b1b94fb6882c87f547ee78fddd1dc9ca23d85585f1fe9d69bc9419ef559bcf64b8efa67fac780b5f4e60b0b0f37e4cc7c3ef77b8d46cb51dc8566dbcc01b1428da9aefa5e439fa3c1864f7ae4e7ae6c100e8f4e2a56b5c7fbbdbe36629c6ecd24f35bad6f2e43cb1b251f4bf253d8589e3d29b902d50d61dfc0f05d352bb836de4775d8029278df4f27511f106ccc06d0", 0xd0}, {&(0x7f0000000b40)="88d24e53d8c3b4458ea364325c5ab0577426e042c2c80dade91a016270f257e69ddf34eb3e0e50c97277d94e3f20db0240b6f8ab559a4eb23ccd43f32aa78c", 0x3f}, {&(0x7f0000000b80)="1f6d10b526fcc3aeecdf7ed1f768dff406d1a270dcc730b428412404d28e13791c7c5696227a4d67aa9d5fe5151076d4d819b50b3beb3a6ba0f48faef436129cce94cb26f2b821917e17fb15ecbae4e9f9b332dca377108f5e775896cec5a18657f4109b", 0x64}, {&(0x7f0000000d40)="cad5811a2ca546daa2107c027f926318a81ffc42c6fb4d9ea34b0d3bd4ad37fa683e49603085af89da524b7f48d6f4670182935f924c413bbe4326cc86f71ad83395adf44ed833c6bb2ea8e765b6eb5b9232f480b56618878969c817afb257084008652464d5a18e113d964df3f9a1ed0c4f19143707f446352ce0f7527d31879006bb378660d2cf153db21bfd7860ca0e62cf7c02ef9cc81ac8ff8ed6ed96cbd396b9455840de27d590da916b2921", 0xaf}, {&(0x7f0000000e40)="10c84a1aa8f03c3dba1838adfa865b70c3d2a0dd0e4fd96b5481d906fd4b54711b67d223d0fe10976a0766dcd3aa050012882f9a73bf8f7a3422dabd25a0f370816bf957a948542c00bbf6e04e72b5533085e339602ec5cf6de6fb27c6ea667b17d7c164cf66229f8b22648a08d704e086e689e4ce73b1ed14c0e6cb4e", 0x7d}, {&(0x7f0000000ec0)="2159fa4609bc73380cd7920651bdff12ebebc9667a910d0b2d4d4182ed0cd4c09e2fafc45c262d2b4f6729973fb7ad1973b4b300f744d839540c295c3d5cd9730d70e477228a014705179e6f855fe9a5f8613f63a7dd771d730c5bae8b83444016f2daf12f40f91726dff5fe0297da679e8f97c9b07629689d45b1b7c435a26a7a3b55fb2201cc1e631bc6333166c1077067aee8f9dcdc7a4c0ae2aa24d3d49b919ed5e09307fa2f05a23416d3403f7e", 0xb0}], 0x6}}], 0x3, 0x4008800) 04:47:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=[{0x10, 0x0, 0x8}], 0x10}}], 0x1, 0x0) [ 829.129065][T19936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.141854][T19936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.171791][T19936] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 829.211186][T19936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.244769][T19936] usb 2-1: config 0 descriptor?? [ 829.733995][T19936] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 829.750044][T19936] arvo 0003:1E7D:30D4.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 829.951867][T19936] arvo 0003:1E7D:30D4.0015: couldn't init struct arvo_device [ 829.961805][T19936] arvo 0003:1E7D:30D4.0015: couldn't install keyboard [ 829.981176][T19936] arvo: probe of 0003:1E7D:30D4.0015 failed with error -5 [ 830.164283][T19934] usb 2-1: USB disconnect, device number 74 04:47:21 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002100)={0x24, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0022b7"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x1, "14"}, 0x0}) 04:47:21 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100001f0000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:21 executing program 5: r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 04:47:21 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:21 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010009000000000000007e"], 0x20}}, 0x0) 04:47:21 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000007a007e"], 0x20}}, 0x0) 04:47:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="240000000000000001"], 0x28}}], 0x2, 0x0) [ 830.732914][T23468] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 830.734966][T23470] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 830.746630][T23467] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 830.763421][T23464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=23464 comm=syz-executor.5 [ 830.800829][T23463] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 830.810880][T23463] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:21 executing program 5: r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ff"], 0x39}}, 0x0) 04:47:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, 0x0, 0x0, &(0x7f0000002c40)=ANY=[], 0x1c0}}], 0x1, 0x0) 04:47:22 executing program 5: syz_clone3(&(0x7f0000000000)={0x125010000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:47:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r0, &(0x7f0000007ec0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) [ 831.041747][T19936] usb 2-1: new high-speed USB device number 75 using dummy_hcd 04:47:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x0, @mcast2, 0xffffffbd}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="24000000000000002900000032000000fc0200"/29, @ANYRES32], 0x28}}], 0x2, 0x0) [ 831.431907][T19936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.450011][T19936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.464099][T19936] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 831.479156][T19936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.497884][T19936] usb 2-1: config 0 descriptor?? [ 832.003995][T19936] arvo 0003:1E7D:30D4.0016: unknown main item tag 0x0 [ 832.019293][T19936] arvo 0003:1E7D:30D4.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 832.241877][T19936] arvo 0003:1E7D:30D4.0016: couldn't init struct arvo_device [ 832.249372][T19936] arvo 0003:1E7D:30D4.0016: couldn't install keyboard [ 832.257436][T19936] arvo: probe of 0003:1E7D:30D4.0016 failed with error -5 [ 832.455471][ T31] usb 2-1: USB disconnect, device number 75 04:47:24 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x20}}, 0x0) 04:47:24 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:24 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000ffffff9e007e"], 0x20}}, 0x0) 04:47:24 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000e000000000000007e"], 0x20}}, 0x0) [ 833.012954][T23490] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 833.026140][T23493] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 833.033851][T23494] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 833.052958][T23492] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 04:47:24 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendto$x25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:47:24 executing program 5: setuid(0xee00) msgget(0x2, 0x280) 04:47:24 executing program 1: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 833.067775][T23494] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 833.070424][T23491] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:47:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x9, &(0x7f0000000b40)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x2, 0x0) 04:47:24 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="600000000000000029000000370000005c080000000000000001001f414789d2c7cc53dc01c402f1176ee99b9d7083e79dca1971557838de502288e952dd14cbc4ecd788d1f3cf3c23eb1a7d71f1b15ac97fa359004dceca219c831f31b3000014000000000000002900000008000000040000000000000014000000000000002900000034000000f7ffffff00000000880000000000000029000000390000005c0e02dd0000000000000000000000000000000000000001fe880000000000000000000000000101fc010000000000000000000000000000fc01000000000000000000000000000000000000000000000000ffffac1414aa20010000000000000000000000000000fe880000000000000000000000000101180000000000000029000000390000000400004000000000780000000000000029000000370000002c0b000000000000040140c910fc01000000000000000000000000000001080000000000000000000100091b5498af01bc2311b55467f55ab4953fa30e89a2cb1de6a06cfe29ae0401d2c20400000008c910ff02000000000000000000000000000100000000000024"], 0x1d0}}], 0x2, 0x0) 04:47:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}, [""]}, 0x68}}, 0x0) 04:47:24 executing program 5: clock_adjtime(0x0, &(0x7f00000000c0)={0xe5}) 04:47:24 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010004330000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), 0x4) 04:47:25 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:25 executing program 5: r0 = socket(0x18, 0x0, 0x0) bind$llc(r0, 0x0, 0x0) 04:47:25 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000f000000000000007e"], 0x20}}, 0x0) 04:47:25 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000fffffff0007e"], 0x20}}, 0x0) 04:47:25 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@loopback, r1}, 0x14) 04:47:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0x6, 0x4, 0x3}, 0x48) [ 833.941226][T23516] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 833.959137][T23517] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:47:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0xbb8, &(0x7f0000000b40)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x2, 0x0) [ 833.984467][T23516] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 834.007824][T23523] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 834.011513][T23516] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:25 executing program 1: syz_io_uring_setup(0x82003, &(0x7f0000000140)={0x0, 0x0, 0x11}, &(0x7f0000cfb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 04:47:25 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r0, &(0x7f0000007ec0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c, 0x0}}], 0x1, 0x0) 04:47:25 executing program 5: syz_open_dev$loop(&(0x7f0000000000), 0x100, 0x4002) 04:47:25 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100003f0000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:25 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 04:47:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) write$UHID_DESTROY(r0, 0x0, 0x0) 04:47:25 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010048000000000000007e"], 0x20}}, 0x0) 04:47:25 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000003f2007e"], 0x20}}, 0x0) 04:47:25 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:26 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0xb, 0x5, 0x1, 0x800, 0x5, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) [ 834.848369][ T25] audit: type=1400 audit(1644468445.954:435): avc: denied { read } for pid=23537 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 04:47:26 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x1, &(0x7f00000000c0)=@raw=[@call], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 834.901472][T23545] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 834.914806][T23545] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:26 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000d80)={0x0, 0xf00, &(0x7f0000000d40)={&(0x7f0000000340)={0x14}, 0x14}, 0x25}, 0x0) 04:47:26 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0xb, 0x5, 0x1, 0x800, 0x5, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 04:47:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000007ec0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x19}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="f9f5dd94d631b243e200662fd3a844098ec2", 0x12}, {&(0x7f0000000fc0)="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", 0x54b}], 0x2}}], 0x1, 0x0) 04:47:26 executing program 1: msgsnd(0x0, &(0x7f0000001880)=ANY=[], 0x1008, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/68) 04:47:26 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000480000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:26 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000051c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x30}, 0x1c, 0x0}}], 0x1, 0x0) 04:47:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000740)=@in={0x2, 0x4e22, @loopback}, 0x80, 0x0}}, {{&(0x7f0000000000)=@can, 0x80, 0x0, 0x0, 0x0, 0x97ffffff}}], 0x2, 0x0) 04:47:26 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01004c000000000000007e"], 0x20}}, 0x0) 04:47:26 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000007fffffff007e"], 0x20}}, 0x0) 04:47:26 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0xb, 0x5, 0x1c, 0x800, 0x5, 0x1}, 0x48) 04:47:26 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x810) [ 835.759302][T23565] __nla_validate_parse: 3 callbacks suppressed [ 835.759320][T23565] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:47:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=[{0x12}], 0x10}}], 0x1, 0x0) [ 835.823120][T23569] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 835.831197][T23565] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 835.851348][T23572] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 835.860600][T23565] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:27 executing program 1: syz_clone(0xf0862480, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000100)}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x341b0a5a5da472de, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000b00)={&(0x7f0000000880)="768093e95c60bef42b5518df05145049af5d2764a1bef80112dd", &(0x7f0000000900)=""/235, &(0x7f0000000a00), 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) 04:47:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, 0x0}}], 0x2, 0x0) 04:47:27 executing program 5: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x1e, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 836.018613][T23580] geneve1 speed is unknown, defaulting to 1000 04:47:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit_2292={{0x14, 0x29, 0x34, 0x8000}}], 0x18}}], 0x2, 0x0) 04:47:27 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100004c0000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@ethernet={0x0, @local}, 0x80, 0x0}}], 0x1, 0x0) 04:47:27 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010060000000000000007e"], 0x20}}, 0x0) 04:47:27 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000ffffffff007e"], 0x20}}, 0x0) 04:47:27 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)='V', 0x1}], 0x1}}], 0x1, 0x4008850) 04:47:27 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x1, &(0x7f00000000c0)=@raw=[@call], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 836.685151][T23595] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 836.695526][T23592] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 836.702908][T23596] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:47:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0) [ 836.743821][T23592] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 836.769986][T23592] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:27 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 04:47:28 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit_2292={{0x14, 0x29, 0x32}}], 0x18}}], 0x2, 0x0) 04:47:28 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60fbba97004d8880fe800001000000000000000000000600ff02000000000000000000000000000101004e20004d90"], 0x0) readv(r0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/246, 0xf6}], 0x1) 04:47:28 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x100, 0x2480) [ 837.087615][ T25] audit: type=1400 audit(1644468448.194:436): avc: denied { append } for pid=23612 comm="syz-executor.1" name="loop6" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 04:47:28 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010013530000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:28 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="24000000000000002900000004000000", @ANYRES32], 0x28}}], 0x2, 0x0) 04:47:28 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100f0ffffffffffff007e"], 0x20}}, 0x0) 04:47:28 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010068000000000000007e"], 0x20}}, 0x0) 04:47:28 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:28 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0) [ 837.577595][T23616] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 837.620904][T23622] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 837.633069][T23621] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 837.645968][T23623] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 837.667687][T23621] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:28 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x4e24, @rand_addr=0x9}, 0x4, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)='batadv_slave_1\x00', 0x29, 0x8000, 0x6}) [ 837.691774][ T25] audit: type=1400 audit(1644468448.804:437): avc: denied { write } for pid=23624 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 04:47:28 executing program 1: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0xfd64) 04:47:28 executing program 1: signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) 04:47:28 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x0, 0x0) 04:47:29 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) 04:47:29 executing program 5: r0 = socket$inet_icmp(0x2, 0x2, 0x1) openat$cgroup_ro(r0, &(0x7f0000000f00)='blkio.bfq.time_recursive\x00', 0x0, 0x0) 04:47:29 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000600000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:29 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000ec0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 04:47:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) 04:47:29 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01006c000000000000007e"], 0x20}}, 0x0) 04:47:29 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010002000000000000007e"], 0x20}}, 0x0) 04:47:29 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 838.459095][T23641] loop5: detected capacity change from 0 to 262160 04:47:29 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8936, &(0x7f0000000580)) [ 838.509712][T23641] FAT-fs (loop5): bogus number of FAT sectors [ 838.560761][T23646] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 838.563129][T23641] FAT-fs (loop5): Can't find a valid FAT filesystem [ 838.579704][T23648] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 838.602525][T23646] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:29 executing program 1: bpf$LINK_GET_NEXT_ID(0x14, 0x0, 0x0) 04:47:29 executing program 5: bpf$LINK_GET_NEXT_ID(0x18, 0x0, 0x0) 04:47:29 executing program 1: mq_unlink(&(0x7f00000000c0)='3;\xce\x80p\x9d\xb7\x8e\xbe\xda\x96\x83X\x89\xb6\x1a\xc4\xeb\xf8o\xcei\x85\a\xa9\b\xab\xe6\xad\xea$\xac\xaeb\xb9\xf2S\x8a\x9e]\xf8q\x11') 04:47:29 executing program 5: setfsuid(0xee01) openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) 04:47:29 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8905, &(0x7f0000000580)) 04:47:30 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000680000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:30 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8940, 0x0) 04:47:30 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0xc0045878, 0x0) 04:47:30 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010074000000000000007e"], 0x20}}, 0x0) 04:47:30 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010003000000000000007e"], 0x20}}, 0x0) 04:47:30 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:30 executing program 1: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x46}, 0x0) bpf$LINK_GET_FD_BY_ID(0xf, &(0x7f0000000000), 0x5d) 04:47:30 executing program 5: r0 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 04:47:30 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={0xffffffffffffffff, 0x38, 0x0, 0x0, 0x0}, 0x20) [ 839.486064][T23672] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 839.518918][T23672] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:30 executing program 1: r0 = openat$null(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x10) [ 839.550079][ T25] audit: type=1400 audit(1644468450.654:438): avc: denied { map } for pid=23679 comm="syz-executor.5" path="/dev/nvram" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 04:47:30 executing program 5: io_setup(0x5, &(0x7f0000000000)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x2, &(0x7f0000002700)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x25}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 04:47:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xfffffe59, 0x0, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}]}, 0xc8}}, 0x0) 04:47:31 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100006c0000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:31 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f00000027c0)='ns/uts\x00') 04:47:31 executing program 5: r0 = epoll_create(0x101) epoll_wait(r0, &(0x7f00000005c0)=[{}], 0x1, 0x4) 04:47:31 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01007a000000000000007e"], 0x20}}, 0x0) 04:47:31 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010004000000000000007e"], 0x20}}, 0x0) 04:47:31 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 840.360547][T23691] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 840.370979][T23691] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:31 executing program 1: bpf$LINK_GET_NEXT_ID(0x3, 0x0, 0x0) 04:47:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000080)={0xfffffffffffffffe, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 04:47:31 executing program 1: syz_io_uring_setup(0x60df, &(0x7f0000000140), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x7c26, &(0x7f00000005c0), &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000640), &(0x7f0000000680)) 04:47:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000600)={&(0x7f0000000180), 0xc, &(0x7f00000005c0)={&(0x7f0000000240)={0x14, 0x5, 0x2, 0x801}, 0x14}}, 0x0) 04:47:31 executing program 1: openat$null(0xffffff9c, &(0x7f0000000040), 0xc8001, 0x0) 04:47:31 executing program 1: io_uring_setup(0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x700}) 04:47:32 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000740000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:32 executing program 5: r0 = mq_open(&(0x7f00005a1ffb)='eth0\xd2', 0x0, 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) 04:47:32 executing program 1: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) r1 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) 04:47:32 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010005000000000000007e"], 0x20}}, 0x0) 04:47:32 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100f0000000000000007e"], 0x20}}, 0x0) 04:47:32 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:32 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0x14, 0x0, 0x0) [ 841.280490][T23721] __nla_validate_parse: 8 callbacks suppressed [ 841.280510][T23721] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 841.291404][T23722] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 841.310571][T23724] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:47:32 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x89b0, &(0x7f0000000580)) 04:47:32 executing program 1: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x46}, 0x0) bpf$LINK_GET_FD_BY_ID(0x7, &(0x7f0000000000), 0x5d) [ 841.335218][T23727] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 841.349404][T23724] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:32 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8946, &(0x7f0000000580)) 04:47:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x81, 0x4) 04:47:32 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x80401) write$FUSE_WRITE(r0, &(0x7f00000020c0)={0x18}, 0x18) 04:47:33 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100007a0000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:33 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x894c, 0x0) 04:47:33 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8918, &(0x7f0000000580)) 04:47:33 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000030000000000007e"], 0x20}}, 0x0) 04:47:33 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:33 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010006000000000000007e"], 0x20}}, 0x0) 04:47:33 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0x4, 0x0, 0x0) 04:47:33 executing program 5: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x81}, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x7, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_ID={0x8}]}, 0x33fe0}}, 0x0) [ 842.204706][T23748] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 842.207221][T23747] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 842.223473][T23749] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 842.246052][T23748] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:33 executing program 1: bpf$LINK_GET_NEXT_ID(0x11, 0x0, 0x0) 04:47:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x801}, 0x14}}, 0x0) [ 842.278459][T23751] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:47:33 executing program 1: bpf$LINK_GET_NEXT_ID(0x13, 0x0, 0x0) 04:47:33 executing program 1: socketpair(0x1, 0x0, 0x1000, &(0x7f00000003c0)) 04:47:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000f00000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000000600)=@newtfilter={0xec4, 0x2c, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_cgroup={{0xb}, {0xe94, 0x2, [@TCA_CGROUP_EMATCHES={0xe90, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x78, 0x2, 0x0, 0x0, {{0x3678, 0x0, 0x738}, "9668804c9f3580224416742eae73449aca4ab4421021b72bc5497164b9f49b7d585d206a04d515c7ba1f875085d6e34e98fb2696fb046b6ea9c2446144880e2e7092e5d462db0aee14c7ce40da3fd94c083aec3d9c2b963d73bedf30066369f850dd5cfeafcb4ac793"}}]}, @TCA_EMATCH_TREE_LIST={0x1c8, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x0, 0x1, 0x5}, {0x401, 0x83, 0x9, 0x4, 0x5, 0x1, 0x2}}}, @TCF_EM_U32={0x1c, 0x0, 0x0, 0x0, {{}, {0x0, 0x0, 0x0, 0x10001}}}, @TCF_EM_NBYTE={0x18, 0x0, 0x0, 0x0, {{}, {0x0, 0x5, 0x0, "caa003217c"}}}, @TCF_EM_META={0xb0, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR="3fa97cb10650", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="ca2fcffb56b5813a5c20", @TCF_META_TYPE_VAR="750ff1f6730e", @TCF_META_TYPE_VAR="edf558dd5380ef", @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='Q', @TCF_META_TYPE_VAR="3db65a", @TCF_META_TYPE_VAR="d489bcb6", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='d', @TCF_META_TYPE_VAR="b728c8", @TCF_META_TYPE_VAR="fd8f7b7a6d", @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x2d, 0x3, [@TCF_META_TYPE_VAR="99991d", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="ebb1c104ac7fc645c2", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="9fc6d4ac0999d2fef0", @TCF_META_TYPE_VAR="26ff", @TCF_META_TYPE_VAR="da8dfe13c8fb", @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_VAR="c87d4181ac6d12", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="18c5f63020cb"]}]}}, @TCF_EM_NBYTE={0x14, 0x0, 0x0, 0x0, {{}, {0x0, 0x1, 0x0, "99"}}}, @TCF_EM_U32={0x1c}, @TCF_EM_CONTAINER={0x98, 0x0, 0x0, 0x0, {{0x101}, "0d9ac67ed08f754fdc4972f8da58674893cba8f64b079c84eed737e90d58fd790942e8ef9d4dbbd26e7605d4a5f686546739ce2227c55b73eae9dfef0bc4d339fc855da762d286e3f44cffdea6b676cbbcb60925c9adfa41b2455deb5b0bf395521a65b1f0d88f0d1ef0c1bd62e38d642c54c3e0bb6033dea4a38cbd9b4ec636af2d61d6635bd655bc"}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1f4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x104, 0x0, 0x0, 0x0, {{0x5, 0x0, 0x4}, "ba5ab6744b0b30287d3613c01c230bbc2ad1977f8ad1ca98f722f6c0d7fb9716f7d92a5b7af6f44cc29c741443896376fe5fa8965efc6c731637afcc6ca64b693e7dc1c6a64d1133713160c01bf1ffbdd0e616c87dcab550ef743b394640f58c3a1a9faf1f90e7c761afbbded2dd314eefb580308e1f7c9d5c17bb3f4ff62b3a95b3d3e99cc2a372d678897103a64274c51e2595918882d7abc0f4f1dc8ba6338de5f04ce65a37de4cf44bfe129077af6e019a67fad5d510ffa7e25edff709a40fd2144967d410c49739c72a01fec761377816ee586f6081a5f64dbf9fec9049de76384fb6009d3807dfef8ede5d587dbb2020b5a80a"}}, @TCF_EM_NBYTE={0x1c, 0x0, 0x0, 0x0, {{}, {0x0, 0x9, 0x0, "a3c7e9ee79bbd9667e"}}}, @TCF_EM_U32={0x1c}, @TCF_EM_CONTAINER={0x54, 0x0, 0x0, 0x0, {{}, "0676c4675f0f4e4e3025bb3bc4d00ad41ea8019f5fdef03576fc681ce1b531c2b4aabc8cfeddcc8d5eca454ef978b1630a563b4b6737951a8cdb11833d091e8c29e16778f9"}}, @TCF_EM_IPT={0x60, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_DATA={0x49, 0x5, "dd7295ed7e1a48ec4f061d1914fd380422cc9705afcdffa6f44eb59fb1e4108034bcf590e02caeabb16382dafc95f719d3231bfb2cef6c8513ce4877d62ada71b7cef58f38"}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}]}, @TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c}, @TCF_EM_CONTAINER={0xb0, 0x0, 0x0, 0x0, {{}, "7ae523c63399da93c6a0905167865ac2a31f31c3082d3c475bbbdd07de725c7e57e978aaab1bb087866c7fe8613165165e3d99ccd5f9d490f7ece08f205007f63d5b8e53041857826aa9122425473b09371eace209a5c6d32d7d59c570225d0433bd5d4a9e47b27e4b5bea07109a283bd89477325c62dae33a8a502dce107326e5baf102b1bfdc76f8442177b373411bba6cdb34426c9357df7de982bcb855de3e"}}, @TCF_EM_CONTAINER={0x24, 0x0, 0x0, 0x0, {{}, "1950a3fdfabceeb718691d1cc6aab5ce20539622fd"}}]}, @TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x78, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_VAR="396b66095cc5f0", @TCF_META_TYPE_VAR="4777de85019dac", @TCF_META_TYPE_VAR="7c3afebd1bbc2b121dcd", @TCF_META_TYPE_VAR="13"]}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x31, 0x3, [@TCF_META_TYPE_VAR="06b19acf10926390", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b9095fba7484", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="891f799209affa", @TCF_META_TYPE_VAR="749a78438f14fc3efbea", @TCF_META_TYPE_VAR="7218"]}, @TCA_EM_META_HDR={0xc}]}}]}, @TCA_EMATCH_TREE_LIST={0x8d4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3}, @TCF_EM_CONTAINER={0x8c0, 0x0, 0x0, 0x0, {{}, "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"}}]}]}]}}]}, 0xec4}}, 0x0) 04:47:34 executing program 1: openat$tun(0xffffff9c, &(0x7f0000001b00), 0x46400, 0x0) 04:47:34 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100c0030000000000007e"], 0x20}}, 0x0) 04:47:34 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:34 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010007000000000000007e"], 0x20}}, 0x0) 04:47:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 04:47:34 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x7c26, &(0x7f00000005c0)={0x0, 0x0, 0x1}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000640), &(0x7f0000000680)) [ 843.117913][T23771] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 843.125497][T23772] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:47:34 executing program 1: io_setup(0x5, &(0x7f0000000000)) io_setup(0xc98, &(0x7f00000000c0)) [ 843.163522][T23774] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 843.181918][T23772] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 843.199041][T23777] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:47:34 executing program 5: bpf$LINK_GET_NEXT_ID(0x23, 0x0, 0x0) 04:47:34 executing program 5: r0 = openat$null(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000400)) 04:47:34 executing program 1: sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0}, 0x0) io_setup(0x0, &(0x7f0000000000)) 04:47:35 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000300000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f00000003c0)) 04:47:35 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0x23, 0x0, 0x0) 04:47:35 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000050000000000007e"], 0x20}}, 0x0) 04:47:35 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:35 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008000000000000007e"], 0x20}}, 0x0) 04:47:35 executing program 1: r0 = openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000140)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '!\xf2-\x97/&[%\'/@'}}, 0x2c) 04:47:35 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="69705f76746930000000000000020010", @ANYRES32=0x0, @ANYBLOB="0000110000000000000000004500001400000000002f"]}) [ 844.043403][T23797] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 844.084212][T23796] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 844.100119][T23796] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:35 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) 04:47:35 executing program 5: syz_io_uring_setup(0x1845, &(0x7f0000000000), &(0x7f0000a8d000/0x2000)=nil, &(0x7f0000cd5000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3458, &(0x7f0000000740), &(0x7f0000a84000/0x2000)=nil, &(0x7f0000d1b000/0x3000)=nil, 0x0, 0x0) 04:47:35 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, &(0x7f0000000580)) 04:47:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000221000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1) syz_io_uring_setup(0x552, &(0x7f0000000340)={0x0, 0x4302}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000040)) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, "bd4fee8a9844b901b93a1be3b2338c158fc2fb"}) 04:47:36 executing program 5: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000040)={0x18}, 0x18) 04:47:36 executing program 1: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x46}, 0x0) bpf$LINK_GET_FD_BY_ID(0x12, &(0x7f0000000000), 0x5d) 04:47:36 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100ffffe000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:36 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000060000000000007e"], 0x20}}, 0x0) 04:47:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:36 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010009000000000000007e"], 0x20}}, 0x0) 04:47:36 executing program 5: bpf$LINK_GET_NEXT_ID(0x6, 0x0, 0x700) 04:47:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x3, 0x201}, 0x14}}, 0x0) 04:47:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x2}, 0x0) [ 844.988354][T23824] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 845.027083][T23824] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:36 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5}]}) 04:47:36 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x402c5828, 0x0) 04:47:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x6ca, &(0x7f0000000000)=0x1, 0x4) 04:47:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}, 0xd}, 0x0) 04:47:36 executing program 5: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x46}, 0x0) bpf$LINK_GET_FD_BY_ID(0x23, &(0x7f0000000000), 0x5d) 04:47:36 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fffff000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x29, 0x31, 0x0, 0x0) 04:47:36 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x7c26, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000640), &(0x7f0000000680)) 04:47:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:36 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000070000000000007e"], 0x20}}, 0x0) 04:47:36 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000a000000000000007e"], 0x20}}, 0x0) 04:47:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x6bd, &(0x7f0000000000), 0x4) 04:47:37 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x7c26, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000640), &(0x7f0000000680)) [ 845.903531][T23851] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:47:37 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0x15, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) [ 845.943990][T23851] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:37 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x7c26, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000640), &(0x7f0000000680)) 04:47:37 executing program 1: getrusage(0x2f26dd522b8f8942, 0x0) 04:47:37 executing program 1: syz_emit_ethernet(0x26, &(0x7f0000000280)=ANY=[@ANYBLOB="0000200000000180c200000091"], 0x0) 04:47:37 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000001000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:37 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x7c26, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000640), &(0x7f0000000680)) 04:47:37 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0x8, 0x0, 0x0) 04:47:37 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:37 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000e000000000000007e"], 0x20}}, 0x0) 04:47:37 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000090000000000007e"], 0x20}}, 0x0) 04:47:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) [ 846.808803][T23876] __nla_validate_parse: 8 callbacks suppressed [ 846.808821][T23876] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 846.844390][T23880] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:47:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x6cb, &(0x7f0000000000), 0x4) 04:47:38 executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000000)={@remote, @link_local, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @multicast1, @link_local, @private}}}}, 0x0) 04:47:38 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8942, &(0x7f0000000580)) [ 846.853721][T23878] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 846.853755][T23878] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 846.888716][T23883] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:47:38 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x890c, 0x0) 04:47:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 04:47:38 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000002000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:38 executing program 1: r0 = socket(0x2, 0x3, 0x0) getsockname(r0, 0x0, &(0x7f0000000080)) 04:47:38 executing program 5: r0 = socket$inet6(0x18, 0x3, 0x0) shutdown(r0, 0x0) 04:47:38 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:38 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000e0000000000007e"], 0x20}}, 0x0) 04:47:38 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000f000000000000007e"], 0x20}}, 0x0) 04:47:38 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@abs, 0x8, 0x0, 0xffffff03, 0x0, 0xf8}, 0x0) [ 847.681934][ T25] audit: type=1400 audit(1644468458.794:439): avc: denied { shutdown } for pid=23895 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 847.765448][T23903] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 847.775536][T23904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:47:38 executing program 5: syz_open_dev$usbfs(&(0x7f0000000400), 0x200, 0x0) [ 847.817188][T23907] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 847.817842][T23908] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 847.851926][T23908] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:39 executing program 1: syz_open_dev$vcsa(&(0x7f00000005c0), 0x1, 0x2) 04:47:39 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1848, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) 04:47:39 executing program 1: r0 = socket(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 04:47:39 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @local, @val, {@ipv6}}, 0x0) 04:47:39 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000000180)={@broadcast, @local, @val, {@ipv6}}, 0x0) 04:47:39 executing program 1: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 04:47:39 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000003000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:39 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:39 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000f0000000000007e"], 0x20}}, 0x0) 04:47:39 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010048000000000000007e"], 0x20}}, 0x0) 04:47:39 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) connect(r0, &(0x7f0000000000)=@in6={0x18, 0x3}, 0xc) 04:47:39 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000140)={0x0, 0xd1e0}, 0x8) [ 848.672270][T23930] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 848.683281][T23933] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:47:39 executing program 5: r0 = socket(0x1, 0x2, 0x0) sendmsg(r0, &(0x7f0000002580)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f0000000300)=[{0x50, 0x1, 0x0, "67e7cf42289d6f7f8c5ec31368b2d185dd69eea712a25b8dbc421ece85d6be2346b1e48481acddff5850202e7814a995d529ddab3e45756e99"}, {0x1c0, 0x0, 0x0, "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"}], 0x210}, 0x0) 04:47:39 executing program 1: syz_emit_ethernet(0x23, &(0x7f0000000100)={@random="a99e988dfda3", @broadcast, @val, {@ipv4}}, 0x0) [ 848.715024][T23933] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 848.729267][T23933] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 848.743985][T23936] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:47:39 executing program 1: readv(0xffffffffffffffff, &(0x7f0000001680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xfffffffe) 04:47:39 executing program 5: mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 04:47:40 executing program 1: syz_emit_ethernet(0xf2, &(0x7f0000000100)={@random="a99e988dfda3", @broadcast, @val, {@ipv4}}, 0x0) 04:47:40 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x1, 0x0) 04:47:40 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000004000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:40 executing program 5: r0 = socket(0x2, 0x3, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000100)={0x9}, 0x8) 04:47:40 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010048110000000000007e"], 0x20}}, 0x0) 04:47:40 executing program 1: r0 = socket$inet(0x2, 0x8002, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x3}, 0xc) 04:47:40 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:40 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01004c000000000000007e"], 0x20}}, 0x0) 04:47:40 executing program 1: accept$unix(0xffffffffffffffff, &(0x7f0000000340), 0x0) [ 849.586339][T23961] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 849.589179][T23963] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 849.620890][T23963] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:40 executing program 1: mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) madvise(&(0x7f0000faa000/0x2000)=nil, 0x2000, 0x6) 04:47:40 executing program 1: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) 04:47:40 executing program 5: nanosleep(&(0x7f0000000000)={0x2}, 0x0) 04:47:40 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$getown(r0, 0x5) 04:47:40 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@broadcast, @empty, @val, {@ipv6}}, 0x0) 04:47:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) poll(&(0x7f0000000080)=[{r0, 0x4}, {r0, 0x4}], 0x2, 0x0) 04:47:41 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:41 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100001f0000000000007e"], 0x20}}, 0x0) 04:47:41 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000005000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:41 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010060000000000000007e"], 0x20}}, 0x0) 04:47:41 executing program 1: syz_emit_ethernet(0x38, &(0x7f0000000100)={@broadcast, @empty, @val, {@ipv6}}, 0x0) 04:47:41 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) [ 850.489687][T23985] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 850.502393][T23985] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='-', 0x1}, {0x0}, {&(0x7f0000000180)='*', 0x1}], 0x3}, 0x0) 04:47:41 executing program 1: mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 04:47:41 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 04:47:41 executing program 1: mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) mprotect(&(0x7f0000ec1000/0x2000)=nil, 0x2000, 0x2) 04:47:41 executing program 5: r0 = socket(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)="a0", 0x1) 04:47:41 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="a99e988dfda3ffffffffffff86dd60e29b06000000820d00000000000000000000000000ff020000000000000000000000000001"], 0x0) 04:47:42 executing program 5: mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000ffb000/0x5000)=nil, 0x5000) 04:47:42 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$getflags(r0, 0x2) 04:47:42 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:42 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000007e"], 0x20}}, 0x0) 04:47:42 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010068000000000000007e"], 0x20}}, 0x0) 04:47:42 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000006000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000180)) 04:47:42 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@remote, @local, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @loopback, @random="2e1a45ad1e76", @local={0xac, 0x14, 0x0}}}}}, 0x0) [ 851.398698][T24018] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:47:42 executing program 1: syz_emit_ethernet(0xae, &(0x7f0000000140)={@broadcast, @empty, @val, {@ipv6}}, 0x0) 04:47:42 executing program 5: syz_emit_ethernet(0x7ff, &(0x7f0000000bc0)={@random="873ec4b00dc3", @random="935f2361b831", @val, {@ipv4}}, 0x0) [ 851.447305][T24018] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:42 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r0, 0x0, 0x0, 0x8, 0x0, 0x0) 04:47:42 executing program 1: recvfrom$unix(0xffffffffffffffff, &(0x7f0000000180)=""/200, 0xcc, 0x0, 0x0, 0xfffffffffffffdcd) 04:47:42 executing program 5: r0 = socket(0x1, 0x2, 0x0) sendmsg(r0, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x50, 0x0, 0x0, "67e7cf42289d6f7f8c5ec31368b2d185dd69eea712a25b8dbc421ece85d6be2346b1e48481acddff5850202e7814a995d529ddab3e45756e99"}, {0x7b8, 0x0, 0x0, "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"}], 0x808}, 0x0) 04:47:42 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[@rights], 0x10}, 0x0) 04:47:43 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000007000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:43 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x4) 04:47:43 executing program 5: fchmodat(0xffffffffffffffff, 0x0, 0x5436c9328d37c679) 04:47:43 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01006c000000000000007e"], 0x20}}, 0x0) 04:47:43 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100003f0000000000007e"], 0x20}}, 0x0) 04:47:43 executing program 5: readv(0xffffffffffffffff, &(0x7f0000001680)=[{0x0, 0xc600000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) 04:47:43 executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r2) [ 852.314625][T24049] __nla_validate_parse: 8 callbacks suppressed [ 852.314654][T24049] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 852.335494][T24046] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 852.352170][T24048] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:47:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000680)='net/packet\x00') read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002040)={0x2020}, 0x2020) 04:47:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000680)='net/packet\x00') read$FUSE(r0, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffc2) capget(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000040)) [ 852.381121][T24049] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 852.401974][T24049] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000000)) 04:47:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) 04:47:44 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000008000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @rand_addr, 0x0, 0x400000000000003c, [@remote]}, 0x10) 04:47:44 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000480000000000007e"], 0x20}}, 0x0) 04:47:44 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:44 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010074000000000000007e"], 0x20}}, 0x0) 04:47:44 executing program 1: syz_open_procfs(0x0, &(0x7f0000004080)='environ\x00') [ 853.203880][T24068] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 853.226309][T24071] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 853.240527][T24074] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:47:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000580)) [ 853.248681][T24071] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 853.259321][T24073] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:47:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x18, 0x0, &(0x7f0000000580)=0xfffffffffffffef3) 04:47:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {}, 0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x695f02b9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 04:47:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000000)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) [ 853.374875][T24083] input: syz0 as /devices/virtual/input/input8 [ 853.388216][ T25] audit: type=1400 audit(1644468464.494:440): avc: denied { read } for pid=2948 comm="acpid" name="event4" dev="devtmpfs" ino=2558 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 853.440353][ T25] audit: type=1400 audit(1644468464.494:441): avc: denied { open } for pid=2948 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2558 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 04:47:44 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') [ 853.475894][ T25] audit: type=1400 audit(1644468464.494:442): avc: denied { ioctl } for pid=2948 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2558 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 853.506387][T24085] input: syz0 as /devices/virtual/input/input9 04:47:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x11, @local, 0x0, 0x0, 'lc\x00'}, {@loopback}}, 0x44) 04:47:45 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000009000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x10000000}, {{@in, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) 04:47:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@private0, 0x0, 0x4}}, 0xe8) 04:47:45 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:45 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010011480000000000007e"], 0x20}}, 0x0) 04:47:45 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01007a000000000000007e"], 0x20}}, 0x0) 04:47:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x301}, 0x14}}, 0x0) 04:47:45 executing program 1: socket(0x1, 0x802, 0x0) [ 854.128492][T24097] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 854.139880][T24097] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 854.153050][T24099] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 854.162962][T24097] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:45 executing program 5: mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}) 04:47:45 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$nfc_raw(r0, &(0x7f0000000080), 0x10) [ 854.190529][T24100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:47:45 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') 04:47:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) 04:47:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) 04:47:46 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000e000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, 0xc) 04:47:46 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100f0000000000000007e"], 0x20}}, 0x0) 04:47:46 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100004c0000000000007e"], 0x20}}, 0x0) 04:47:46 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x2) 04:47:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x20000050, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10) [ 855.045092][T24121] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 855.056596][T24123] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:47:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 04:47:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) [ 855.111510][T24123] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x12, 0x0, &(0x7f00000000c0)) [ 855.172012][T24134] input: syz0 as /devices/virtual/input/input10 04:47:46 executing program 5: mq_open(&(0x7f0000000080)='}\'*\x87*^-\x00', 0x40, 0x0, &(0x7f00000000c0)={0x3, 0x0, 0x74d, 0x7}) 04:47:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'geneve0\x00', 0x0}) 04:47:47 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000001f000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:47 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x5}]}) 04:47:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 04:47:47 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000030000000000007e"], 0x20}}, 0x0) 04:47:47 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:47 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000600000000000007e"], 0x20}}, 0x0) 04:47:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x17, 0x0, &(0x7f0000000100)) 04:47:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x18, 0x1, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VLAN={0x4}]}, 0x18}}, 0x0) [ 855.943159][T24148] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 855.977611][T24148] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:47 executing program 1: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) 04:47:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@sco={0x1f, @none}, 0x80) 04:47:47 executing program 1: mq_open(&(0x7f0000002140)='\x00', 0x0, 0x0, 0x0) 04:47:47 executing program 5: socketpair(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 04:47:47 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000020000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000000)) 04:47:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_hsr\x00', &(0x7f0000000080)=@ethtool_cmd={0x13}}) 04:47:47 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100f2030000000000007e"], 0x20}}, 0x0) 04:47:47 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:47 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000680000000000007e"], 0x20}}, 0x0) 04:47:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {0x0, 0x9, 0x2}, 0x18, [0x0, 0x43, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb338], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x3f, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x101, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040), 0x10) 04:47:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x15, 0x0, &(0x7f0000000000)) [ 856.901041][T24180] input: syz0 as /devices/virtual/input/input11 [ 856.919592][T24179] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:47:48 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x171440, 0x0) [ 856.949153][T24179] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:48 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x0, 0x0, 0x0, "", [""]}, 0x26}}, 0x0) 04:47:48 executing program 5: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 04:47:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) getpeername(r0, 0x0, 0x0) 04:47:48 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000433000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:48 executing program 5: r0 = socket(0x1, 0x802, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 04:47:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000580)) 04:47:48 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000050000000000007e"], 0x20}}, 0x0) 04:47:48 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:48 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100006c0000000000007e"], 0x20}}, 0x0) 04:47:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='net/packet\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0xffffffc2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) [ 857.790718][T24200] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 857.799863][T24201] __nla_validate_parse: 8 callbacks suppressed [ 857.799883][T24201] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 857.817428][T24202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 857.818347][T24204] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:47:48 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') 04:47:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x43a, 0x4) [ 857.848969][T24200] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@loopback, @private}, 0xc) 04:47:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500010"], 0x50}}, 0x0) 04:47:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x0, 0x0, "b28c42c6897a709acc948ea7bc4ae2259caea3e66c4cea2330ef685b6f5363fd61684adc62acbc7268a61a6464b3a47f2f40344eabe5866cbfd7d5e62d909242439988363eb17cd80cc8375f98605542"}, 0xd8) 04:47:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb6}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in=@multicast1}}, 0xe8) 04:47:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x6, 0x0, &(0x7f0000000040)) 04:47:49 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000003f000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:49 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:49 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000060000000000007e"], 0x20}}, 0x0) 04:47:49 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000740000000000007e"], 0x20}}, 0x0) 04:47:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)) 04:47:49 executing program 5: sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000240)) [ 858.717834][T24223] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 858.740561][T24225] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 858.755516][T24228] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:47:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000004400)={0x0, 0x0, &(0x7f00000043c0)={&(0x7f0000004380)={0x14, 0xb, 0x6, 0x101}, 0x14}}, 0x0) [ 858.775530][T24228] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 858.782398][T24229] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:47:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, 0xe8) 04:47:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, 0x0, &(0x7f00000001c0)) 04:47:50 executing program 5: syz_open_dev$loop(&(0x7f00000001c0), 0x8, 0xc041) 04:47:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000000)) 04:47:50 executing program 5: add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, 0x0, 0x0, r0) 04:47:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x18, 0x0, &(0x7f0000000000)) 04:47:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {}, 0x18}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 04:47:50 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000048000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:50 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000070000000000007e"], 0x20}}, 0x0) 04:47:50 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:50 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100007a0000000000007e"], 0x20}}, 0x0) [ 859.617822][T24255] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 859.621849][T24249] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 859.638481][T24252] input: syz0 as /devices/virtual/input/input12 04:47:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "95479fadeaffb9a18d917b162fcc83e0d0866d322e94336f2f1c3ec3eace8bd9b377cea24a1cd2e9d07e2af942af118651b0e79d20e64d535b41e0dde63aa9003d7140b27614ad6e01adf7a206dd2c7c"}, 0xd8) [ 859.660190][T24257] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 859.660279][T24259] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 859.675671][T24257] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [], [], [], [0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 04:47:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/ip_vs_stats\x00') read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0xffffffc2) [ 859.789715][T24264] input: syz0 as /devices/virtual/input/input13 04:47:50 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') 04:47:50 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 04:47:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, &(0x7f0000000040)="ebce5bd8ad53ba0756c9ae59d84398197b78117ce62d338bf93a4e76ed81b77e5bbc425b0ca15b016abffbfc592bc431931b5bc42d96ea738c84d5c502032fba1a3ade1287a125f8da4e4ad2d45bc6340267183dde35459dab54e0f515ef6b34d0b2d89d734b2e5fe8aed1bf5752b1e846ac7c090d80a624677784df784fc2386f12f0493ebb9d4489a0bad22a", 0x8d, 0x0, &(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10) 04:47:51 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00') 04:47:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x5}, {}, {}, {}]}) 04:47:51 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000004c000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0xb, 0x0, &(0x7f0000000040)) 04:47:51 executing program 5: syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x80) 04:47:51 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:51 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000090000000000007e"], 0x20}}, 0x0) 04:47:51 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010003c00000000000007e"], 0x20}}, 0x0) 04:47:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2c15, 0x4) 04:47:51 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {0x3, 0x9, 0x2}, 0x18, [0x2, 0x43, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x2, 0xa582, 0x0, 0x3, 0x0, 0x800, 0x7, 0x0, 0x3b8, 0x11, 0x0, 0x80, 0x0, 0x0, 0xff, 0x7fff, 0x1, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3ff, 0x0, 0x1, 0xbb71, 0xb555, 0x4, 0x7fffffff, 0x4, 0xffff, 0x10001, 0x0, 0x0, 0x1ff, 0x0, 0x40, 0x0, 0x401, 0x60000000, 0xec, 0x7fffffff, 0x2, 0xb338, 0x8b], [0x0, 0x0, 0x0, 0x4322, 0x0, 0x5, 0x0, 0x9, 0x0, 0xfd1, 0x0, 0x200, 0x0, 0x3, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x57, 0x0, 0x5, 0x0, 0x800, 0x6, 0x0, 0x9, 0x0, 0x0, 0x3a, 0x3, 0x0, 0x0, 0x0, 0x6, 0x66d1930c], [0x1, 0x2, 0x481, 0x0, 0xfffffff8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x7, 0x0, 0x80000000, 0x0, 0x354, 0x0, 0xab4bac1, 0x0, 0x0, 0x2bd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffff8, 0x0, 0x7, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, 0x9, 0x3, 0x2, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x7f, 0xc50, 0x0, 0xe2d, 0xa8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0xfff9}) openat$nvram(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 860.519137][T24282] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 860.538514][T24283] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:47:51 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {0x3, 0x9, 0x2}, 0x18, [0x2, 0x43, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x2, 0xa582, 0x0, 0x3, 0x0, 0x800, 0x7, 0x0, 0x3b8, 0x11, 0x0, 0x80, 0x0, 0x0, 0xff, 0x7fff, 0x1, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3ff, 0x0, 0x1, 0xbb71, 0xb555, 0x4, 0x7fffffff, 0x4, 0xffff, 0x10001, 0x0, 0x0, 0x1ff, 0x0, 0x40, 0x0, 0x401, 0x60000000, 0xec, 0x7fffffff, 0x2, 0xb338, 0x8b], [0x0, 0x0, 0x0, 0x4322, 0x0, 0x5, 0x0, 0x9, 0x0, 0xfd1, 0x0, 0x200, 0x0, 0x3, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x57, 0x0, 0x5, 0x0, 0x800, 0x6, 0x0, 0x9, 0x0, 0x0, 0x3a, 0x3, 0x0, 0x0, 0x0, 0x6, 0x66d1930c], [0x1, 0x2, 0x481, 0x0, 0xfffffff8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x7, 0x0, 0x80000000, 0x0, 0x354, 0x0, 0xab4bac1, 0x0, 0x0, 0x2bd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffff8, 0x0, 0x7, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, 0x9, 0x3, 0x2, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x7f, 0xc50, 0x0, 0xe2d, 0xa8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0xfff9}) openat$nvram(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 860.600352][T24283] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 860.601734][T24291] input: syz0 as /devices/virtual/input/input14 04:47:51 executing program 5: mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x209c0, 0x0) [ 860.686551][T24296] input: syz0 as /devices/virtual/input/input15 04:47:51 executing program 5: mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x20000, 0x0) 04:47:51 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {0x3, 0x9, 0x2}, 0x18, [0x2, 0x43, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x2, 0xa582, 0x0, 0x3, 0x0, 0x800, 0x7, 0x0, 0x3b8, 0x11, 0x0, 0x80, 0x0, 0x0, 0xff, 0x7fff, 0x1, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3ff, 0x0, 0x1, 0xbb71, 0xb555, 0x4, 0x7fffffff, 0x4, 0xffff, 0x10001, 0x0, 0x0, 0x1ff, 0x0, 0x40, 0x0, 0x401, 0x60000000, 0xec, 0x7fffffff, 0x2, 0xb338, 0x8b], [0x0, 0x0, 0x0, 0x4322, 0x0, 0x5, 0x0, 0x9, 0x0, 0xfd1, 0x0, 0x200, 0x0, 0x3, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x57, 0x0, 0x5, 0x0, 0x800, 0x6, 0x0, 0x9, 0x0, 0x0, 0x3a, 0x3, 0x0, 0x0, 0x0, 0x6, 0x66d1930c], [0x1, 0x2, 0x481, 0x0, 0xfffffff8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x7, 0x0, 0x80000000, 0x0, 0x354, 0x0, 0xab4bac1, 0x0, 0x0, 0x2bd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffff8, 0x0, 0x7, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, 0x9, 0x3, 0x2, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x7f, 0xc50, 0x0, 0xe2d, 0xa8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0xfff9}) openat$nvram(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 860.828078][T24302] input: syz0 as /devices/virtual/input/input16 04:47:52 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x1) 04:47:52 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000001353000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:52 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {0x3, 0x9, 0x2}, 0x18, [0x2, 0x43, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x2, 0xa582, 0x0, 0x3, 0x0, 0x800, 0x7, 0x0, 0x3b8, 0x11, 0x0, 0x80, 0x0, 0x0, 0xff, 0x7fff, 0x1, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3ff, 0x0, 0x1, 0xbb71, 0xb555, 0x4, 0x7fffffff, 0x4, 0xffff, 0x10001, 0x0, 0x0, 0x1ff, 0x0, 0x40, 0x0, 0x401, 0x60000000, 0xec, 0x7fffffff, 0x2, 0xb338, 0x8b], [0x0, 0x0, 0x0, 0x4322, 0x0, 0x5, 0x0, 0x9, 0x0, 0xfd1, 0x0, 0x200, 0x0, 0x3, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x57, 0x0, 0x5, 0x0, 0x800, 0x6, 0x0, 0x9, 0x0, 0x0, 0x3a, 0x3, 0x0, 0x0, 0x0, 0x6, 0x66d1930c], [0x1, 0x2, 0x481, 0x0, 0xfffffff8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x7, 0x0, 0x80000000, 0x0, 0x354, 0x0, 0xab4bac1, 0x0, 0x0, 0x2bd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffff8, 0x0, 0x7, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, 0x9, 0x3, 0x2, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x7f, 0xc50, 0x0, 0xe2d, 0xa8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0xfff9}) openat$nvram(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 04:47:52 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:52 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000a0000000000007e"], 0x20}}, 0x0) 04:47:52 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000f00000000000007e"], 0x20}}, 0x0) 04:47:52 executing program 5: mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) [ 861.426111][T24310] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 861.435418][T24308] input: syz0 as /devices/virtual/input/input17 [ 861.473039][T24310] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:52 executing program 1: mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x940002bb) 04:47:52 executing program 5: mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0xc0) 04:47:52 executing program 5: r0 = getpgrp(0x0) r1 = getpgrp(0x0) tgkill(r0, r1, 0x0) 04:47:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x4, 0x0, 0x17) 04:47:52 executing program 5: r0 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ff3000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/193) 04:47:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x10cf4ecdc4521754, 0x0, 0xffffffffffffff20) 04:47:53 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000060000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:53 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RCREATE(r0, 0x0, 0xfffffffffffffe79) 04:47:53 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:53 executing program 1: mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x20200, 0x80) 04:47:53 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000e0000000000007e"], 0x20}}, 0x0) 04:47:53 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000300000000007e"], 0x20}}, 0x0) 04:47:53 executing program 5: mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x108) 04:47:53 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWALK(r0, 0x0, 0x4a) [ 862.349635][T24339] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:47:53 executing program 1: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) 04:47:53 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x22) [ 862.411321][T24339] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:53 executing program 5: r0 = timerfd_create(0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) dup3(r1, r0, 0x0) 04:47:53 executing program 1: get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000fff000/0x1000)=nil, 0x4) 04:47:54 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000068000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) accept4$inet6(r3, 0x0, 0x0, 0x80800) ioctl$BTRFS_IOC_DEFRAG(r2, 0x5450, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000000)={@local, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="490000000000000002004e23ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/398], 0x190) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'veth0_to_bridge\x00'}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 04:47:54 executing program 5: mknod(&(0x7f00000000c0)='./file0\x00', 0xc000, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:47:54 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000f0000000000007e"], 0x20}}, 0x0) 04:47:54 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:54 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000400300000000007e"], 0x20}}, 0x0) [ 863.224498][ T25] audit: type=1400 audit(1644468474.334:443): avc: denied { name_bind } for pid=24361 comm="syz-executor.1" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 863.261963][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 04:47:54 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, 0x0, 0x4000804) [ 863.271360][T24368] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 863.289939][T24367] __nla_validate_parse: 8 callbacks suppressed [ 863.289960][T24367] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 863.308757][T24370] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 863.315352][ T25] audit: type=1400 audit(1644468474.364:444): avc: denied { node_bind } for pid=24361 comm="syz-executor.1" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 863.341725][T24368] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:54 executing program 1: r0 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/77) pipe2$9p(0x0, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:47:54 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) [ 863.371181][T24371] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:47:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0), 0x0, 0x0, 0x1) 04:47:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)=[{0x10}], 0x10}, 0x0) 04:47:54 executing program 1: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) [ 863.519390][ T25] audit: type=1400 audit(1644468474.624:445): avc: denied { setattr } for pid=24379 comm="syz-executor.1" name="tun" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 04:47:55 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000006c000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:55 executing program 5: r0 = msgget(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000040)={{}, 0x0, 0x0, 0xffffffffffffffff}) 04:47:55 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$getown(r0, 0x5) 04:47:55 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000034000000000007e"], 0x20}}, 0x0) 04:47:55 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010067100000000000007e"], 0x20}}, 0x0) 04:47:55 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:55 executing program 5: mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) getitimer(0x1, &(0x7f0000000240)) 04:47:55 executing program 1: mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) [ 864.189575][T24391] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 864.215633][T24394] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 864.224341][T24391] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 864.234070][T24395] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 864.244335][T24391] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:55 executing program 5: shmget(0x1, 0x2000, 0x218, &(0x7f0000ffe000/0x2000)=nil) 04:47:55 executing program 1: connect$unix(0xffffffffffffff9c, &(0x7f0000000240)=ANY=[@ANYBLOB='e'], 0xa) r0 = msgget(0x3, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000140)=""/202) 04:47:55 executing program 5: r0 = getpgrp(0x0) r1 = getpid() setpgid(r1, r0) 04:47:55 executing program 1: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') 04:47:56 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000074000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:56 executing program 1: mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffff9c, 0x0) 04:47:56 executing program 5: preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}, {0x0}, {0x0}], 0x127c, 0x0, 0x0) 04:47:56 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100ffffe000000000007e"], 0x20}}, 0x0) 04:47:56 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100001f0000000000007e"], 0x20}}, 0x0) 04:47:56 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:56 executing program 5: setuid(0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, 0x0) 04:47:56 executing program 1: symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 865.118255][T24418] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 865.132291][T24419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 865.149582][T24417] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:47:56 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) fcntl$setown(r0, 0x6, 0xffffffffffffffff) 04:47:56 executing program 1: mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5) [ 865.173047][T24418] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 865.186090][T24422] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:47:56 executing program 1: semctl$GETALL(0x0, 0x0, 0x6, &(0x7f00000014c0)=""/56) 04:47:56 executing program 5: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) [ 865.297752][ T25] audit: type=1400 audit(1644468476.404:446): avc: denied { lock } for pid=24429 comm="syz-executor.5" path="socket:[99783]" dev="sockfs" ino=99783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 04:47:57 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000007a000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:57 executing program 1: socket(0x20, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 04:47:57 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r0, &(0x7f0000000040), &(0x7f0000001080)=0x1002) 04:47:57 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fffff000000000007e"], 0x20}}, 0x0) 04:47:57 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000007e"], 0x20}}, 0x0) 04:47:57 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) [ 865.982020][ T25] audit: type=1400 audit(1644468477.094:447): avc: denied { create } for pid=24435 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 04:47:57 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs, 0x8) [ 866.046946][T24444] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 866.061779][T24446] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 866.082722][T24446] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:57 executing program 1: setitimer(0x1, &(0x7f0000000240)={{0x0, 0x1f}, {0x0, 0x8001}}, &(0x7f0000000280)) 04:47:57 executing program 5: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x7813, 0xffffffffffffffff, 0x0) 04:47:57 executing program 5: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') lchown(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) 04:47:57 executing program 1: bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:47:57 executing program 5: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x220180, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000940), 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x220180, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x0, 0x1, [@remote]}) syz_clone(0x44002680, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0xe, 0x5, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r1, 0x1]}, 0x80) [ 866.383091][T24462] geneve1 speed is unknown, defaulting to 1000 04:47:58 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100ffffff9e000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:58 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:47:58 executing program 5: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)={0x0, 0x2, [@remote, @broadcast]}) syz_clone(0x44002680, &(0x7f00000000c0)="10a67a07bc8ec3e788f711f552568f310b09ce40d2", 0x15, 0x0, &(0x7f00000001c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x4, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x2, 0x84, &(0x7f0000000580)=""/132, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980), 0x8, 0x10, 0x0}, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0x220180, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, 0x0) 04:47:58 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000001000000007e"], 0x20}}, 0x0) 04:47:58 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100003f0000000000007e"], 0x20}}, 0x0) 04:47:58 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:58 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)={0x0, 0x2, [@remote, @broadcast]}) syz_clone(0x44002680, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a8af0e53fef84ccba9d99669f768cb45167bfe7877bb0c3ee2181e6cc72be2b79b9e4faee0f3b5e3e6726b91fe297c012034ec0db5a8f53006a1cfdbb186d7bec24d30b63a4d3559cce0a6a6d60513dd4b7b8cee05e990ecbf58ea30c3c6ac4cbdb9e8eaf762f5ef1854f4f9e9b8a4b259eda37442") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="183400000300000000000000000000008500f4ff00000b009500000000000000f046bf765dc80cc3af46f64df12f6312"], &(0x7f0000000540)='syzkaller\x00', 0x2, 0x84, &(0x7f0000000580)=""/132, 0x41000, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x2}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x0, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff]}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, 0x0) [ 866.965860][T24472] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 866.991705][T24472] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 867.013261][T24467] geneve1 speed is unknown, defaulting to 1000 [ 867.095432][T24481] geneve1 speed is unknown, defaulting to 1000 04:47:58 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x220180, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000940), 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x220180, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) syz_clone(0x44002680, &(0x7f00000000c0), 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000940), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xe, 0x5, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x84, &(0x7f0000000580)=""/132, 0x41000, 0x1a, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x0, 0x0, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff, 0x1]}, 0x80) bpf$ITER_CREATE(0x21, &(0x7f0000000c00)={r1}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x220180, 0x0) 04:47:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x29, 0x49, 0x0, 0x0) 04:47:58 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x440c0) sendmsg$kcm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="ef", 0xfffffdef}], 0x1}, 0x8c1) [ 867.377075][T24486] geneve1 speed is unknown, defaulting to 1000 04:47:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x29, 0x31, 0x0, 0x0) 04:47:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x29, 0x5, 0x0, 0x300) 04:47:58 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fffffff0000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:58 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="a9", 0x20000001, 0x0, 0x0, 0x0) 04:47:58 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCADDRT(r0, 0x89a0, &(0x7f0000001240)={0x0, @can, @hci, @nfc}) 04:47:58 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:58 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000480000000000007e"], 0x20}}, 0x0) 04:47:58 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000002000000007e"], 0x20}}, 0x0) [ 867.847348][ T25] audit: type=1400 audit(1644468478.954:448): avc: denied { ioctl } for pid=24498 comm="syz-executor.1" path="socket:[99888]" dev="sockfs" ino=99888 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 04:47:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x0, @remote, 0x4}, @in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x3c) [ 867.903879][T24504] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 867.934465][T24504] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:47:59 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCADDRT(r0, 0x801c581f, 0x0) 04:47:59 executing program 1: syz_emit_ethernet(0x15f, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd"], 0x0) 04:47:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x29, 0x16, 0x0, 0x0) 04:47:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x29, 0x16, 0x0, 0x0) 04:47:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x29, 0x43, 0x0, 0x7) 04:47:59 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000e0ffff000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:47:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x29, 0x1e, 0x0, 0x0) 04:47:59 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x29, 0x4, 0x0, 0x0) 04:47:59 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000003000000007e"], 0x20}}, 0x0) 04:47:59 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100004c0000000000007e"], 0x20}}, 0x0) 04:47:59 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:47:59 executing program 1: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000200)={0x0, 'syz0\x00'}) 04:47:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000409"], 0x1c}}, 0x0) [ 868.850262][T24531] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 868.860210][T24529] __nla_validate_parse: 8 callbacks suppressed [ 868.860230][T24529] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 868.866353][T24532] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 868.869536][T24533] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 868.927143][T24531] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 868.949168][T24536] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 04:48:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0xa, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @empty}], 0x2c) [ 868.967569][ T25] audit: type=1400 audit(1644468480.074:449): avc: denied { ioctl } for pid=24535 comm="syz-executor.1" path="socket:[99940]" dev="sockfs" ino=99940 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 04:48:00 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, 0x0, 0x0) 04:48:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x29, 0x32, 0x0, 0x0) 04:48:00 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8940, &(0x7f0000001240)={0x0, @can, @hci, @nfc}) 04:48:00 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000f0ffff000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:00 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 04:48:00 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000007e0000000c"], 0x20}}, 0x0) 04:48:00 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000004000000007e"], 0x20}}, 0x0) 04:48:00 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8940, &(0x7f0000001240)={0x0, @can, @hci, @nfc}) 04:48:00 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000600000000000007e"], 0x20}}, 0x0) 04:48:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f0000000100)) [ 869.723004][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.729521][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.743111][ T25] audit: type=1400 audit(1644468480.854:450): avc: denied { read } for pid=24548 comm="syz-executor.1" dev="nsfs" ino=4026533403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 869.778412][T24553] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 869.818171][T24558] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 869.829259][T24553] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 869.831357][ T25] audit: type=1400 audit(1644468480.854:451): avc: denied { open } for pid=24548 comm="syz-executor.1" path="net:[4026533403]" dev="nsfs" ino=4026533403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 869.859514][T24553] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}}, 0x108) 04:48:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x16, 0x0, 0x401, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 869.874575][T24559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 869.891177][ T25] audit: type=1400 audit(1644468480.854:452): avc: denied { setopt } for pid=24548 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 04:48:01 executing program 1: socketpair(0x11, 0x2, 0x1a0, &(0x7f0000000b80)) 04:48:01 executing program 5: socketpair(0x23, 0x0, 0x2, &(0x7f0000000b80)) 04:48:01 executing program 1: socketpair(0x11, 0x2, 0x1a0, &(0x7f0000000b80)) 04:48:01 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01007fffffff000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x29, 0x3, 0x0, 0x300) 04:48:01 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8901, &(0x7f0000001240)={0x0, @can, @hci, @nfc}) 04:48:01 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000005000000007e"], 0x20}}, 0x0) 04:48:01 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010010670000000000007e"], 0x20}}, 0x0) 04:48:01 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="020000000000000000007e0000000c"], 0x20}}, 0x0) 04:48:01 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="ef", 0xffffff1f}], 0x1}, 0x8c1) 04:48:01 executing program 5: syz_emit_ethernet(0x15f, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86"], 0x0) 04:48:01 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030000000000000000007e0000000c"], 0x20}}, 0x0) [ 870.749189][T24580] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 870.759748][T24582] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 870.784385][T24580] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 870.819953][T24583] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:02 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote, 0x4}], 0x1c) [ 870.864116][T24580] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:02 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 04:48:02 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000)=0xff, 0x4) [ 871.037225][ T25] audit: type=1400 audit(1644468482.144:453): avc: denied { getopt } for pid=24593 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 04:48:02 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01009effffff000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:02 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000)=0xff, 0x4) 04:48:02 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000006000000007e"], 0x20}}, 0x0) 04:48:02 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000680000000000007e"], 0x20}}, 0x0) 04:48:02 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050000000000000000007e0000000c"], 0x20}}, 0x0) 04:48:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x29, 0x3c, 0x0, 0x7) [ 871.693427][T24601] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:48:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x29, 0x16, 0x0, 0x7) [ 871.733908][T24601] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:02 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote, 0x4}], 0x1c) 04:48:02 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCADDRT(r0, 0xc0189436, 0x0) 04:48:03 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0x2) 04:48:03 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="ef", 0x7ffff000}], 0x1}, 0x8c1) 04:48:03 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="ef", 0x7ffff000}], 0x1}, 0x8c1) 04:48:03 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\f'], 0x20}}, 0x0) 04:48:03 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0x2}]}, {0x0, [0x0]}}, &(0x7f0000000140)=""/213, 0x27, 0xd5, 0x1}, 0x20) 04:48:03 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000007000000007e"], 0x20}}, 0x0) 04:48:03 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100f0ffffff000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:03 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100006c0000000000007e"], 0x20}}, 0x0) 04:48:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x801) [ 872.601101][T24625] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 872.611900][T24625] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:48:03 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockname$inet6(r0, 0x0, &(0x7f0000000040)) 04:48:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x29, 0x4b, 0x0, 0x0) 04:48:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5452, 0x0) 04:48:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f0000001a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x4800}]}}, &(0x7f0000001a40)=""/151, 0x26, 0x97, 0x1}, 0x20) 04:48:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a1, 0x0) 04:48:04 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\f'], 0x20}}, 0x0) 04:48:04 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x59, 0x5}]}}, &(0x7f0000001340)=""/209, 0x2a, 0xd1, 0x1}, 0x20) 04:48:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=@newqdisc={0x24, 0x24, 0x1}, 0x24}}, 0x0) 04:48:04 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000008000000007e"], 0x20}}, 0x0) 04:48:04 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000740000000000007e"], 0x20}}, 0x0) 04:48:04 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000003007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:04 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f0000001a00)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001a40)=""/151, 0x1a, 0x97, 0x1}, 0x20) 04:48:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0xf01}, 0x24}}, 0x0) 04:48:04 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\f'], 0x20}}, 0x0) [ 873.525068][T24654] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 873.553225][T24654] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5421, 0x0) 04:48:04 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f0000001a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000001a40)=""/151, 0x1000000, 0x97, 0x1}, 0x20) 04:48:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f0000001a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x6c}]}}, &(0x7f0000001a40)=""/151, 0x26, 0x97, 0x1}, 0x20) 04:48:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8903, &(0x7f0000000100)={0x0, 0x0, "d89f7c"}) 04:48:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4b47, 0x0) 04:48:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f0000001a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000001a40)=""/151, 0x18, 0x97, 0x1}, 0x20) 04:48:05 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000009000000007e"], 0x20}}, 0x0) 04:48:05 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100007a0000000000007e"], 0x20}}, 0x0) 04:48:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x18, 0x1, 0x1, [r1, r2]}}], 0x18}, 0x0) 04:48:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0189436, &(0x7f0000000100)={0x0, 0x0, "d89f7c"}) 04:48:05 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000ffffe0007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:05 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0f0000000000000000007e0000000c"], 0x20}}, 0x0) 04:48:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8980, 0x0) 04:48:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x2, 0x0) [ 874.430405][T24685] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 874.438290][T24686] __nla_validate_parse: 9 callbacks suppressed [ 874.438309][T24686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 874.458761][T24688] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) [ 874.477845][T24685] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 874.486796][T24689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:48:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a1, &(0x7f0000000100)={0x0, 0x0, "d89f7c"}) 04:48:05 executing program 5: r0 = fsopen(&(0x7f0000000040)='nfs4\x00', 0x0) io_setup(0xff, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001580)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) 04:48:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 04:48:06 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000e000000007e"], 0x20}}, 0x0) 04:48:06 executing program 1: r0 = fsopen(&(0x7f0000000040)='nfs4\x00', 0x0) io_setup(0xff, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001580)=[&(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x0, r0, 0x0}]) 04:48:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="c9", 0x1}], 0x1, &(0x7f0000000640)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}], 0x18}, 0x0) 04:48:06 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fffffffffffff0007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:06 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000f00000000000007e"], 0x20}}, 0x0) 04:48:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110000000000000000007e0000000c"], 0x20}}, 0x0) 04:48:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48}]}}, &(0x7f0000001340)=""/209, 0x2a, 0xd1, 0x1}, 0x20) [ 875.352479][T24711] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 875.365548][T24712] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 875.378568][T24713] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) [ 875.396951][T24711] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:48:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f0000001a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x63, 0x6, [@ptr]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000001a40)=""/151, 0x2a, 0x97, 0x1}, 0x20) [ 875.459849][T24711] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:06 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x3e, 0x0, 0x59}]}}, &(0x7f0000001340)=""/209, 0x2a, 0xd1, 0x1}, 0x20) 04:48:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f0000001a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x6c}}, &(0x7f0000001a40)=""/151, 0x1a, 0x97, 0x1}, 0x20) 04:48:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8940, &(0x7f0000000100)={0x0, 0x0, "d89f7c"}) 04:48:07 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000f000000007e"], 0x20}}, 0x0) 04:48:07 executing program 1: io_setup(0xc9e, &(0x7f0000000040)=0x0) io_destroy(r0) 04:48:07 executing program 5: r0 = socket(0xa, 0x3, 0x1) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) 04:48:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="120000000000000000007e0000000c"], 0x20}}, 0x0) 04:48:07 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000017e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:07 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010003f20000000000007e"], 0x20}}, 0x0) 04:48:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a0, &(0x7f0000000100)={0x0, 0x0, "d89f7c"}) 04:48:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB='\'\x00\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\f'], 0x20}}, 0x0) [ 876.272007][T24737] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 876.276314][T24738] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 876.284985][T24739] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 876.306708][T24738] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 876.316704][T24738] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = getpid() sendmsg$unix(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, 0xee00}}}], 0x20}, 0x0) 04:48:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8981, 0x0) 04:48:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8982, 0x0) 04:48:07 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f0000001a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000001a40)=""/151, 0x26, 0x97, 0x1}, 0x20) 04:48:08 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000001f000000007e"], 0x20}}, 0x0) 04:48:08 executing program 5: r0 = fsopen(&(0x7f00000000c0)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x2, 0x0, 0x0, 0xffffffffffffff9c) 04:48:08 executing program 1: r0 = socket(0xa, 0x3, 0x1) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 04:48:08 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\f'], 0x20}}, 0x0) 04:48:08 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000027e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:08 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000300000000007e"], 0x20}}, 0x0) 04:48:08 executing program 1: r0 = socket(0x1e, 0x5, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x10f, 0x82, 0x0, 0x0) 04:48:08 executing program 5: r0 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89b1, &(0x7f0000000180)={'batadv_slave_0\x00'}) 04:48:08 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB='B\x00\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\f'], 0x20}}, 0x0) [ 877.239639][T24762] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 877.252245][T24764] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 877.252954][ T25] audit: type=1400 audit(1644468488.364:454): avc: denied { ioctl } for pid=24761 comm="syz-executor.5" path="socket:[101316]" dev="sockfs" ino=101316 ioctlcmd=0x89b1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 04:48:08 executing program 1: r0 = socket(0xa, 0x3, 0x1) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8936, 0x0) 04:48:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x1, 0x3}]}]}}, &(0x7f0000000080)=""/234, 0x36, 0xea, 0x1}, 0x20) [ 877.269520][T24764] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:08 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB='L\x00\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\f'], 0x20}}, 0x0) [ 877.387074][ T25] audit: type=1400 audit(1644468488.414:455): avc: denied { setopt } for pid=24763 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 04:48:09 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000020000000007e"], 0x20}}, 0x0) 04:48:09 executing program 1: syz_open_dev$hidraw(&(0x7f00000002c0), 0x0, 0x50040) 04:48:09 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000002280), 0x60000, 0x0) 04:48:09 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\f'], 0x20}}, 0x0) 04:48:09 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000037e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:09 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000400300000000007e"], 0x20}}, 0x0) 04:48:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0xfbff, 0x1}, 0xe) 04:48:09 executing program 5: syz_emit_ethernet(0x11, &(0x7f0000001300)={@remote, @link_local, @void, {@x25}}, 0x0) [ 878.125301][T24785] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:48:09 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB='c\x00\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\f'], 0x20}}, 0x0) [ 878.175508][T24785] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:09 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:48:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0x3, 0xc2}, 0x48) 04:48:09 executing program 1: r0 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89e0, &(0x7f0000000180)={'batadv_slave_0\x00'}) 04:48:10 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000003f000000007e"], 0x20}}, 0x0) 04:48:10 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x0, 0x0, 0x0}) 04:48:10 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x18, 0x0, &(0x7f00000000c0)=[@clear_death, @release], 0x0, 0x0, 0x0}) 04:48:10 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000034000000000007e"], 0x20}}, 0x0) [ 878.999815][ T25] audit: type=1400 audit(1644468490.104:456): avc: denied { read } for pid=24804 comm="syz-executor.5" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 04:48:10 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000047e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:10 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB='j\x00\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\f'], 0x20}}, 0x0) 04:48:10 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 04:48:10 executing program 5: r0 = socket(0xa, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x3a, 0x0, 0x0, 0x0) 04:48:10 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB='k\x00\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\f'], 0x20}}, 0x0) [ 879.054002][T24809] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 879.088439][T24809] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'geneve0\x00'}}}}}, 0x34}}, 0x0) [ 879.133350][ T25] audit: type=1400 audit(1644468490.104:457): avc: denied { open } for pid=24803 comm="syz-executor.1" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 04:48:10 executing program 5: r0 = socket(0x1e, 0x5, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xd0) [ 879.201541][ T25] audit: type=1400 audit(1644468490.114:458): avc: denied { ioctl } for pid=24803 comm="syz-executor.1" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 879.237193][T24822] tipc: Started in network mode 04:48:10 executing program 5: syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x8003) [ 879.251253][T24822] tipc: Node identity aaaaaaaaaa3f, cluster identity 4711 [ 879.270348][T24822] tipc: Enabled bearer , priority 0 04:48:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000048000000007e"], 0x20}}, 0x0) 04:48:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000000000000014100000018001700000000000000006574683a69"], 0x34}}, 0x0) 04:48:11 executing program 5: r0 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8947, &(0x7f0000000180)={'batadv_slave_0\x00'}) 04:48:11 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100ffffe000000000007e"], 0x20}}, 0x0) 04:48:11 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000057e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB='~\x00\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\f'], 0x20}}, 0x0) 04:48:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0x401, 0xc2, 0x4}, 0x48) [ 879.957999][T24831] tipc: Enabling of bearer rejected, failed to enable media 04:48:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x5, {0x300}}]}, 0x34}}, 0x0) 04:48:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000300000000000000007e0000000c"], 0x20}}, 0x0) [ 880.004157][T24839] __nla_validate_parse: 8 callbacks suppressed [ 880.004177][T24839] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 880.007086][T24836] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 880.018578][T24839] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 880.040606][T24838] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 880.086592][T24839] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x4109}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) [ 880.132054][T24845] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 04:48:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="c20f00000000000000007e0000000c"], 0x20}}, 0x0) 04:48:11 executing program 1: fsopen(&(0x7f0000000280)='tmpfs\x00', 0x0) [ 880.383051][ T31] tipc: Node number set to 9808554 04:48:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000001148000000007e"], 0x20}}, 0x0) 04:48:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="ca0f00000000000000007e0000000c"], 0x20}}, 0x0) 04:48:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000080)=""/234, 0x1000000, 0xea, 0x1}, 0x20) 04:48:11 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fffff000000000007e"], 0x20}}, 0x0) 04:48:11 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000067e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:11 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:48:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="eb0f00000000000000007e0000000c"], 0x20}}, 0x0) 04:48:12 executing program 1: syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffffff, 0x0) [ 880.929449][T24861] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 880.943741][T24862] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 880.960187][T24864] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:48:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="f30f00000000000000007e0000000c"], 0x20}}, 0x0) [ 880.979761][T24861] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 881.018996][T24861] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000001eb7e9461f"], 0x34}}, 0x0) 04:48:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="7cd001000000000000007e0000000c"], 0x20}}, 0x0) [ 881.107286][T24873] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 04:48:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="7dd001000000000000007e0000000c"], 0x20}}, 0x0) 04:48:12 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000004c000000007e"], 0x20}}, 0x0) 04:48:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x48) 04:48:12 executing program 5: r0 = socket(0xa, 0x3, 0x1) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 04:48:12 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000001000000007e"], 0x20}}, 0x0) 04:48:12 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000077e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="7ed001000000000000007e0000000c"], 0x20}}, 0x0) 04:48:12 executing program 1: r0 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8949, &(0x7f0000000180)={'batadv_slave_0\x00'}) 04:48:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pipe2(&(0x7f0000002440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r1, r0, 0x0, 0x200000008080801) [ 881.851172][T24884] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 881.860079][T24885] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 881.872440][T24884] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 881.900310][T24887] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 881.917269][T24884] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="7fd001000000000000007e0000000c"], 0x20}}, 0x0) 04:48:13 executing program 1: r0 = socket(0x1e, 0x5, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x10f, 0x87, 0x0, 0x0) 04:48:13 executing program 5: syz_usb_connect$uac1(0x0, 0xd3, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x185, 0x7, 0x6, '4'}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x20, 0x2, 0x9, 0x1, "48f03cb7ed22"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x0, 0x4, "f772c94e601e0b"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0xfffa, 0x2, "b91e3d059a"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1f, 0x3, 0x0, 0x9, "04", '#M'}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xff, 0x2, 0xff}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3f, 0x9, 0xe0, {0x7, 0x25, 0x1, 0xc2366f448e2a0acd, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x7, 0x5, "913f9fff74691226"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0x1, 0x7, {0x7, 0x25, 0x1, 0x180, 0x8, 0x4}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0xb1a0291acbdcb3fc, 0xff, 0x6, 0x9, 0x40, 0xdf}, 0x37, &(0x7f0000000300)={0x5, 0xf, 0x37, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "bb0caf96e58f6d293f402eff5b4a405d"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x1, 0x4f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0x1, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x1, 0x1ff}]}, 0x7, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000400)=@lang_id={0x4}}, {0x102, &(0x7f0000000ac0)=@string={0x102, 0x3, "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"}}, {0x7e, &(0x7f0000000a40)=@string={0x7e, 0x3, "657964c0c4a0ce3b369ddb28ee7abd9cc488e4ff345bbf23e617f3ee2fb47e9bff3b10de0a74889931e25913901adc89c4f39b87f306f79f41a11a88859c9a46f7ae45467fdca9d7340b03720aea65fe79c20338eadc14f61a159d2e5cc4c5856bc7daacba767adcde29cb5f16688816510708c742cc4b00992d65cf"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x140a}}]}) 04:48:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x4102}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) [ 882.351859][T20053] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 882.611813][T20053] usb 6-1: Using ep0 maxpacket: 32 04:48:13 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000060000000007e"], 0x20}}, 0x0) 04:48:13 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) 04:48:13 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}]}}, &(0x7f0000000080)=""/234, 0x3e, 0xea, 0x1}, 0x20) 04:48:13 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000002000000007e"], 0x20}}, 0x0) 04:48:13 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000087e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="80d001000000000000007e0000000c"], 0x20}}, 0x0) [ 882.700030][ T25] audit: type=1400 audit(1644468493.804:459): avc: denied { set_context_mgr } for pid=24903 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 04:48:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="81d001000000000000007e0000000c"], 0x20}}, 0x0) [ 882.759089][T24906] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 882.772226][T20053] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 882.789907][T20053] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 882.792695][T24906] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000002809000000fa49d365a2660000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x24}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fsmount(r1, 0x0, 0x2) [ 882.826416][T20053] usb 6-1: config 1 has an invalid descriptor of length 250, skipping remainder of the config [ 882.861034][T20053] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 04:48:14 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) [ 882.879469][T24918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2344 sclass=netlink_route_socket pid=24918 comm=syz-executor.1 04:48:14 executing program 1: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) [ 882.937867][T24921] binder: 24920:24921 ioctl 4018620d 0 returned -22 [ 883.051965][T20053] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 883.061032][T20053] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.074991][T20053] usb 6-1: Product: й [ 883.079084][T20053] usb 6-1: Manufacturer: 䐊 [ 883.421973][T20053] usb 6-1: 0:2 : does not exist [ 883.440080][T20053] usb 6-1: USB disconnect, device number 7 [ 883.475671][ T6763] udevd[6763]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 04:48:14 executing program 5: r0 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8924, &(0x7f0000000180)={'batadv_slave_0\x00'}) 04:48:14 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x410002, 0x0) 04:48:14 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000068000000007e"], 0x20}}, 0x0) 04:48:14 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000097e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:14 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000003000000007e"], 0x20}}, 0x0) 04:48:14 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="82d001000000000000007e0000000c"], 0x20}}, 0x0) 04:48:15 executing program 1: syz_usb_connect$uac1(0x0, 0x8e, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xa, 0x24, 0x7, 0x0, 0x0, 0x0, "fc583c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, '4'}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x1, 0x7, {0x7}}}}}}}]}}, 0x0) 04:48:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="83d001000000000000007e0000000c"], 0x20}}, 0x0) [ 883.895233][T24927] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 883.925744][T24927] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}]}}, &(0x7f0000000080)=""/234, 0x2e, 0xea, 0x1}, 0x20) 04:48:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) 04:48:15 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 04:48:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0x1400, 0x40000c2}, 0x48) 04:48:15 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) 04:48:15 executing program 5: inotify_init1(0x40400) [ 884.228785][T24950] binder: 24949:24950 ioctl c0046209 0 returned -22 [ 884.241698][ T31] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 884.481738][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 884.602017][ T31] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 884.611835][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 04:48:15 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000006c000000007e"], 0x20}}, 0x0) 04:48:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x6, 0x7, 0x401, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) 04:48:15 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000e7e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:15 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000004000000007e"], 0x20}}, 0x0) [ 884.781976][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 884.787496][T24958] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 884.801735][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.802391][T24958] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 884.828863][ T31] usb 2-1: Product: syz [ 884.834243][ T31] usb 2-1: Manufacturer: syz [ 884.839000][ T31] usb 2-1: SerialNumber: syz [ 885.171754][ T31] usb 2-1: 0:2 : does not exist [ 885.186418][ T31] usb 2-1: USB disconnect, device number 76 [ 885.220810][ T6763] udevd[6763]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 04:48:16 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="84d001000000000000007e0000000c"], 0x20}}, 0x0) 04:48:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000080)=""/234, 0x2e, 0xea, 0x1}, 0x20) 04:48:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newtclass={0x10, 0x6b, 0x1}, 0x24}}, 0x0) 04:48:16 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000005000000007e"], 0x20}}, 0x0) 04:48:16 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000074000000007e"], 0x20}}, 0x0) 04:48:16 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000001f7e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:16 executing program 5: r0 = socket(0xa, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x29, 0x0, 0x0, 0x0) 04:48:16 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="85d001000000000000007e0000000c"], 0x20}}, 0x0) [ 885.734081][T24969] __nla_validate_parse: 9 callbacks suppressed [ 885.734101][T24969] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 885.740653][T24974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=107 sclass=netlink_route_socket pid=24974 comm=syz-executor.1 [ 885.763310][T24973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:16 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4b47, 0x0) 04:48:16 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0xfffff, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/234, 0x1a, 0xea, 0x1}, 0x20) [ 885.790444][T24978] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 885.795277][T24973] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 885.818976][T24973] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:17 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r0, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x8, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) [ 885.860496][T24981] binder: 24979:24981 ioctl c0306201 0 returned -14 [ 885.868084][T24981] binder: 24979:24981 ioctl 4b47 0 returned -22 04:48:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x3, 0x0, 0x4, 0xfe92}, 0x48) 04:48:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x4104}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) [ 885.928174][T24985] tipc: Started in network mode [ 885.934091][T24985] tipc: Node identity , cluster identity 4711 [ 885.942454][T24985] tipc: Failed to obtain node identity [ 885.948265][T24985] tipc: Enabling of bearer rejected, failed to enable media 04:48:17 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder0\x00', 0x0, 0x0) 04:48:17 executing program 5: creat(0x0, 0x0) quotactl(0x40000080000100, 0x0, 0x0, 0x0) 04:48:17 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000006000000007e"], 0x20}}, 0x0) 04:48:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000800)={'gre0\x00', &(0x7f00000007c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @dev}}}}) 04:48:17 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000207e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:17 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0x0, 0x0, 0x4}, 0x48) 04:48:17 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000007a000000007e"], 0x20}}, 0x0) 04:48:17 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="86d001000000000000007e0000000c"], 0x20}}, 0x0) 04:48:17 executing program 5: bpf$BPF_BTF_LOAD(0x15, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) [ 886.618647][T24999] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 886.635282][T25000] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 886.655777][T24999] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:48:17 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x10000008, 0x0, 0x7, 0x0, 0x0, 0x80000001, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x42, 0xb5, 0x0, 0x0, 0x0, 0x98c, 0x9, 0x5}, 0x0) r0 = getpid() prlimit64(0x0, 0x3, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) setrlimit(0x7, 0x0) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x0, 0x40, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x8b89}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x12) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) truncate(&(0x7f0000000040)='./file0\x00', 0x3ed8000) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:48:17 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="87d001000000000000007e0000000c"], 0x20}}, 0x0) [ 886.670647][T25004] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 886.679139][T24999] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:17 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/234, 0x1a, 0xea, 0x1}, 0x20) 04:48:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) [ 886.814714][T25015] fs-verity: sha256 using implementation "sha256-avx2" 04:48:18 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 04:48:18 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000007000000007e"], 0x20}}, 0x0) 04:48:18 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6}, {0x0, 0x3}]}]}}, &(0x7f0000000080)=""/234, 0x36, 0xea, 0x1}, 0x20) 04:48:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100ffffff9e000000007e"], 0x20}}, 0x0) 04:48:18 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000004337e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="88d001000000000000007e0000000c"], 0x20}}, 0x0) 04:48:18 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0x401, 0xc2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 04:48:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="89d001000000000000007e0000000c"], 0x20}}, 0x0) [ 887.542976][T25025] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 887.555067][T25024] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 887.598460][T25029] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 887.609968][T25024] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 887.614107][T25015] fs-verity (sda1, inode 1183): Error -4 building Merkle tree 04:48:18 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x10000008, 0x0, 0x7, 0x0, 0x0, 0x80000001, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x42, 0xb5, 0x0, 0x0, 0x0, 0x98c, 0x9, 0x5}, 0x0) r0 = getpid() prlimit64(0x0, 0x3, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) setrlimit(0x7, 0x0) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x0, 0x40, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x8b89}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x12) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) truncate(&(0x7f0000000040)='./file0\x00', 0x3ed8000) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:48:18 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0x401, 0xc2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 887.660550][T25024] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:18 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0x401, 0xc2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 04:48:19 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0x401, 0xc2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 04:48:19 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000540)=[@decrefs], 0x0, 0x0, 0x0}) 04:48:19 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000008000000007e"], 0x20}}, 0x0) 04:48:19 executing program 5: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000800)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20, 0x0) unlinkat(r0, &(0x7f0000000080)='./file1\x00', 0x200) 04:48:19 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000003f7e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:19 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="f2ffff7f0000000000007e0000000c"], 0x20}}, 0x0) 04:48:19 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000003c0000000007e"], 0x20}}, 0x0) [ 888.423193][T25048] loop5: detected capacity change from 0 to 270 [ 888.459508][T25049] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 888.483813][T25051] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 888.510344][ T25] audit: type=1400 audit(1644468499.614:460): avc: denied { remount } for pid=25047 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 888.543193][T25051] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:19 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="f8ffff7f0000000000007e0000000c"], 0x20}}, 0x0) 04:48:19 executing program 5: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000800)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20, 0x0) unlinkat(r0, &(0x7f0000000080)='./file1\x00', 0x200) [ 888.720242][ T6763] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 888.745475][T25061] loop5: detected capacity change from 0 to 270 [ 888.856634][T25043] fs-verity (sda1, inode 1162): Error -4 building Merkle tree 04:48:20 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x10000008, 0x0, 0x7, 0x0, 0x0, 0x80000001, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x42, 0xb5, 0x0, 0x0, 0x0, 0x98c, 0x9, 0x5}, 0x0) r0 = getpid() prlimit64(0x0, 0x3, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) setrlimit(0x7, 0x0) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x0, 0x40, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x8b89}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x12) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) truncate(&(0x7f0000000040)='./file0\x00', 0x3ed8000) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:48:20 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="f9ffff7f0000000000007e0000000c"], 0x20}}, 0x0) 04:48:20 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="fcffff7f0000000000007e0000000c"], 0x20}}, 0x0) 04:48:20 executing program 5: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000800)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20, 0x0) unlinkat(r0, &(0x7f0000000080)='./file1\x00', 0x200) 04:48:20 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="1fffffff0000000000007e0000000c"], 0x20}}, 0x0) [ 889.095253][T25067] loop5: detected capacity change from 0 to 270 04:48:20 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000009000000007e"], 0x20}}, 0x0) 04:48:20 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0805e01d8088ffff00007e0000000c"], 0x20}}, 0x0) 04:48:20 executing program 5: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000800)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20, 0x0) unlinkat(r0, &(0x7f0000000080)='./file1\x00', 0x200) 04:48:20 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000487e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:20 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fffffff0000000007e"], 0x20}}, 0x0) [ 889.360034][ T6763] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 889.399297][T25080] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:48:20 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="5052d41e8088ffff00007e0000000c"], 0x20}}, 0x0) [ 889.413194][T25080] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 889.440032][T25082] loop5: detected capacity change from 0 to 270 04:48:20 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2054d41e8088ffff00007e0000000c"], 0x20}}, 0x0) [ 889.714785][ T6763] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:48:21 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x10000008, 0x0, 0x7, 0x0, 0x0, 0x80000001, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x42, 0xb5, 0x0, 0x0, 0x0, 0x98c, 0x9, 0x5}, 0x0) r0 = getpid() prlimit64(0x0, 0x3, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) setrlimit(0x7, 0x0) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x0, 0x40, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x8b89}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x12) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) truncate(&(0x7f0000000040)='./file0\x00', 0x3ed8000) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:48:21 executing program 5: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000800)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20, 0x0) unlinkat(r0, &(0x7f0000000080)='./file1\x00', 0x200) 04:48:21 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="c057d41e8088ffff00007e0000000c"], 0x20}}, 0x0) [ 890.127913][T25072] fs-verity (sda1, inode 1158): Error -4 building Merkle tree 04:48:21 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="38eacc788088ffff00007e0000000c"], 0x20}}, 0x0) 04:48:21 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000004c7e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 890.188960][T25091] loop5: detected capacity change from 0 to 270 04:48:21 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000a000000007e"], 0x20}}, 0x0) 04:48:21 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000e0ffff000000007e"], 0x20}}, 0x0) 04:48:21 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000007e0000000c"], 0x20}}, 0x0) 04:48:21 executing program 5: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000800)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20, 0x0) unlinkat(r0, &(0x7f0000000080)='./file1\x00', 0x200) [ 890.328476][T25096] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 890.359025][T25096] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 890.414718][ T6763] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 890.436699][T25105] loop5: detected capacity change from 0 to 270 04:48:21 executing program 5: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000800)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20, 0x0) unlinkat(r0, &(0x7f0000000080)='./file1\x00', 0x200) [ 890.703131][ T6763] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 890.715148][T25111] loop5: detected capacity change from 0 to 270 [ 890.722485][ T6763] I/O error, dev loop5, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:48:22 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0189436, 0x0) [ 890.947412][ T6763] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:48:22 executing program 5: r0 = socket(0xa, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x29, 0x7, 0x0, 0x0) 04:48:22 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000e000000007e"], 0x20}}, 0x0) 04:48:22 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000540)=[@decrefs={0x40046306}], 0x0, 0x0, 0x0}) 04:48:22 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000013537e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:22 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000f0ffff000000007e"], 0x20}}, 0x0) 04:48:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010300000000000000007e0000000c"], 0x20}}, 0x0) 04:48:22 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6}, {0x6}]}]}}, &(0x7f0000000080)=""/234, 0x36, 0xea, 0x1}, 0x20) [ 891.380858][T25109] fs-verity (sda1, inode 1184): Error -4 building Merkle tree 04:48:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010400000000000000007e0000000c"], 0x20}}, 0x0) [ 891.439105][T25123] __nla_validate_parse: 8 callbacks suppressed [ 891.439125][T25123] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 891.442880][T25121] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 891.459842][T25123] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 891.467220][T25124] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:22 executing program 5: r0 = socket(0x1e, 0x5, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x10f, 0x86, 0x0, 0x0) [ 891.497648][T25123] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:22 executing program 5: syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x86242) 04:48:22 executing program 5: r0 = socket(0xa, 0x3, 0x1) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 04:48:22 executing program 1: timer_settime(0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)) 04:48:22 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='M'}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)) [ 891.842898][T25140] binder: 25139:25140 ioctl c0306201 0 returned -14 04:48:23 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000f000000007e"], 0x20}}, 0x0) 04:48:23 executing program 1: r0 = socket(0x1e, 0x4, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x101d0) 04:48:23 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000607e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:23 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01007fffffff000000007e"], 0x20}}, 0x0) 04:48:23 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010500000000000000007e0000000c"], 0x20}}, 0x0) 04:48:23 executing program 1: bpf$BPF_BTF_LOAD(0x4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) [ 892.339126][T25144] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 892.371047][T25144] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:48:23 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) [ 892.385590][T25149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 892.396568][T25151] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 892.411494][T25144] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:23 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) 04:48:23 executing program 1: r0 = socket(0x1e, 0x5, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x10f, 0x85, 0x0, 0x0) 04:48:23 executing program 1: r0 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8931, &(0x7f0000000040)={'batadv_slave_1\x00'}) 04:48:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') preadv(r0, &(0x7f0000001340)=[{&(0x7f0000000040)=""/28, 0x1c}, {0x0}], 0x2, 0x4f, 0x0) 04:48:23 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x6, 0x7, 0x401, 0x0, 0x1}, 0x48) 04:48:24 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000001f000000007e"], 0x20}}, 0x0) 04:48:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fde1df2501000000000000000141000000180017"], 0x34}}, 0x0) 04:48:24 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000687e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:24 executing program 5: r0 = socket(0x1e, 0x5, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={0x0}}, 0xd0) 04:48:24 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01009effffff000000007e"], 0x20}}, 0x0) 04:48:24 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010600000000000000007e0000000c"], 0x20}}, 0x0) 04:48:24 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0x401, 0xc2, 0x10}, 0x48) [ 893.220644][T25168] tipc: Enabling of bearer <> rejected, illegal name 04:48:24 executing program 1: r0 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89e1, 0x0) [ 893.292990][T25177] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 893.302525][T25176] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 893.311183][T25178] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 893.313860][T25175] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:48:24 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 04:48:24 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 893.347808][T25175] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:24 executing program 1: r0 = socket(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) 04:48:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x5}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) 04:48:25 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000020000000007e"], 0x20}}, 0x0) 04:48:25 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:48:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x80ffff}, 0x48) 04:48:25 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000006c7e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:25 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010700000000000000007e0000000c"], 0x20}}, 0x0) 04:48:25 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100f0ffffff000000007e"], 0x20}}, 0x0) 04:48:25 executing program 5: socketpair(0x28, 0x0, 0xbb, &(0x7f0000000140)) [ 894.159679][T25196] binder: 25192:25196 ioctl c00c620f 0 returned -14 [ 894.194553][T25198] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:48:25 executing program 1: bpf$BPF_BTF_LOAD(0x3, 0x0, 0x0) 04:48:25 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000007e0000000c"], 0x20}}, 0x0) [ 894.234651][T25200] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 894.270901][T25200] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:25 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x4, 0x0, 0x1}, 0x98) 04:48:25 executing program 1: syz_emit_ethernet(0x50, &(0x7f0000000100)=ANY=[], 0x0) 04:48:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) 04:48:26 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000003f000000007e"], 0x20}}, 0x0) 04:48:26 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) 04:48:26 executing program 1: syz_emit_ethernet(0x10a7, &(0x7f00000021c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa2298e1d5378e86dd60"], 0x0) 04:48:26 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000747e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:26 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010900000000000000007e0000000c"], 0x20}}, 0x0) 04:48:26 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000003007e"], 0x20}}, 0x0) 04:48:26 executing program 1: syz_emit_ethernet(0x9d, &(0x7f0000000000)={@local, @broadcast, @val, {@ipv4}}, 0x0) 04:48:26 executing program 5: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) [ 895.090626][T25222] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 895.102018][T25222] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:26 executing program 1: ioctl$EVIOCGNAME(0xffffffffffffffff, 0x40004506, &(0x7f0000000000)) 04:48:26 executing program 1: ppoll(0x0, 0x0, &(0x7f00000000c0)={0xfffffffffffffffc}, 0x0, 0x0) 04:48:26 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x5, 0x4) 04:48:26 executing program 5: setitimer(0x1, &(0x7f0000000140)={{0xfad}, {0x0, 0x1}}, 0x0) 04:48:27 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000048000000007e"], 0x20}}, 0x0) 04:48:27 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f0000000080)=0xff, 0x4) 04:48:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept$inet(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10) 04:48:27 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000007a7e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:27 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010a00000000000000007e0000000c"], 0x20}}, 0x0) 04:48:27 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000340007e"], 0x20}}, 0x0) 04:48:27 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 04:48:27 executing program 5: setitimer(0x0, &(0x7f0000000080)={{0xfffffffffffffffc}, {0x0, 0xa}}, 0x0) [ 896.006571][T25253] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 896.051759][T25253] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:27 executing program 5: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:48:27 executing program 1: syz_emit_ethernet(0x62, &(0x7f0000000280)={@local, @remote, @val, {@ipv6}}, 0x0) 04:48:27 executing program 5: utimensat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0) 04:48:27 executing program 1: syz_emit_ethernet(0x1fff, &(0x7f00000003c0)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) 04:48:27 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000004c000000007e"], 0x20}}, 0x0) 04:48:27 executing program 5: setitimer(0x1, &(0x7f0000000140)={{}, {0x934}}, 0x0) 04:48:27 executing program 1: syz_emit_ethernet(0xe2, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6058369f00ac0000fe8000000000000000000000000000bbff02"], 0x0) 04:48:28 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000ffffff9e7e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:28 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010e00000000000000007e0000000c"], 0x20}}, 0x0) 04:48:28 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000ffffe0007e"], 0x20}}, 0x0) 04:48:28 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @val, {@ipv4}}, 0x0) 04:48:28 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000000)={0x7, 0x9, 0xf254, 0x2}, 0x8) [ 896.932339][T25280] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 896.957075][T25281] __nla_validate_parse: 8 callbacks suppressed [ 896.957112][T25281] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:48:28 executing program 1: r0 = socket$inet6(0x1c, 0x3, 0x0) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 04:48:28 executing program 5: ioctl$EVIOCGKEYCODE_V2(0xffffffffffffff9c, 0xc0284504, 0x0) [ 896.992700][T25284] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 897.003621][T25285] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 897.009048][T25280] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x46, &(0x7f0000000000)={@multicast1, @local={0xac, 0x14, 0x0}}, 0xc) 04:48:28 executing program 5: r0 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000040)='htcp\x00', 0x7) 04:48:28 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000060000000007e"], 0x20}}, 0x0) 04:48:28 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5}, 0x14) 04:48:28 executing program 5: syz_emit_ethernet(0x1fff, &(0x7f0000002180)={@random="e62c84691f89", @random="2298e1d5378e", @val, {@ipv6}}, 0x0) 04:48:28 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fffffffffffff0007e"], 0x20}}, 0x0) 04:48:28 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="011000000000000000007e0000000c"], 0x20}}, 0x0) 04:48:28 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fffffff07e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:29 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000240), 0x10) [ 897.863285][T25310] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 897.870968][T25311] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 897.890896][T25309] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 897.890930][T25311] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e4, &(0x7f0000000100)={0x0, 0x0, "d89f7c"}) 04:48:29 executing program 5: setresuid(0x0, 0xffffffffffffffff, 0x0) [ 897.915499][T25312] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:48:29 executing program 1: syz_emit_ethernet(0x117, &(0x7f00000003c0)=ANY=[@ANYBLOB="c1791628e748aaaaaaaaaabb08004f0701090065001f03449078ffffffff7f"], 0x0) 04:48:29 executing program 5: syz_emit_ethernet(0x485, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6058349f044f00fffe8000000000000000000000000000bbff0200000000000000000000000000011f010000000000000001000107"], 0x0) 04:48:29 executing program 1: acct(&(0x7f0000000300)='./file0/file0/file0\x00') 04:48:29 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000001067000000007e"], 0x20}}, 0x0) 04:48:29 executing program 5: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) 04:48:29 executing program 1: clock_nanosleep(0x0, 0x0, &(0x7f00000004c0)={0x9}, 0x0) 04:48:29 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000017e"], 0x20}}, 0x0) 04:48:29 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000007fffffff7e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:29 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="014800000000000000007e0000000c"], 0x20}}, 0x0) [ 898.786085][T25336] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 898.792160][T25335] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 898.818061][T25339] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:48:29 executing program 5: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) fchown(r0, 0x0, 0x0) [ 898.828885][T25338] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 898.839387][T25335] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001800)={&(0x7f00000003c0)=@file={0xa}, 0xa, &(0x7f0000001780)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000400)="2b6a972203ab8853532c513c7fa5b0703de8e0457cdbc2258c530297e80ce4a2b9c33d9d0aaaeeab2fe2599af3821e7384769749448eec4f2ae9a5509e36a4c816d55dd538d2dc577a7bdb7b50f9cf67444e323177f38d76e7c1555f68e4ae694d11b94eeebc6b37021987fb4cfb2b441c3e5fed2fdcbb2b0cc7417f760d1e1693acdfc5371178d9f8fd89d64f8a33f7cb4833cfdb68ee430b", 0x99}, {0x0}], 0x3}, 0x4) 04:48:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$inet(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 04:48:30 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) connect$inet(r1, &(0x7f0000000180)={0x10, 0x2}, 0x10) 04:48:30 executing program 5: mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xef57eac27676b135, 0xffffffffffffffff, 0x0) 04:48:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x104, &(0x7f0000000000)={0x10, 0x2}, 0x10) 04:48:30 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000068000000007e"], 0x20}}, 0x0) 04:48:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x0, 0x1f}, 0x8) 04:48:30 executing program 1: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:48:30 executing program 5: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @broadcast, @val, {@ipv4}}, 0x0) 04:48:30 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000027e"], 0x20}}, 0x0) 04:48:30 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="014c00000000000000007e0000000c"], 0x20}}, 0x0) 04:48:30 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000f0ffffffffffff7e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:30 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x103, &(0x7f0000000040)={0x0, 0x2, "9f38"}, &(0x7f00000000c0)=0xa) 04:48:30 executing program 5: r0 = socket(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000100)='vegas\x00', 0x6) [ 899.724553][T25364] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 899.735385][T25365] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 899.762091][T25365] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:30 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @val, {@ipv4}}, 0x0) 04:48:30 executing program 5: pipe2(&(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="fa", 0x1}], 0x1) ppoll(&(0x7f00000000c0)=[{r0, 0x1}, {r1, 0x1}, {r0}], 0x3, 0x0, 0x0, 0x0) 04:48:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x46, 0x0, 0x0) 04:48:31 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000006c000000007e"], 0x20}}, 0x0) 04:48:31 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x40001) 04:48:31 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:31 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000037e"], 0x20}}, 0x0) 04:48:31 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="016000000000000000007e0000000c"], 0x20}}, 0x0) 04:48:31 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000020000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:31 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000001900)={0x0, @in, 0x0, 0x0, 0x394}, 0x98) [ 900.659752][T25389] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 900.684396][T25389] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:31 executing program 5: execve(0x0, &(0x7f0000000480), 0x0) 04:48:31 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000050000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:31 executing program 5: syz_emit_ethernet(0x3a, &(0x7f0000000340)={@random="c74f7bcf3aaf", @local, @val, {@ipv6}}, 0x0) 04:48:31 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000060000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:32 executing program 5: futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x0, 0xfffffffffffffffb}}) 04:48:32 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000074000000007e"], 0x20}}, 0x0) 04:48:32 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000000)={@ipv4}, 0x14) 04:48:32 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 04:48:32 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000070000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:32 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="016800000000000000007e0000000c"], 0x20}}, 0x0) 04:48:32 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000047e"], 0x20}}, 0x0) 04:48:32 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000080000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x80, 0x0, 0x0) 04:48:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="b675939e1896d927eb3f16d2e1fbf79384fa7fdc77c7784ea5bd73b93f55bf15d99d23da7afa8b0ce9c47dd7cc7631b82234b51c78e834d561bc5e492ca90e736a1f83b9eadaac30e56aa664c240de87ffa9635faa28b4bb9e23b677fce554ea74b27a66bdc30d067dfa7ba253f5ff623b751cce645c81442e56428507d8ebcb808ed53142718b0279be2945b07839a64cc26d019e71f6bea1e831bbe6a2a68c36efbecf0b0d4c41851be611f702baa3ae37161a59fae32d0938a76a02b43a1d74103f5da8bcb4a05915", 0xca}, {&(0x7f00000002c0)="dd40c2c8a4d6721a04003539e75276cd14c9f617b4ac2a3b910535e350c160c269063ab4853655f1f44f3ca16890f3fcecd3c5b597b0a32b7831d8f8630870a7049abb9b8a88045a", 0x48}, {&(0x7f0000000840)="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", 0x6b7}], 0x3, &(0x7f0000000580)=[@rights], 0x38}, 0x20084) [ 901.594608][T25418] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 901.627306][T25418] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:32 executing program 5: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x2000, 0x0, 0x0) 04:48:32 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:32 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 04:48:33 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000007a000000007e"], 0x20}}, 0x0) 04:48:33 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000a0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:33 executing program 5: syz_emit_ethernet(0x296, &(0x7f0000003400)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd68583ba5026062fffe8000000000000000000000000000aafe"], 0x0) 04:48:33 executing program 1: setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0x40, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 04:48:33 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000057e"], 0x20}}, 0x0) 04:48:33 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="016c00000000000000007e0000000c"], 0x20}}, 0x0) 04:48:33 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000001140)={@local, @remote, @val, {@ipv4}}, 0x0) 04:48:33 executing program 1: pipe2(&(0x7f0000001bc0)={0xffffffffffffffff}, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/190, 0xbe}], 0x1) [ 902.483272][T25443] __nla_validate_parse: 13 callbacks suppressed [ 902.483293][T25443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 902.542365][T25448] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 902.552165][T25449] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 902.564317][T25450] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:48:33 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000b0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:33 executing program 5: r0 = socket$inet6(0x1c, 0x3, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) [ 902.586893][T25450] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:33 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000c0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 902.657349][T25457] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:48:33 executing program 5: ioctl$EVIOCGKEYCODE_V2(0xffffffffffffff9c, 0xc0284504, &(0x7f0000000000)) [ 902.733504][T25461] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:48:34 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100ffffff9e000000007e"], 0x20}}, 0x0) 04:48:34 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="017400000000000000007e0000000c"], 0x20}}, 0x0) 04:48:34 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000000)={0x0, 0x5}, 0x8) 04:48:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:34 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000067e"], 0x20}}, 0x0) 04:48:34 executing program 1: syz_emit_ethernet(0xa7, &(0x7f00000000c0)={@local, @remote, @val, {@ipv6}}, 0x0) 04:48:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000f0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 903.399462][T25466] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 903.435831][T25469] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:48:34 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) [ 903.471050][T25469] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 903.494558][T25473] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 903.499714][T25469] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000100000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f00000000c0), 0x8) [ 903.530034][T25476] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:48:34 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file2/file0\x00', 0x0) rename(&(0x7f0000000240)='./file2/file0\x00', 0x0) 04:48:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000110000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 903.619315][T25482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:48:35 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fffffff0000000007e"], 0x20}}, 0x0) 04:48:35 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x29, &(0x7f00000001c0), &(0x7f0000000080)=0x8) 04:48:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20184) 04:48:35 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000120000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:35 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000077e"], 0x20}}, 0x0) 04:48:35 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="017a00000000000000007e0000000c"], 0x20}}, 0x0) 04:48:35 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xb) 04:48:35 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000130000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 904.360672][T25496] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 904.403965][T25496] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:35 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @empty, @val, {@ipv6}}, 0x0) 04:48:35 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000140000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:35 executing program 5: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x40, 0x0, &(0x7f0000000040)) 04:48:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r0, 0x7fffffff, 0x0, 0x0, 0x0) 04:48:36 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="1fdb66a4bccb", @local, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote, @broadcast, @empty, @loopback}}}}, 0x0) 04:48:36 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000150000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:36 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000087e"], 0x20}}, 0x0) 04:48:36 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000003f2000000007e"], 0x20}}, 0x0) 04:48:36 executing program 5: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @val, {@ipv6}}, 0x0) 04:48:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01f000000000000000007e0000000c"], 0x20}}, 0x0) 04:48:36 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000580)={@local, @empty, @val, {@ipv6}}, 0x0) 04:48:36 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000160000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:36 executing program 5: shmget(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) [ 905.283888][T25526] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:48:36 executing program 1: syz_emit_ethernet(0x1016, &(0x7f00000013c0)=ANY=[], 0x0) [ 905.326841][T25526] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:36 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000170000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:36 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="1f", 0x1, 0x0, &(0x7f0000001240)={0x1c, 0x1c, 0x3}, 0x1c) 04:48:36 executing program 1: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0xffffffffffffffff}}) 04:48:36 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000180000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:37 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000e0ffff000000007e"], 0x20}}, 0x0) 04:48:37 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000097e"], 0x20}}, 0x0) 04:48:37 executing program 1: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="d50ebb10f8ed5392455a927509c09c941833e007789f40dd7c460e876640a6c9f972cf55f29a1c01b6ada7365714961b2b1382591ce9de52bd982ac0b354dfa22067f05fe642ac1121e29c6a3266a6c345dcc21ab268f66db3d0c8c7798d6e3d64e46b3b50234f927972b073edb06236f113dc09134870a98634168380bfb0e6cc5034147fec21a0a033eb67a5a0e699a561fbda2d52be2e45", 0x99, 0x0, 0x0, 0x0) 04:48:37 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001240)={0x10, 0x2}, 0x10) 04:48:37 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000190000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:37 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010003000000000000007e0000000c"], 0x20}}, 0x0) 04:48:37 executing program 5: ioctl$EVIOCGKEYCODE_V2(0xffffffffffffff9c, 0xc0284504, &(0x7f0000000000)) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:48:37 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001a0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 906.199871][T25555] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 906.221845][T25555] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:37 executing program 5: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f00000000c0), 0x8) 04:48:37 executing program 1: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @remote, @val, {@ipv6}}, 0x0) 04:48:37 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001b0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:37 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000000)={@local, @broadcast, @val, {@ipv6}}, 0x0) 04:48:38 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000f0ffff000000007e"], 0x20}}, 0x0) 04:48:38 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000e7e"], 0x20}}, 0x0) 04:48:38 executing program 5: ioctl$EVIOCGSND(0xffffffffffffffff, 0x4000451a, &(0x7f0000000000)) 04:48:38 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001f0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:38 executing program 1: readv(0xffffffffffffffff, 0x0, 0x8) 04:48:38 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01b403000000000000007e0000000c"], 0x20}}, 0x0) 04:48:38 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="4b20fbb351d8ffffffffffff81"], 0x0) 04:48:38 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006b0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:38 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100)=0x3, 0x4) [ 907.146233][T25580] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:48:38 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000020000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 907.192635][T25580] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:38 executing program 1: syz_emit_ethernet(0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffefff0100ffffefffffffff08"], 0x0) 04:48:38 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) 04:48:39 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01007fffffff000000007e"], 0x20}}, 0x0) 04:48:39 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000f7e"], 0x20}}, 0x0) 04:48:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f00000002c0), &(0x7f0000000380)=0x98) 04:48:39 executing program 5: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000080)={@rand_addr=' \x01\x00'}, 0x14) 04:48:39 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010005000000000000007e0000000c"], 0x20}}, 0x0) 04:48:39 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000030000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:39 executing program 1: syz_emit_ethernet(0x11ef, &(0x7f0000002200)=ANY=[@ANYBLOB="ffffffffffffd5378c00000086dd6050052111b9000042ecbf2bd23d256e193ab6e77b3bcb7f00000000000000000000ffff"], 0x0) [ 908.030301][T25605] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 908.060354][T25606] __nla_validate_parse: 22 callbacks suppressed [ 908.060375][T25606] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:39 executing program 5: execve(0x0, &(0x7f0000000480)=[&(0x7f0000000380)='/dev/crypto\x00'], &(0x7f0000000580)) 04:48:39 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg(r1, &(0x7f0000000340)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0}, 0x0) shutdown(r1, 0x1) [ 908.082114][T25605] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 908.099304][T25610] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 908.117748][T25611] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:48:39 executing program 5: bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r1, r0) 04:48:39 executing program 1: syz_emit_ethernet(0xe6, &(0x7f0000000280)={@local, @remote, @val, {@ipv6}}, 0x0) 04:48:39 executing program 1: unlink(&(0x7f0000000200)='./file0\x00') open$dir(&(0x7f0000000700)='./file0/file0/../file0\x00', 0x400000, 0x0) 04:48:40 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01009effffff000000007e"], 0x20}}, 0x0) 04:48:40 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @local, @val, {@ipv4}}, 0x0) 04:48:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000080), 0x90) 04:48:40 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000040000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:40 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000001f7e"], 0x20}}, 0x0) 04:48:40 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010006000000000000007e0000000c"], 0x20}}, 0x0) [ 908.949055][T25633] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 908.972774][T25637] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 908.979316][T25639] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0), &(0x7f0000000180)=0x98) 04:48:40 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockname$inet(r0, 0x0, &(0x7f0000000200)) [ 908.983093][T25638] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 909.007463][T25637] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) 04:48:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000000140), 0x4) 04:48:40 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0806000108000604"], 0x0) 04:48:40 executing program 5: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000100)={@rand_addr=' \x01\x00'}, 0x14) 04:48:40 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100f0ffffff000000007e"], 0x20}}, 0x0) 04:48:40 executing program 1: recvmsg(0xffffffffffffff9c, &(0x7f00000000c0)={&(0x7f0000000000)=@un=@abs, 0x8, 0x0, 0x4c, &(0x7f0000001240)=""/108, 0x6c}, 0x0) 04:48:40 executing program 5: clock_nanosleep(0xf, 0x0, &(0x7f00000004c0), 0x0) 04:48:40 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000050000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:40 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000207e"], 0x20}}, 0x0) 04:48:40 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010007000000000000007e0000000c"], 0x20}}, 0x0) 04:48:40 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x39, &(0x7f0000000080), 0x4) 04:48:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000001380)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffde}, 0x0) [ 909.900796][T25662] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 909.914950][T25663] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 909.928067][T25665] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:41 executing program 1: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000a40)='?', 0x1, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) sendto$inet(r0, &(0x7f0000000440)="b9", 0x1, 0x0, 0x0, 0x0) 04:48:41 executing program 5: setitimer(0x0, &(0x7f0000000000)={{}, {0x5}}, 0x0) setitimer(0x0, &(0x7f00000001c0), 0x0) [ 909.938227][ T25] audit: type=1400 audit(1644468521.044:461): avc: denied { read } for pid=25664 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 909.961417][T25667] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 909.972265][T25662] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:41 executing program 1: mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 04:48:41 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 04:48:41 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000003007e"], 0x20}}, 0x0) 04:48:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x102, &(0x7f0000000140)=ANY=[@ANYRES32], &(0x7f0000000200)=0x93) 04:48:41 executing program 5: faccessat(0xffffffffffffffff, &(0x7f0000000980)='./file0\x00', 0x0) 04:48:41 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000003f7e"], 0x20}}, 0x0) 04:48:41 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000060000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:41 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010009000000000000007e0000000c"], 0x20}}, 0x0) 04:48:41 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) 04:48:41 executing program 5: ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x2, 0x0, 0x2}}}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) shmget(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 910.795243][T25686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 910.819051][T25688] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:48:42 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="4b20fbb351d8ffffffffffff810040c4"], 0x0) [ 910.857155][T25688] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:42 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @val, {@ipv6}}, 0x0) 04:48:42 executing program 1: accept$inet(0xffffffffffffffff, &(0x7f0000000240), 0x0) 04:48:42 executing program 5: statfs(&(0x7f0000001ac0)='./file0/file0/file0\x00', 0x0) 04:48:42 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000340007e"], 0x20}}, 0x0) 04:48:42 executing program 1: syz_emit_ethernet(0x26, &(0x7f0000000840)={@empty, @empty, @val, {@ipv4}}, 0x0) 04:48:42 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x20, &(0x7f0000001080), 0x4) 04:48:42 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000487e"], 0x20}}, 0x0) 04:48:42 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000070000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:42 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000a000000000000007e0000000c"], 0x20}}, 0x0) 04:48:42 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @random="0b1ed948b99e", @val, {@ipv4}}, 0x0) 04:48:42 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000580)={@local, @empty, @val, {@ipv6}}, 0x0) [ 911.716892][T25713] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:48:42 executing program 1: syz_emit_ethernet(0x1016, &(0x7f00000013c0)=ANY=[@ANYBLOB="ff"], 0x0) 04:48:42 executing program 5: setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)="ed8c28070000005e57939cd332ec68737bd655c1c228a4ff306755cc0bc2909cd51828ea", 0xfffffffffffffdd6) [ 911.767292][T25713] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:42 executing program 1: syz_emit_ethernet(0xfff, &(0x7f00000010c0)={@broadcast, @random="2298e1d5378e", @val, {@ipv6}}, 0x0) 04:48:42 executing program 5: setitimer(0x1, &(0x7f0000000140)={{0xfad}, {0x934}}, 0x0) 04:48:43 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000ffffe0007e"], 0x20}}, 0x0) 04:48:43 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) 04:48:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x11, 0x0, &(0x7f00000000c0)) 04:48:43 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000011487e"], 0x20}}, 0x0) 04:48:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01920b000000000000007e0000000c"], 0x20}}, 0x0) 04:48:43 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000080000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000000), &(0x7f00000000c0)=0x14) [ 912.610080][ T25] audit: type=1400 audit(1644468523.714:462): avc: denied { setcurrent } for pid=25732 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 912.634092][T25738] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:48:43 executing program 1: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x3903000000000000, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x7}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "590b8ca3f4e9c578eb0df276543d9692c3eb3421d0073363548c2f3e"}}, {0x58, &(0x7f0000000400)=@string={0x58, 0x3, "44e96a2949275c6bd8edc4564c7cf38852a195a0ce06602896e27972906ae5229174e09677e22351c7a88767b6f4b79cb1d5e160edfe0d38bcb5558acd5301121bea46606a2e853bdf7b475eb4a1ec037806c95805fe"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x380a}}]}) 04:48:43 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000007c0)={0x1, &(0x7f0000000340)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000000)) [ 912.665926][T25738] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 912.762698][ T25] audit: type=1326 audit(1644468523.874:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25748 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f991b29d059 code=0x0 [ 913.021677][ T3680] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 913.301787][ T3680] usb 2-1: Using ep0 maxpacket: 16 04:48:44 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fffffffffffff0007e"], 0x20}}, 0x0) 04:48:44 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000090000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) [ 913.431789][ T3680] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 04:48:44 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01660c000000000000007e0000000c"], 0x20}}, 0x0) 04:48:44 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000004c7e"], 0x20}}, 0x0) [ 913.529194][T25754] __nla_validate_parse: 8 callbacks suppressed [ 913.529214][T25754] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 913.548154][T25758] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 913.554010][T25755] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 913.566002][T25758] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:44 executing program 5: syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x2006020, &(0x7f0000000540)) [ 913.578135][T25759] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:44 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)=']$-\x00') [ 913.632134][ T3680] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 913.643030][ T3680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.669870][ T3680] usb 2-1: Product: 㠊 04:48:44 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r0, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 04:48:44 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x5c, 0x0, &(0x7f0000000200)=[@increfs, @free_buffer, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @exit_looper], 0x1, 0x0, &(0x7f0000000280)="ee"}) [ 913.678985][ T3680] usb 2-1: Manufacturer: ⥪❉歜囄籌裳ꅒꂕێ⡠特檐⋥璑雠儣꣇枇鲷햱惡ﻭ㠍떼評反ሁ恆⹪㮅篟幇ꆴϬٸ壉︅ [ 913.707378][ T3680] usb 2-1: SerialNumber: syz 04:48:44 executing program 5: io_setup(0xfd1, &(0x7f0000000300)=0x0) r1 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000ac0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f00000002c0)="ba292345deee463949", 0x9}]) 04:48:44 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'team_slave_0\x00', {0x2, 0x0, @local}}) [ 914.070394][ T3680] usb 2-1: USB disconnect, device number 77 04:48:45 executing program 1: bpf$MAP_CREATE(0xb, &(0x7f0000001240), 0x48) 04:48:45 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000e0000000000007e0000000cf899000a7cbc5c82781671720b479c5cfbe6f659a28d8e18bfd9bfbca761ce19d45225e34c6b76d2648e5dbabf18b49f603da0d1779978efe4df10e18dfff5b37fe17daa70d4dc431d6959f8433c8368e70afff280ad99612e5a26fe194a442250ba1b756cae89438cb0ba6cc3c009570701f085a21c84f59ac6babb87b5f986caa00d1a7192fa83"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 04:48:45 executing program 5: bpf$MAP_CREATE(0x23, &(0x7f0000001240), 0x48) 04:48:45 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000017e"], 0x20}}, 0x0) 04:48:45 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000607e"], 0x20}}, 0x0) 04:48:45 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000e000000000000007e0000000c"], 0x20}}, 0x0) 04:48:45 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3f}}]}}]}}, 0x0) [ 914.561891][T25778] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 914.563213][T25780] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 914.571526][T25779] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 914.585228][T25782] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 914.599888][T25779] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:48:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) connect(r0, &(0x7f00000000c0)=@hci, 0x80) 04:48:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) connect(r0, &(0x7f00000000c0)=@hci, 0x80) [ 914.733840][ T3680] general protection fault, probably for non-canonical address 0xdffffc000000005a: 0000 [#1] PREEMPT SMP KASAN [ 914.745592][ T3680] KASAN: null-ptr-deref in range [0x00000000000002d0-0x00000000000002d7] [ 914.754008][ T3680] CPU: 1 PID: 3680 Comm: kworker/1:5 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef #0 [ 914.764170][ T3680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 914.774231][ T3680] Workqueue: events l2cap_chan_timeout 04:48:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) connect(r0, &(0x7f00000000c0)=@hci, 0x80) [ 914.779747][ T3680] RIP: 0010:__mutex_lock+0xec/0x12f0 [ 914.785048][ T3680] Code: d0 7c 08 84 d2 0f 85 65 0f 00 00 8b 15 6d 6a 04 07 85 d2 75 29 48 8d 7d 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5e 0f 00 00 48 3b 6d 60 0f 85 90 08 00 00 bf 01 [ 914.804663][ T3680] RSP: 0018:ffffc90003887b98 EFLAGS: 00010206 [ 914.810738][ T3680] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 914.818721][ T3680] RDX: 000000000000005a RSI: 0000000000000000 RDI: 00000000000002d0 [ 914.826698][ T3680] RBP: 0000000000000270 R08: ffffffff88338819 R09: 0000000000000000 [ 914.834668][ T3680] R10: ffffffff814bf262 R11: 0000000000000000 R12: 0000000000000000 [ 914.842630][ T3680] R13: dffffc0000000000 R14: ffff88801a46d020 R15: ffff8880b9d39500 [ 914.850610][ T3680] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 914.859550][ T3680] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 914.866237][ T3680] CR2: 0000000020000140 CR3: 000000006c355000 CR4: 00000000003506e0 [ 914.874206][ T3680] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 04:48:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) connect(r0, &(0x7f00000000c0)=@hci, 0x80) [ 914.882179][ T3680] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 914.890158][ T3680] Call Trace: [ 914.893440][ T3680] [ 914.896374][ T3680] ? l2cap_chan_timeout+0x69/0x2f0 [ 914.901505][ T3680] ? mutex_lock_io_nested+0x1150/0x1150 [ 914.907061][ T3680] ? lock_release+0x720/0x720 [ 914.911751][ T3680] ? lock_downgrade+0x6e0/0x6e0 [ 914.911977][T19936] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 914.916605][ T3680] ? lockdep_hardirqs_on+0x79/0x100 [ 914.929227][ T3680] l2cap_chan_timeout+0x69/0x2f0 [ 914.934183][ T3680] process_one_work+0x9ac/0x1650 [ 914.939197][ T3680] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 914.944583][ T3680] ? rwlock_bug.part.0+0x90/0x90 [ 914.949531][ T3680] ? _raw_spin_lock_irq+0x41/0x50 [ 914.954551][ T3680] worker_thread+0x657/0x1110 [ 914.959252][ T3680] ? process_one_work+0x1650/0x1650 [ 914.964460][ T3680] kthread+0x2e9/0x3a0 [ 914.968554][ T3680] ? kthread_complete_and_exit+0x40/0x40 [ 914.974209][ T3680] ret_from_fork+0x1f/0x30 [ 914.978673][ T3680] 04:48:46 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000240)) 04:48:46 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000240)) [ 914.981697][ T3680] Modules linked in: [ 914.990340][ T3680] ---[ end trace 0000000000000000 ]--- [ 914.995899][ T3680] RIP: 0010:__mutex_lock+0xec/0x12f0 [ 915.001241][ T3680] Code: d0 7c 08 84 d2 0f 85 65 0f 00 00 8b 15 6d 6a 04 07 85 d2 75 29 48 8d 7d 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5e 0f 00 00 48 3b 6d 60 0f 85 90 08 00 00 bf 01 [ 915.030650][ T3680] RSP: 0018:ffffc90003887b98 EFLAGS: 00010206 [ 915.042399][ T3680] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 915.050444][ T3680] RDX: 000000000000005a RSI: 0000000000000000 RDI: 00000000000002d0 [ 915.061193][ T3680] RBP: 0000000000000270 R08: ffffffff88338819 R09: 0000000000000000 [ 915.070002][ T3680] R10: ffffffff814bf262 R11: 0000000000000000 R12: 0000000000000000 [ 915.079109][ T3680] R13: dffffc0000000000 R14: ffff88801a46d020 R15: ffff8880b9d39500 [ 915.087253][ T3680] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 915.096327][ T3680] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 915.102986][ T3680] CR2: 00007f07907ea6e8 CR3: 000000007c89f000 CR4: 00000000003506e0 [ 915.111010][ T3680] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 915.119126][ T3680] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 915.127198][ T3680] Kernel panic - not syncing: Fatal exception [ 915.133419][ T3680] Kernel Offset: disabled [ 915.137730][ T3680] Rebooting in 86400 seconds..