76eb4370767df37fc14ce13226cbfe343dc5c79e1eae0262e16842efbd7f07fd674dd8786f505076709b375dbc57906865559186985954b6247c1cb021582422a31b3f3daf2c6ca9abcfc29fd9111fb97347acdf2a93af6c11312fbf004fe31b135445df6ab344a54c11e9543c936481a6488e47382a02170e1d33079bdf5ccb78a0d574"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x10c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0xf, 0x5, "7f5144a0bb5d0b214a1799"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc8, 0x5, "fbacd43019d639e3cbb6b0eb926d77adccd7a868c9d33a4b02d79a3701e64e5b4876719d3bccfe41ed22e0b093e57f235628890f4b738a7516fd1a6ae745f293a46105b79bfae4c6e93bd9ccf5e5e1ed6c23683b793c368ec02b91e03ba7468561b1ad419e4c1517d189c1611210dbeae08e273e6ee52b6c8a4e330164240462dd634661cf037fce50b49e6fd0a57cf26ed00fe9ed7e26337cf3334cd42edcdc17b471887df05a56faa49ac9ba84ea039cf3a9a057f5a8dfc3a7722d0210e10c90b0680e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0x20, 0x5, "573aebd4c9dd31220ce00215380e8ff524ebb3b448f033c6b33a94ee"}]}, @ETHTOOL_A_FEATURES_WANTED={0x110, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xfc, 0x4, "2041969f032c909de86d1f44941479d9958ed1581a322407daa5339aa1bb24a8cd80de21e97f9becfdaba9da86ce9402e866fbe6d7003a7772dba2f8e19fb02793f6cf7e028e79650eee537f54503851d9abfd2d31e4410cc4447e2d52874fa8e63a47eabf60fa2c4f53de3ebac170c550794dcd0166c3b26bb23c4eb63b802aad12e626b279d04776e18a680c4383ee8309b9501fdb0f3028b8be9b3624546a93def45c0538483c8fa5a24e7d3cacbd9c3a51320c8b60448597f1fe7aabbde550c639dd342a9863b117d9e5d303021bde29c89317cb72fc250bf1ab34fb7b53f55fe3203c083e8a8693b7dfeb3d62cefff7d1328cd88f18"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x5f4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) 12:47:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3248.796546][T25353] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3248.810140][T25353] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:47:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3248.900996][ T27] audit: type=1804 audit(1681908463.956:499): pid=25358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/313/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 12:47:44 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'team_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'team_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r6, 0x721, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x34}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@private, @multicast2, 0x0}, &(0x7f00000000c0)=0xc) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000140), 0x10) (async) connect$can_bcm(r11, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r11, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r10, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r9, @ANYBLOB="9b37d7ff08"], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x5f4, r6, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x16c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xeb, 0x5, "9583debfd199884ef1005536043fb9141eeea3ac32396cb55da97bb29057f4c4e111345e58b8c869f8cdb34a23612642bc842cd55b3c06f3052eb6a249aafbaaf3964e7060b8a879ff2b5ac675f7f41a4e361369f0b00e5635b36eb2928b2b4276c3dc7bf05a471f4b6b36d29f98e26567dab64f15f003accd7d623142b38e2e819815f1a080c8fbf834654fc8d321213146a1402558f8e09ee7fc35a3d6e4d03d2ffb73a83da95b35917401c17262e0366db50ec5087053f0bd225644c8d1725f5c160d0281b9e389be29ee224598e07eff42aff3fc01811c266e86f54e19b19f1d3da48e301d"}, @ETHTOOL_A_BITSET_MASK={0x5d, 0x5, "11fa46d141249378edcfcd15116036d00215b75a7af958fbbc7e5551873a701af2c97a4a322a115e48e5c7b2b1f69cb50041e0f53f94e4fc88f99dc7db20a3d8bc4f66332d10183880e8fc71636fcc3b6b060519663f192372"}]}, @ETHTOOL_A_FEATURES_WANTED={0x15c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x47, 0x5, "e44aa6b5613a6c5475ca82e5c4f23015c6147372743506f15ea1d7ca3b6dd2e6b5fb8d1701ba77f101ee872efad6df55d1ec52414425d4606cd3890bf1ecc67c07401c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x102, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x10c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0xf, 0x5, "7f5144a0bb5d0b214a1799"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc8, 0x5, "fbacd43019d639e3cbb6b0eb926d77adccd7a868c9d33a4b02d79a3701e64e5b4876719d3bccfe41ed22e0b093e57f235628890f4b738a7516fd1a6ae745f293a46105b79bfae4c6e93bd9ccf5e5e1ed6c23683b793c368ec02b91e03ba7468561b1ad419e4c1517d189c1611210dbeae08e273e6ee52b6c8a4e330164240462dd634661cf037fce50b49e6fd0a57cf26ed00fe9ed7e26337cf3334cd42edcdc17b471887df05a56faa49ac9ba84ea039cf3a9a057f5a8dfc3a7722d0210e10c90b0680e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0x20, 0x5, "573aebd4c9dd31220ce00215380e8ff524ebb3b448f033c6b33a94ee"}]}, @ETHTOOL_A_FEATURES_WANTED={0x110, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xfc, 0x4, "2041969f032c909de86d1f44941479d9958ed1581a322407daa5339aa1bb24a8cd80de21e97f9becfdaba9da86ce9402e866fbe6d7003a7772dba2f8e19fb02793f6cf7e028e79650eee537f54503851d9abfd2d31e4410cc4447e2d52874fa8e63a47eabf60fa2c4f53de3ebac170c550794dcd0166c3b26bb23c4eb63b802aad12e626b279d04776e18a680c4383ee8309b9501fdb0f3028b8be9b3624546a93def45c0538483c8fa5a24e7d3cacbd9c3a51320c8b60448597f1fe7aabbde550c639dd342a9863b117d9e5d303021bde29c89317cb72fc250bf1ab34fb7b53f55fe3203c083e8a8693b7dfeb3d62cefff7d1328cd88f18"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x5f4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x5f4, r6, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x16c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xeb, 0x5, "9583debfd199884ef1005536043fb9141eeea3ac32396cb55da97bb29057f4c4e111345e58b8c869f8cdb34a23612642bc842cd55b3c06f3052eb6a249aafbaaf3964e7060b8a879ff2b5ac675f7f41a4e361369f0b00e5635b36eb2928b2b4276c3dc7bf05a471f4b6b36d29f98e26567dab64f15f003accd7d623142b38e2e819815f1a080c8fbf834654fc8d321213146a1402558f8e09ee7fc35a3d6e4d03d2ffb73a83da95b35917401c17262e0366db50ec5087053f0bd225644c8d1725f5c160d0281b9e389be29ee224598e07eff42aff3fc01811c266e86f54e19b19f1d3da48e301d"}, @ETHTOOL_A_BITSET_MASK={0x5d, 0x5, "11fa46d141249378edcfcd15116036d00215b75a7af958fbbc7e5551873a701af2c97a4a322a115e48e5c7b2b1f69cb50041e0f53f94e4fc88f99dc7db20a3d8bc4f66332d10183880e8fc71636fcc3b6b060519663f192372"}]}, @ETHTOOL_A_FEATURES_WANTED={0x15c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x47, 0x5, "e44aa6b5613a6c5475ca82e5c4f23015c6147372743506f15ea1d7ca3b6dd2e6b5fb8d1701ba77f101ee872efad6df55d1ec52414425d4606cd3890bf1ecc67c07401c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x102, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x10c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0xf, 0x5, "7f5144a0bb5d0b214a1799"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc8, 0x5, "fbacd43019d639e3cbb6b0eb926d77adccd7a868c9d33a4b02d79a3701e64e5b4876719d3bccfe41ed22e0b093e57f235628890f4b738a7516fd1a6ae745f293a46105b79bfae4c6e93bd9ccf5e5e1ed6c23683b793c368ec02b91e03ba7468561b1ad419e4c1517d189c1611210dbeae08e273e6ee52b6c8a4e330164240462dd634661cf037fce50b49e6fd0a57cf26ed00fe9ed7e26337cf3334cd42edcdc17b471887df05a56faa49ac9ba84ea039cf3a9a057f5a8dfc3a7722d0210e10c90b0680e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0x20, 0x5, "573aebd4c9dd31220ce00215380e8ff524ebb3b448f033c6b33a94ee"}]}, @ETHTOOL_A_FEATURES_WANTED={0x110, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xfc, 0x4, "2041969f032c909de86d1f44941479d9958ed1581a322407daa5339aa1bb24a8cd80de21e97f9becfdaba9da86ce9402e866fbe6d7003a7772dba2f8e19fb02793f6cf7e028e79650eee537f54503851d9abfd2d31e4410cc4447e2d52874fa8e63a47eabf60fa2c4f53de3ebac170c550794dcd0166c3b26bb23c4eb63b802aad12e626b279d04776e18a680c4383ee8309b9501fdb0f3028b8be9b3624546a93def45c0538483c8fa5a24e7d3cacbd9c3a51320c8b60448597f1fe7aabbde550c639dd342a9863b117d9e5d303021bde29c89317cb72fc250bf1ab34fb7b53f55fe3203c083e8a8693b7dfeb3d62cefff7d1328cd88f18"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x5f4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 12:47:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}]}, 0x3c}}, 0x0) 12:47:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}]}, 0x3c}}, 0x0) 12:47:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x2000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}]}, 0x3c}}, 0x0) 12:47:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x4000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x2d120000, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000000c0)={0x6, 'geneve0\x00', {0x1000}}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="5dec923b", @ANYRES16=r1, @ANYBLOB="010000000000000000003000000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) [ 3249.694352][T25391] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3249.719210][T25391] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:47:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) (async) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000000c0)={0x6, 'geneve0\x00', {0x1000}}) (async) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="5dec923b", @ANYRES16=r1, @ANYBLOB="010000000000000000003000000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) 12:47:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3249.784706][ T27] audit: type=1804 audit(1681908464.836:500): pid=25395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/314/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 12:47:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) (async) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000000c0)={0x6, 'geneve0\x00', {0x1000}}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="5dec923b", @ANYRES16=r1, @ANYBLOB="010000000000000000003000000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) 12:47:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x3000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1100020}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x900}, 0x4000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "346beb2b0413b939", "aa1440f82c2e3bc3bae52c080a7050c29c921464abec4d62ec21ed8dfe2a43dd", "d2085b9f", "f81ec771cac91315"}, 0x38) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)) 12:47:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x5000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3250.534808][T25417] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 12:47:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1100020}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x900}, 0x4000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "346beb2b0413b939", "aa1440f82c2e3bc3bae52c080a7050c29c921464abec4d62ec21ed8dfe2a43dd", "d2085b9f", "f81ec771cac91315"}, 0x38) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)) [ 3250.582698][T25417] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:47:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1100020}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x900}, 0x4000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) (async) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "346beb2b0413b939", "aa1440f82c2e3bc3bae52c080a7050c29c921464abec4d62ec21ed8dfe2a43dd", "d2085b9f", "f81ec771cac91315"}, 0x38) (async, rerun: 32) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)) [ 3250.698889][ T27] audit: type=1804 audit(1681908465.746:501): pid=25427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/315/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 12:47:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\\', @ANYRES16=r1, @ANYBLOB="000429bd7000fcdbdf2501000000080002000200000008000100020000000800020002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r7) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x2c}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r9, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48804}, 0x44000) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 12:47:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a3", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\\', @ANYRES16=r1, @ANYBLOB="000429bd7000fcdbdf2501000000080002000200000008000100020000000800020002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4008000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r7) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x2c}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r9, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48804}, 0x44000) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 12:47:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x4000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a3", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\\', @ANYRES16=r1, @ANYBLOB="000429bd7000fcdbdf2501000000080002000200000008000100020000000800020002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r7) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x2c}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r9, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48804}, 0x44000) (async) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 12:47:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x6000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x48000000, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0xa46b2000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r2, 0x1482d000) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="4a49853485c958cfe218b2ccd7acdc87e1b594fc5382ffd347f75081287b3b7b41764558a4cf3b5341d0e2067c4b89479752f83184eb88f761a97caeb4e2a8534b0fc46d05be8b1c2a7778f3b8626b1793fbafaa37becda2759449c3986d49f3ca6cc98d430afdbd922d2f590d272e8ba2042117c7278af8ec2ab2244470b221e2227f78746dc3760a50cbbd5831dd066dc47772a7573c145f1740589db9de15565dd70b4bc76e1c6c611603cbe478bc8ed9b15ba073a96005c48d29ca", @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000b00e40343700c0e13fc300e37cd29acc0d286b55d280913f9d64fe8371fcbd8a83996", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) [ 3251.448099][T25455] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3251.483035][T25455] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:47:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a3", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0xa46b2000) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0xa46b2000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r2, 0x1482d000) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="4a49853485c958cfe218b2ccd7acdc87e1b594fc5382ffd347f75081287b3b7b41764558a4cf3b5341d0e2067c4b89479752f83184eb88f761a97caeb4e2a8534b0fc46d05be8b1c2a7778f3b8626b1793fbafaa37becda2759449c3986d49f3ca6cc98d430afdbd922d2f590d272e8ba2042117c7278af8ec2ab2244470b221e2227f78746dc3760a50cbbd5831dd066dc47772a7573c145f1740589db9de15565dd70b4bc76e1c6c611603cbe478bc8ed9b15ba073a96005c48d29ca", @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000b00e40343700c0e13fc300e37cd29acc0d286b55d280913f9d64fe8371fcbd8a83996", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) 12:47:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a3000500", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3251.609423][ T27] audit: type=1804 audit(1681908466.656:502): pid=25462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/316/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 12:47:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0xa46b2000) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r2, 0x1482d000) (async) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="4a49853485c958cfe218b2ccd7acdc87e1b594fc5382ffd347f75081287b3b7b41764558a4cf3b5341d0e2067c4b89479752f83184eb88f761a97caeb4e2a8534b0fc46d05be8b1c2a7778f3b8626b1793fbafaa37becda2759449c3986d49f3ca6cc98d430afdbd922d2f590d272e8ba2042117c7278af8ec2ab2244470b221e2227f78746dc3760a50cbbd5831dd066dc47772a7573c145f1740589db9de15565dd70b4bc76e1c6c611603cbe478bc8ed9b15ba073a96005c48d29ca", @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000b00e40343700c0e13fc300e37cd29acc0d286b55d280913f9d64fe8371fcbd8a83996", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) 12:47:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a3000500", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x5000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) 12:47:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a3000500", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x7000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) [ 3252.353410][T25485] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3252.364049][T25484] __nla_validate_parse: 41 callbacks suppressed [ 3252.364075][T25484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3252.401561][T25485] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:47:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) (async) [ 3252.456784][T25493] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3252.485684][T25484] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 12:47:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a300050000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x240080c0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3252.561109][ T27] audit: type=1804 audit(1681908467.616:503): pid=25491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/317/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 3252.607380][T25491] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3252.627654][T25507] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:47:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x240080c0) (async) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a300050000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3252.677008][T25507] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3252.708537][T25507] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3252.802689][T25515] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3252.899605][T25516] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3252.914936][T25515] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 12:47:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x6000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x240080c0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a300050000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x57110000, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x8000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x93, 0xb}}}}}, 0x28}}, 0x0) [ 3253.245033][T25522] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 12:47:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3253.302788][T25522] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:47:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x93, 0xb}}}}}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x43}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x93, 0xb}}}}}, 0x28}}, 0x0) (async) 12:47:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x43}, 0x10) (async, rerun: 64) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x93, 0xb}}}}}, 0x28}}, 0x0) [ 3253.386709][ T27] audit: type=1804 audit(1681908468.436:504): pid=25528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/318/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 12:47:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x7000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003000000008000300", @ANYRES32=r3, @ANYBLOB="000096ccb60908155ab37b5363"], 0x1c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000040)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000004000000003b00000608000300", @ANYRES32=r11, @ANYBLOB="44003300201c0300080211000001080211000001505050505050270002006c0e080211000000001cf29bf3fef8261c6884afb6e61effd983a9caabc00228ae4cfa4ab51304008700"], 0x64}}, 0x40000) sendmsg$NL80211_CMD_FLUSH_PMKSA(r7, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1e0000", @ANYRES16=r9, @ANYBLOB="00002dbd7000fddbdf253600000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xaf385efbc6feb03a}, 0x4040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)) sendmsg$NL80211_CMD_RADAR_DETECT(r10, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r9, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4a}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) 12:47:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x60000000, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x9000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003000000008000300", @ANYRES32=r3, @ANYBLOB="000096ccb60908155ab37b5363"], 0x1c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) (rerun: 32) write(r7, &(0x7f0000000040)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000004000000003b00000608000300", @ANYRES32=r11, @ANYBLOB="44003300201c0300080211000001080211000001505050505050270002006c0e080211000000001cf29bf3fef8261c6884afb6e61effd983a9caabc00228ae4cfa4ab51304008700"], 0x64}}, 0x40000) (async, rerun: 32) sendmsg$NL80211_CMD_FLUSH_PMKSA(r7, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1e0000", @ANYRES16=r9, @ANYBLOB="00002dbd7000fddbdf253600000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xaf385efbc6feb03a}, 0x4040) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r10, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r9, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4a}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8800) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) (rerun: 64) [ 3254.183417][T25558] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3254.200470][T25558] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:47:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003000000008000300", @ANYRES32=r3, @ANYBLOB="000096ccb60908155ab37b5363"], 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r4) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000040)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) (async) write(r7, &(0x7f0000000040)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000004000000003b00000608000300", @ANYRES32=r11, @ANYBLOB="44003300201c0300080211000001080211000001505050505050270002006c0e080211000000001cf29bf3fef8261c6884afb6e61effd983a9caabc00228ae4cfa4ab51304008700"], 0x64}}, 0x40000) sendmsg$NL80211_CMD_FLUSH_PMKSA(r7, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1e0000", @ANYRES16=r9, @ANYBLOB="00002dbd7000fddbdf253600000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xaf385efbc6feb03a}, 0x4040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)) sendmsg$NL80211_CMD_RADAR_DETECT(r10, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r9, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4a}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8800) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r10, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r9, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4a}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) 12:47:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3254.336998][ T27] audit: type=1804 audit(1681908469.386:505): pid=25568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/319/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 12:47:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050078f90590b8b57e55f4f4bbffb224da53fc9cda410201005c000000000000002e059ebcc12dbce28a973a4a6d81178c568016fa4333c074d8680b418779085bf2b33894be8fcefb427fe1827f5d3f44f8dde426e90de271504af174d27921d700548abb639eb58ac563b6d4ffdfb489572b9dd0dbce7f91bf8df00939499e110adcde0f4b17626ebda91d0d2941ed413b5f48b8a8f836413c25b92197e11450e08d14f16fffb39c1651880efbd053308c1be0dab940097747956aa04343bb559d94a375c539b7560e168fb95d29b619670c2cb05e", @ANYRES32=r5, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x20, 0x5c}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x805}, 0x8010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r6, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x31}]}, 0x24}}, 0x0) 12:47:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x8000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050078f90590b8b57e55f4f4bbffb224da53fc9cda410201005c000000000000002e059ebcc12dbce28a973a4a6d81178c568016fa4333c074d8680b418779085bf2b33894be8fcefb427fe1827f5d3f44f8dde426e90de271504af174d27921d700548abb639eb58ac563b6d4ffdfb489572b9dd0dbce7f91bf8df00939499e110adcde0f4b17626ebda91d0d2941ed413b5f48b8a8f836413c25b92197e11450e08d14f16fffb39c1651880efbd053308c1be0dab940097747956aa04343bb559d94a375c539b7560e168fb95d29b619670c2cb05e", @ANYRES32=r5, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x20, 0x5c}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x805}, 0x8010) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r6, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x31}]}, 0x24}}, 0x0) 12:47:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x63b72500, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xe000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050078f90590b8b57e55f4f4bbffb224da53fc9cda410201005c000000000000002e059ebcc12dbce28a973a4a6d81178c568016fa4333c074d8680b418779085bf2b33894be8fcefb427fe1827f5d3f44f8dde426e90de271504af174d27921d700548abb639eb58ac563b6d4ffdfb489572b9dd0dbce7f91bf8df00939499e110adcde0f4b17626ebda91d0d2941ed413b5f48b8a8f836413c25b92197e11450e08d14f16fffb39c1651880efbd053308c1be0dab940097747956aa04343bb559d94a375c539b7560e168fb95d29b619670c2cb05e", @ANYRES32=r5, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x20, 0x5c}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x805}, 0x8010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r6, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x31}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r6, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x31}]}, 0x24}}, 0x0) 12:47:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3255.088996][T25595] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3255.109649][T25595] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:47:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x260, r1, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7a}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2f}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x44}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x39}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x40]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8, 0xfffffff9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xf3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x3f, 0x2, 0x8, 0x24d, 0x401, 0x4, 0x537, 0xfffffff9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x0, 0x800, 0x25de, 0xfff, 0x1]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x626}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffc2b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x97}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x27}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6e192f8c}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x317}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff7856}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x309}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x43}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xee}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x80, 0x4, 0x0, 0x6, 0x3f]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2e7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x445}]}, @NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x50e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3ff, 0x3ff, 0x0]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0xf3a7, 0x3, 0x9, 0xfffff1ad, 0x96b, 0xfe, 0x1, 0x800, 0x0, 0x8001]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x19b}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3, 0x5, 0x3]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x46}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x17, {0xf, 0x628e, @l2={'ib', 0x3a, 'wg2\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x2) [ 3255.204617][ T27] audit: type=1804 audit(1681908470.256:506): pid=25598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/320/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 12:47:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x260, r1, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7a}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2f}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x44}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x39}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x40]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8, 0xfffffff9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xf3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x3f, 0x2, 0x8, 0x24d, 0x401, 0x4, 0x537, 0xfffffff9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x0, 0x800, 0x25de, 0xfff, 0x1]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x626}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffc2b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x97}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x27}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6e192f8c}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x317}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff7856}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x309}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x43}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xee}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x80, 0x4, 0x0, 0x6, 0x3f]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2e7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x445}]}, @NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x50e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3ff, 0x3ff, 0x0]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0xf3a7, 0x3, 0x9, 0xfffff1ad, 0x96b, 0xfe, 0x1, 0x800, 0x0, 0x8001]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x19b}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3, 0x5, 0x3]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x46}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x17, {0xf, 0x628e, @l2={'ib', 0x3a, 'wg2\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) (async) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x2) 12:47:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x9000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x260, r1, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7a}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2f}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x44}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x39}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x40]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8, 0xfffffff9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xf3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x3f, 0x2, 0x8, 0x24d, 0x401, 0x4, 0x537, 0xfffffff9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x0, 0x800, 0x25de, 0xfff, 0x1]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x626}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffc2b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x97}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x27}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6e192f8c}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x317}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff7856}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x309}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x43}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xee}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x80, 0x4, 0x0, 0x6, 0x3f]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2e7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x445}]}, @NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x50e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3ff, 0x3ff, 0x0]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0xf3a7, 0x3, 0x9, 0xfffff1ad, 0x96b, 0xfe, 0x1, 0x800, 0x0, 0x8001]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x19b}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3, 0x5, 0x3]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x46}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x17, {0xf, 0x628e, @l2={'ib', 0x3a, 'wg2\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x2) 12:47:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xf000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x64b72500, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000004000000003b00000608000300", @ANYRES32=r8, @ANYBLOB="44003300201c0300080211000001080211000001505050505050270002006c0e080211000000001cf29bf3fef8261c6884afb6e61effd983a9caabc00228ae4cfa4ab51304008700"], 0x64}}, 0x40000) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1e0000", @ANYRES16=r6, @ANYBLOB="00002dbd7000fddbdf253600000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xaf385efbc6feb03a}, 0x4040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4040810) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r12, 0x0) accept4$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r13, 0x0) sendmsg$rds(r13, &(0x7f0000000840)={&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f00000001c0)=""/22, 0x16}], 0x2, &(0x7f0000000680)=[@mask_cswp={0x58, 0x114, 0x9, {{0x800, 0x4}, &(0x7f0000000300)=0x8000, &(0x7f0000000380)=0xffff, 0x4, 0x0, 0x7b000000000000, 0x8000000000000001, 0x8, 0x2df}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0xff}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x100}, &(0x7f00000003c0)=0x42, &(0x7f0000000400)=0x6, 0x5, 0xffffffff00000001, 0x3, 0x1, 0x1, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0xe0e, 0x200}}, @rdma_args={0x48, 0x114, 0x1, {{0xf93, 0x80}, {&(0x7f0000000440)=""/129, 0x81}, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/183, 0xb7}], 0x1, 0x34, 0x3}}, @rdma_dest={0x18, 0x114, 0x2, {0x395, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x6, 0x9}, &(0x7f0000000600)=0x365, &(0x7f0000000640)=0x9, 0x88, 0xc7b, 0x2, 0x8, 0x51, 0x3}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x20}], 0x1b0, 0x20000880}, 0x8081) [ 3255.977574][T25621] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3256.007165][T25621] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:47:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:51 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000004000000003b00000608000300", @ANYRES32=r8, @ANYBLOB="44003300201c0300080211000001080211000001505050505050270002006c0e080211000000001cf29bf3fef8261c6884afb6e61effd983a9caabc00228ae4cfa4ab51304008700"], 0x64}}, 0x40000) (async) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000004000000003b00000608000300", @ANYRES32=r8, @ANYBLOB="44003300201c0300080211000001080211000001505050505050270002006c0e080211000000001cf29bf3fef8261c6884afb6e61effd983a9caabc00228ae4cfa4ab51304008700"], 0x64}}, 0x40000) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1e0000", @ANYRES16=r6, @ANYBLOB="00002dbd7000fddbdf253600000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xaf385efbc6feb03a}, 0x4040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4040810) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r12, 0x0) accept4$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r13, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r13, 0x0) sendmsg$rds(r13, &(0x7f0000000840)={&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f00000001c0)=""/22, 0x16}], 0x2, &(0x7f0000000680)=[@mask_cswp={0x58, 0x114, 0x9, {{0x800, 0x4}, &(0x7f0000000300)=0x8000, &(0x7f0000000380)=0xffff, 0x4, 0x0, 0x7b000000000000, 0x8000000000000001, 0x8, 0x2df}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0xff}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x100}, &(0x7f00000003c0)=0x42, &(0x7f0000000400)=0x6, 0x5, 0xffffffff00000001, 0x3, 0x1, 0x1, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0xe0e, 0x200}}, @rdma_args={0x48, 0x114, 0x1, {{0xf93, 0x80}, {&(0x7f0000000440)=""/129, 0x81}, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/183, 0xb7}], 0x1, 0x34, 0x3}}, @rdma_dest={0x18, 0x114, 0x2, {0x395, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x6, 0x9}, &(0x7f0000000600)=0x365, &(0x7f0000000640)=0x9, 0x88, 0xc7b, 0x2, 0x8, 0x51, 0x3}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x20}], 0x1b0, 0x20000880}, 0x8081) [ 3256.175903][ T27] audit: type=1804 audit(1681908471.226:507): pid=25627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/321/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 12:47:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000004000000003b00000608000300", @ANYRES32=r8, @ANYBLOB="44003300201c0300080211000001080211000001505050505050270002006c0e080211000000001cf29bf3fef8261c6884afb6e61effd983a9caabc00228ae4cfa4ab51304008700"], 0x64}}, 0x40000) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1e0000", @ANYRES16=r6, @ANYBLOB="00002dbd7000fddbdf253600000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xaf385efbc6feb03a}, 0x4040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4040810) (async) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r12, 0x0) (async) accept4$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r13, 0x0) (async) sendmsg$rds(r13, &(0x7f0000000840)={&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f00000001c0)=""/22, 0x16}], 0x2, &(0x7f0000000680)=[@mask_cswp={0x58, 0x114, 0x9, {{0x800, 0x4}, &(0x7f0000000300)=0x8000, &(0x7f0000000380)=0xffff, 0x4, 0x0, 0x7b000000000000, 0x8000000000000001, 0x8, 0x2df}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0xff}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x100}, &(0x7f00000003c0)=0x42, &(0x7f0000000400)=0x6, 0x5, 0xffffffff00000001, 0x3, 0x1, 0x1, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0xe0e, 0x200}}, @rdma_args={0x48, 0x114, 0x1, {{0xf93, 0x80}, {&(0x7f0000000440)=""/129, 0x81}, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/183, 0xb7}], 0x1, 0x34, 0x3}}, @rdma_dest={0x18, 0x114, 0x2, {0x395, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x6, 0x9}, &(0x7f0000000600)=0x365, &(0x7f0000000640)=0x9, 0x88, 0xc7b, 0x2, 0x8, 0x51, 0x3}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x20}], 0x1b0, 0x20000880}, 0x8081) 12:47:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xe000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x4c, 0x49, 0x800, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xf, 0x0, 0x0, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000005}, 0xc0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x65b72500, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x14000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x4c, 0x49, 0x800, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xf, 0x0, 0x0, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000005}, 0xc0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3256.917682][T25654] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3256.945412][T25654] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:47:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x4c, 0x49, 0x800, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xf, 0x0, 0x0, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000005}, 0xc0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x4c, 0x49, 0x800, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xf, 0x0, 0x0, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000005}, 0xc0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async) [ 3257.018636][ T27] audit: type=1804 audit(1681908472.066:508): pid=25660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/322/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 12:47:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xf000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x66b72500, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x3f000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3257.771720][T25682] __nla_validate_parse: 28 callbacks suppressed [ 3257.771742][T25682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3257.860763][T25683] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3257.910896][T12272] Bluetooth: hci5: command 0x0406 tx timeout [ 3257.924531][T25687] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 12:47:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3257.959771][T25687] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3258.014090][ T27] audit: type=1804 audit(1681908473.066:509): pid=25692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/323/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 3258.018185][T25698] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:47:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3258.067799][T25692] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3258.146086][T25702] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:47:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3258.209028][ T27] audit: type=1804 audit(1681908473.256:510): pid=25696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1974077934/syzkaller.shHyp9/583/cgroup.controllers" dev="sda1" ino=1157 res=1 errno=0 [ 3258.244348][T25696] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3258.312834][T25705] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:47:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3258.413711][T25707] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:47:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}}, 0x24}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3258.535908][T25709] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:47:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x14000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}}, 0x24}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x60000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x67b72500, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3258.731288][T25711] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:47:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}}, 0x24}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3258.787650][T25714] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3258.807748][T25714] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:47:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3258.891115][ T27] audit: type=1804 audit(1681908473.946:511): pid=25721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/324/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 12:47:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3259.398676][ T27] audit: type=1804 audit(1681908474.446:512): pid=25735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1974077934/syzkaller.shHyp9/587/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 12:47:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x3f000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x68000000, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x9effffff, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3259.661486][T25745] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3259.677153][T25745] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:47:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3259.777264][ T27] audit: type=1804 audit(1681908474.826:513): pid=25750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/325/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 12:47:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3260.243075][ T27] audit: type=1804 audit(1681908475.296:514): pid=25765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1974077934/syzkaller.shHyp9/590/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 12:47:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x60000000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x68b72500, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xe9030000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3260.602015][T25773] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3260.620576][T25773] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:47:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3260.682481][ T27] audit: type=1804 audit(1681908475.736:515): pid=25779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/326/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 12:47:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a3000500", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3261.147490][ T27] audit: type=1804 audit(1681908476.196:516): pid=25795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1974077934/syzkaller.shHyp9/593/cgroup.controllers" dev="sda1" ino=1159 res=1 errno=0 12:47:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x9effffff, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x69b72500, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xf0ffffff, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3261.511462][T25805] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3261.532131][T25805] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:47:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3261.616766][ T27] audit: type=1804 audit(1681908476.666:517): pid=25809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/327/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 3261.684857][ T27] audit: type=1804 audit(1681908476.736:518): pid=25811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1974077934/syzkaller.shHyp9/594/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 12:47:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xb7030000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xfffff000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x6ab72500, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3262.405350][T25834] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3262.430549][T25834] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:47:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3262.564250][ T27] audit: type=1804 audit(1681908477.616:519): pid=25845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/328/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 12:47:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) 12:47:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) [ 3262.796971][ T27] audit: type=1804 audit(1681908477.846:520): pid=25848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1974077934/syzkaller.shHyp9/596/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 3262.828441][T25848] __nla_validate_parse: 42 callbacks suppressed [ 3262.828465][T25848] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3262.868463][T25855] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:47:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) [ 3263.013446][T25857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:47:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) [ 3263.193415][T25861] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:47:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x6bb72500, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xf0ffffff, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xffffff7f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) [ 3263.334325][T25866] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3263.353526][T25866] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:47:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3263.383519][T25872] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:47:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3263.468543][T25875] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3263.478198][ T27] audit: type=1804 audit(1681908478.516:521): pid=25870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/329/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 [ 3263.484827][T25870] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3263.572247][T25878] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:47:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3263.716778][T25882] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:47:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3263.851415][T25883] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 12:47:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xffffff9e, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x6c000000, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:47:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xfffff000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:47:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:47:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x400300, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3264.260803][T25891] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3264.304520][T25891] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:47:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:47:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3264.666620][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 3264.666641][ T27] audit: type=1804 audit(1681908479.716:525): pid=25904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3460606547/syzkaller.jYsIDB/494/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 12:48:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x6cb72500, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xfffffff0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xffffff7f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x8000000, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3265.130881][T25906] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3265.140576][T25906] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3265.295027][ T27] audit: type=1804 audit(1681908480.346:526): pid=25914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/331/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 3265.329810][ T27] audit: type=1804 audit(1681908480.346:527): pid=25911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1974077934/syzkaller.shHyp9/601/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 12:48:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xffffff9e, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:01 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd52, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x0, 0x99, {0x4, 0x75}}}}}, 0x1c}}, 0x20000010) 12:48:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x17c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x470b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x189}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg1\x00'}}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12fc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1687}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4040054) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40800888}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004}, 0xd639a173c0708b7b) 12:48:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x6db72500, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xffffffff, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x900, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x4000000, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3266.101357][T25925] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3266.131340][T25925] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3266.250676][ T27] audit: type=1804 audit(1681908481.306:528): pid=25930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/332/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 12:48:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x6eb72500, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xfffffff0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3267.033937][T25941] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3267.073399][T25941] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3267.153442][ T27] audit: type=1804 audit(1681908482.206:529): pid=25945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/333/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 [ 3267.207631][ T27] audit: type=1804 audit(1681908482.236:530): pid=25946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3460606547/syzkaller.jYsIDB/498/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0 [ 3267.236634][ T27] audit: type=1804 audit(1681908482.286:531): pid=25939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1974077934/syzkaller.shHyp9/604/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 12:48:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x2, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xf0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xffffffff, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df6", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x6fb72500, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3267.953225][T25954] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3267.976387][T25954] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3268.059204][ T27] audit: type=1804 audit(1681908483.106:532): pid=25959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/334/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 3268.100923][T25959] __nla_validate_parse: 10 callbacks suppressed [ 3268.100948][T25959] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3268.126957][ T27] audit: type=1804 audit(1681908483.176:533): pid=25962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3460606547/syzkaller.jYsIDB/499/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 [ 3268.132583][T25962] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 12:48:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x70b72500, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:48:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x3, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df6", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3268.849977][T25969] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3268.902053][T25970] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3268.912391][T25970] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:48:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3269.006450][ T27] audit: type=1804 audit(1681908484.056:534): pid=25975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/335/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 3269.039783][T25975] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3269.062028][T25981] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:48:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3269.213233][T25983] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3269.223348][T25977] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 12:48:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3269.366393][T25985] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:48:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3269.484087][T25987] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:48:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:48:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3269.601293][T25989] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:48:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x74000000, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x4, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x2, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df6", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3269.793574][T25996] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3269.815097][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 3269.815117][ T27] audit: type=1804 audit(1681908484.866:536): pid=25991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1974077934/syzkaller.shHyp9/612/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0 [ 3269.822463][T25996] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3269.975229][ T27] audit: type=1804 audit(1681908485.026:537): pid=26002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/336/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 [ 3270.019634][ T27] audit: type=1804 audit(1681908485.066:538): pid=26001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3460606547/syzkaller.jYsIDB/501/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 12:48:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x7a000000, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:48:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:48:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9c", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x3, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x5, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3270.668945][T26010] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3270.690655][T26010] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:48:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3270.769877][ T27] audit: type=1804 audit(1681908485.816:539): pid=26017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/337/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 12:48:05 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3270.962888][ T27] audit: type=1804 audit(1681908486.016:540): pid=26024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3460606547/syzkaller.jYsIDB/503/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 12:48:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3271.206363][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 [ 3271.209925][ T27] audit: type=1804 audit(1681908486.256:541): pid=26030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1974077934/syzkaller.shHyp9/616/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0 12:48:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x6, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x4, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x8a400000, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9c", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:06 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:48:06 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3271.547889][T26035] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3271.590890][T26035] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:48:06 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3271.645953][ T27] audit: type=1804 audit(1681908486.696:542): pid=26036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/338/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 12:48:06 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:48:06 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:48:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3272.106108][ T27] audit: type=1804 audit(1681908487.156:543): pid=26055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3460606547/syzkaller.jYsIDB/507/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 12:48:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x97ffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x7, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x5, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9c", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3272.454179][T26059] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3272.481560][T26059] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3272.595652][ T27] audit: type=1804 audit(1681908487.646:544): pid=26063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1974077934/syzkaller.shHyp9/620/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 [ 3272.633424][ T27] audit: type=1804 audit(1681908487.676:545): pid=26066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/339/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 12:48:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x8, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3273.270657][T29683] Bluetooth: hci1: command 0x0406 tx timeout [ 3273.310124][T26072] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 12:48:08 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:48:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x6, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1e", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3273.322005][T26072] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3273.396409][T26076] __nla_validate_parse: 19 callbacks suppressed [ 3273.396440][T26076] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:48:08 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 3273.535830][T26080] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3273.571029][T26087] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3273.582340][T26082] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 12:48:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3273.858192][T26089] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 12:48:09 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) 12:48:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0xe4ffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1e", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x7, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x9, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:09 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r0, @ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000014) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) [ 3274.263857][T26097] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3274.275036][T26095] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3274.294976][T26097] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3274.375632][T26102] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:48:09 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r0, @ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000014) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) 12:48:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3274.487532][T26101] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3274.532886][T26109] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:48:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x1e, 0x2, r2}, 0x14) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f00000001c0)=""/23, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r4, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 3274.724561][T26111] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 12:48:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0xe, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x8, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1e", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x6000, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3275.204298][T26125] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3275.221415][T26125] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3275.343534][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 3275.343597][ T27] audit: type=1804 audit(1681908490.396:551): pid=26126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3460606547/syzkaller.jYsIDB/514/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 [ 3275.404045][ T27] audit: type=1804 audit(1681908490.446:552): pid=26132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/342/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 12:48:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecf", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0xf, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0xf6ffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000000c0)={0x0, r4, 0x10000, 0x9, 0x8000, 0x24000}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r6, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:48:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x9, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3276.127717][T26139] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3276.158313][T26139] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3276.245125][ T27] audit: type=1804 audit(1681908491.296:553): pid=26144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/343/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 12:48:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000000c0)={0x0, r4, 0x10000, 0x9, 0x8000, 0x24000}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r6, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:48:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0xfdffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x14, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecf", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0xe, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3277.049061][T26162] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3277.070076][T26162] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:48:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecf", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3277.113119][ T27] audit: type=1804 audit(1681908492.166:554): pid=26159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1974077934/syzkaller.shHyp9/627/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 12:48:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecf", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3277.425620][ T27] audit: type=1804 audit(1681908492.476:555): pid=26171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/346/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 [ 3277.507712][ T27] audit: type=1804 audit(1681908492.556:556): pid=26173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3460606547/syzkaller.jYsIDB/517/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 12:48:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0xfffff000, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0), 0x4) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x0, 0x1}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r5, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:48:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0xf, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x60, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3277.932911][T26177] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3277.965398][T26177] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3278.093470][ T27] audit: type=1804 audit(1681908493.146:557): pid=26185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/347/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 3278.207387][ T27] audit: type=1804 audit(1681908493.256:558): pid=26187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3460606547/syzkaller.jYsIDB/518/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0 12:48:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r4, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12:48:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x14, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0xf0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3278.819241][T26201] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3278.850816][T26201] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:48:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3278.941219][ T27] audit: type=1804 audit(1681908493.996:559): pid=26205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/348/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 [ 3278.948102][T26205] __nla_validate_parse: 8 callbacks suppressed [ 3278.948127][T26205] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3279.067689][ T27] audit: type=1804 audit(1681908494.116:560): pid=26209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3460606547/syzkaller.jYsIDB/519/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 3279.076370][T26209] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3279.264465][T26213] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 12:48:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0xffffff97, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x6c, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x300, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x60, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3279.756896][T26220] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3279.783725][T26220] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3279.869706][T26225] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3279.908655][T26226] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 12:48:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x3e9, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0xf0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x300, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3280.671766][T26236] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3280.696062][T26236] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3280.777957][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 3280.777977][ T27] audit: type=1804 audit(1681908495.826:564): pid=26238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/350/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 3280.820030][T26238] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3280.887211][ T27] audit: type=1804 audit(1681908495.936:565): pid=26240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3460606547/syzkaller.jYsIDB/521/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 [ 3280.920906][T26240] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 12:48:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x500, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r3}, 0x8) getpeername$tipc(r1, &(0x7f00000001c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) mmap(&(0x7f0000687000/0x3000)=nil, 0x3000, 0x8, 0x50, r4, 0xb034000) r5 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r6, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:48:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x300, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0xffffffe4, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3281.619656][T26248] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3281.654171][T26248] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3281.783725][ T27] audit: type=1804 audit(1681908496.836:566): pid=26254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/351/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0 [ 3281.803725][T26254] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3281.934948][ T27] audit: type=1804 audit(1681908496.986:567): pid=26252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1974077934/syzkaller.shHyp9/633/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 3281.969026][T26252] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 12:48:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x3b7, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x600, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r3}, 0x8) getpeername$tipc(r1, &(0x7f00000001c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) mmap(&(0x7f0000687000/0x3000)=nil, 0x3000, 0x8, 0x50, r4, 0xb034000) r5 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r6, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:48:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3282.560121][T26267] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3282.630719][T26267] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3282.728639][ T27] audit: type=1804 audit(1681908497.776:568): pid=26271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/352/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 3282.765796][T26265] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3282.774020][ T27] audit: type=1804 audit(1681908497.806:569): pid=26265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3460606547/syzkaller.jYsIDB/523/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 12:48:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(0xffffffffffffffff, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r4, 0x0, 0x1, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:48:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x700, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0xfffffff6, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x500, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3283.462541][T26287] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3283.485846][T26287] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3283.623303][ T27] audit: type=1804 audit(1681908498.676:570): pid=26294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/353/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 [ 3283.693045][ T27] audit: type=1804 audit(1681908498.746:571): pid=26295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3460606547/syzkaller.jYsIDB/524/cgroup.controllers" dev="sda1" ino=1184 res=1 errno=0 12:48:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) write$binfmt_misc(r3, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1004) r4 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001500)={0xd8, 0x453, 0x300, 0x70bd27, 0x25dfdbfd, "8e3357338c422b71be4587f055a50495e198799db7fd61f1b9b136242839b7988fa844d84389e199bd337f808141fe8b1242fb0b0f89aa3000149805a025ad4327274ccb46b0987e5c22b514ca6ce27896d0a99b1ad546ac01d03a42cdcd4f86ab4cf8a74d6159a0b81acda70f4db93f9b1f1d7c117f728e1accbf3325286742b5aacb0f65859afa840ed096f898936630c124598e35b7bcb5f036f36edf928f8d8c9ac366cfa1ba11db6b8bafbbbb1a5d77a635279e7d304c8fc6dc29df7ee45e434357fe12213b", ["", "", "", "", "", "", "", "", ""]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r5, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:48:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x900, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0xfffffffd, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x600, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3284.357834][T26307] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3284.399771][T26307] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:48:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) write$binfmt_misc(r3, &(0x7f0000001780)=ANY=[@ANYBLOB="73797a303eec882c22b56696b0abe4ebd1e2e42a629639e2aff16cbad925bb7aa5fc64bc34ebd2c7f770d822dc258f348a081d831441aa7964c0a2ae7e1c4eba006bfd2b95a275b75be081caaf332130b0c53c88a9db6d7a6b93810ba6bd2898cf3a6e34d4ee07c643497206b799496cc3a4bd0d8b3b5d945bc4e490473cb1db79cc6a5b759000c013ab79426d3a4f224a4a522a63dbce3132601117a7a06b3bb11dc7e9978ecbb2649f5408f58c426959bc00dff8488fcb9c1abd160c58832d79e2e6c4b2fd3842060a68d87ad030732d15323d8f26cf433c3ebc24374d57c92d0bef1bb0d3468541847aec1cccdec7d09df224fcdcb076edd16d900a4c4a3a6a07a80d1249311bd6f97d5344bc612e4471e8e8eac79c5c0a5f5a4c05884358dba841e801fc037ef72bfa656b6abfd59483808de89d6bc52d62742e98d44554a691ff1c18e783021d9fc0a45f9fab15e92352cea47c8374e8fa461be049abd1f5ba704b71ef9a58f32d2e67e5fc1a8c55efad85f148162fff162ce38884d6f587b5d5e84aa6f8ecd652cdde2e7a9964b0af1d551af70854d2bab3f7bf195b2da7f2e0c242b27e2afb97ab270bacb419618277af9bc2f5f8c9123bad30a7467a20c881a4ff00f3c0b6ea3c800090c5a12d3e091ec1bab8a28a538d31dad98295e0319818324339cc7f1a55175ac91201f421f6c209f8097877a2d645cbc78867d766357d54bc636e3afb4d786a66cd7b66e343ea15e6b4123fe5d50d259949d7fc1913207f92e8bc0fb6d135386c74607c9bbf52f16df408878be97f0c3b766593648736516164eb6b9392144f05e9693c02495e7ca91d876a8a3306a708fc284076f591bb2ca8a52a4f90f7c7c5347cb3d9e5d2e2abd14a495fe7078ca076bf88baace171c30f0e9fd839080917b960fea539ea29f5205dad78004cfa7c3599d0aedbb2f88faf63355384622be0490cf3e37b899eaf2de9be7da252e534458354d0b74c9ea38839423b19f3467913091fded60cdf5d954f859b7b84bdb26c3f6e97997eafc27bcc4d0495fb6b29fbcce0335cfbf401756b2c9132fdb7c605c41fbc0b8e51d5aa6d17ccaacbd20d30e224d8452dc5e4870089f7125ad1ed94465e4ca7f5e74d28ba1da7bd50de560c77ed2e57a3464ed524fbccdb09829035a16c6bb66f2537f2368d0177054bea0346028589831202d852bdd8239c6199405471e5105ba8aec4f381e8de78c20836419a285ee0585789b304849b967f0b1e1025f4c1e6cfe529c87644c553714c760b430948957fdc893d701406d1dc4e6c60f2fdc152d1adf83efd6d1d5feba5911ebc227d7f2e7b04975d7b6f65abd6b13fc7632fed7839072017ece5874effc09b730156a895b5d388506e1fa1781d6e9bbef5c620b3d84a6ca15379a9ff56161dee8bedb376b7174d8601fc5515c657a3bfc0f69eae722c7102d8b83daa6ce06647966ba75146cd73805379db73188851aba57c452eb9a43eebc57712eb978ec184676a69b0a0f0b30eaad8982960eceda885478ae67f1b553f51e335d295922ac3632ec0682fb06ad9634643cdd352dbad3803dd3f7670124d0a518e032e15a638b5cf25415cc103d957f504110ce0335aae48de7340149869d6bad402f46b9aabe446b253c3eeb1545fc3d28ee8b20a6fca3f99f6e3c8f4d0022956d7c6b8a9633c5c3efbef3462c83073c568e8ced194b2b338acd7202ee6ee72372adf536518ac3611984a835180fff47228c5bf495520e3c76ca4c37361897628b9317e6c41f8e0f015d336f7e5a29f742534f0e6cbc93ee543251b4ca10b6327365ed34a873b49944edc5cebeea42a9d72eff03437fee30a4ada800faf9946c0548721a83081b25ba3c3082ad9664a34c557d6fd591ee61a2c2b6c3eb7a4a643c2252dcc2105813c8c5ceb48e6714e9bfcd85ab1e6cff28095129dc736832f1951feb577b3f265c9c2c776fa095f65237b977573f2e0abb7736a16deab97a7d45a1e84ce62b2518f2c4965106544df3c643896d80662546cea46fa7cb2cc650ebc922eb590f84e529cce3585cdf39f8bef171a2a8e739704ecbfe2b64aa7a936cd9f2969faf3930c90358b25b38284f24248ef7859da9305f7c212fa96465266be9fd002529db562a4f5e13387685b537725927169024ab19d0d11336502018b1ab752ad0949496d6047bc79c811700ffde79d9baeb628c2cd56fc73d7d42c799d328a64368da778bf1d63d07ecf3abedec222e09df6a16534ed2fa97d5310498bdc74c58847d25dd14479f33fb3f9bb0a19c9ec8c17a330aeb9cded209faff807dd3fa148527643c663861d1bb05ea231da50601d2f389482670661c0817250ba0a59fadb5d4a5c57641d2489832fd134460b2c54aa3d380f489ea461487ab2d2f763593c3423bc9b9ab0d3dff91033e20f6ddbed93d68ec80de183901f82a2ba05bd53e05e98d960aec3bb0e40abba43aed2841743d1064ca4cef4fb6d5687e7aee29b5d9f8de6c9e673675a5a18e14e70a93fcd9237ab456ceab236b0be32192fcff5adc64046a0d270da64d8c86a73e989e65fbc81f5448176a3683b489aef504db647e4c8c10c51a77d72cc46543e5d7be0841954141d8290c459f4f7f3f05c2f63d97de7b7396ae5144b1cc7367d7bc3408fc62d1682ed901afea3da301ade645027d6acf20c0ba4bc914b3d21e8f71176a02b5cc11d477336b66270b329538280e1cf8bdb578a91e0c80ab637a79107b318c2777688c4a2d4c930c7f1f761132d32d6e6c994fa908515afe4778a2ca84a282eb4b8cf3862e7570f126132978720ce535d98563f07ebe2f542fd392f78b0338b160c43778c6e52b61506d8c77c343768d3fe4fb1b53339daaabbc07d86e9feb20c782cc3622633c069d5737c2539371be4d37a7bf2b7a6ca2d058389bb820d0f95099d5284d9f2c8112bd0a72926ed2e8ae3dec9a690dbe9c0841f4c3ec3c53205f40e60ce7d397bf80affb6182cb4476e1982ce9966232f84c44b9d4a174da7e1edcf28cc89d9338e5d3f66592b6eb2d818b779120750997948097e7c90bec4da53735b470448a31cde8117f105f0214f764c331f778335bfc987340e33d85341141c578ffaeb1f49ba01b7e288c3ebd20bc04e9f44d606958261e8b124c4a8eb54cacef09c9f717b1c56557e97b6b1443b82f8a45007e7dfff5ca1c76c5545fc079329530d7de76d70619c16f28287494ce4f4d1de74a1e246ed55167bb38c7cb223d7c21e216fa713dd96412044f34be5e15813cd0ea9ade05cfe82d72877f6b307873abc011e2bdbc93e97fb2dc85344db216ac7abf915b6f9c4a2967d751539c67a27461ec1b2a6f887a698dca680769d4e2d60b5e5c165f4b1ecc9eae7619ee9787b5fa769d05735250223dfb71bca77b688890bcf780fd3e2ce947409a128656ec1f6d012a6cbf087f048d6130238cf53e060585cc19e6f4570e5fde411aba5b00c9d5e3a6e29af9c802bfa0ed0bcd75de7562801a1364b1cb58663f306b070117676f0c813a0271d79fc61e690e365406f1cf9608fc38f8d0ce00869db97be03da74dbe33e6a913c6ad1228ded8e0e46421585f46f3113366546b9747eab5f1126a7c53d35ddd6736bc65f2a17a95b6dfff1d3da3fe076c4ee5133a525e36c0127662aa6ffede847e1781925b1262bb7bbc5d30e61a26837914d1133a11ac11058d39ba948c76b2cfd7c40383592c0af78da5296ee75081ebb6601b21afd9cd685484589603c57ac57c205983196f847e0c029d56f53e0f0a7103275c1b81dfb8f7b521dfa48b7fc09bcc2ffed80f20bff9ce09096c5172e4bb67adc0711989ed119dc5166c0558871252d6cfe947a3e1730cce3ffb9c7f9b4cdd3dcfca0e5a4e7c08ab65fe09da44823393b0bbe298219c7106a111d1ea3ad38c03c3a033fad44b7c0153f10da8193fd0157df28cbdd7a5ea99aacc69fa070422464a10ae59e412e34ceaf71e8f6be28328b803ff9ff56fdae5ac097c58797306e4b7ee1784b0a9f624ff69636f45ba40377e1a8dc10512e4d0aa65c8eafb336be152c444f7ec539ad407fc33e7f2a14d55a80850f92efcd747eef361d82a8b109bdeb596983ce9949faaacb0c4a3fff5a4c97fb56afa393f2f269bc3bd9837f39fc4b381e3304e2de54b1399277ecd5d885ba9cda87c33a7467d4f30d59938631d738b3fb1a511d5e92378e4cbec6275cfb52a45fc5fe86ff9db65b7242515c0d8f0ae70cf59dbe9a9c3a34dfc91d9485eea673566d2df28f03c633c36c39bc2dda64702cea79e9d9b63501a40fec844bc3740a571f0e9d1481b4af554b6790e2130385d8d77ad99818c45b6220cb6b51f5207967ccf4692fd504fa8d9e7c211b393bf050707646c5c2fae8b43f84f916fe2fe421e76804fff212862342d5640ede0f9fabb6842d118c753799f980d6c3aba33b8b92944a2d1d7292f9a3c6e3885406e074363ab40ba95bc6a9884808dc206746c76974a17389db2090fb9b72a4802f03fd7d15ce3af2e051031c529ca5eb2276f0d9f9d7f040f71a7124c5fd0979a07bad335a5ee4bc2e40200bd6d3bf6769f86373f4a4b44c0840ad0825c7d977f9ee7be40e430f5fda0e08c90457f43e25032fedb6c7930aef1b2587d94f0a46a7c46ee5e87f108a4c7d30cc28fcbc1a5b577b2b875a7a707b4d2fefc6676052d40ca82839eaee7b420a37c77194fce0a87dc3f00747bd98d18b5517ed9f474d95061d4e8d7f1f8fb6a29fd6c2b55d27f76573693786b1d6df198c6277443651026e92669f28193e03ec07b73fd6bbee07da7d26142ec7be5315d7093ba53a64b589daccc0c818dc8e5b89b8ccf96f089300e0ee33e80fcb41214e41b8b6535b02df92d208d6f06a1f1114eb9f9eea86290b144fac63d8e04f6f01b75310b2d23072f5b512a6186f0335999b389a588affaf0e9d00cfdcd3f34cc2c8bde090aac0d37b310d3e9e5e18158bec07801470724f9d1f780036791c16e78c493e533f77433633cf941c44438292115cb2d5c4e3824b31205de7e47d59d6c35259d3f4ce5771cd49e5ecb2fec80cf6172262b3f633d2a6ae3888a5d6b44c89237e2407c8b47361aea2e3f7cdb15572ab738deec1eb734b411d82e5c2790ed893ef90c1972350ec53103de7d7842978e7c208ab5b598ea003b3a9ceed58386e4721eabf73e0b1f8ffad468c1ab635a3748d9a5bde1d56ce35f09e1dd71cf906dae832abf9e3705634f8aa0ab4f561d23bcfb5824023c7fad607c902f04354ea50ae7df925d4c2997cbdef4d18e868818d16bb560ebb0489ff40c38a02fd09007fc1ee5e6a97e548520b79389a9dd40ad09900f7f0883cefd281c7797fa810265fab0044746fccb3edb3f316cb1f333a29ef2975b6671d300ac0d5135eb4a6580e662c763f91b5a690041a16249d65ad9711c03ded31ca6571fe31f4f2acd031bef1995ba17118e0eabe9863b3df7e50e017bc490bf7a2292942acd312f3382ec2b5ba35b22fd15cca51a7ce63f34536d44f0aec18134fd746cd81b9350774efdf4714dcb70381c78bf22eebd82420a9034402923d36d0b93fbd4618176fcd2342bbda2f62fb6be34e547f54bf76f3bbbc370f29116c4da8dde6cf8a234058d9177121b8f1d28a6622f046cceff8fa94c00c9c85d3a2fad7c7447c4262f0f1a326c87b71dfe887c552181c52e58cb5a559efc9825f4a85193161d7ba59e8df8dc124f503d7835a45c6c3ebe68b9494b0c54931295088bf7816c5944285000000000000000000"], 0x1004) r4 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001500)={0xd8, 0x453, 0x300, 0x70bd27, 0x25dfdbfd, "8e3357338c422b71be4587f055a50495e198799db7fd61f1b9b136242839b7988fa844d84389e199bd337f808141fe8b1242fb0b0f89aa3000149805a025ad4327274ccb46b0987e5c22b514ca6ce27896d0a99b1ad546ac01d03a42cdcd4f86ab4cf8a74d6159a0b81acda70f4db93f9b1f1d7c117f728e1accbf3325286742b5aacb0f65859afa840ed096f898936630c124598e35b7bcb5f036f36edf928f8d8c9ac366cfa1ba11db6b8bafbbbb1a5d77a635279e7d304c8fc6dc29df7ee45e434357fe12213b", ["", "", "", "", "", "", "", "", ""]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r5, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 3284.522727][ T27] audit: type=1804 audit(1681908499.576:572): pid=26315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/354/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 [ 3284.528602][T26315] __nla_validate_parse: 3 callbacks suppressed [ 3284.528627][T26315] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3284.598748][ T27] audit: type=1804 audit(1681908499.646:573): pid=26313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3460606547/syzkaller.jYsIDB/525/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 [ 3284.654639][T26313] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 12:48:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) write$binfmt_misc(r3, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1004) r4 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001500)={0xd8, 0x453, 0x300, 0x70bd27, 0x25dfdbfd, "8e3357338c422b71be4587f055a50495e198799db7fd61f1b9b136242839b7988fa844d84389e199bd337f808141fe8b1242fb0b0f89aa3000149805a025ad4327274ccb46b0987e5c22b514ca6ce27896d0a99b1ad546ac01d03a42cdcd4f86ab4cf8a74d6159a0b81acda70f4db93f9b1f1d7c117f728e1accbf3325286742b5aacb0f65859afa840ed096f898936630c124598e35b7bcb5f036f36edf928f8d8c9ac366cfa1ba11db6b8bafbbbb1a5d77a635279e7d304c8fc6dc29df7ee45e434357fe12213b", ["", "", "", "", "", "", "", "", ""]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r5, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:48:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x700, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0xe00, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r4, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:48:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3285.294416][T26332] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3285.335430][T26332] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3285.468624][T26339] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 12:48:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r4, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 3285.958657][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 3285.958677][ T27] audit: type=1804 audit(1681908501.006:575): pid=26348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1974077934/syzkaller.shHyp9/639/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 3286.010460][T26348] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 12:48:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0xf00, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0xf, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x900, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3286.211271][T26358] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3286.264924][T26358] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3286.344246][ T27] audit: type=1804 audit(1681908501.396:576): pid=26363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/356/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 [ 3286.355724][T26363] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 12:48:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3286.786048][ T27] audit: type=1804 audit(1681908501.836:577): pid=26368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3460606547/syzkaller.jYsIDB/528/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 [ 3286.821156][T26368] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3286.832707][ T27] audit: type=1804 audit(1681908501.886:578): pid=26371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1974077934/syzkaller.shHyp9/640/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 3286.868627][T26371] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 12:48:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x140, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0xe00, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x1400, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0xec0, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0xf00, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3287.125216][T26376] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3287.164259][T26376] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:48:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0xfe0, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) mmap(&(0x7f0000a81000/0x3000)=nil, 0x3000, 0x3000005, 0x810, r5, 0xf8018000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r4, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r6, 0x58, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r7, 0x7f, 0x10}, 0xc) [ 3287.269886][ T27] audit: type=1804 audit(1681908502.316:579): pid=26380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/357/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 12:48:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x33fe0, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3287.321909][T26380] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 12:48:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x7ffff000, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0xfffffdef, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x2, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0xf00, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x4, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) mmap(&(0x7f0000a81000/0x3000)=nil, 0x3000, 0x3000005, 0x810, r5, 0xf8018000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r4, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r6, 0x58, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r7, 0x7f, 0x10}, 0xc) 12:48:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) write(r3, &(0x7f00000002c0)="5c79f1aa31923ca1f5566754909f8f9a99afc239439b4f8837957f2251ad96d6c6455a59c0a8b1ae5c462d9301ffae5e496753a6962994241ea7e4075e456f07c9138549651e0ba1c62002cac7ec6a1e82e23f26d6b6f4dc9b3cf41c284c34df1b9f7855f21399d94d72c28269bcc2191aa812b3264e6c73c86d036451acc36719988562f648cfa046ab2d81f4b8af76a0024679b563b1d8e9e90e9899edbedb9edc991998cc7748464feb1a35328e", 0xaf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bind$xdp(r1, &(0x7f0000001500)={0x2c, 0x1, 0x0, 0xf}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r5, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:48:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x3f00, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3288.071057][T26413] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3288.093172][T26413] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3288.224727][ T27] audit: type=1804 audit(1681908503.276:580): pid=26417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/358/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 [ 3288.274995][T26417] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 12:48:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r4, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 3288.820784][ T27] audit: type=1804 audit(1681908503.876:581): pid=26431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3460606547/syzkaller.jYsIDB/531/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 3288.825571][T26431] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 12:48:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x7, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x6000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x1400, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3289.017650][T26440] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3289.040994][T26440] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3289.161787][ T27] audit: type=1804 audit(1681908504.206:582): pid=26445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/359/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0 12:48:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r9, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r8, r7, 0x0, 0x800000017fc) 12:48:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r4, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 3289.539013][ T27] audit: type=1804 audit(1681908504.586:583): pid=26450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3460606547/syzkaller.jYsIDB/532/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 3289.576441][T26450] __nla_validate_parse: 1 callbacks suppressed [ 3289.576464][T26450] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 12:48:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x3f00, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0xe903, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x8, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3289.916726][T26459] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3289.954364][T26459] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:48:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0xf, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3289.991432][ T27] audit: type=1804 audit(1681908505.046:584): pid=26462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/360/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 [ 3290.001733][T26462] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 12:48:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3290.274200][T26470] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 12:48:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x10, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x6000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0xf000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) r6 = socket(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.numa_stat\x00', 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000001780)=""/4105, 0x1009, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001500)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000001540)={r3, 0x4d, 0x0, 0xb6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000240)='mm_collapse_huge_page_isolate\x00', r8}, 0x10) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r7, 0x0, 0x1, 0x5}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x40, 0x10001, 0x10, @empty, @empty, 0x40, 0x20, 0x4, 0x5}}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x800, 0x10001, 0x1f, 0x0, r4, 0x6, '\x00', r9, r10, 0x5, 0x5, 0x5, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:48:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x11, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3290.864786][T26479] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3290.886893][T26479] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3290.961207][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 3290.961227][ T27] audit: type=1804 audit(1681908506.016:586): pid=26483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/361/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 [ 3291.002634][T26483] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 12:48:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) r6 = socket(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.numa_stat\x00', 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000001780)=""/4105, 0x1009, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001500)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000001540)={r3, 0x4d, 0x0, 0xb6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000240)='mm_collapse_huge_page_isolate\x00', r8}, 0x10) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r7, 0x0, 0x1, 0x5}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x40, 0x10001, 0x10, @empty, @empty, 0x40, 0x20, 0x4, 0x5}}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x800, 0x10001, 0x1f, 0x0, r4, 0x6, '\x00', r9, r10, 0x5, 0x5, 0x5, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:48:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0xb703, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x12, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x30000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x27, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3291.787430][T26503] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 12:48:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3291.830497][T26503] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:48:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00009a7000/0x4000)=nil, 0x4000, 0x1, 0x100010, r2, 0xedaec000) sendfile(r1, r2, 0x0, 0xf03afffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r4, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:48:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3292.085523][ T27] audit: type=1804 audit(1681908507.136:587): pid=26514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/364/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 [ 3292.089408][T26514] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 12:48:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) openat$cgroup_ro(r3, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) getpeername$tipc(r3, &(0x7f00000001c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) r6 = socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0xfffffffd}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) mmap(&(0x7f000057d000/0x3000)=nil, 0x3000, 0x3000003, 0x12, r6, 0x12c20000) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r5, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:48:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0xf000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x30, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x34000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3292.706272][T26526] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 12:48:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x42, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3292.765909][T26526] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3292.839006][ T27] audit: type=1804 audit(1681908507.886:588): pid=26539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/365/cgroup.controllers" dev="sda1" ino=1184 res=1 errno=0 12:48:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x4c, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3292.882515][T26536] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3292.923536][ T27] audit: type=1804 audit(1681908507.976:589): pid=26529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1974077934/syzkaller.shHyp9/648/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 [ 3292.945230][T26529] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 12:48:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x71, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3293.336393][ T27] audit: type=1804 audit(1681908508.386:590): pid=26548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3460606547/syzkaller.jYsIDB/538/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 3293.369539][T26548] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 12:48:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x400300, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x30000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x7e, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x300, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3293.609188][T26555] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3293.656478][T26555] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:48:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0xfc3, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3293.729307][ T27] audit: type=1804 audit(1681908508.776:591): pid=26556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/366/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 3293.772971][T26556] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 12:48:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0xfcb, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0xfeb, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3293.844348][ T27] audit: type=1804 audit(1681908508.896:592): pid=26559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1974077934/syzkaller.shHyp9/649/cgroup.controllers" dev="sda1" ino=1156 res=1 errno=0 [ 3293.849578][T26559] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 12:48:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0xff3, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) sendfile(r5, r1, &(0x7f00000000c0)=0x80000001, 0x7) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r4, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:48:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0xf0ffff, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x2, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x34000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e4", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) sendfile(0xffffffffffffffff, r3, &(0x7f00000000c0)=0x9, 0x200) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xf03afffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x0) socket(0x22, 0x2, 0xfffffffc) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001740), 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2044, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/7, 0x114000, 0x800, 0x3}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3ff, 0x802, 0x1, 0x1f, '\x00', 0x0, r5, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:48:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r5, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYRESOCT=r5, @ANYRESDEC=r6, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r9, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r8, r7, 0x0, 0x800000017fc) [ 3294.537411][T26583] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3294.573749][T26583] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3294.653482][ T27] audit: type=1804 audit(1681908509.706:593): pid=26587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/367/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 [ 3294.697054][T26587] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 12:48:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) (fail_nth: 1) [ 3294.812348][ T27] audit: type=1804 audit(1681908509.866:594): pid=26593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3460606547/syzkaller.jYsIDB/540/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 3294.853202][T26593] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3294.902035][T26598] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3294.953500][T26598] FAULT_INJECTION: forcing a failure. [ 3294.953500][T26598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3294.985400][T26598] CPU: 1 PID: 26598 Comm: syz-executor.0 Not tainted 6.3.0-rc6-syzkaller-01723-gdce46f1b0cab #0 [ 3294.995910][T26598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3295.006121][T26598] Call Trace: [ 3295.009442][T26598] [ 3295.012400][T26598] dump_stack_lvl+0x136/0x150 [ 3295.017167][T26598] should_fail_ex+0x4a3/0x5b0 [ 3295.021911][T26598] _copy_from_user+0x2e/0x180 [ 3295.026649][T26598] copy_msghdr_from_user+0x89/0x150 [ 3295.031996][T26598] ? __copy_msghdr+0x4b0/0x4b0 [ 3295.036887][T26598] ? __lock_acquire+0xbc5/0x5d40 [ 3295.041856][T26598] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3295.047932][T26598] ___sys_sendmsg+0xdd/0x1b0 [ 3295.052694][T26598] ? do_recvmmsg+0x6e0/0x6e0 [ 3295.057356][T26598] ? __fget_files+0x248/0x480 [ 3295.062184][T26598] ? lock_downgrade+0x690/0x690 [ 3295.067102][T26598] ? __fget_files+0x26a/0x480 [ 3295.071834][T26598] ? __fget_light+0xe5/0x270 [ 3295.076477][T26598] __sys_sendmmsg+0x18f/0x460 [ 3295.081185][T26598] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3295.086264][T26598] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3295.091992][T26598] ? wait_for_completion_io_timeout+0x20/0x20 [ 3295.098152][T26598] ? fput+0x2f/0x1a0 [ 3295.102105][T26598] ? ksys_write+0x1a3/0x250 [ 3295.106646][T26598] __x64_sys_sendmmsg+0x9d/0x100 [ 3295.111649][T26598] ? syscall_enter_from_user_mode+0x26/0x80 [ 3295.117720][T26598] do_syscall_64+0x39/0xb0 [ 3295.122225][T26598] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3295.128216][T26598] RIP: 0033:0x7f9d9388c169 [ 3295.132686][T26598] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 12:48:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) (fail_nth: 2) [ 3295.152451][T26598] RSP: 002b:00007f9d945a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3295.160935][T26598] RAX: ffffffffffffffda RBX: 00007f9d939abf80 RCX: 00007f9d9388c169 [ 3295.169144][T26598] RDX: 04924924924926d3 RSI: 0000000020000200 RDI: 0000000000000006 [ 3295.177203][T26598] RBP: 00007f9d945a81d0 R08: 0000000000000000 R09: 0000000000000000 [ 3295.185246][T26598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3295.193452][T26598] R13: 00007ffcb8ddc30f R14: 00007f9d945a8300 R15: 0000000000022000 [ 3295.201507][T26598] [ 3295.246951][T26600] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3295.278095][T26600] FAULT_INJECTION: forcing a failure. [ 3295.278095][T26600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3295.291588][T26600] CPU: 0 PID: 26600 Comm: syz-executor.0 Not tainted 6.3.0-rc6-syzkaller-01723-gdce46f1b0cab #0 [ 3295.302332][T26600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3295.312536][T26600] Call Trace: [ 3295.315862][T26600] [ 3295.318838][T26600] dump_stack_lvl+0x136/0x150 [ 3295.323587][T26600] should_fail_ex+0x4a3/0x5b0 [ 3295.328356][T26600] _copy_from_user+0x2e/0x180 [ 3295.333118][T26600] iovec_from_user+0x14d/0x3a0 [ 3295.338131][T26600] ? __might_fault+0xe2/0x190 [ 3295.342880][T26600] __import_iovec+0x69/0x610 [ 3295.347549][T26600] import_iovec+0x110/0x160 [ 3295.352127][T26600] copy_msghdr_from_user+0xed/0x150 [ 3295.357397][T26600] ? __copy_msghdr+0x4b0/0x4b0 [ 3295.362242][T26600] ___sys_sendmsg+0xdd/0x1b0 [ 3295.366898][T26600] ? do_recvmmsg+0x6e0/0x6e0 [ 3295.371563][T26600] ? __fget_files+0x248/0x480 [ 3295.376397][T26600] ? lock_downgrade+0x690/0x690 [ 3295.381328][T26600] ? __fget_files+0x26a/0x480 [ 3295.386120][T26600] ? __fget_light+0xe5/0x270 [ 3295.390783][T26600] __sys_sendmmsg+0x18f/0x460 12:48:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x1000000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x400300, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3295.395537][T26600] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3295.400664][T26600] ? wait_for_completion_io_timeout+0x20/0x20 [ 3295.406827][T26600] ? fput+0x2f/0x1a0 [ 3295.410885][T26600] ? ksys_write+0x1a3/0x250 [ 3295.415560][T26600] __x64_sys_sendmmsg+0x9d/0x100 [ 3295.420561][T26600] ? syscall_enter_from_user_mode+0x26/0x80 [ 3295.426531][T26600] do_syscall_64+0x39/0xb0 [ 3295.431046][T26600] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3295.437030][T26600] RIP: 0033:0x7f9d9388c169 [ 3295.441501][T26600] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3295.461175][T26600] RSP: 002b:00007f9d945a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3295.469653][T26600] RAX: ffffffffffffffda RBX: 00007f9d939abf80 RCX: 00007f9d9388c169 [ 3295.477678][T26600] RDX: 04924924924926d3 RSI: 0000000020000200 RDI: 0000000000000006 [ 3295.485709][T26600] RBP: 00007f9d945a81d0 R08: 0000000000000000 R09: 0000000000000000 12:48:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x3, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3295.493828][T26600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3295.501849][T26600] R13: 00007ffcb8ddc30f R14: 00007f9d945a8300 R15: 0000000000022000 [ 3295.509891][T26600] 12:48:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 1) 12:48:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e4", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) (fail_nth: 3) [ 3295.547388][T26604] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3295.557950][T26604] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3295.626133][T26608] FAULT_INJECTION: forcing a failure. [ 3295.626133][T26608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3295.642488][T26610] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3295.689940][T26608] CPU: 1 PID: 26608 Comm: syz-executor.3 Not tainted 6.3.0-rc6-syzkaller-01723-gdce46f1b0cab #0 [ 3295.700044][T26610] FAULT_INJECTION: forcing a failure. [ 3295.700044][T26610] name failslab, interval 1, probability 0, space 0, times 0 [ 3295.700534][T26608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3295.700557][T26608] Call Trace: [ 3295.700567][T26608] [ 3295.700581][T26608] dump_stack_lvl+0x136/0x150 [ 3295.700627][T26608] should_fail_ex+0x4a3/0x5b0 [ 3295.739039][T26608] _copy_from_user+0x2e/0x180 [ 3295.743798][T26608] copy_msghdr_from_user+0x89/0x150 [ 3295.749058][T26608] ? __copy_msghdr+0x4b0/0x4b0 [ 3295.753897][T26608] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3295.759972][T26608] ? find_held_lock+0x2d/0x110 [ 3295.764846][T26608] ___sys_sendmsg+0xdd/0x1b0 [ 3295.769507][T26608] ? do_recvmmsg+0x6e0/0x6e0 [ 3295.774175][T26608] ? __fget_files+0x248/0x480 [ 3295.778926][T26608] ? lock_downgrade+0x690/0x690 [ 3295.783836][T26608] ? find_held_lock+0x2d/0x110 [ 3295.788680][T26608] ? ksys_write+0x210/0x250 [ 3295.792678][ T27] audit: type=1804 audit(1681908510.846:595): pid=26612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/368/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 3295.793246][T26608] ? __fget_files+0x26a/0x480 [ 3295.793296][T26608] ? __fget_light+0xe5/0x270 [ 3295.793340][T26608] __sys_sendmsg+0xf7/0x1c0 [ 3295.828974][T26612] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3295.829258][T26608] ? __sys_sendmsg_sock+0x40/0x40 [ 3295.848153][T26608] ? fput+0x2f/0x1a0 [ 3295.852124][T26608] ? ksys_write+0x1a3/0x250 [ 3295.856696][T26608] ? syscall_enter_from_user_mode+0x26/0x80 [ 3295.862677][T26608] ? lockdep_hardirqs_on+0x7d/0x100 [ 3295.867942][T26608] do_syscall_64+0x39/0xb0 [ 3295.872432][T26608] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3295.878384][T26608] RIP: 0033:0x7f0be7c8c169 [ 3295.882843][T26608] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3295.902515][T26608] RSP: 002b:00007f0be89bc168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3295.911078][T26608] RAX: ffffffffffffffda RBX: 00007f0be7dabf80 RCX: 00007f0be7c8c169 [ 3295.919699][T26608] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 3295.928061][T26608] RBP: 00007f0be89bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3295.936162][T26608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3295.944173][T26608] R13: 00007fff850a6e1f R14: 00007f0be89bc300 R15: 0000000000022000 [ 3295.952209][T26608] [ 3295.957151][T26610] CPU: 1 PID: 26610 Comm: syz-executor.0 Not tainted 6.3.0-rc6-syzkaller-01723-gdce46f1b0cab #0 [ 3295.967727][T26610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3295.977816][T26610] Call Trace: [ 3295.981117][T26610] [ 3295.984080][T26610] dump_stack_lvl+0x136/0x150 [ 3295.988829][T26610] should_fail_ex+0x4a3/0x5b0 [ 3295.993565][T26610] should_failslab+0x9/0x20 [ 3295.998112][T26610] kmem_cache_alloc_node+0x5c/0x3e0 [ 3296.003381][T26610] __alloc_skb+0x288/0x330 [ 3296.007853][T26610] ? __napi_build_skb+0x50/0x50 [ 3296.012762][T26610] ? __netlink_dump_start+0x910/0x910 [ 3296.018298][T26610] ? apparmor_socket_getpeersec_dgram+0x9/0x10 [ 3296.024500][T26610] netlink_sendmsg+0x9b0/0xe30 [ 3296.029327][T26610] ? netlink_unicast+0x7f0/0x7f0 [ 3296.034361][T26610] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3296.039897][T26610] ? netlink_unicast+0x7f0/0x7f0 [ 3296.044926][T26610] sock_sendmsg+0xde/0x190 [ 3296.049397][T26610] ____sys_sendmsg+0x334/0x900 [ 3296.054311][T26610] ? copy_msghdr_from_user+0xfc/0x150 [ 3296.059757][T26610] ? kernel_sendmsg+0x50/0x50 [ 3296.064522][T26610] ___sys_sendmsg+0x110/0x1b0 [ 3296.069331][T26610] ? do_recvmmsg+0x6e0/0x6e0 [ 3296.073986][T26610] ? __fget_files+0x248/0x480 [ 3296.078717][T26610] ? lock_downgrade+0x690/0x690 [ 3296.083636][T26610] ? __fget_files+0x26a/0x480 [ 3296.088378][T26610] ? __fget_light+0xe5/0x270 [ 3296.093034][T26610] __sys_sendmmsg+0x18f/0x460 [ 3296.097927][T26610] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3296.103086][T26610] ? wait_for_completion_io_timeout+0x20/0x20 [ 3296.109228][T26610] ? fput+0x2f/0x1a0 [ 3296.113182][T26610] ? ksys_write+0x1a3/0x250 [ 3296.117755][T26610] __x64_sys_sendmmsg+0x9d/0x100 [ 3296.122820][T26610] ? syscall_enter_from_user_mode+0x26/0x80 [ 3296.128779][T26610] do_syscall_64+0x39/0xb0 [ 3296.133251][T26610] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3296.139450][T26610] RIP: 0033:0x7f9d9388c169 [ 3296.143899][T26610] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3296.163589][T26610] RSP: 002b:00007f9d945a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3296.172037][T26610] RAX: ffffffffffffffda RBX: 00007f9d939abf80 RCX: 00007f9d9388c169 [ 3296.180040][T26610] RDX: 04924924924926d3 RSI: 0000000020000200 RDI: 0000000000000006 [ 3296.188128][T26610] RBP: 00007f9d945a81d0 R08: 0000000000000000 R09: 0000000000000000 [ 3296.196129][T26610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3296.204132][T26610] R13: 00007ffcb8ddc30f R14: 00007f9d945a8300 R15: 0000000000022000 [ 3296.212152][T26610] 12:48:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) (fail_nth: 4) 12:48:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 2) 12:48:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0xf0ffff, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x4, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x2000000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e4", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3296.386523][T26615] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3296.412377][T26617] FAULT_INJECTION: forcing a failure. [ 3296.412377][T26617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3296.459602][T26617] CPU: 0 PID: 26617 Comm: syz-executor.3 Not tainted 6.3.0-rc6-syzkaller-01723-gdce46f1b0cab #0 [ 3296.471940][T26617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3296.482143][T26617] Call Trace: [ 3296.486165][T26617] [ 3296.489168][T26617] dump_stack_lvl+0x136/0x150 [ 3296.494360][T26617] should_fail_ex+0x4a3/0x5b0 [ 3296.499117][T26617] _copy_from_user+0x2e/0x180 [ 3296.503851][T26617] iovec_from_user+0x14d/0x3a0 [ 3296.508688][T26617] ? __might_fault+0xe2/0x190 [ 3296.513453][T26617] __import_iovec+0x69/0x610 [ 3296.518106][T26617] import_iovec+0x110/0x160 [ 3296.522694][T26617] copy_msghdr_from_user+0xed/0x150 [ 3296.527970][T26617] ? __copy_msghdr+0x4b0/0x4b0 [ 3296.532807][T26617] ? find_held_lock+0x2d/0x110 [ 3296.537645][T26617] ___sys_sendmsg+0xdd/0x1b0 [ 3296.542281][T26617] ? do_recvmmsg+0x6e0/0x6e0 [ 3296.546941][T26617] ? __fget_files+0x248/0x480 [ 3296.551680][T26617] ? lock_downgrade+0x690/0x690 [ 3296.556611][T26617] ? find_held_lock+0x2d/0x110 [ 3296.561465][T26617] ? ksys_write+0x210/0x250 [ 3296.566042][T26617] ? __fget_files+0x26a/0x480 [ 3296.570791][T26617] ? __fget_light+0xe5/0x270 [ 3296.575447][T26617] __sys_sendmsg+0xf7/0x1c0 [ 3296.580002][T26617] ? __sys_sendmsg_sock+0x40/0x40 [ 3296.585085][T26617] ? fput+0x2f/0x1a0 [ 3296.589068][T26617] ? syscall_enter_from_user_mode+0x26/0x80 [ 3296.595039][T26617] ? lockdep_hardirqs_on+0x7d/0x100 [ 3296.600423][T26617] do_syscall_64+0x39/0xb0 [ 3296.604919][T26617] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3296.610894][T26617] RIP: 0033:0x7f0be7c8c169 [ 3296.615365][T26617] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3296.636096][T26617] RSP: 002b:00007f0be89bc168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3296.644679][T26617] RAX: ffffffffffffffda RBX: 00007f0be7dabf80 RCX: 00007f0be7c8c169 [ 3296.652772][T26617] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 3296.661819][T26617] RBP: 00007f0be89bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3296.669846][T26617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3296.678320][T26617] R13: 00007fff850a6e1f R14: 00007f0be89bc300 R15: 0000000000022000 [ 3296.686370][T26617] [ 3296.698570][T26620] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 12:48:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) (fail_nth: 5) 12:48:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 3) [ 3296.720193][T26620] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3296.765608][ T27] audit: type=1804 audit(1681908511.816:596): pid=26626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/369/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 3296.774665][T26626] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3296.804213][T26629] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3296.850853][T26631] FAULT_INJECTION: forcing a failure. [ 3296.850853][T26631] name failslab, interval 1, probability 0, space 0, times 0 [ 3296.873420][T26629] FAULT_INJECTION: forcing a failure. [ 3296.873420][T26629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3296.886786][T26631] CPU: 0 PID: 26631 Comm: syz-executor.3 Not tainted 6.3.0-rc6-syzkaller-01723-gdce46f1b0cab #0 [ 3296.897271][T26631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3296.907391][T26631] Call Trace: [ 3296.910720][T26631] [ 3296.913754][T26631] dump_stack_lvl+0x136/0x150 [ 3296.918485][T26631] should_fail_ex+0x4a3/0x5b0 [ 3296.923221][T26631] should_failslab+0x9/0x20 [ 3296.927777][T26631] kmem_cache_alloc_node+0x5c/0x3e0 [ 3296.933120][T26631] __alloc_skb+0x288/0x330 [ 3296.937573][T26631] ? __napi_build_skb+0x50/0x50 [ 3296.942482][T26631] ? __netlink_dump_start+0x910/0x910 [ 3296.947906][T26631] ? apparmor_socket_getpeersec_dgram+0x9/0x10 [ 3296.954103][T26631] netlink_sendmsg+0x9b0/0xe30 [ 3296.959008][T26631] ? netlink_unicast+0x7f0/0x7f0 [ 3296.963999][T26631] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3296.969325][T26631] ? netlink_unicast+0x7f0/0x7f0 [ 3296.974309][T26631] sock_sendmsg+0xde/0x190 [ 3296.978774][T26631] ____sys_sendmsg+0x71c/0x900 [ 3296.983674][T26631] ? copy_msghdr_from_user+0xfc/0x150 [ 3296.989112][T26631] ? kernel_sendmsg+0x50/0x50 [ 3296.993840][T26631] ? find_held_lock+0x2d/0x110 [ 3296.998666][T26631] ___sys_sendmsg+0x110/0x1b0 [ 3297.003383][T26631] ? do_recvmmsg+0x6e0/0x6e0 [ 3297.008104][T26631] ? __fget_files+0x248/0x480 [ 3297.012814][T26631] ? lock_downgrade+0x690/0x690 [ 3297.017710][T26631] ? find_held_lock+0x2d/0x110 [ 3297.022531][T26631] ? ksys_write+0x210/0x250 [ 3297.027072][T26631] ? __fget_files+0x26a/0x480 [ 3297.031793][T26631] ? __fget_light+0xe5/0x270 [ 3297.036418][T26631] __sys_sendmsg+0xf7/0x1c0 [ 3297.040954][T26631] ? __sys_sendmsg_sock+0x40/0x40 [ 3297.046043][T26631] ? syscall_enter_from_user_mode+0x26/0x80 [ 3297.051978][T26631] ? lockdep_hardirqs_on+0x7d/0x100 [ 3297.057217][T26631] do_syscall_64+0x39/0xb0 [ 3297.061685][T26631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3297.067628][T26631] RIP: 0033:0x7f0be7c8c169 [ 3297.072070][T26631] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3297.091709][T26631] RSP: 002b:00007f0be89bc168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3297.100158][T26631] RAX: ffffffffffffffda RBX: 00007f0be7dabf80 RCX: 00007f0be7c8c169 [ 3297.108169][T26631] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 3297.116166][T26631] RBP: 00007f0be89bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3297.124175][T26631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3297.132343][T26631] R13: 00007fff850a6e1f R14: 00007f0be89bc300 R15: 0000000000022000 [ 3297.140625][T26631] [ 3297.151411][T26629] CPU: 1 PID: 26629 Comm: syz-executor.0 Not tainted 6.3.0-rc6-syzkaller-01723-gdce46f1b0cab #0 [ 3297.162077][T26629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3297.172160][T26629] Call Trace: [ 3297.175460][T26629] [ 3297.178409][T26629] dump_stack_lvl+0x136/0x150 [ 3297.183123][T26629] should_fail_ex+0x4a3/0x5b0 [ 3297.187849][T26629] copyin+0x19/0x120 [ 3297.191775][T26629] _copy_from_iter+0x379/0x1060 [ 3297.196664][T26629] ? __build_skb_around+0x276/0x3a0 [ 3297.201919][T26629] ? iov_iter_get_pages_alloc2+0xf0/0xf0 [ 3297.207592][T26629] ? __napi_build_skb+0x50/0x50 [ 3297.212499][T26629] ? __netlink_dump_start+0x8c0/0x910 [ 3297.217924][T26629] ? __virt_addr_valid+0x61/0x2e0 [ 3297.222996][T26629] ? __phys_addr+0xc8/0x140 [ 3297.227544][T26629] ? __phys_addr_symbol+0x30/0x70 [ 3297.232617][T26629] ? __check_object_size+0x323/0x730 [ 3297.237946][T26629] netlink_sendmsg+0x883/0xe30 [ 3297.242764][T26629] ? netlink_unicast+0x7f0/0x7f0 [ 3297.247754][T26629] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3297.253092][T26629] ? netlink_unicast+0x7f0/0x7f0 [ 3297.258077][T26629] sock_sendmsg+0xde/0x190 [ 3297.262546][T26629] ____sys_sendmsg+0x334/0x900 [ 3297.267364][T26629] ? copy_msghdr_from_user+0xfc/0x150 [ 3297.272857][T26629] ? kernel_sendmsg+0x50/0x50 [ 3297.277598][T26629] ___sys_sendmsg+0x110/0x1b0 [ 3297.282492][T26629] ? do_recvmmsg+0x6e0/0x6e0 [ 3297.287121][T26629] ? __fget_files+0x248/0x480 [ 3297.291830][T26629] ? lock_downgrade+0x690/0x690 [ 3297.296735][T26629] ? __fget_files+0x26a/0x480 [ 3297.301547][T26629] ? __fget_light+0xe5/0x270 [ 3297.306240][T26629] __sys_sendmmsg+0x18f/0x460 [ 3297.311501][T26629] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3297.316605][T26629] ? wait_for_completion_io_timeout+0x20/0x20 [ 3297.322738][T26629] ? fput+0x2f/0x1a0 [ 3297.326685][T26629] ? ksys_write+0x1a3/0x250 [ 3297.331241][T26629] __x64_sys_sendmmsg+0x9d/0x100 [ 3297.336223][T26629] ? syscall_enter_from_user_mode+0x26/0x80 [ 3297.342188][T26629] do_syscall_64+0x39/0xb0 [ 3297.346684][T26629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3297.352636][T26629] RIP: 0033:0x7f9d9388c169 [ 3297.357078][T26629] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3297.376890][T26629] RSP: 002b:00007f9d945a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3297.385334][T26629] RAX: ffffffffffffffda RBX: 00007f9d939abf80 RCX: 00007f9d9388c169 [ 3297.393350][T26629] RDX: 04924924924926d3 RSI: 0000000020000200 RDI: 0000000000000006 12:48:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x3000000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3297.401346][T26629] RBP: 00007f9d945a81d0 R08: 0000000000000000 R09: 0000000000000000 [ 3297.409342][T26629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3297.417436][T26629] R13: 00007ffcb8ddc30f R14: 00007f9d945a8300 R15: 0000000000022000 [ 3297.425446][T26629] 12:48:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x1000000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x5, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) (fail_nth: 6) 12:48:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 4) [ 3297.516565][T26634] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3297.540552][T26634] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:48:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 5) [ 3297.619137][T26642] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3297.704615][T26648] FAULT_INJECTION: forcing a failure. [ 3297.704615][T26648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3297.721067][T26648] CPU: 1 PID: 26648 Comm: syz-executor.3 Not tainted 6.3.0-rc6-syzkaller-01723-gdce46f1b0cab #0 [ 3297.731860][T26648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3297.742087][T26648] Call Trace: [ 3297.745633][T26648] [ 3297.748708][T26648] dump_stack_lvl+0x136/0x150 [ 3297.753457][T26648] should_fail_ex+0x4a3/0x5b0 [ 3297.758319][T26648] copyin+0x19/0x120 [ 3297.762454][T26648] _copy_from_iter+0x379/0x1060 [ 3297.767376][T26648] ? __build_skb_around+0x276/0x3a0 [ 3297.772671][T26648] ? iov_iter_get_pages_alloc2+0xf0/0xf0 [ 3297.778462][T26648] ? __napi_build_skb+0x50/0x50 [ 3297.783485][T26648] ? __netlink_dump_start+0x8c0/0x910 [ 3297.789026][T26648] ? __virt_addr_valid+0x61/0x2e0 [ 3297.794103][T26648] ? __phys_addr+0xc8/0x140 [ 3297.798662][T26648] ? __phys_addr_symbol+0x30/0x70 [ 3297.803733][T26648] ? __check_object_size+0x323/0x730 [ 3297.809067][T26648] netlink_sendmsg+0x883/0xe30 [ 3297.813984][T26648] ? netlink_unicast+0x7f0/0x7f0 [ 3297.818984][T26648] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3297.824322][T26648] ? netlink_unicast+0x7f0/0x7f0 [ 3297.829322][T26648] sock_sendmsg+0xde/0x190 [ 3297.833873][T26648] ____sys_sendmsg+0x71c/0x900 [ 3297.838864][T26648] ? copy_msghdr_from_user+0xfc/0x150 [ 3297.844285][T26648] ? kernel_sendmsg+0x50/0x50 [ 3297.849044][T26648] ? find_held_lock+0x2d/0x110 [ 3297.853887][T26648] ___sys_sendmsg+0x110/0x1b0 [ 3297.858608][T26648] ? do_recvmmsg+0x6e0/0x6e0 [ 3297.863240][T26648] ? __fget_files+0x248/0x480 [ 3297.867947][T26648] ? lock_downgrade+0x690/0x690 [ 3297.872829][T26648] ? find_held_lock+0x2d/0x110 [ 3297.877647][T26648] ? ksys_write+0x210/0x250 [ 3297.882197][T26648] ? __fget_files+0x26a/0x480 [ 3297.886912][T26648] ? __fget_light+0xe5/0x270 [ 3297.891714][T26648] __sys_sendmsg+0xf7/0x1c0 [ 3297.896253][T26648] ? __sys_sendmsg_sock+0x40/0x40 [ 3297.901326][T26648] ? syscall_enter_from_user_mode+0x26/0x80 [ 3297.907342][T26648] ? lockdep_hardirqs_on+0x7d/0x100 [ 3297.912577][T26648] do_syscall_64+0x39/0xb0 [ 3297.917058][T26648] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3297.923000][T26648] RIP: 0033:0x7f0be7c8c169 [ 3297.927441][T26648] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3297.947107][T26648] RSP: 002b:00007f0be89bc168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3297.955564][T26648] RAX: ffffffffffffffda RBX: 00007f0be7dabf80 RCX: 00007f0be7c8c169 [ 3297.963595][T26648] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 3297.971602][T26648] RBP: 00007f0be89bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3297.979595][T26648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3297.987588][T26648] R13: 00007fff850a6e1f R14: 00007f0be89bc300 R15: 0000000000022000 [ 3297.995607][T26648] [ 3298.015413][T26642] FAULT_INJECTION: forcing a failure. [ 3298.015413][T26642] name failslab, interval 1, probability 0, space 0, times 0 [ 3298.050549][T26642] CPU: 1 PID: 26642 Comm: syz-executor.0 Not tainted 6.3.0-rc6-syzkaller-01723-gdce46f1b0cab #0 [ 3298.061057][T26642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3298.071175][T26642] Call Trace: [ 3298.074497][T26642] [ 3298.077471][T26642] dump_stack_lvl+0x136/0x150 [ 3298.082301][T26642] should_fail_ex+0x4a3/0x5b0 [ 3298.087205][T26642] ? lock_release+0x670/0x670 [ 3298.091918][T26642] should_failslab+0x9/0x20 [ 3298.096544][T26642] kmem_cache_alloc+0x63/0x3b0 [ 3298.101363][T26642] skb_clone+0x172/0x3c0 [ 3298.105642][T26642] netlink_deliver_tap+0xb2f/0xcf0 [ 3298.110814][T26642] netlink_unicast+0x5f9/0x7f0 [ 3298.115642][T26642] ? netlink_attachskb+0x890/0x890 [ 3298.120905][T26642] ? __virt_addr_valid+0x61/0x2e0 [ 3298.125989][T26642] ? __phys_addr_symbol+0x30/0x70 [ 3298.131071][T26642] ? __check_object_size+0x323/0x730 [ 3298.136405][T26642] netlink_sendmsg+0x925/0xe30 [ 3298.141227][T26642] ? netlink_unicast+0x7f0/0x7f0 [ 3298.146306][T26642] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3298.151646][T26642] ? netlink_unicast+0x7f0/0x7f0 [ 3298.156632][T26642] sock_sendmsg+0xde/0x190 [ 3298.161100][T26642] ____sys_sendmsg+0x334/0x900 [ 3298.165909][T26642] ? copy_msghdr_from_user+0xfc/0x150 [ 3298.171311][T26642] ? kernel_sendmsg+0x50/0x50 [ 3298.176049][T26642] ___sys_sendmsg+0x110/0x1b0 [ 3298.180770][T26642] ? do_recvmmsg+0x6e0/0x6e0 [ 3298.185396][T26642] ? __fget_files+0x248/0x480 [ 3298.190102][T26642] ? lock_downgrade+0x690/0x690 [ 3298.194997][T26642] ? __fget_files+0x26a/0x480 [ 3298.199721][T26642] ? __fget_light+0xe5/0x270 [ 3298.204347][T26642] __sys_sendmmsg+0x18f/0x460 [ 3298.209086][T26642] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3298.214174][T26642] ? wait_for_completion_io_timeout+0x20/0x20 [ 3298.220292][T26642] ? fput+0x2f/0x1a0 [ 3298.224243][T26642] ? ksys_write+0x1a3/0x250 [ 3298.228784][T26642] __x64_sys_sendmmsg+0x9d/0x100 [ 3298.233752][T26642] ? syscall_enter_from_user_mode+0x26/0x80 [ 3298.239682][T26642] do_syscall_64+0x39/0xb0 [ 3298.244215][T26642] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3298.250154][T26642] RIP: 0033:0x7f9d9388c169 [ 3298.254597][T26642] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3298.274231][T26642] RSP: 002b:00007f9d945a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3298.282672][T26642] RAX: ffffffffffffffda RBX: 00007f9d939abf80 RCX: 00007f9d9388c169 [ 3298.290816][T26642] RDX: 04924924924926d3 RSI: 0000000020000200 RDI: 0000000000000006 [ 3298.298817][T26642] RBP: 00007f9d945a81d0 R08: 0000000000000000 R09: 0000000000000000 [ 3298.306809][T26642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3298.314805][T26642] R13: 00007ffcb8ddc30f R14: 00007f9d945a8300 R15: 0000000000022000 [ 3298.322817][T26642] [ 3298.330815][ T27] audit: type=1804 audit(1681908513.386:597): pid=26640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/370/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 12:48:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x2000000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x6, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 6) 12:48:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x4000000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3298.361750][T26640] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3298.380575][T26640] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 12:48:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) (fail_nth: 7) [ 3298.449913][T26653] FAULT_INJECTION: forcing a failure. [ 3298.449913][T26653] name failslab, interval 1, probability 0, space 0, times 0 [ 3298.474055][T26653] CPU: 0 PID: 26653 Comm: syz-executor.3 Not tainted 6.3.0-rc6-syzkaller-01723-gdce46f1b0cab #0 [ 3298.484570][T26653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3298.494677][T26653] Call Trace: [ 3298.498004][T26653] [ 3298.500985][T26653] dump_stack_lvl+0x136/0x150 [ 3298.505737][T26653] should_fail_ex+0x4a3/0x5b0 [ 3298.510493][T26653] ? lock_release+0x670/0x670 [ 3298.515237][T26653] should_failslab+0x9/0x20 [ 3298.519816][T26653] kmem_cache_alloc+0x63/0x3b0 [ 3298.524675][T26653] skb_clone+0x172/0x3c0 [ 3298.528990][T26653] netlink_deliver_tap+0xb2f/0xcf0 [ 3298.534201][T26653] netlink_unicast+0x5f9/0x7f0 [ 3298.539060][T26653] ? netlink_attachskb+0x890/0x890 [ 3298.544253][T26653] ? __virt_addr_valid+0x61/0x2e0 [ 3298.549334][T26653] ? __phys_addr_symbol+0x30/0x70 [ 3298.554498][T26653] ? __check_object_size+0x323/0x730 [ 3298.559830][T26653] netlink_sendmsg+0x925/0xe30 [ 3298.564650][T26653] ? netlink_unicast+0x7f0/0x7f0 [ 3298.569651][T26653] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3298.575071][T26653] ? netlink_unicast+0x7f0/0x7f0 [ 3298.580061][T26653] sock_sendmsg+0xde/0x190 [ 3298.584527][T26653] ____sys_sendmsg+0x71c/0x900 [ 3298.589343][T26653] ? copy_msghdr_from_user+0xfc/0x150 [ 3298.594753][T26653] ? kernel_sendmsg+0x50/0x50 [ 3298.599483][T26653] ? find_held_lock+0x2d/0x110 [ 3298.604302][T26653] ___sys_sendmsg+0x110/0x1b0 [ 3298.609049][T26653] ? do_recvmmsg+0x6e0/0x6e0 [ 3298.613674][T26653] ? __fget_files+0x248/0x480 [ 3298.618405][T26653] ? lock_downgrade+0x690/0x690 [ 3298.623291][T26653] ? find_held_lock+0x2d/0x110 [ 3298.628110][T26653] ? ksys_write+0x210/0x250 [ 3298.632670][T26653] ? __fget_files+0x26a/0x480 [ 3298.637492][T26653] ? __fget_light+0xe5/0x270 [ 3298.642248][T26653] __sys_sendmsg+0xf7/0x1c0 [ 3298.646794][T26653] ? __sys_sendmsg_sock+0x40/0x40 [ 3298.651875][T26653] ? syscall_enter_from_user_mode+0x26/0x80 [ 3298.657833][T26653] ? lockdep_hardirqs_on+0x7d/0x100 [ 3298.663085][T26653] do_syscall_64+0x39/0xb0 [ 3298.667560][T26653] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3298.673499][T26653] RIP: 0033:0x7f0be7c8c169 [ 3298.677944][T26653] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 12:48:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x3000000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3298.697582][T26653] RSP: 002b:00007f0be89bc168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3298.706041][T26653] RAX: ffffffffffffffda RBX: 00007f0be7dabf80 RCX: 00007f0be7c8c169 [ 3298.714039][T26653] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 3298.722037][T26653] RBP: 00007f0be89bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3298.730034][T26653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3298.738033][T26653] R13: 00007fff850a6e1f R14: 00007f0be89bc300 R15: 0000000000022000 [ 3298.746046][T26653] 12:48:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x7, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3298.779231][T26657] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3298.789802][T26657] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3298.799710][T26659] FAULT_INJECTION: forcing a failure. [ 3298.799710][T26659] name failslab, interval 1, probability 0, space 0, times 0 [ 3298.831418][T26659] CPU: 1 PID: 26659 Comm: syz-executor.0 Not tainted 6.3.0-rc6-syzkaller-01723-gdce46f1b0cab #0 [ 3298.841923][T26659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3298.852040][T26659] Call Trace: [ 3298.855370][T26659] [ 3298.858346][T26659] dump_stack_lvl+0x136/0x150 [ 3298.863095][T26659] should_fail_ex+0x4a3/0x5b0 [ 3298.867858][T26659] ? lock_release+0x670/0x670 [ 3298.872613][T26659] should_failslab+0x9/0x20 [ 3298.877190][T26659] kmem_cache_alloc+0x63/0x3b0 [ 3298.882042][T26659] skb_clone+0x172/0x3c0 [ 3298.886351][T26659] netlink_deliver_tap+0xb2f/0xcf0 [ 3298.891589][T26659] netlink_unicast+0x5f9/0x7f0 [ 3298.896450][T26659] ? netlink_attachskb+0x890/0x890 [ 3298.901639][T26659] ? __virt_addr_valid+0x61/0x2e0 [ 3298.906756][T26659] ? __phys_addr_symbol+0x30/0x70 [ 3298.911861][T26659] ? __check_object_size+0x323/0x730 [ 3298.917238][T26659] netlink_sendmsg+0x925/0xe30 [ 3298.922093][T26659] ? netlink_unicast+0x7f0/0x7f0 [ 3298.927121][T26659] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3298.932489][T26659] ? netlink_unicast+0x7f0/0x7f0 [ 3298.937519][T26659] sock_sendmsg+0xde/0x190 [ 3298.942074][T26659] ____sys_sendmsg+0x334/0x900 [ 3298.946931][T26659] ? copy_msghdr_from_user+0xfc/0x150 [ 3298.952460][T26659] ? kernel_sendmsg+0x50/0x50 [ 3298.957243][T26659] ___sys_sendmsg+0x110/0x1b0 [ 3298.961990][T26659] ? do_recvmmsg+0x6e0/0x6e0 [ 3298.966652][T26659] ? __fget_files+0x248/0x480 [ 3298.971393][T26659] ? lock_downgrade+0x690/0x690 [ 3298.976328][T26659] ? __fget_files+0x26a/0x480 [ 3298.981039][T26659] ? __fget_light+0xe5/0x270 [ 3298.985657][T26659] __sys_sendmmsg+0x18f/0x460 [ 3298.990374][T26659] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3298.995480][T26659] ? wait_for_completion_io_timeout+0x20/0x20 [ 3299.001635][T26659] ? fput+0x2f/0x1a0 [ 3299.005598][T26659] ? ksys_write+0x1a3/0x250 [ 3299.010164][T26659] __x64_sys_sendmmsg+0x9d/0x100 [ 3299.015148][T26659] ? syscall_enter_from_user_mode+0x26/0x80 [ 3299.021274][T26659] do_syscall_64+0x39/0xb0 [ 3299.025748][T26659] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3299.031683][T26659] RIP: 0033:0x7f9d9388c169 [ 3299.036120][T26659] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3299.055765][T26659] RSP: 002b:00007f9d945a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3299.064215][T26659] RAX: ffffffffffffffda RBX: 00007f9d939abf80 RCX: 00007f9d9388c169 [ 3299.072218][T26659] RDX: 04924924924926d3 RSI: 0000000020000200 RDI: 0000000000000006 [ 3299.080318][T26659] RBP: 00007f9d945a81d0 R08: 0000000000000000 R09: 0000000000000000 [ 3299.088316][T26659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3299.096587][T26659] R13: 00007ffcb8ddc30f R14: 00007f9d945a8300 R15: 0000000000022000 [ 3299.104604][T26659] 12:48:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) (fail_nth: 8) 12:48:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3299.211303][ T27] audit: type=1804 audit(1681908514.266:598): pid=26666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/371/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 12:48:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x4000000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x5000000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x8, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3299.300207][T26669] FAULT_INJECTION: forcing a failure. [ 3299.300207][T26669] name failslab, interval 1, probability 0, space 0, times 0 [ 3299.313722][T26669] CPU: 1 PID: 26669 Comm: syz-executor.0 Not tainted 6.3.0-rc6-syzkaller-01723-gdce46f1b0cab #0 [ 3299.324213][T26669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3299.334323][T26669] Call Trace: [ 3299.337654][T26669] [ 3299.340642][T26669] dump_stack_lvl+0x136/0x150 [ 3299.345479][T26669] should_fail_ex+0x4a3/0x5b0 [ 3299.350248][T26669] should_failslab+0x9/0x20 [ 3299.354825][T26669] __kmem_cache_alloc_node+0x5b/0x320 [ 3299.360471][T26669] ? fl_change+0x1cf/0x4ac0 [ 3299.365058][T26669] kmalloc_trace+0x26/0xe0 [ 3299.369552][T26669] fl_change+0x1cf/0x4ac0 [ 3299.373949][T26669] ? lock_release+0x670/0x670 [ 3299.378688][T26669] ? find_held_lock+0x2d/0x110 [ 3299.383547][T26669] ? find_held_lock+0x2d/0x110 [ 3299.388399][T26669] ? fl_get+0x207/0x3c0 [ 3299.392620][T26669] ? fl_destroy+0x320/0x320 [ 3299.397178][T26669] ? __radix_tree_lookup+0x215/0x2a0 [ 3299.402522][T26669] ? fl_get+0x229/0x3c0 [ 3299.406711][T26669] ? fl_put+0x20/0x20 [ 3299.410731][T26669] tc_new_tfilter+0x97c/0x2290 [ 3299.415642][T26669] ? tc_del_tfilter+0x15d0/0x15d0 [ 3299.420712][T26669] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 3299.426595][T26669] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3299.432640][T26669] ? kasan_quarantine_put+0xf9/0x220 [ 3299.438058][T26669] ? lockdep_hardirqs_on+0x7d/0x100 [ 3299.443349][T26669] ? rtnetlink_rcv_msg+0x956/0xd50 [ 3299.448618][T26669] ? lock_downgrade+0x690/0x690 [ 3299.453550][T26669] ? tc_del_tfilter+0x15d0/0x15d0 [ 3299.458635][T26669] rtnetlink_rcv_msg+0x996/0xd50 [ 3299.463626][T26669] ? rtnl_stats_set+0x4d0/0x4d0 [ 3299.468533][T26669] ? __dev_queue_xmit+0xa38/0x3b30 [ 3299.473752][T26669] ? lock_downgrade+0x690/0x690 [ 3299.478692][T26669] netlink_rcv_skb+0x165/0x440 [ 3299.483550][T26669] ? rtnl_stats_set+0x4d0/0x4d0 [ 3299.488489][T26669] ? netlink_ack+0x1360/0x1360 [ 3299.493360][T26669] ? netlink_deliver_tap+0x1b1/0xcf0 [ 3299.498721][T26669] netlink_unicast+0x547/0x7f0 [ 3299.503566][T26669] ? netlink_attachskb+0x890/0x890 [ 3299.508752][T26669] ? __virt_addr_valid+0x61/0x2e0 [ 3299.513845][T26669] ? __phys_addr_symbol+0x30/0x70 [ 3299.518924][T26669] ? __check_object_size+0x323/0x730 [ 3299.524293][T26669] netlink_sendmsg+0x925/0xe30 [ 3299.529146][T26669] ? netlink_unicast+0x7f0/0x7f0 [ 3299.534184][T26669] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3299.539562][T26669] ? netlink_unicast+0x7f0/0x7f0 [ 3299.544581][T26669] sock_sendmsg+0xde/0x190 12:48:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x9, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3299.549083][T26669] ____sys_sendmsg+0x334/0x900 [ 3299.553933][T26669] ? copy_msghdr_from_user+0xfc/0x150 [ 3299.559405][T26669] ? kernel_sendmsg+0x50/0x50 [ 3299.564180][T26669] ___sys_sendmsg+0x110/0x1b0 [ 3299.568890][T26669] ? do_recvmmsg+0x6e0/0x6e0 [ 3299.573527][T26669] ? __fget_files+0x248/0x480 [ 3299.578278][T26669] ? lock_downgrade+0x690/0x690 [ 3299.583211][T26669] ? __fget_files+0x26a/0x480 [ 3299.587955][T26669] ? __fget_light+0xe5/0x270 [ 3299.592646][T26669] __sys_sendmmsg+0x18f/0x460 [ 3299.597394][T26669] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3299.602511][T26669] ? wait_for_completion_io_timeout+0x20/0x20 [ 3299.608670][T26669] ? fput+0x2f/0x1a0 [ 3299.612645][T26669] ? ksys_write+0x1a3/0x250 [ 3299.617220][T26669] __x64_sys_sendmmsg+0x9d/0x100 [ 3299.622220][T26669] ? syscall_enter_from_user_mode+0x26/0x80 [ 3299.628196][T26669] do_syscall_64+0x39/0xb0 [ 3299.632708][T26669] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3299.638713][T26669] RIP: 0033:0x7f9d9388c169 12:48:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x6000000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3299.643181][T26669] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3299.662860][T26669] RSP: 002b:00007f9d945a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3299.671432][T26669] RAX: ffffffffffffffda RBX: 00007f9d939abf80 RCX: 00007f9d9388c169 [ 3299.679468][T26669] RDX: 04924924924926d3 RSI: 0000000020000200 RDI: 0000000000000006 [ 3299.687521][T26669] RBP: 00007f9d945a81d0 R08: 0000000000000000 R09: 0000000000000000 [ 3299.695548][T26669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3299.703570][T26669] R13: 00007ffcb8ddc30f R14: 00007f9d945a8300 R15: 0000000000022000 [ 3299.711627][T26669] 12:48:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0xd8, r1, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d5b2c77655255a647a8cb6cd881dc5ef44c619d668d6873a"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 12:48:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) (fail_nth: 9) [ 3299.744160][T26680] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3299.779354][T26680] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3299.824252][T26690] __nla_validate_parse: 4 callbacks suppressed [ 3299.824270][T26690] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3299.910018][T26690] FAULT_INJECTION: forcing a failure. [ 3299.910018][T26690] name failslab, interval 1, probability 0, space 0, times 0 [ 3299.923672][T26690] CPU: 1 PID: 26690 Comm: syz-executor.0 Not tainted 6.3.0-rc6-syzkaller-01723-gdce46f1b0cab #0 [ 3299.934164][T26690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3299.944271][T26690] Call Trace: [ 3299.947614][T26690] [ 3299.950579][T26690] dump_stack_lvl+0x136/0x150 [ 3299.955326][T26690] should_fail_ex+0x4a3/0x5b0 [ 3299.960095][T26690] should_failslab+0x9/0x20 [ 3299.964659][T26690] __kmem_cache_alloc_node+0x5b/0x320 [ 3299.970113][T26690] ? fl_change+0x31f/0x4ac0 [ 3299.974690][T26690] kmalloc_trace+0x26/0xe0 [ 3299.979165][T26690] fl_change+0x31f/0x4ac0 [ 3299.983523][T26690] ? lock_release+0x670/0x670 [ 3299.988238][T26690] ? find_held_lock+0x2d/0x110 [ 3299.993083][T26690] ? find_held_lock+0x2d/0x110 [ 3299.997950][T26690] ? fl_destroy+0x320/0x320 [ 3300.002486][T26690] ? __radix_tree_lookup+0x215/0x2a0 [ 3300.007812][T26690] ? fl_get+0x229/0x3c0 [ 3300.012007][T26690] ? fl_put+0x20/0x20 [ 3300.016086][T26690] tc_new_tfilter+0x97c/0x2290 [ 3300.020923][T26690] ? tc_del_tfilter+0x15d0/0x15d0 [ 3300.026012][T26690] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 3300.031872][T26690] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3300.037894][T26690] ? kasan_quarantine_put+0xf9/0x220 [ 3300.043224][T26690] ? lockdep_hardirqs_on+0x7d/0x100 [ 3300.048482][T26690] ? rtnetlink_rcv_msg+0x956/0xd50 [ 3300.053648][T26690] ? lock_downgrade+0x690/0x690 [ 3300.058542][T26690] ? tc_del_tfilter+0x15d0/0x15d0 [ 3300.063606][T26690] rtnetlink_rcv_msg+0x996/0xd50 [ 3300.068690][T26690] ? rtnl_stats_set+0x4d0/0x4d0 [ 3300.073618][T26690] ? __dev_queue_xmit+0xa38/0x3b30 [ 3300.078797][T26690] netlink_rcv_skb+0x165/0x440 [ 3300.083613][T26690] ? rtnl_stats_set+0x4d0/0x4d0 [ 3300.088518][T26690] ? netlink_ack+0x1360/0x1360 [ 3300.093433][T26690] ? netlink_deliver_tap+0x1b1/0xcf0 [ 3300.098798][T26690] netlink_unicast+0x547/0x7f0 [ 3300.103616][T26690] ? netlink_attachskb+0x890/0x890 [ 3300.108771][T26690] ? __virt_addr_valid+0x61/0x2e0 [ 3300.113843][T26690] ? __phys_addr_symbol+0x30/0x70 [ 3300.118914][T26690] ? __check_object_size+0x323/0x730 [ 3300.124245][T26690] netlink_sendmsg+0x925/0xe30 [ 3300.129065][T26690] ? netlink_unicast+0x7f0/0x7f0 [ 3300.134062][T26690] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3300.139387][T26690] ? netlink_unicast+0x7f0/0x7f0 [ 3300.144376][T26690] sock_sendmsg+0xde/0x190 [ 3300.148844][T26690] ____sys_sendmsg+0x334/0x900 [ 3300.153656][T26690] ? copy_msghdr_from_user+0xfc/0x150 [ 3300.159058][T26690] ? kernel_sendmsg+0x50/0x50 [ 3300.163787][T26690] ? rcu_preempt_deferred_qs_irqrestore+0x57b/0xd60 [ 3300.170422][T26690] ? lock_downgrade+0x690/0x690 [ 3300.175338][T26690] ___sys_sendmsg+0x110/0x1b0 [ 3300.180050][T26690] ? do_recvmmsg+0x6e0/0x6e0 [ 3300.184674][T26690] ? __fget_files+0x248/0x480 [ 3300.189503][T26690] ? lock_downgrade+0x690/0x690 [ 3300.194402][T26690] ? __fget_files+0x26a/0x480 [ 3300.199115][T26690] ? __fget_light+0xe5/0x270 [ 3300.203742][T26690] __sys_sendmmsg+0x18f/0x460 [ 3300.208463][T26690] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3300.213535][T26690] ? wait_for_completion_io_timeout+0x20/0x20 [ 3300.219651][T26690] ? fput+0x2f/0x1a0 [ 3300.223584][T26690] ? ksys_write+0x1a3/0x250 [ 3300.228129][T26690] __x64_sys_sendmmsg+0x9d/0x100 [ 3300.233096][T26690] ? syscall_enter_from_user_mode+0x26/0x80 [ 3300.239027][T26690] do_syscall_64+0x39/0xb0 [ 3300.243492][T26690] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3300.249428][T26690] RIP: 0033:0x7f9d9388c169 [ 3300.253978][T26690] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3300.273619][T26690] RSP: 002b:00007f9d945a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3300.282061][T26690] RAX: ffffffffffffffda RBX: 00007f9d939abf80 RCX: 00007f9d9388c169 [ 3300.290059][T26690] RDX: 04924924924926d3 RSI: 0000000020000200 RDI: 0000000000000006 [ 3300.298053][T26690] RBP: 00007f9d945a81d0 R08: 0000000000000000 R09: 0000000000000000 12:48:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) [ 3300.306052][T26690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3300.314050][T26690] R13: 00007ffcb8ddc30f R14: 00007f9d945a8300 R15: 0000000000022000 [ 3300.322066][T26690] 12:48:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x5000000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) (fail_nth: 10) 12:48:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x7000000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xa, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:48:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0xd8, r1, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d5b2c77655255a647a8cb6cd881dc5ef44c619d668d6873a"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x80) [ 3300.438245][T26694] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3300.496311][T26696] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3300.512916][T26694] FAULT_INJECTION: forcing a failure. [ 3300.512916][T26694] name failslab, interval 1, probability 0, space 0, times 0 [ 3300.530469][T26696] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3300.548596][T26694] CPU: 0 PID: 26694 Comm: syz-executor.0 Not tainted 6.3.0-rc6-syzkaller-01723-gdce46f1b0cab #0 [ 3300.559112][T26694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3300.569397][T26694] Call Trace: [ 3300.572727][T26694] [ 3300.575712][T26694] dump_stack_lvl+0x136/0x150 [ 3300.580459][T26694] should_fail_ex+0x4a3/0x5b0 [ 3300.585229][T26694] should_failslab+0x9/0x20 [ 3300.589803][T26694] __kmem_cache_alloc_node+0x5b/0x320 [ 3300.595262][T26694] ? tcf_exts_init_ex+0xe4/0x5a0 [ 3300.600286][T26694] kmalloc_trace+0x26/0xe0 [ 3300.604774][T26694] tcf_exts_init_ex+0xe4/0x5a0 [ 3300.609610][T26694] fl_change+0x56f/0x4ac0 [ 3300.614073][T26694] ? lock_release+0x670/0x670 [ 3300.618831][T26694] ? find_held_lock+0x2d/0x110 [ 3300.623698][T26694] ? find_held_lock+0x2d/0x110 [ 3300.628552][T26694] ? fl_destroy+0x320/0x320 [ 3300.633126][T26694] ? __radix_tree_lookup+0x215/0x2a0 [ 3300.638484][T26694] ? fl_get+0x229/0x3c0 [ 3300.642702][T26694] ? fl_put+0x20/0x20 [ 3300.646756][T26694] tc_new_tfilter+0x97c/0x2290 [ 3300.651618][T26694] ? tc_del_tfilter+0x15d0/0x15d0 [ 3300.656718][T26694] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 3300.662609][T26694] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3300.668659][T26694] ? kasan_quarantine_put+0xf9/0x220 [ 3300.674021][T26694] ? lockdep_hardirqs_on+0x7d/0x100 [ 3300.679320][T26694] ? rtnetlink_rcv_msg+0x956/0xd50 [ 3300.684511][T26694] ? lock_downgrade+0x690/0x690 [ 3300.689538][T26694] ? tc_del_tfilter+0x15d0/0x15d0 [ 3300.694631][T26694] rtnetlink_rcv_msg+0x996/0xd50 [ 3300.699651][T26694] ? rtnl_stats_set+0x4d0/0x4d0 [ 3300.704598][T26694] ? __dev_queue_xmit+0xa38/0x3b30 [ 3300.709806][T26694] ? exc_int3+0xf/0x80 [ 3300.713942][T26694] netlink_rcv_skb+0x165/0x440 [ 3300.718833][T26694] ? rtnl_stats_set+0x4d0/0x4d0 [ 3300.723776][T26694] ? netlink_ack+0x1360/0x1360 [ 3300.728647][T26694] ? netlink_deliver_tap+0x1b1/0xcf0 [ 3300.734043][T26694] netlink_unicast+0x547/0x7f0 [ 3300.738896][T26694] ? netlink_attachskb+0x890/0x890 [ 3300.744106][T26694] ? __virt_addr_valid+0x61/0x2e0 [ 3300.749205][T26694] ? __phys_addr_symbol+0x30/0x70 [ 3300.754298][T26694] ? __check_object_size+0x323/0x730 [ 3300.759633][T26694] netlink_sendmsg+0x925/0xe30 [ 3300.764543][T26694] ? netlink_unicast+0x7f0/0x7f0 [ 3300.769542][T26694] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3300.774872][T26694] ? netlink_unicast+0x7f0/0x7f0 [ 3300.779862][T26694] sock_sendmsg+0xde/0x190 [ 3300.784336][T26694] ____sys_sendmsg+0x334/0x900 [ 3300.789148][T26694] ? copy_msghdr_from_user+0xfc/0x150 [ 3300.794559][T26694] ? kernel_sendmsg+0x50/0x50 [ 3300.799300][T26694] ___sys_sendmsg+0x110/0x1b0 [ 3300.804097][T26694] ? do_recvmmsg+0x6e0/0x6e0 [ 3300.808721][T26694] ? __fget_files+0x248/0x480 [ 3300.813430][T26694] ? lock_downgrade+0x690/0x690 [ 3300.818331][T26694] ? __fget_files+0x26a/0x480 [ 3300.823046][T26694] ? __fget_light+0xe5/0x270 [ 3300.827673][T26694] __sys_sendmmsg+0x18f/0x460 [ 3300.832386][T26694] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3300.837455][T26694] ? wait_for_completion_io_timeout+0x20/0x20 [ 3300.843588][T26694] ? fput+0x2f/0x1a0 [ 3300.847527][T26694] ? ksys_write+0x1a3/0x250 [ 3300.852073][T26694] __x64_sys_sendmmsg+0x9d/0x100 [ 3300.857043][T26694] ? syscall_enter_from_user_mode+0x26/0x80 [ 3300.862976][T26694] do_syscall_64+0x39/0xb0 [ 3300.867444][T26694] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3300.873379][T26694] RIP: 0033:0x7f9d9388c169 [ 3300.877822][T26694] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 12:48:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0xd8, r1, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d5b2c77655255a647a8cb6cd881dc5ef44c619d668d6873a"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x80) [ 3300.897633][T26694] RSP: 002b:00007f9d945a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3300.906087][T26694] RAX: ffffffffffffffda RBX: 00007f9d939abf80 RCX: 00007f9d9388c169 [ 3300.914124][T26694] RDX: 04924924924926d3 RSI: 0000000020000200 RDI: 0000000000000006 [ 3300.922121][T26694] RBP: 00007f9d945a81d0 R08: 0000000000000000 R09: 0000000000000000 [ 3300.930135][T26694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3300.938130][T26694] R13: 00007ffcb8ddc30f R14: 00007f9d945a8300 R15: 0000000000022000 [ 3300.946145][T26694] [ 3300.975269][ T27] audit: type=1804 audit(1681908516.026:599): pid=26709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/372/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 12:48:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) (fail_nth: 11) [ 3301.027374][T26697] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3301.087707][T26715] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3301.130217][T26715] FAULT_INJECTION: forcing a failure. [ 3301.130217][T26715] name failslab, interval 1, probability 0, space 0, times 0 [ 3301.143948][T26715] CPU: 0 PID: 26715 Comm: syz-executor.0 Not tainted 6.3.0-rc6-syzkaller-01723-gdce46f1b0cab #0 [ 3301.154521][T26715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3301.164630][T26715] Call Trace: [ 3301.168044][T26715] [ 3301.171027][T26715] dump_stack_lvl+0x136/0x150 [ 3301.175784][T26715] should_fail_ex+0x4a3/0x5b0 [ 3301.180547][T26715] should_failslab+0x9/0x20 [ 3301.185121][T26715] __kmem_cache_alloc_node+0x5b/0x320 [ 3301.190588][T26715] ? tcf_exts_init_ex+0x246/0x5a0 [ 3301.195689][T26715] kmalloc_trace+0x26/0xe0 [ 3301.200174][T26715] tcf_exts_init_ex+0x246/0x5a0 [ 3301.205095][T26715] fl_change+0x56f/0x4ac0 [ 3301.209496][T26715] ? lock_release+0x670/0x670 [ 3301.214245][T26715] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3301.220477][T26715] ? find_held_lock+0x2d/0x110 [ 3301.225333][T26715] ? find_held_lock+0x2d/0x110 [ 3301.230186][T26715] ? fl_destroy+0x320/0x320 [ 3301.234846][T26715] ? __radix_tree_lookup+0x215/0x2a0 [ 3301.240207][T26715] ? fl_get+0x229/0x3c0 [ 3301.244422][T26715] ? fl_put+0x20/0x20 [ 3301.248480][T26715] tc_new_tfilter+0x97c/0x2290 [ 3301.253339][T26715] ? tc_del_tfilter+0x15d0/0x15d0 [ 3301.258438][T26715] ? rcu_preempt_deferred_qs_irqrestore+0x57b/0xd60 [ 3301.265184][T26715] ? lock_downgrade+0x690/0x690 [ 3301.270121][T26715] ? rtnetlink_rcv_msg+0x956/0xd50 [ 3301.275319][T26715] ? lock_downgrade+0x690/0x690 [ 3301.280253][T26715] ? tc_del_tfilter+0x15d0/0x15d0 [ 3301.285348][T26715] rtnetlink_rcv_msg+0x996/0xd50 [ 3301.290365][T26715] ? rtnl_stats_set+0x4d0/0x4d0 [ 3301.295302][T26715] ? __dev_queue_xmit+0xa38/0x3b30 [ 3301.300506][T26715] netlink_rcv_skb+0x165/0x440 [ 3301.305354][T26715] ? rtnl_stats_set+0x4d0/0x4d0 [ 3301.310306][T26715] ? netlink_ack+0x1360/0x1360 [ 3301.315177][T26715] ? netlink_deliver_tap+0x1b1/0xcf0 [ 3301.320550][T26715] netlink_unicast+0x547/0x7f0 [ 3301.325409][T26715] ? netlink_attachskb+0x890/0x890 [ 3301.330679][T26715] ? __virt_addr_valid+0x61/0x2e0 [ 3301.335775][T26715] ? __phys_addr_symbol+0x30/0x70 [ 3301.340901][T26715] ? __check_object_size+0x323/0x730 [ 3301.346259][T26715] netlink_sendmsg+0x925/0xe30 [ 3301.351127][T26715] ? netlink_unicast+0x7f0/0x7f0 [ 3301.356152][T26715] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3301.361506][T26715] ? netlink_unicast+0x7f0/0x7f0 [ 3301.366518][T26715] sock_sendmsg+0xde/0x190 [ 3301.371011][T26715] ____sys_sendmsg+0x334/0x900 [ 3301.375889][T26715] ? copy_msghdr_from_user+0xfc/0x150 [ 3301.381328][T26715] ? kernel_sendmsg+0x50/0x50 [ 3301.386106][T26715] ___sys_sendmsg+0x110/0x1b0 [ 3301.390848][T26715] ? do_recvmmsg+0x6e0/0x6e0 [ 3301.395512][T26715] ? __fget_files+0x248/0x480 [ 3301.400250][T26715] ? lock_downgrade+0x690/0x690 [ 3301.405180][T26715] ? __fget_files+0x26a/0x480 [ 3301.409913][T26715] ? __fget_light+0xe5/0x270 [ 3301.414553][T26715] __sys_sendmmsg+0x18f/0x460 [ 3301.419284][T26715] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3301.424368][T26715] ? wait_for_completion_io_timeout+0x20/0x20 [ 3301.430523][T26715] ? fput+0x2f/0x1a0 [ 3301.434482][T26715] ? ksys_write+0x1a3/0x250 [ 3301.439047][T26715] __x64_sys_sendmmsg+0x9d/0x100 [ 3301.444055][T26715] ? syscall_enter_from_user_mode+0x26/0x80 [ 3301.450025][T26715] do_syscall_64+0x39/0xb0 [ 3301.454528][T26715] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3301.460496][T26715] RIP: 0033:0x7f9d9388c169 [ 3301.464976][T26715] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3301.484653][T26715] RSP: 002b:00007f9d945a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3301.493131][T26715] RAX: ffffffffffffffda RBX: 00007f9d939abf80 RCX: 00007f9d9388c169 [ 3301.501173][T26715] RDX: 04924924924926d3 RSI: 0000000020000200 RDI: 0000000000000006 [ 3301.509197][T26715] RBP: 00007f9d945a81d0 R08: 0000000000000000 R09: 0000000000000000 [ 3301.517267][T26715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3301.525292][T26715] R13: 00007ffcb8ddc30f R14: 00007f9d945a8300 R15: 0000000000022000 [ 3301.533343][T26715] 12:48:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x8000000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x7b9c0b) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000012c0)={0x0, 0x1, 0x20}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYBLOB="cb126c936cc2d975614f158d8e20a34eafede8a1c6c29ed4f583762fe9843dd1018cf63c418cb301fe6da651ad547683fd1acbb1497a94b0fabc8ce4cb0f50e2e7c400c841920f9a0ddad73c744b0d3873fd2fe372d8b02df02d4b7f92fe144d54083bd769c1d147c308c162c8a92918cc8dc43094b13a3df668cd6e9cce1ecffe", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYBLOB="44091e98e6f58be769de600a76c916de1070d88eefbcc509664bcf99c479bca5d190cf1038375019d6e34635563a00976acdefab6009e61dfee19440914138cbcc87e1ddab9e66895d95f513bf91404a35f83942ef5c00009ec959113cadec93b2e7ca9c2f5ada68637b69", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0700001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0000830096a5593356807a1360bbd2f2b45b28ed26bc86ecf520e2c3bf89840531b2feaf84f4694c20a3333831360ae24d3aa1"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000190062a72cbd7000fbdbdf251c80007ffe01000000220000140012000900e2cdd5872d808c2a3e8b0f1371cd05001a0001000000140012001500f59f0538e2c46684709d6adca76b140012000b0086b4c8cde94179ebe1577ea097ec080001000000010084001300000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000e0000"], 0xec}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000005a00000228bd700200dbdf2500080003007a8a9b492d908fed8b2b31a464d3e10eebb04edea3dad7df059e78f931d47e1cda32", @ANYRES32, @ANYBLOB="1d1d0340", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf257e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="fffffffff5f5e478f7e96d7bd61297b2b60b00ef3bfb200ead75f4500a95349c58226bac5d10018b71188cea603505a2b6163cb392a3c0eca7497aeb958cc6ae2f763478ebacb22295d2bee8d416"], 0x14}, 0x1, 0x0, 0x0, 0x3c9f8fd0132dd7a5}, 0x810) sendfile(r9, r8, 0x0, 0x800000017fc) 12:48:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x6000000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x36}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xd0) 12:48:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xe, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3301.614597][ T1613] ================================================================== [ 3301.622818][ T1613] BUG: KASAN: slab-use-after-free in tcf_action_destroy+0x17f/0x1b0 [ 3301.625158][T26720] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3301.630843][ T1613] Read of size 8 at addr ffff88801dbd7c00 by task kworker/u4:4/1613 [ 3301.630871][ T1613] [ 3301.630879][ T1613] CPU: 1 PID: 1613 Comm: kworker/u4:4 Not tainted 6.3.0-rc6-syzkaller-01723-gdce46f1b0cab #0 [ 3301.630910][ T1613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3301.661948][T26720] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3301.671108][ T1613] Workqueue: tc_filter_workqueue fl_destroy_filter_work [ 3301.671148][ T1613] Call Trace: [ 3301.671159][ T1613] [ 3301.671171][ T1613] dump_stack_lvl+0xd9/0x150 [ 3301.671208][ T1613] print_address_description.constprop.0+0x2c/0x3c0 [ 3301.671245][ T1613] ? tcf_action_destroy+0x17f/0x1b0 [ 3301.671291][ T1613] kasan_report+0x11c/0x130 [ 3301.671325][ T1613] ? tcf_action_destroy+0x17f/0x1b0 [ 3301.671376][ T1613] tcf_action_destroy+0x17f/0x1b0 [ 3301.671430][ T1613] tcf_exts_destroy+0xc5/0x160 [ 3301.671467][ T1613] __fl_destroy_filter+0x1a/0x100 [ 3301.671500][ T1613] process_one_work+0x991/0x15c0 [ 3301.671607][ T1613] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3301.671651][ T1613] ? spin_bug+0x1c0/0x1c0 [ 3301.749346][ T1613] ? _raw_spin_lock_irq+0x45/0x50 [ 3301.754464][ T1613] worker_thread+0x669/0x1090 [ 3301.759303][ T1613] ? process_one_work+0x15c0/0x15c0 [ 3301.764560][ T1613] kthread+0x2e8/0x3a0 [ 3301.768761][ T1613] ? kthread_complete_and_exit+0x40/0x40 [ 3301.774458][ T1613] ret_from_fork+0x1f/0x30 [ 3301.778944][ T1613] [ 3301.782113][ T1613] [ 3301.784470][ T1613] Allocated by task 26715: [ 3301.788920][ T1613] kasan_save_stack+0x22/0x40 [ 3301.793644][ T1613] kasan_set_track+0x25/0x30 [ 3301.798310][ T1613] __kasan_kmalloc+0xa2/0xb0 [ 3301.802947][ T1613] tcf_exts_init_ex+0xe4/0x5a0 [ 3301.804252][T26721] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3301.807741][ T1613] fl_change+0x56f/0x4ac0 [ 3301.807776][ T1613] tc_new_tfilter+0x97c/0x2290 [ 3301.807812][ T1613] rtnetlink_rcv_msg+0x996/0xd50 [ 3301.807858][ T1613] netlink_rcv_skb+0x165/0x440 [ 3301.807899][ T1613] netlink_unicast+0x547/0x7f0 [ 3301.807941][ T1613] netlink_sendmsg+0x925/0xe30 [ 3301.807982][ T1613] sock_sendmsg+0xde/0x190 [ 3301.808023][ T1613] ____sys_sendmsg+0x334/0x900 [ 3301.808065][ T1613] ___sys_sendmsg+0x110/0x1b0 [ 3301.808092][ T1613] __sys_sendmmsg+0x18f/0x460 [ 3301.808119][ T1613] __x64_sys_sendmmsg+0x9d/0x100 [ 3301.830449][ T27] audit: type=1804 audit(1681908516.826:600): pid=26721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir219120573/syzkaller.CSxasR/373/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 [ 3301.831813][ T1613] do_syscall_64+0x39/0xb0 [ 3301.902933][ T1613] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3301.911759][ T1613] [ 3301.914093][ T1613] Freed by task 26715: [ 3301.918446][ T1613] kasan_save_stack+0x22/0x40 [ 3301.923247][ T1613] kasan_set_track+0x25/0x30 [ 3301.927882][ T1613] kasan_save_free_info+0x2e/0x40 [ 3301.932952][ T1613] ____kasan_slab_free+0x160/0x1c0 [ 3301.938103][ T1613] slab_free_freelist_hook+0x8b/0x1c0 [ 3301.943532][ T1613] __kmem_cache_free+0xaf/0x2d0 [ 3301.948445][ T1613] tcf_exts_destroy+0xe5/0x160 [ 3301.953248][ T1613] tcf_exts_init_ex+0x484/0x5a0 [ 3301.958150][ T1613] fl_change+0x56f/0x4ac0 [ 3301.962527][ T1613] tc_new_tfilter+0x97c/0x2290 [ 3301.967436][ T1613] rtnetlink_rcv_msg+0x996/0xd50 [ 3301.972439][ T1613] netlink_rcv_skb+0x165/0x440 [ 3301.977355][ T1613] netlink_unicast+0x547/0x7f0 [ 3301.982189][ T1613] netlink_sendmsg+0x925/0xe30 [ 3301.987013][ T1613] sock_sendmsg+0xde/0x190 [ 3301.991536][ T1613] ____sys_sendmsg+0x334/0x900 [ 3301.996360][ T1613] ___sys_sendmsg+0x110/0x1b0 [ 3302.001088][ T1613] __sys_sendmmsg+0x18f/0x460 [ 3302.005810][ T1613] __x64_sys_sendmmsg+0x9d/0x100 [ 3302.010873][ T1613] do_syscall_64+0x39/0xb0 [ 3302.015321][ T1613] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3302.021248][ T1613] [ 3302.023614][ T1613] The buggy address belongs to the object at ffff88801dbd7c00 [ 3302.023614][ T1613] which belongs to the cache kmalloc-256 of size 256 [ 3302.037887][ T1613] The buggy address is located 0 bytes inside of [ 3302.037887][ T1613] freed 256-byte region [ffff88801dbd7c00, ffff88801dbd7d00) [ 3302.051592][ T1613] [ 3302.054035][ T1613] The buggy address belongs to the physical page: 12:48:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) (fail_nth: 12) 12:48:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0xf, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3302.060572][ T1613] page:ffffea000076f580 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1dbd6 [ 3302.070767][ T1613] head:ffffea000076f580 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3302.079747][ T1613] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 3302.088050][ T1613] raw: 00fff00000010200 ffff888012441b40 dead000000000122 0000000000000000 [ 3302.096684][ T1613] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 3302.105313][ T1613] page dumped because: kasan: bad access detected [ 3302.111761][ T1613] page_owner tracks the page as allocated [ 3302.117519][ T1613] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 26701, tgid 26693 (syz-executor.0), ts 3300507319165, free_ts 3297564393209 [ 3302.141120][ T1613] get_page_from_freelist+0x1190/0x2e20 [ 3302.146726][ T1613] __alloc_pages+0x1cb/0x4a0 [ 3302.151371][ T1613] alloc_pages+0x1aa/0x270 [ 3302.155852][ T1613] allocate_slab+0x25f/0x390 [ 3302.160502][ T1613] ___slab_alloc+0xa91/0x1400 [ 3302.165242][ T1613] __slab_alloc.constprop.0+0x56/0xa0 [ 3302.170681][ T1613] __kmem_cache_alloc_node+0x136/0x320 [ 3302.176292][ T1613] kmalloc_trace+0x26/0xe0 [ 3302.180761][ T1613] tcf_chain_create+0x9a/0x370 [ 3302.185570][ T1613] __tcf_chain_get+0x1b8/0x2a0 [ 3302.190387][ T1613] tc_new_tfilter+0x638/0x2290 [ 3302.195198][ T1613] rtnetlink_rcv_msg+0x996/0xd50 [ 3302.200166][ T1613] netlink_rcv_skb+0x165/0x440 [ 3302.204975][ T1613] netlink_unicast+0x547/0x7f0 [ 3302.209798][ T1613] netlink_sendmsg+0x925/0xe30 [ 3302.214589][ T1613] sock_sendmsg+0xde/0x190 [ 3302.219040][ T1613] page last free stack trace: [ 3302.223725][ T1613] free_pcp_prepare+0x5d5/0xa50 [ 3302.228724][ T1613] free_unref_page+0x1d/0x490 [ 3302.233450][ T1613] qlist_free_all+0x6a/0x170 [ 3302.238097][ T1613] kasan_quarantine_reduce+0x192/0x220 [ 3302.243614][ T1613] __kasan_slab_alloc+0x63/0x90 [ 3302.248505][ T1613] kmem_cache_alloc+0x17c/0x3b0 [ 3302.253423][ T1613] getname_flags.part.0+0x50/0x4f0 [ 3302.258585][ T1613] getname_flags+0x9e/0xe0 [ 3302.263069][ T1613] user_path_at_empty+0x2f/0x60 [ 3302.267978][ T1613] __x64_sys_umount+0xfc/0x190 [ 3302.272782][ T1613] do_syscall_64+0x39/0xb0 [ 3302.274775][T26732] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3302.277257][ T1613] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3302.277305][ T1613] [ 3302.294854][ T1613] Memory state around the buggy address: [ 3302.300615][ T1613] ffff88801dbd7b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3302.308717][ T1613] ffff88801dbd7b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3302.316820][ T1613] >ffff88801dbd7c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3302.324923][ T1613] ^ [ 3302.329028][ T1613] ffff88801dbd7c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3302.337312][ T1613] ffff88801dbd7d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3302.345494][ T1613] ================================================================== [ 3302.366252][ T1613] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3302.373504][ T1613] CPU: 1 PID: 1613 Comm: kworker/u4:4 Not tainted 6.3.0-rc6-syzkaller-01723-gdce46f1b0cab #0 [ 3302.383709][ T1613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3302.393808][ T1613] Workqueue: tc_filter_workqueue fl_destroy_filter_work [ 3302.400905][ T1613] Call Trace: [ 3302.404223][ T1613] [ 3302.407203][ T1613] dump_stack_lvl+0xd9/0x150 [ 3302.411863][ T1613] panic+0x688/0x730 12:48:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x7000000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12:48:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x10, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 3302.415870][ T1613] ? panic_smp_self_stop+0x90/0x90 [ 3302.421052][ T1613] ? preempt_schedule_thunk+0x1a/0x20 [ 3302.426495][ T1613] ? preempt_schedule_common+0x45/0xb0 [ 3302.432014][ T1613] check_panic_on_warn+0xb1/0xc0 [ 3302.437019][ T1613] end_report+0xe9/0x120 [ 3302.441311][ T1613] ? tcf_action_destroy+0x17f/0x1b0 [ 3302.446568][ T1613] kasan_report+0xf9/0x130 [ 3302.451034][ T1613] ? tcf_action_destroy+0x17f/0x1b0 [ 3302.456299][ T1613] tcf_action_destroy+0x17f/0x1b0 [ 3302.461392][ T1613] tcf_exts_destroy+0xc5/0x160 [ 3302.466226][ T1613] __fl_destroy_filter+0x1a/0x100 [ 3302.471305][ T1613] process_one_work+0x991/0x15c0 [ 3302.476292][ T1613] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3302.481795][ T1613] ? spin_bug+0x1c0/0x1c0 [ 3302.486158][ T1613] ? _raw_spin_lock_irq+0x45/0x50 [ 3302.491252][ T1613] worker_thread+0x669/0x1090 [ 3302.495973][ T1613] ? process_one_work+0x15c0/0x15c0 [ 3302.501294][ T1613] kthread+0x2e8/0x3a0 [ 3302.505386][ T1613] ? kthread_complete_and_exit+0x40/0x40 [ 3302.511048][ T1613] ret_from_fork+0x1f/0x30 [ 3302.515506][ T1613] [ 3302.518751][ T1613] Kernel Offset: disabled [ 3302.523091][ T1613] Rebooting in 86400 seconds..