x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x0, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1475.813377][ T2263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:52:25 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0xfffffffe) [ 1476.141913][ T2275] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:52:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2", 0xd9}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:52:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100009050200390000000c0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:52:26 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x1000000000000) 03:52:26 executing program 2: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 1476.788436][ T2295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:52:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2", 0xd9}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1476.888995][ T2298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1477.014973][ T2303] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:52:26 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1477.324326][ T2298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2", 0xd9}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:52:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100009050200390000000e0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:52:27 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x3000000000000) 03:52:27 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x0, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1477.863537][ T2327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e", 0xe8}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1477.905191][ T2328] __nla_validate_parse: 1 callbacks suppressed [ 1477.905208][ T2328] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:52:27 executing program 2: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 1478.303998][ T2327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100009050200390000000f0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:52:28 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x9000000000000) 03:52:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e", 0xe8}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:52:28 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x0, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1478.645176][ T2347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1478.662840][ T2351] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:52:28 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e", 0xe8}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1478.898617][ T2363] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1479.039014][ T2347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:28 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x20000000000000) 03:52:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31d", 0xf0}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:52:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000100000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:52:29 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1479.641375][ T2374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1479.746413][ T2379] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:52:29 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31d", 0xf0}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1479.932170][ T2385] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:52:29 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x0, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1480.055523][ T2374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31d", 0xf0}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:52:29 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:29 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x40030000000000) 03:52:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000120000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1480.527144][ T2403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.589590][ T2404] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:52:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e", 0xf4}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1480.783097][ T2408] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1480.934962][ T2403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.038371][ T8517] Bluetooth: hci4: command 0x0406 tx timeout 03:52:30 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e", 0xf4}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:52:30 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x0, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:30 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:30 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0xe0ffff00000000) 03:52:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000160000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1481.387262][ T2432] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1481.446974][ T2434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e", 0xf4}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1481.534863][ T2441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:52:31 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100009050200390000001f0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1481.848631][ T2434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1c", 0xf6}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:52:31 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0xf0ffffffffffff) [ 1482.133090][ T2466] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:52:31 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:31 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', 0x0}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1c", 0xf6}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:52:32 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000200000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:52:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1c", 0xf6}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:52:32 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:32 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x100000000000000) [ 1483.032763][ T2505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x4, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:52:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100009050200390000003f0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:52:32 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0x10, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:32 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1483.347405][ T2515] __nla_validate_parse: 3 callbacks suppressed [ 1483.347424][ T2515] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:52:33 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', 0x0}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1483.403365][ T2519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1483.436376][ T2505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x4, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:52:33 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x200000000000000) 03:52:33 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000400000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1483.816817][ T2534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x4, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1483.992267][ T2540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1484.069028][ T1365] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.075349][ T1365] ieee802154 phy1 wpan1: encryption failed: -22 03:52:33 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1484.208778][ T2546] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1484.249288][ T2534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:52:34 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x300000000000000) 03:52:34 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0x10, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000002450000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:52:34 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', 0x0}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:52:34 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1484.665491][ T2559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1484.716162][ T2565] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1484.785953][ T2571] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:52:34 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1485.008990][ T2559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000480000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:52:34 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0x10, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:34 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x400000000000000) 03:52:34 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1485.255184][ T2587] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:52:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:52:34 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1485.423436][ T2591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1485.481070][ T2598] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:52:35 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100009050200390000004a0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1485.827272][ T2591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:52:35 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x500000000000000) [ 1486.098666][ T2614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:52:35 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1486.360627][ T2622] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:52:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c", 0x2c}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1486.501726][ T2621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:36 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:36 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100009050200390000034a0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:52:36 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c", 0x2c}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:52:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c", 0x2c}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:52:37 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:52:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4", 0x42}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:52:37 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1491.933585][ T2638] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1496.944767][ T2680] chnl_net:caif_netlink_parms(): no params data found [ 1497.825138][ T2680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.832366][ T2680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.841286][ T2680] device bridge_slave_0 entered promiscuous mode [ 1497.851523][ T2680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.859430][ T2680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.868675][ T2680] device bridge_slave_1 entered promiscuous mode [ 1497.986731][T27051] Bluetooth: hci4: command 0x0409 tx timeout [ 1498.315334][ T2680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1498.343224][ T2680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1498.801578][ T2680] team0: Port device team_slave_0 added [ 1498.833449][ T10] device hsr_slave_0 left promiscuous mode [ 1498.840201][ T10] device hsr_slave_1 left promiscuous mode [ 1498.848054][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1498.855534][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.864893][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1498.874423][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.884837][ T10] device bridge_slave_1 left promiscuous mode [ 1498.891464][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.900599][ T10] device bridge_slave_0 left promiscuous mode [ 1498.907571][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.922264][ T10] device veth1_macvtap left promiscuous mode [ 1498.928576][ T10] device veth0_macvtap left promiscuous mode [ 1498.934676][ T10] device veth1_vlan left promiscuous mode [ 1498.941290][ T10] device veth0_vlan left promiscuous mode [ 1500.066812][ T8517] Bluetooth: hci4: command 0x041b tx timeout [ 1502.146449][T23375] Bluetooth: hci4: command 0x040f tx timeout [ 1504.226354][ T8517] Bluetooth: hci4: command 0x0419 tx timeout [ 1518.842884][ T10] team0 (unregistering): Port device team_slave_1 removed [ 1518.858727][ T10] team0 (unregistering): Port device team_slave_0 removed [ 1518.873422][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1518.893539][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1518.970171][ T10] bond0 (unregistering): Released all slaves [ 1519.024045][ T2680] team0: Port device team_slave_1 added [ 1519.074388][ T2680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1519.087912][ T2680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1519.115030][ T2680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1519.132879][ T2680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1519.140651][ T2680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1519.167271][ T2680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1519.232213][ T2680] device hsr_slave_0 entered promiscuous mode [ 1519.242025][ T2680] device hsr_slave_1 entered promiscuous mode [ 1519.249483][ T2680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1519.257509][ T2680] Cannot create hsr debugfs directory [ 1519.517976][ T2680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.538619][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1519.556001][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1519.567785][ T2680] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.582071][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1519.592300][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1519.603018][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.610305][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.637569][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1519.646028][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1519.654700][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1519.665816][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.672879][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.682052][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1519.692317][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1519.715770][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1519.727416][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1519.736068][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1519.747308][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1519.756334][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1519.771077][ T2680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1519.789944][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1519.801757][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1519.811734][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1519.835749][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1519.843239][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1519.860436][ T2680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1519.893828][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1519.927500][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1519.937000][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1519.944841][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1519.957859][ T2680] device veth0_vlan entered promiscuous mode [ 1519.976349][ T2680] device veth1_vlan entered promiscuous mode [ 1520.010765][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1520.020226][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1520.031015][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1520.053993][ T2680] device veth0_macvtap entered promiscuous mode [ 1520.065594][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1520.077801][ T2680] device veth1_macvtap entered promiscuous mode [ 1520.104121][ T2680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1520.117862][ T2680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.129174][ T2680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1520.140449][ T2680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.151642][ T2680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1520.162996][ T2680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.175763][ T2680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1520.187216][ T2680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.198024][ T2680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1520.209392][ T2680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.222961][ T2680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1520.234374][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1520.245710][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1520.257912][ T2680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1520.270933][ T2680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.283303][ T2680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1520.295571][ T2680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.307133][ T2680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1520.319607][ T2680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.330419][ T2680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1520.342631][ T2680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.353364][ T2680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1520.364629][ T2680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.377475][ T2680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1520.390448][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1520.400537][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1520.532809][T24685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.571995][T24685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.612322][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1520.647878][T24685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.688254][T24685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.720402][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1520.801691][ T3037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:10 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x600000000000000) 03:53:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4", 0x42}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:53:10 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:10 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:10 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) 03:53:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100009050200390000004c0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1521.116176][ T3037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1521.176154][ T3041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1521.252112][ T3049] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4", 0x42}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1521.592251][ T3041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1521.619682][ T3058] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:11 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x700000000000000) 03:53:11 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) 03:53:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000600000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:53:11 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1522.242222][ T3069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca65", 0x4d}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1522.379385][ T3074] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1522.582375][ T3082] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1522.623015][ T3069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca65", 0x4d}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:53:12 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x800000000000000) 03:53:12 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000058650000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1523.215606][ T3091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:12 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca65", 0x4d}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1523.370412][ T3095] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1523.484345][ T3099] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1523.612320][ T3091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc9", 0x52}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:53:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000680000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:53:13 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) 03:53:13 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x900000000000000) [ 1524.126457][ T3113] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1524.276094][ T3118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc9", 0x52}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1524.344076][ T3122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:14 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000690000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1524.755799][ T3118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc9", 0x52}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1525.070516][ T3135] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:14 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:14 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0xe00000000000000) [ 1525.321660][ T3143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1525.357124][ T3144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585", 0x55}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:53:15 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1525.819183][ T3143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100009050200390000006c0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:53:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585", 0x55}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:53:15 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) 03:53:15 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0xf00000000000000) [ 1526.390080][ T3171] __nla_validate_parse: 1 callbacks suppressed [ 1526.390097][ T3171] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1526.407784][ T3172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585", 0x55}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:53:16 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:16 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1526.828515][ T3172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090502003900000c6c0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:53:16 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x1100000000000000) 03:53:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fb", 0x56}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1527.112307][ T3186] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1527.283071][ T3189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1527.354955][ T3195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:17 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) 03:53:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fb", 0x56}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1527.703375][ T3189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000740000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:53:17 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:17 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x1200000000000000) [ 1528.086039][ T3206] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1528.119073][ T3208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fb", 0x56}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1528.318776][ T3212] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:17 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) [ 1528.537139][ T3208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:18 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) 03:53:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100009050200390000007a0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:53:18 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x1400000000000000) 03:53:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) [ 1528.965458][ T3230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1529.063576][ T3231] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1529.338187][ T3239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1529.406687][ T3230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 03:53:19 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:19 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x1500000000000000) 03:53:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000810000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1529.881261][ T3247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:19 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:19 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1530.102981][ T3252] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:19 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1530.250031][ T3261] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1530.316400][ T3247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:20 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x1600000000000000) 03:53:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039ffffa8880000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1530.841450][ T3274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:20 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1531.129166][ T3276] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1531.293897][ T3274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:21 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:21 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:21 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:21 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x1700000000000000) 03:53:21 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000080890000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1531.844858][ T3298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1531.979517][ T3304] __nla_validate_parse: 1 callbacks suppressed [ 1531.979535][ T3304] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1532.316028][ T3298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1532.431494][ T3308] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:22 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x1800000000000000) [ 1533.008568][ T3312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:22 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039ecbd4c910000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:53:22 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:22 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1533.377181][ T3318] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:23 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1533.435087][ T3312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1533.572946][ T3325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:23 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x1900000000000000) 03:53:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039ffffff9e0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1534.019306][ T3334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.304459][ T3338] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1534.432747][ T3334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.508891][ T3341] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:24 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:24 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:24 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x1a00000000000000) 03:53:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249ab0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:53:24 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1534.830901][ T3347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:24 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 1535.109580][ T3355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1535.297130][ T3347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1535.400995][ T3363] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:25 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:25 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x1b00000000000000) 03:53:25 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:53:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249ae0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1535.743159][ T3369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1536.097321][ T3376] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1536.151832][ T3369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:25 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:26 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1536.418778][ T3381] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:26 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x1c00000000000000) 03:53:26 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1536.618323][ T3389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249af0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1537.081674][ T3389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1537.129587][ T3396] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:26 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:53:27 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x1d00000000000000) [ 1537.444177][ T3402] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1537.660863][ T3405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:27 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:27 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249b00000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1538.104739][ T3405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:27 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1538.197305][ T3416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:28 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x1e00000000000000) [ 1538.515045][ T3421] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1538.652512][ T3424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:28 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x1a00000000000000) 03:53:28 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:28 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249b10000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1539.095777][ T3424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1539.191798][ T3433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1539.247738][ T3435] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:28 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x1f00000000000000) 03:53:29 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1539.444179][ T3441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1539.500928][ T3445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:29 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x1a00000000000000) [ 1539.829389][ T3445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249b20000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:53:29 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:29 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x2000000000000000) [ 1540.123178][ T3455] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1540.175507][ T3453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1540.270775][ T3459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:29 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1540.367769][ T3463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:30 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x2100000000000000) 03:53:31 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1541.998337][ T3472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249b30000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1542.420688][ T3472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1542.591283][ T3480] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:32 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x2200000000000000) [ 1542.918534][ T3484] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1543.064488][ T3486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:32 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:33 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:53:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249b40000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1543.484203][ T3486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1545.521978][ T1365] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.528621][ T1365] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.679614][ T3496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1551.756913][ T10] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.231465][ T10] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.704313][ T10] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.321990][ T10] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.599609][ T10] tipc: Left network mode [ 1554.833249][ T10] bridge0: port 2(ip6gretap0) entered disabled state [ 1554.846006][ T10] device ip6gretap0 left promiscuous mode [ 1554.851848][ T10] bridge0: port 2(ip6gretap0) entered disabled state [ 1555.727710][ T3560] chnl_net:caif_netlink_parms(): no params data found [ 1556.142780][T27051] Bluetooth: hci3: command 0x0409 tx timeout [ 1556.220196][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.229993][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.240106][ T3560] device bridge_slave_0 entered promiscuous mode [ 1556.631419][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.642303][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.650318][ T3560] device bridge_slave_1 entered promiscuous mode [ 1557.080531][ T3560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1557.093287][ T3560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1557.541424][ T3560] team0: Port device team_slave_0 added [ 1557.553400][ T3560] team0: Port device team_slave_1 added [ 1557.986605][ T3560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1557.995397][ T3560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1558.025323][ T3560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1558.222745][T23375] Bluetooth: hci3: command 0x041b tx timeout [ 1558.437204][ T3560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1558.444448][ T3560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1558.472180][ T3560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1558.529210][ T3560] device hsr_slave_0 entered promiscuous mode [ 1558.542745][ T3560] device hsr_slave_1 entered promiscuous mode [ 1558.549505][ T3560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1558.558290][ T3560] Cannot create hsr debugfs directory [ 1559.330881][ T3560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1559.347558][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1559.357751][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1559.374735][ T3560] 8021q: adding VLAN 0 to HW filter on device team0 [ 1559.823438][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1559.833407][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1559.842757][T24461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.849806][T24461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1559.859499][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1559.869591][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1559.879019][T24461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.886112][T24461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1559.895866][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1559.932136][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1559.943971][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1559.961450][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1559.979085][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1559.989845][T23375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1560.007598][ T10] device hsr_slave_0 left promiscuous mode [ 1560.018869][ T10] device hsr_slave_1 left promiscuous mode [ 1560.025683][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1560.033983][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1560.044999][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1560.052665][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1560.061227][ T10] device bridge_slave_0 left promiscuous mode [ 1560.067684][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.080181][ T10] device veth1_macvtap left promiscuous mode [ 1560.086493][ T10] device veth0_macvtap left promiscuous mode [ 1560.093730][ T10] device veth1_vlan left promiscuous mode [ 1560.099498][ T10] device veth0_vlan left promiscuous mode [ 1560.302395][T27051] Bluetooth: hci3: command 0x040f tx timeout [ 1562.382096][ T3902] Bluetooth: hci3: command 0x0419 tx timeout [ 1580.180030][ T10] bond1 (unregistering): Released all slaves [ 1580.297572][ T10] team0 (unregistering): Port device team_slave_1 removed [ 1580.313059][ T10] team0 (unregistering): Port device team_slave_0 removed [ 1580.327506][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1580.345919][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1580.421903][ T10] bond0 (unregistering): Released all slaves [ 1580.485429][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1580.494082][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1580.505113][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1580.514851][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1580.534445][ T3560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1580.546639][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1580.555086][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1580.563915][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1580.592134][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1580.602781][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1580.627983][ T3560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1580.651804][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1580.662247][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1580.689166][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1580.698410][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1580.713039][ T3560] device veth0_vlan entered promiscuous mode [ 1580.720855][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1580.729048][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1580.743650][ T3560] device veth1_vlan entered promiscuous mode [ 1580.777083][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1580.786470][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1580.795646][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1580.805051][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1580.817194][ T3560] device veth0_macvtap entered promiscuous mode [ 1580.832204][ T3560] device veth1_macvtap entered promiscuous mode [ 1580.850038][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1580.864807][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.875831][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1580.886309][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.896382][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1580.906870][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.916786][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1580.927580][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.938534][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1580.949072][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.963117][ T3560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1580.972923][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1580.982287][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1580.991171][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1580.999771][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1581.012451][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1581.023324][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.034117][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1581.044945][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.055126][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1581.065632][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.075652][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1581.086676][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.097306][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1581.108841][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.122033][ T3560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1581.138349][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1581.147179][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1581.291850][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.299938][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.365354][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1581.399816][ T1221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.436129][ T1221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.469344][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1581.610851][ T3925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:11 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x1a00000000000000) 03:54:11 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x2300000000000000) 03:54:11 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:11 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:11 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249b50000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1582.046317][ T3933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1582.100535][ T3938] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1582.118109][ T3939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1582.295492][ T3945] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:54:11 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1582.475241][ T3933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249b60000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:54:12 executing program 3: syz_80211_inject_frame(0x0, 0x0, 0x0) 03:54:12 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x2400000000000000) 03:54:12 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1582.843089][ T3954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1582.929969][ T3958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1582.969707][ T3959] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:54:12 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1583.178738][ T3964] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1583.321751][ T3958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:12 executing program 3: syz_80211_inject_frame(0x0, 0x0, 0x0) 03:54:13 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249b70000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1583.558477][ T3974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:13 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x2500000000000000) 03:54:13 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1583.756962][ T3985] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1583.785578][ T3988] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1583.812893][ T3984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:13 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249b80000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:54:13 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:13 executing program 3: syz_80211_inject_frame(0x0, 0x0, 0x0) [ 1584.131841][ T4000] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1584.205079][ T3984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1584.225613][ T4002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1584.341424][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:54:13 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:14 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x2600000000000000) 03:54:14 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1584.587143][ T4016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:14 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249b90000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:54:14 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:14 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1584.889951][ T4024] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1584.971376][ T4016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4", 0x42}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1585.146899][ T4034] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:54:14 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x2700000000000000) 03:54:15 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1585.458583][ T4043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4", 0x42}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:54:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249ba0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:54:15 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1585.896773][ T4043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:15 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:15 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0x10, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:15 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:15 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x2800000000000000) 03:54:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249bb0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1586.327375][ T4067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:16 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:16 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1586.727876][ T4067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:16 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249bc0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:54:16 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x2900000000000000) [ 1587.303453][ T4095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1587.361673][ T4096] __nla_validate_parse: 4 callbacks suppressed [ 1587.361692][ T4096] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:54:17 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1587.533701][ T4101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:54:17 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:17 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1587.720261][ T4095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:17 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0x10, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:17 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249bd0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:54:17 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x3f00000000000000) [ 1588.002224][ T4119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1588.024676][ T4120] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1588.198010][ T4126] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:54:17 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1588.372529][ T4119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:18 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x4, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:54:18 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:18 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x4800000000000000) 03:54:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000001be0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1588.846032][ T4144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:18 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0x10, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1588.923321][ T4147] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:54:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x4, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:54:18 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1589.131937][ T4156] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1589.213329][ T4144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x4, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:54:19 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x4c00000000000000) 03:54:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249be0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:54:19 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1c", 0xf6}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1589.769975][ T4173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1589.793786][ T4174] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:54:19 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1589.947956][ T4181] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:54:19 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1c", 0xf6}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1590.136424][ T4173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249bf0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:54:20 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x6000000000000000) [ 1590.575452][ T4196] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:54:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1c", 0xf6}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1590.688843][ T4198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1590.842772][ T4202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:54:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e", 0xf4}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1591.126056][ T4198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:20 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:20 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249c00000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:54:21 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:21 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x6800000000000000) 03:54:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e", 0xf4}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1591.750849][ T4217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:21 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e", 0xf4}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 03:54:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249c10000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1592.134080][ T4217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:21 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:21 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x6c00000000000000) [ 1592.391477][ T4239] __nla_validate_parse: 2 callbacks suppressed [ 1592.391495][ T4239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:54:22 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1592.581483][ T4244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1592.699086][ T4250] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1593.041890][ T4244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249c20000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:54:22 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x7400000000000000) 03:54:23 executing program 1: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x6c00000000000000) 03:54:23 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1593.696961][ T4259] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1593.703117][ T4260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1593.813408][ T4266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1593.932278][ T4268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1594.074665][ T4260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:23 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249c30000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:54:23 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x7a00000000000000) 03:54:24 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:24 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1594.485917][ T4277] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1594.545585][ T4280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1594.706551][ T4287] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:54:24 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1594.971810][ T4280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039ffffffc30000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:54:24 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:24 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x8000000000000000) [ 1595.493118][ T4301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1595.562236][ T4304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1595.742802][ T4309] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:54:25 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1596.038439][ T4304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:25 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:25 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249c40000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:54:26 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:26 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x9c10000000000000) [ 1596.611490][ T4321] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:54:26 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1596.668516][ T4325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1596.910996][ T4333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1597.053756][ T4325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249c50000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:54:27 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x9effffff00000000) 03:54:27 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1597.826313][ T4344] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:54:27 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1597.982193][ T4343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1598.021581][ T4350] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:54:27 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:27 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249c60000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:54:28 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = creat(0x0, 0x3) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x0, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:28 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:28 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:29 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:29 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:54:29 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1602.453480][ T4366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1606.830221][ T4419] chnl_net:caif_netlink_parms(): no params data found [ 1606.939455][ T1365] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.945772][ T1365] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.309769][ T4419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.316896][ T4419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.327413][ T4419] device bridge_slave_0 entered promiscuous mode [ 1607.728251][ T4419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.738806][ T4419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.746723][ T4419] device bridge_slave_1 entered promiscuous mode [ 1607.818856][ T8517] Bluetooth: hci4: command 0x0409 tx timeout [ 1608.183950][ T4419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.199342][ T4419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.264848][ T4419] team0: Port device team_slave_0 added [ 1608.662157][ T4419] team0: Port device team_slave_1 added [ 1608.696138][ T4419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1608.703713][ T4419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1608.730537][ T4419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1608.745271][ T4419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1608.752450][ T4419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1608.779747][ T4419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1608.819924][ T10] device hsr_slave_0 left promiscuous mode [ 1608.826530][ T10] device hsr_slave_1 left promiscuous mode [ 1608.834812][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1608.842857][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1608.853367][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1608.862988][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1608.873872][ T10] device bridge_slave_1 left promiscuous mode [ 1608.881416][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.891824][ T10] device bridge_slave_0 left promiscuous mode [ 1608.897974][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.914560][ T10] device veth1_macvtap left promiscuous mode [ 1608.920635][ T10] device veth0_macvtap left promiscuous mode [ 1608.926660][ T10] device veth1_vlan left promiscuous mode [ 1608.932909][ T10] device veth0_vlan left promiscuous mode [ 1609.908436][T24461] Bluetooth: hci4: command 0x041b tx timeout [ 1611.988156][T24461] Bluetooth: hci4: command 0x040f tx timeout [ 1614.058090][T24461] Bluetooth: hci4: command 0x0419 tx timeout [ 1628.376136][ T10] team0 (unregistering): Port device team_slave_1 removed [ 1628.399973][ T10] team0 (unregistering): Port device team_slave_0 removed [ 1628.415424][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1628.432077][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1628.510152][ T10] bond0 (unregistering): Released all slaves [ 1628.590907][ T4419] device hsr_slave_0 entered promiscuous mode [ 1628.603713][ T4419] device hsr_slave_1 entered promiscuous mode [ 1628.612345][ T4419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1628.621794][ T4419] Cannot create hsr debugfs directory [ 1628.808825][ T4419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1628.824692][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1628.832937][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1628.852794][ T4419] 8021q: adding VLAN 0 to HW filter on device team0 [ 1628.877236][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1628.885768][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1628.894967][T27051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.902096][T27051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1628.911345][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1628.935084][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1628.946226][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1628.956613][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.963728][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1628.972125][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1628.981505][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1628.992939][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1628.994318][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1629.027066][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1629.060121][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1629.078609][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1629.096470][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1629.105377][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1629.124007][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1629.139366][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1629.206378][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1629.214877][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1629.230280][ T4419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1629.278981][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1629.309445][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1629.319575][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1629.329123][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1629.349568][ T4419] device veth0_vlan entered promiscuous mode [ 1629.374492][ T4419] device veth1_vlan entered promiscuous mode [ 1629.431895][T23375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1629.451674][T23375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1629.467831][T23375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1629.480370][ T4419] device veth0_macvtap entered promiscuous mode [ 1629.494394][ T4419] device veth1_macvtap entered promiscuous mode [ 1629.534340][ T4419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1629.545582][ T4419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.557486][ T4419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1629.569779][ T4419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.580766][ T4419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1629.593158][ T4419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.604142][ T4419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1629.615570][ T4419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.627274][ T4419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1629.638617][ T4419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.650857][ T4419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1629.661907][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1629.672987][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1629.682668][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1629.695634][ T4419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1629.715720][ T4419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.730223][ T4419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1629.750025][ T4419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.760766][ T4419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1629.772872][ T4419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.783537][ T4419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1629.794687][ T4419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.815304][ T4419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1629.827660][ T4419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.848550][ T4419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1629.855963][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1629.868032][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1630.040025][T24681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.064947][T24681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.119410][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1630.150866][T24681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.166963][T24681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.178172][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1630.317270][ T4760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:00 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0xc000000000000000) 03:55:00 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:00 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:00 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:00 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249c70000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1630.658282][ T4760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1630.776379][ T4772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1630.816427][ T4773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1631.026520][ T4779] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1631.287642][ T4773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249c80000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:55:01 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0xd406000000000000) 03:55:01 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:01 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1631.834107][ T4791] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1631.853350][ T4789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1632.031152][ T4798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1632.214667][ T4789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:01 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:01 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:02 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0xf0ffffff00000000) 03:55:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249c90000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1632.673862][ T4812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:02 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:02 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) [ 1632.803448][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1633.001111][ T4824] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1633.073248][ T4812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:02 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:03 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0xfcfdffff00000000) 03:55:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249ca0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1633.719035][ T4832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1633.903018][ T4835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:03 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1634.236340][ T4832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1634.243000][ T4838] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:04 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0xfcffffff00000000) 03:55:04 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) 03:55:04 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249cb0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1634.765253][ T4846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:04 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1635.051123][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1635.224001][ T4846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1635.326042][ T4858] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:05 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0xfeffffff00000000) 03:55:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249cc0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:55:05 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1635.949880][ T4867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:05 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1636.288260][ T4871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1636.420617][ T4867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1636.693912][ T4880] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:06 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0xff0f000000000000) 03:55:06 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1637.037028][ T4884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:06 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) 03:55:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249cd0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1637.477604][ T4884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1637.500572][ T4893] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:07 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1637.822810][ T4896] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:07 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0xffffffff00000000) [ 1638.250575][ T4904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249ce0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:55:08 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1638.734688][ T4904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1638.765165][ T4910] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:08 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1639.069026][ T4915] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:08 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0xfffffffffffff000) 03:55:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249cf0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:55:09 executing program 4: getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getrule={0x1c, 0x22, 0x400, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x6f, 0xde, 0x0, 0x0, 0x0, 0x10000}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040890}, 0x4004040) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000340)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @from_mac}, @a_msdu=[{@device_a, @device_b, 0xb0, "acddd4022f5eb60077078127120f0c5d69f531b04abc03d0ac2a4c3ac9b53133447805d2b10a64619aa3eeac6915212f10900dcd9fca3245a71d2040cf05e3a0af81b274d0f61371ef14903d6c9b1f54c67efb2f9ce01f1c92b076ced96738a021fd47ddf1a51ad2661d4ef6b0d08b3340b17a9b13e88fc60c92d56f04ed7a5e417520eef8f7b873b4708a62858fd3856edfe537222d81358a0722a7ae2f3571f67d7c4fb5de73590cbf59d34013ad59"}, {@broadcast, @device_a, 0x1000, "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"}, {@broadcast, @device_a, 0xbc, "b3e60739c0c1baf17acb6c29e566d41a72196abe2d58873898e3de31589ea192fd1d733ad3627a907e5a890e579f9f42d01a8349361283da8ba1b35fa489a3a95ed1e512670d05cc56be780bfdf88505af1191e235ed2da0a4f28c7b9e346737137762fa14064c5ecbcc35fdfe9aa4695b215ff676a266b139717246cb8c9ecb338660eb1f7b84d088830c555bffb34398d7659acc071c806a127f781b89a55e3a3deb9305ccea96a812cab9d2a444bb2965b9c8871c6067cff49644"}, {@device_a, @device_a, 0xa8, "9f2f380ab6b15965405899b2b3dd09d7b87ffcfecf309e3c790ba8ad479d2b8d82673c14e2777e1e72f1537625e69f64be46e0796c600b3c0788740eac5c53bd72c85fe1a13120fc7b35c032fb6497e7d86cea9e0f1059a1b48dacf2521820e6431180bda50a9438503627f0216b199a9506156bc10e5ee111d298a67c89651cf0e11e0bb0508732c24ec00f3c4aa1c9821a56be9572e8102a236359fe81d1d24e53f663b2a2e4e4"}]}, 0x126c) syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f00000015c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_a, @from_mac, @device_b, {0x9, 0x7}}, {0x9, 0x1, 0x1, 0x0, 0x8}}, {@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_b, @initial, {0x8, 0x2}}, {0x8, 0x0, 0x2, 0x1, 0xda}}}, @ver_80211n={0x0, 0x7, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @random="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"}, 0x586) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000100)=@ctrl_frame=@ack={{}, {0x1}, @device_b}, 0xa) 03:55:09 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1640.009492][ T4930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1640.050804][ T4932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1640.080002][ T4933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1640.155885][ T4934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1640.324141][ T4939] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:10 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1640.584032][ T4933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:10 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 1640.634692][ T4934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:10 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249d00000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:55:10 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x68}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000180)=@ctrl_frame=@cf_end={{}, {0x40}, @device_a, @from_mac=@broadcast}, 0x10) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000640)=ANY=[@ANYBLOB="c0a020000802f750068de907ce1400005050506550ff0f00001c00003000"], 0x1e) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x3f}, @device_b, @device_a, @basic={{0x0, 0x0, 0x0, 0x0, 0x2}, {0x2, 0x7}}}, 0x14) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000100)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @initial, {0x8, 0x3}}, @ver_80211n={0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, @smps}, 0x1f) [ 1641.249915][ T4955] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1641.267760][ T4956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1641.321833][ T4957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1641.372995][ T4958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1641.438712][ T4959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1641.455983][ T4956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1641.619862][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1641.911304][ T4957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1641.961712][ T4956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1641.972384][ T4958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1642.013144][ T4959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1642.048700][ T4967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:11 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249d10000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:55:11 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:12 executing program 4: prctl$PR_SET_FPEMU(0xa, 0x1) prctl$PR_SET_FPEMU(0xa, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x0) 03:55:12 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:12 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 1642.605613][ T4976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1642.638457][ T4979] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1642.818601][ T4986] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1643.018534][ T4992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249d20000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:55:13 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@mgmt_frame=@reassoc_resp={@with_ht={{{}, {}, @device_a, @device_a, @initial, {0x3, 0x7}}, @ver_80211n={0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x8000, 0x27, @random=0x1ff, @void, @val={0x2d, 0x1a, {0x20, 0x0, 0x5, 0x0, {0x5, 0x80, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x400, 0xfffffffc, 0x7f}}, [{0xdd, 0x70, "47bb39f28515ebec65e617ee8682f4332ccf7049382a07a072c0942f63965ce77536cdae1d8091c38b31d0548a4ac00873af71d6237314394c338ae07ff73372e06aea219d0f530b64d5f23524a00e624e7fce954030bd0a6deed7a1c77f6e23936fa44341b5da962cabbfddfe5f258e"}, {0xdd, 0x61, "7193aa5d4ca3b596a52e4c817a8e2e4f6e01720cee9ab2c1634aaa01fec9187596e8d4efda88f845f6ba3368f2fe07d80e746df8a2195152223249e6a6d91f241485383c110a7b1b1a379c3d16e04aebb496c51d916c51f7f8d427b89b1e9396cd"}, {0xdd, 0x46, "3dd8e4533489a4a5128bad3052769cc6d4c368bef0f4c3d86f104c7ae02a3a4a6b557159fca6fe1c8fd1ea0b17355450d95470bf64e61fa4df399650797c71707dda293158ba"}, {0xdd, 0xcd, "3c0724b723b0153bb78dccf15b48067d3336493e125cc90ca557269df05dcbfc899f93a424bc519a1869b97152e6286a80d0952d2f00eccf9424f9941df814a2736b92f404d74d2ea774af17579a5243998af14ea5db38c1788417087dcbcc4460227f680839600b812969b1372d7f7da078d25d7986f815c8c69f5ef28ff16a2e04e1baf854a4edbb6555fcece285aa824183ab9ba7c3b4d1918d6e88c2a48a4d61430077ba690058bb7287d459ed8be74d4cacc046e384437bfeb0774da8eb60c162004ea007adb6f122e44f"}]}, 0x22a) [ 1643.686340][ T4995] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1643.729172][ T4996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1643.780906][ T4998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1643.965552][ T5001] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:13 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0x0, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1644.247020][ T4996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:13 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:13 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:55:14 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@can_newroute={0x64, 0x18, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@CGW_MOD_AND={0x15, 0x1, {{{0x0, 0x0, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "2c4171e4b5cb1f0b"}, 0x6}}, @CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x1}, 0x5, 0x1, 0x0, 0x0, "9a22eab55f11dc93"}, 0x1}}, @CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "ffbeda7129c26c74"}, 0x2}}, @CGW_SRC_IF={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x0) 03:55:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249d30000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:55:14 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1644.728688][ T5018] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1644.759115][ T5019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1645.057440][ T5026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:15 executing program 4: accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x0) 03:55:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249d40000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1645.737098][ T5033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1645.994548][ T5035] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:15 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:15 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0x0, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:15 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1646.234221][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:15 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000340)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x3, 0x1, 0x0, 0x1, 0x1}, {}, @random="cc6e19e36848", @broadcast, @device_b, {0x6, 0xcca}}, @random="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"}, 0x4d1) 03:55:16 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1646.486768][ T5050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1646.527298][ T5052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249d50000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1646.907590][ T5060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1646.954583][ T5050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1647.226374][ T5064] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:16 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x1}, {0x3}, @initial, @device_b, @device_b, {0xb}}, {0x6, 0x1, 0x0, 0x0, 0x8}}, {@type11={{0x0, 0x2, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x20}, @device_b, @broadcast, @random="4e7128a133e6", {0x9, 0xc2e}, @broadcast}, {0x5, 0x0, 0x1, 0x1, 0x6}}}, @a_msdu=[{@broadcast, @broadcast, 0x93, "fb520dc8bb203cf40841719d6a4f172a98afab156999f5546e0796b170e0242114c691e3a5f0f20bac6de5a8d1f4325024dc0db50581a0049e5d6679cbc9ed3ea32a4e8bbb9b09840eae44fd85994b70f9dd68952d9a494f3ecf08fafe41cf6100742c9768cc86c504f6d98e0bd387ceb3701e77e22282500628fb5674378cb90676b5eac03a6f5791ca0cb836a108bde0e9d4"}]}, 0xde) [ 1647.564265][ T5068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:17 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0x0, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1647.621659][ T5069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249d60000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:55:17 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:17 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1648.036962][ T5068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1648.134517][ T5077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:17 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000340)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_b, @device_b, @random="90672c9302fa", {0x0, 0xc00}}, @a_msdu=[{@device_b, @broadcast, 0xf8, "4ceafc353c2f880a42c5d5f55515a700c6781a61761d9462d63bae65c2e1c327092d2c89dd38219c42066805e9c8fb074619e41b91032290748c93cc68b832f29f6127837f918cbee92bc71b342984b382bfd43e41f2e3777492d6ab91e9cc3bdb33f2287a40ab85d22583f12e89228bf94b362f68942f7051866cb142b42ec9db5cd84e958c085f0ff5fe9aecfdb9b4173434037b7daa4b79299e86cbb5f1a7ce326bf344b92bda970646c5032a943e0004271f9746ab6419ff9e319743ef6b44009dec5fc6e88f15a711c82591baa544e2aa293e698bec1e6262e221150e8c37376633a77a14f8c4c989123c01c4225f570083eadde46a"}, {@device_a, @device_b, 0xea, "c73fe5e24ae990c6f973e0b71074bffe5de71ece93d3a617ae2fc063abd8db77719fb8a0fd9eb93eb2b6e60f984fdb3b03fa6eb9839c21d98f2ca9493d75edfbbe7d188b15cd30fcf150c81382c4eeee13b5fffcda656dff0466c74a61d0209e585dd1f11815bb274c09ae04b4699b171d2f531b5305cba2d48fa9457b27938b88e0fa03af1b60fcc04c3a20635c32da97ea86230c2b81b45c4a92890013945c0066c982a255d85f5206394654fe384ccbc83a8bf23f2c495bd9e6c523e74516cdfd29d50d62049b4c2fae78ebdf04940a264fc3f313b30d0bd7a90a1265ae39c37b06f13202e820df29"}, {@broadcast, @device_a, 0xf4, "2cefd94baf94f4175007bfc8024f3b14527ba34fd1debedae7020c3e621c9e42aba888349a7ac028ce11e3c3e4801fb7a3edd64262d6d9da8c3334e8f28694b04324bca48db4f0a93fd8fdc3ac0972f0fefc42dead072ecbb241bcbfab44821a21eb545be517d8d3686f57f5c80084b78bda97ad4be6d79baa2e8d71090f36c575b4ff5d986933773145e06b844062ce5df9e0575d48808ea9dbf62cec4ce32c7d5383e7411d9436f1ffe3dcafacf6299b93cadd258434af0145e8097bb5c72fc88584194b4277941952357eadd92aa9ca35970416bee568a789075eb8eba6d874a0f088222144916d307c9f00fe5790464939ef"}, {@device_a, @device_a, 0x61, "499a1337b80011009b377c301e266705649e8a74a2eef9fbbfe2e1801ae200e75b0932995f099501177d0fe250d505de722ead705861bacfdaef98f4799b17ad8894fa73d98c91e7dc35a77c8744800319f6be200755e976d1583349dbc41b2350"}, {@broadcast, @broadcast, 0x1000, "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"}, {@broadcast, @broadcast, 0x1000, "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"}]}, 0x23ac) [ 1648.426796][ T5085] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:18 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1648.586917][ T5087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249d70000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1648.976861][ T5087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:18 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:18 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@pspoll={{}, @random=0x7ff, @random="5ce78b378d57"}, 0x10) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x80}, @device_b, @device_a, @initial, {0x9, 0x7}}, @addba_resp={0x3, 0x1, {0x3f, 0x67, {0x0, 0x1, 0x0, 0x4}, 0x5}}}, 0x21) [ 1649.318440][ T5098] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1649.488415][ T5101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1649.539734][ T5102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1649.573716][ T5103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:19 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:19 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1649.678702][ T5108] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1650.020219][ T5101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1650.070062][ T5102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:19 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249d80000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:55:19 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f00000000c0)=ANY=[@ANYBLOB="c4000700080211000000629077697ae6433d1b383badf507229f90a1cb7857ffb4fe8f2bd92eeb30d1a58828b191ae44315865d359fba66f31e4243ba37db43de9c753692697c9427f53f87054999370"], 0xa) [ 1650.474732][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1650.530337][ T5125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1650.589857][ T5126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1650.781778][ T5130] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:20 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1651.043768][ T5125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249d90000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:55:20 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:20 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000340)=ANY=[@ANYBLOB="40280900ffffffffffff080211000001080211000001070000060202020202027206030303030303dd0a3def866ad40533dc6d2ddde4a5a4051185ad1dcaf8a5c8e829cb94a7506402b10b668652d3854898465d566967feabe5b21b3620dca5b81165be9eeae2e9fbdb78aa8f14aa6e2bc72034644b71b5cf7e65135643e62faaf6588becec7d3b516b6e9d9f86a2db6d17887f5850294476ab9e744e70d74b2f9e155caa95409a4a63aaae987d6abb84c42253b57246f9058855483ba5afc12132c9f5b3b1cf2b0f357e8c08e1b635549bdc31ca6494ae12bf0e02c127ff48978af261ea93137bb1ff2b00011e54bb3e82ae678b334d2559d835a667690f1f52ca689223f82e6277eeb1820042c1e59f29e14cdae31440c915dda8f517f0dee352063fca2d2088c76b2421ace4a9d1123424227316f97aaff0b75b879d8a0410332fab1513d4f58790b9cd01176d8952475f95a4604088bda79937fc928f62962c7ef62b337a9d7dc5ef03552b4ab5de1d5aee3525af54a8d5ace2619d9423432307c09bd9c970c01d8c549fe21d231591b5f737ff3368e91964df5ef667c42bedd0d7eb8a2c4fbe375449a53b6e04a48d4afa5374999e5286d1f0d6aefd88191dbe2bdd16f235b86448d6cd6d7037e060cf1d890c2b923f76e191dd8fbe5e4a4c9d7dc7d39079bfc9e634e83e5695514190c7ae52eecd8e907987cfa182c0ca9fc6e0422d7b78c64832e1671e07c8b8befd271a92489439aab2d47029d081471f33dfbbb0faf9474d3e73cb2dc8aba6706561f763071b63957545781ab2489f7b144ba27c8964f70532803bdb60161c03e9128f6fcec49c09d9b0d8d7bd69ad10d66d2c5afacaf7411e204edd20271364f1f0e95fc58f10dea5eb05309c6c68ff9756ed442f4080e8957a01503edd4f40dfdaf66e3a564c45aa054de0255d489c01e4744fa0b7b3e33e000b8944393ee9351101d96d74254af3806a632b34dd3d6f7517fc16e59a44d9c4a94e810a9de92dae57490fa82e067864c9c2cd4c"], 0x2e0) [ 1651.547873][ T5144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:21 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1651.665787][ T5147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1651.689031][ T5148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1651.854910][ T5152] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1652.154054][ T5147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249da0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:55:22 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) 03:55:22 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1652.754542][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1652.765865][ T5163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1653.027811][ T5169] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:22 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1653.176357][ T5163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:22 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:22 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {}, @broadcast, @initial, @broadcast, {0x8, 0x1}}, {0xf, 0x1, 0x0, 0x0, 0x81}}, {@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, @from_mac=@broadcast, @broadcast, @initial, {0x2, 0x2}}, {0x0, 0x0, 0x2, 0x1, 0xb9}}}, @ver_80211n={0x0, 0xc1, 0x1, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_a, 0xf8, "6b838399624650bc71d240027f77e97dff7009ae6e2e173ff912dfc3528112976884417901029d4db07123f4a2c6fb707445ad8ee714a11c1b27b9e3cbecbd48db031721f4df2d43c4c8dcffc72cd74f5c5dc5ff84b96ab7630b3912d483ed5f5f9d662a341d162a75a5491916b98cb0200784cfe5ba4331397cd0fb7e8b4f04584b2def81bb6f9f79dfaca7fc0d9288588266fb6ad12e4d3fc2efe1491bd33fda9499d8b1f6acc65e4cf3e716f7921899a22c87bc7cd4e88288b3777a836ba76ff00f3238d5876b69a461320eca130308b99864bb172c369b702e1d616c6f80ac36f1807eef6847f752ec71d342722c80858decb8ac7434"}]}, 0x140) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x777) 03:55:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249db0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1653.557557][ T5181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1653.604085][ T5182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:23 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1653.773000][ T5184] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1654.021367][ T5188] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1654.072549][ T5181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1654.123559][ T5182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1654.184159][ T5191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:24 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249dc0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:55:24 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2) fdatasync(r0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000700)=ANY=[@ANYBLOB="2008ff000802110000000802110000010802110000009300400043ca08021100000100060101010101012d1a10001d01f8ffffffffffff0900070004000000080000100000e6dd45363de9e80453459893e50786fc7d72b44c5900fe619cd31b2d4f90bacc1810a50fe5419977baefc8b3df885c042d6717fd237eba7b436a6ce21632b6accc5249d54a3d8aabdddc0148e46d27fb0225f23df4b7a0095c98b66b8da6fea02862a2e176d9c755f89f7f78337d3d4336be880e7a2dc4e684bc81a36dd9b5be2151f6d1d2f73505ec226def24fc69efc6275242162d32f781e1cbc3265fe71b40765ca2e8d15171b1eff7d8ce90585d139f35a55d366fd8d3f5521fb9b4636abdac31500645fcd61cdfa42e580e4fbd18e5cc3e9382e826a1bf75e693b3095996dc806e22090924ef37a8c5ce838eb678d43ffb4a37e66480fd71eb5e399b7fdf9548bf21971f2dc4f331fede33d89f5cbf8d39540adce381895d5bc2064d2954c211aa1effdd458b7e3989a28e4f057004ad4b6cce95d0253d5928a172beb9173705a84d9f35869ba65fe72d35371b57a220782d0b66db0990e1f48c6a358e8a7d75a3ef227237aad8785a6edd79683d377a4f8abe01befecc6b1a9435d64f572b3a02ea40ba6c3e0956e4543829c8c1e7e005300b8d578b1251560a3302c9300bda7be84a23b77c3bf143c1538bc1239294694f40d9f9e749c540649acf401fba334aef1c4d08da95b2fe2ffa5631d756c80f98fce25c192b3d06063a20508964c98ad0ea93edddbde5405cdfa95409c31e321d59f2c34295f22963dcf96a16d952872093810b9f830bc1778c71c42fddb6519549978de28edfd54df3474017e7900488f6f04ef1c50018cf75bf345cdfe795dc0de5a4b4acaa53db6b4414d77acab97a3e76be09cc267d79c292ad4f7e574b558351e2869791338b403cc070764b5cc0f66c99cdabe852948c087c8051ff6fef9767f109dde9dae47d7395c50ec7299b2e0113058cf68d65fa6833278700bf824e7ed0f2097a87b59e87287047fc4cd473d5e5b54554ac9d8371c002b1a782fe13fe718c719a218fddc379520d58f50724c37b8444e2d9220ae2f0e3e9b62da39a6c5cbe47e058711ac703849a58584e9ae7f73173d8ceab486f67bc504c4c02a94efe15841e4f4c3d27a6f5cd627293a091fb8151cb5eb11e0c430081d33c4c3ddb158fe30d51cb92d2ee4f3d02119fc84d492a5bd308704efdfbf7a03b11265338441734c73433e0043f0c0aaacc5762f8a75bfd9f5d7c6fc0effd4a882bc1fe744e39c6b2737f49c1047582a06679c4fa7911cf7cc836b4bced61652cdaf3add85cee"], 0x3b1) 03:55:24 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:24 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1654.752417][ T5199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1654.806995][ T5202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1654.823518][ T5204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1655.135304][ T5211] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:24 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1655.225727][ T5204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:25 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@data_frame={@no_qos=@type01={{0x0, 0x2, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7ffb}, @device_a, @from_mac, @broadcast, {0x0, 0x948}}, @a_msdu=[{@broadcast, @broadcast, 0xaf, "7e09a2dba9619d9432daf897927e6e1b7a45a4094899a261ce978b43f6cfe0a62a5568dcf49b90d336891f7d22cbd2133c657863ae9e224c2cf64dd11368ee63d040f990e06070e70b7a2d5b343121edc891eeeb970ad755014bddf4dd35851ca66c93b876b5143beb68517c0b7d53168157c7201111ce419f7c413b7ace3aeeef437e39f2724bee1b0a394239eb4b1df3c44897b66ab0555260c4b17b66c9185370eb4dfc4a1641148d9e0aea87c2"}, {@device_b, @broadcast, 0x25, "eb4860a9af32bf359fc516dc94fb3629b14968036ba1221f93b02708adcff2bc9349d78504"}]}, 0x10c) 03:55:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249dd0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1655.913748][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:25 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:25 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1656.063007][ T5222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1656.205960][ T5228] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:55:25 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249de0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:55:26 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:27 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:27 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:27 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:28 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:28 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1661.736244][ T5241] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1665.994698][ T5293] chnl_net:caif_netlink_parms(): no params data found [ 1666.858410][ T5293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.867788][ T5293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.876169][ T5293] device bridge_slave_0 entered promiscuous mode [ 1666.886130][ T5293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.893316][ T5293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.902353][ T5293] device bridge_slave_1 entered promiscuous mode [ 1667.264311][ T4400] Bluetooth: hci4: command 0x0409 tx timeout [ 1667.347947][ T5293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1667.361700][ T5293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1667.433374][ T5293] team0: Port device team_slave_0 added [ 1667.842114][ T5293] team0: Port device team_slave_1 added [ 1667.892226][ T5293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1667.915138][ T5293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1667.942323][ T5293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1667.959561][ T8] device hsr_slave_0 left promiscuous mode [ 1667.966994][ T8] device hsr_slave_1 left promiscuous mode [ 1667.973636][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1667.983913][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1667.994478][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1668.001915][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1668.011216][ T8] device bridge_slave_1 left promiscuous mode [ 1668.017832][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.026973][ T8] device bridge_slave_0 left promiscuous mode [ 1668.033103][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.048367][ T8] device veth1_macvtap left promiscuous mode [ 1668.054517][ T8] device veth0_macvtap left promiscuous mode [ 1668.060609][ T8] device veth1_vlan left promiscuous mode [ 1668.067185][ T8] device veth0_vlan left promiscuous mode [ 1668.375477][ T1365] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.381785][ T1365] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.334194][ T2965] Bluetooth: hci4: command 0x041b tx timeout [ 1671.413994][ T8517] Bluetooth: hci4: command 0x040f tx timeout [ 1673.493850][ T2965] Bluetooth: hci4: command 0x0419 tx timeout [ 1680.693330][ T2965] Bluetooth: hci3: command 0x0406 tx timeout [ 1687.516205][ T8] team0 (unregistering): Port device team_slave_1 removed [ 1687.535308][ T8] team0 (unregistering): Port device team_slave_0 removed [ 1687.554638][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1687.573569][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1687.646794][ T8] bond0 (unregistering): Released all slaves [ 1687.728451][ T5293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1687.736203][ T5293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1687.762505][ T5293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1687.830416][ T5293] device hsr_slave_0 entered promiscuous mode [ 1687.837414][ T5293] device hsr_slave_1 entered promiscuous mode [ 1687.845771][ T5293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1687.854890][ T5293] Cannot create hsr debugfs directory [ 1688.065689][ T5293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1688.082446][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1688.090252][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1688.108953][ T5293] 8021q: adding VLAN 0 to HW filter on device team0 [ 1688.123398][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1688.135169][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1688.143766][ T4400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.150828][ T4400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1688.175747][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1688.184395][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1688.193266][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1688.201727][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.208857][ T4400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1688.217914][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1688.227419][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1688.248833][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1688.259761][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1688.268504][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1688.277474][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1688.293297][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1688.301443][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1688.315291][ T5293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1688.330478][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1688.348738][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1688.382042][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1688.390534][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1688.405633][ T5293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1688.432233][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1688.463955][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1688.472416][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1688.481661][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1688.493844][ T5293] device veth0_vlan entered promiscuous mode [ 1688.512358][ T5293] device veth1_vlan entered promiscuous mode [ 1688.545067][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1688.554666][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1688.564385][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1688.577987][ T5293] device veth0_macvtap entered promiscuous mode [ 1688.596358][ T5293] device veth1_macvtap entered promiscuous mode [ 1688.619468][ T5293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1688.631186][ T5293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.643075][ T5293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1688.655104][ T5293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.666140][ T5293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1688.677792][ T5293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.689320][ T5293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1688.703292][ T5293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.715045][ T5293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1688.726544][ T5293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.738965][ T5293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1688.749293][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1688.759716][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1688.769747][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1688.783072][ T5293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1688.795177][ T5293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.808561][ T5293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1688.822053][ T5293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.832753][ T5293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1688.844557][ T5293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.865707][ T5293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1688.885149][ T5293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.902962][ T5293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1688.924886][ T5293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.949092][ T5293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1688.961282][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1688.972397][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1689.119422][T24685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.154606][T24685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.227556][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1689.244751][T24685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.270372][T24685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.296439][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1689.400493][ T5633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1689.414891][ T5633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:59 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat2(0xffffffffffffff9c, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={0x101000, 0x0, 0x1}, 0x18) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f00000015c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000001640)={0x9, 0x0, &(0x7f0000001600)=[r1]}, 0x1) preadv2(r0, &(0x7f00000014c0)=[{}, {&(0x7f0000000040)=""/165, 0xa5}, {&(0x7f0000000100)=""/77, 0x4d}, {&(0x7f0000000180)=""/133, 0x85}, {&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/137, 0x89}, {&(0x7f0000001400)=""/153, 0x99}], 0x8, 0xffffffbb, 0x7, 0x11) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12080, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x1b}]}) dup2(r2, 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) dup3(r3, r4, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001680), 0x80, 0x0) r6 = syz_open_dev$vcsa(&(0x7f00000016c0), 0x100000001, 0x40200) r7 = syz_open_dev$sndpcmc(&(0x7f0000001700), 0x10000, 0x2200) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000001740)={0x7, 0x2, 0x8, 0x0, 0x0, [{{}, 0x5}, {{r4}, 0x80000001}, {{r5}, 0x800}, {{}, 0x1f}, {{r0}, 0x8}, {{r0}, 0x2}, {{r6}, 0x6}, {{r7}, 0xfffffffffffffff7}]}) 03:55:59 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1689.729816][ T5633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:59 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x0, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:59 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:59 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:55:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249df0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1689.844461][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1689.968734][ T5648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1690.156852][ T5656] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1690.587561][ T5660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249e00000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1691.012751][ T5670] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:00 executing program 4: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x81, 0x8}) 03:56:00 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1691.283537][ T5673] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:01 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:01 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1}, {0x3}, @broadcast, @device_a, @from_mac=@device_b, {0x2, 0xf8}}, @tdls_setup_resp={0xc, 0x1, 0x53, 0x80, @void, @val={0x1, 0x5, [{0x2}, {0x48, 0x1}, {0x12}, {0x3}, {0x41}]}, @val={0x2d, 0x1a, {0x2000, 0x0, 0x5, 0x0, {0x6, 0x1ffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800, 0x401, 0x7}}, @void}}, 0x40) 03:56:01 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:01 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x0, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249e10000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1691.799235][ T5683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1691.833672][ T5688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1692.072632][ T5696] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1692.285076][ T5683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1692.431530][ T5702] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x20, 0x9, 0x2, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback, 0x7800, 0x8000, 0x2, 0x7ff}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r1, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x48000}, 0x1810) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975e99d51b1cec6ddaa76e184300"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r3, r4, 0x0) ioctl$KVM_SET_CPUID(r5, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x1b}]}) dup2(r6, r5) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x31c, 0x13, 0x1, 0x70bd2c, 0x25dfdbff, {0x2e, 0x81, 0xda, 0xa7, {0x4e24, 0x4e21, [0x4, 0x5, 0x63, 0x7], [0x2, 0x2, 0x5, 0x3], r2, [0x2000, 0x401]}, 0x3, 0xffffffd7}, [@INET_DIAG_REQ_BYTECODE={0x92, 0x1, "ed92adc49fc05cc8b866166032af9f9c4828e45960152072befc2bf22ff31b4cf93ec66e1a73385afecd3cd9b5b6240e7e9999ca89595448d9453d24937004540f23d046cc696529da91bc549dd5d8e34ea09e80d83f00fb0a79ca71959abd3c42bf62ed1217753be007f9e7fdb163f7c0b005fa080b113356aa038efa518fd25061fe599398f5f42f5f04034971"}, @INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "cfc0e1d876e5be6a09c0876bdd67de963089d887e4918208d7931149f9ef0c72b6404d5e4604cff4067be28cd59c59d4ef682a3318b2cf1ee577d2909ce018802d36c30f2f945b5f4351bf1795ef27e2d7f710b5b02487571725c81e9780d49b7b0e5f704a5e7afa9f43eb8f2e492561bd7d7fb0a2e15f7397f07edafec028353d2dcfc09782ade19235dc908aa51bd811898c9aab875f9af793924205ff443d8566256ca53646d49e60b13a3ba1"}, @INET_DIAG_REQ_BYTECODE={0xc9, 0x1, "316b1431c95eb08c21bd24dfe49c845973dc549757d089799ce9f9ed866806289401324aaf01f1b0b4c44021ca01143ae52ba7712ac5081949fe609ab85a0f716cc1d68c23c707b279cbf6cc6ae3d1383b39fd74899332f0e9331440e4882701a79d2fafc3a9e1d01f659fa4d6dcfa018978ef10171e08a0bb36fb1c60c3a1dbd1db58354fd1e791d39e85b2faa92ad3096b724dad64e01c4c93b1a4abb5b47c34212c3fd9052f9fdf620896d0ec4e9658676626c27a434761b88805435258b763603489cd"}, @INET_DIAG_REQ_BYTECODE={0xbc, 0x1, "0cb0691d5e572d1709af9a0adcba24a4e9af680cc55db090956841b969da16f1d309668ebb12d5b3410f1c1dfeda219178c3472e74ff8904be76c2a451dd2c2067eb702aa3292d8603cbd3ec9d1ece82c3a041643dc08a3d8747f66dd2a180435903a6dac425c0f3623eca4debee7a325b95035c120721045d284fd386b2e3c9eaf40da2e9b6aae56afd271b17d64911c235d00dacc9f88d9b4a6176809087b3ed80e584317b720ec54a81e6238f8253b2bc4b18db098360"}]}, 0x31c}, 0x1, 0x0, 0x0, 0x881}, 0x80) [ 1693.070956][ T5708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249e20000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:02 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:03 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1693.474599][ T5715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:03 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x0, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1693.643663][ T5709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1693.680453][ T5724] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:03 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:03 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 03:56:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249e30000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1694.318470][ T5737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1694.622005][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1694.739062][ T5737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1694.891080][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup3(r0, r1, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x1b}]}) dup2(r3, r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xd16, 0x9, 0xb9b}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) 03:56:04 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1695.422810][ T5754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249e40000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:05 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:05 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x0, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1695.791024][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1695.858625][ T5756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1696.040555][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:05 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000001c0)=@broadcast, &(0x7f0000000200)=@ctrl_frame=@rts={{}, {0x75}, @broadcast}, 0x10) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x1d0c}}, 0xa) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000340)=@mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x220}, @device_a, @device_b, @random="04143502063e", {0x6, 0xff}}, @ver_80211n={0x0, 0x5, 0x1, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x20, 0x1b, @random=0x8001, @void, @void, [{0xdd, 0xd8, "4a74e67336162fc054740ac099733161faedc6055f370feb30fc331c8036cca81962be79667a6f225e3314eca680e6dcabb5eb5d5b109b4ffea57a6d457e36509b3250fd76d5aa75e1fd95a53bf83615e6449129f360acab7bbcc21597e1654c8ed9c5c680cc55a96197f57ed62fe5c0eb0fa33e592f914f51a0a41a3dcea9918e07284a2be8c74a0cdc1198dc07b45f593532811284cded346249116eb3c7d87e5c983ed49ceea67654e2d6c7bd13b78e3be69bd021a9ee72ce71b903319d6eafdce383c09252d91049026376ac10592ea7d65dc67707c3"}, {0xdd, 0xc6, "d4bd75fda42d48a31d587def49fb2495020023bebd385d876c07712191bab41f35e0c74c8c9404ca5f9ec56ed4f85ded76252383cf25d0ee1620c170b5649a16023b7a5bc57bf870580c628da713ba885627964850efd6a311b7d2d76e423c60cdf800de80526efe8118257e56e69e59e849f2baae66a415eba88011e1918619ab7230f0595cd6bf88e84ed27409989b6382ccebeab3f68072944c35f7f7d888fbbd665f410b640cc413b0b407c5d2ecfe4e54317f19b09fe91903a94aa58c769111a5919bf8"}, {0xdd, 0xee, "0814d327a196933668c343fa77e790a07e2461d24f6a89b3bff49bdf3665fcbf214ffa5379c65f1b9e93410116c277acd76b787d941870749a49d308e813a3512fc00e4916bd847c70b8fa16e529b0d523586bc6f372ba8a2d49bf35bbb4f257088c3f3cb51dd2713af5fc4e93d3bfb7b89264120d20553a82147a27db46ba72a8eaedbbb65aae4f7bfb954683371c003718934a7df54905abe4291b1854350b244bd58f51405ffbe9d3ba67c98b89adc12bea6202255fa6868f9c05224c184c01d84065559c47b21fa391ea4623dc1ec0f73903713cb51b9a4f75044d7270e6ed046e942b0cc52f7ba4430af6f7"}, {0xdd, 0x7, "afb80000000000"}, {0xdd, 0xfd, "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"}]}, 0x3bc) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x80}, @device_b, @broadcast, @from_mac=@broadcast, {0x6}}, @ver_80211n={0x0, 0x6fa6, 0x1, 0x3}}, 0xffff, @default, 0x10, @void, @val={0x1, 0x4, [{0x42}, {0x12, 0x1}, {0x5, 0x1}, {0x30, 0x1}]}, @void, @val={0x4, 0x6, {0x2, 0x0, 0x0, 0x5}}, @val={0x6, 0x2, 0x5}, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0x5a, "21d556857676814c59341663d6882298c1ced8c0835a809a7f78c88ae6982177c786014f59b46231ed565490339f6834074050c4e4a9f434d0e92cddcc7ed7c0d9867fd9a98a5490aae4900f64a8129ac853aae52abb07277236"}]}, 0x96) 03:56:05 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:06 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1696.525006][ T5782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1696.554092][ T5785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1696.596020][ T5787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039ffffffe40000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1696.661657][ T5782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1696.695666][ T5785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1696.972040][ T5792] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1697.142575][ T5782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1697.190982][ T5797] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1697.201572][ T5785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1697.212533][ T5787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1697.268911][ T5782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1697.272533][ T5798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:06 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249e50000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:07 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x58) [ 1697.948861][ T5806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1698.029109][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:07 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:07 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x0, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1698.250274][ T5815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1698.364868][ T5806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249e60000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:08 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:08 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800005, 0x4000010, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000000)=""/162, 0xa2}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) [ 1698.957757][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1698.978914][ T5828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.358869][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:09 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:09 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7cfa}, @device_a, @broadcast, @device_b, {0x7, 0x9}, @device_b}, @random="d20d58e57c176a7dc66b7a2d9a8a90a70c91c06b05cbe46eb65c7dd3f698743822a5cf440067257db2cf496c7aa4683183b036a4979d6674dc6e5b49fc66869b4eb84246e664dbbf83eb6047a39a33eb0bd83a2ced94f679e367da077af292fd192cd443c5e61e831ef55db85a410d255bdcfcb17bc428707301d43d98eb4765f69675b69334596c5aacb259565078763c57644c8c8741ead0348aacc6375abad2554e941a0df24359736145612bc196c782414ef95ecb01f92de3987bb057b10c7f8debfd"}, 0xe3) 03:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249e70000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:09 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x0, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1699.991168][ T5844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1700.070310][ T5846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1700.282953][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1700.472349][ T5844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:10 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249e80000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:10 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000980)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x63fb}, @device_a, @device_b, @random="aae356241bc6", {0x6, 0x6}}, 0x8, @random=0x568, 0x2000, @void, @val={0x1, 0x3, [{0xc, 0x1}, {0x2, 0x1}, {0x6c, 0x1}]}, @val={0x3, 0x1, 0x10}, @val={0x4, 0x6, {0x3f, 0xd3, 0x100, 0x7fff}}, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x81, 0xac, 0x5}}, @val={0x2d, 0x1a, {0x2, 0x3, 0x1, 0x0, {0xffff, 0x2, 0x0, 0x20, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0x8, 0xcf}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x76, "e5f5c27b259e47c2459ad1ccdfe1a888f6c4346c4c0a5d9a1e2713c6fda300db2a067f7b91da6573853c52e9e8b92909b6cfca9b1f76a003ec1fcc4dba48b43affec52b6b466477fcc1f3857d55cd52cbdfac4e0098951fd6827cbdf7caf2ddb6720f86890afbae6e3fc1acc5eb60a820c2ff159b0e1"}, {0xdd, 0x3b, "90eb9ca4086571c469b39cd62d521d348f59f2f765f36e13ff212a1e4a0be0466c40b0d51e4de144ac8b1d7fa65c5f2566b4f9259ac409e25adf46"}, {0xdd, 0x6a, "836eed9ae5988fe99dc0afea1d68d8344525668e41e72d5779e5c04023f421e06f820051704b66f46061cf7ffbafcbe1689c38979b9212fce1c3a67bbdf1af844d073de667b2af518bd38e5301790841c083abf037031f8c5ff385f63d7dc80261201edf43cfee06e468"}]}, 0x182) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000340)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0x9}, {0x7f01}, @device_b, @broadcast, @broadcast, {0x4, 0x7}, @broadcast}, {0x7, 0x0, 0x0, 0x0, 0x2a}}, {@type11={{0x0, 0x2, 0xe}, {0x40}, @device_a, @device_b, @initial, {0x3, 0x7}, @device_b}, {0x3, 0x1, 0x0, 0x1, 0x1}}}, @ver_80211n={0x0, 0x6, 0x1, 0x3}}, @random="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"}, 0x604) syz_80211_inject_frame(&(0x7f00000001c0)=@broadcast, &(0x7f0000000b40)=@mgmt_frame=@auth={@wo_ht={{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x3f}, @device_b, @broadcast, @random="7a4d97620de8", {0x3}}, 0x0, 0x0, 0x20, @val={0x10, 0x1, 0x9d}, [{0xdd, 0x7f, "3d5e23e98c60834cb9aed306592379b7055bfb9eb427c95e0bc202ae6dd68e4c52dcc2c2564f6920ec74b54d17fd78332c2c2e140cd8f5e64641988a12548b770cdb8dafb6e8b07480542715c61e577b6b9d4b786cc76dc6a0be7e23289d3cd2a1c1070aa8e176270d0c1c0a6c6cd7f9697a5599c6875df2ba707143a2b8e9"}, {0xdd, 0xff, "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"}, {0xdd, 0x8a, "50254eb451b504d6e740e193f20638e908ee71c6987612f9bc65cde67b21520b9ddb7288fb0622010a43e6f694edcd74808e889fbcc4c5b126f7c4cd6096e1d35074b48b865a96a1c45accee1ce8cbdcb45f52bfd7470576584dab3cae5a6a68fcdf64ca059fb5dbd6e5b55e118580e086099b9e1ff87ce4683bbd472e625d58842b363a2fa674acc086"}, {0xdd, 0x8c, "365aa0f720bc87cdcd87102ee491d2954574ea7ec8591467d633a50f7e6ddf1535bc30e9e5d8df1505a5d934a0da10744e1bfcea9875bc03b11f8b1625b5067abf6f9a8c2e8abf2d94ed51bd2d347e56c8a79a37e40bb19a6d5c763026d323f8e8f6c4c3155274435091171fb994626b25ae6bb95b03744bc6bc286ece9b87b3e8dd1f40450b94f6ea40162a"}, {0xdd, 0xe5, "6f7fb6efd1b862f11abf8cd81713e03984c69abfd20ba11246792a4a9f461587b89bf77656f6b595abd9ce311dfef12d47b62fa85bad666efbf89e395aadc4848af0b6e01d35ad6e9788e85464f4736eb53b2addfa75b4ac890c63cb84c5b3637459ef3afa4f9c03410dd376a67f4eee6df716910047b3b419217ab46ca8ebdf2a4104f36d9eb6414637d9c9d9b4f0ba11f19a7344383aa7276d513d89016ac0f3502671db12a2ab6dd05d3c0bd18efc0ba7525feb106c148ecf096f41ae1a2ae007cad694edaebf22c655b5cf73569bc09fb608b2164c32d54aa9609678d9fbf74c8e3adb"}, {0xdd, 0x88, "868a3554a5ed1bc39bc1dc9ccc066dec93b645fb78058882aeed9bb147f7cfcbb78a119add6b6a5eac7c5617aec9a4fc4837cd39f435b0cd909362e6b33b8ceff5f1c25592afd57874cd06e959decdc704bc4a25997884aaf65b1e7fcda961b723ffce85793b40b78bc3dabecf8ffc45e5aa81a5b932dbee900847c7b86dfdb0b3ab0e6e0e6bbc47"}]}, 0x42e) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x42b) syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f0000000180)=@ctrl_frame=@ba={{}, {0x4}, @device_b, @device_b, @compressed={{0x1, 0x0, 0x1, 0x0, 0x6}, {0xd, 0x8}, "53917764db55ef7c"}}, 0x1c) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@ba={{}, {0xfcc}, @device_b, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0x9}, {0x7, 0x9}, "b475fe92881a8af5"}}, 0x1c) 03:56:10 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1701.061328][ T5863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1701.096232][ T5864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1701.126689][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1701.137145][ T5871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:10 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1701.181436][ T5872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1701.223359][ T5863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1701.269549][ T5871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1701.319953][ T5864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1701.383620][ T5867] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1701.770374][ T5863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1701.809917][ T5864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1701.814785][ T5863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1701.860478][ T5871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1701.871114][ T5872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249e90000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1701.913808][ T5883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1702.224291][ T5886] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:12 executing program 4: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) 03:56:12 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:12 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', 0x0}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1702.604913][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1702.647213][ T5891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:12 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1703.029767][ T5891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:12 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249ea0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:12 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000340)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xdc1}, @device_a, @device_b, @random="11692eb9201e", {0x9, 0x6}}, {0x0, 0x0, 0x0, 0x0, 0x80}}, {@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1d01}, @initial, @broadcast, @from_mac=@device_b, {0x2, 0x3f}}, {0xb, 0x0, 0x2}}}, @ver_80211n={0x0, 0x5ca, 0x3, 0x0, 0x0, 0x3, 0x1}}, @random="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"}, 0x3b1) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@cf_end={{}, {0x2}}, 0x10) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000a40)=@ctrl_frame=@cf_end={{}, {0x4}, @device_a, @random="01ffffffdab6"}, 0x10) [ 1703.282887][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1703.457121][ T5909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1703.534779][ T5911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1703.568212][ T5913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1703.617470][ T5916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1703.679884][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1704.083668][ T5909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1704.139236][ T5911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1704.150550][ T5913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249eb0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:14 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', 0x0}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:14 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) 03:56:14 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:14 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@mgmt_frame=@disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x3}, @device_a, @device_b, @initial, {0x5, 0x7}}, @ver_80211n={0x0, 0x4fd, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x25, @val={0x8c, 0x10, {0xa87, "9370e94fe328", @short="e900fa5a72e88e3a"}}}, 0x30) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=@mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7f}, @device_a, @device_a, @from_mac, {0x5, 0x5c7}}, @ntf_ch_w={0x7, 0x0, 0x1}}, 0x1b) 03:56:14 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1704.722969][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1704.762614][ T5932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1704.828971][ T5937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1704.876429][ T5940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249ec0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1705.292661][ T5932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1705.350391][ T5937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1705.361110][ T5940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1705.609346][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000340)=""/4096) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) dup3(r0, r1, 0x0) dup2(r0, 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) [ 1705.964644][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1706.122092][ T5951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:15 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) 03:56:15 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039914cbdec0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:16 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:16 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', 0x0}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1706.595028][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1706.703434][ T5953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1706.949499][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:16 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000340)=@mgmt_frame=@reassoc_resp={@wo_ht={{}, {0x9}, @device_a, @broadcast, @random="6355c9338549", {0xa, 0x8}}, 0x4, 0x5e, @default, @void, @void, [{0xdd, 0x15, "126d939a90c0a0d1824ae4d89446f9aaf0399ad6d3"}, {0xdd, 0xa8, "2bf0d1aa5670da4c1410c42f97eb38e8328385c92c8dc32a8258eae1640d73a55d24d9ccfbf5bd59fec190d1da6fb3b362af3a25f045fb88e6899d35df8f2be86a9d5ab0b0ea44e593c1bcdb7a64224ae4d757e6ecbfd31e53ef0f76b34c661bd8fcde3652bc63721aca2167604aedc79d30f1521f089eeb7e61deb177dff0c3f875a88847ede965eefb23a60c3388a63b21f4243bcf4b209ca37d7e3f02bcfd798d3f06547007c3"}, {0xdd, 0xc1, "729fc67998dfedfa8688e4814087af0b338f475dce04e6dac1455cc784e2e014e9bfb10b97b0b0b72e184cca43f2c8602579981e5f6d25a99ced99f52a5e47087a945dcfd68aedd4096c29dccd16a866ea20edbd3c1af02463f838aa06259b5088c3e48b086fb4ff0c45e70cbd973f2c6c532486db4793013a227f2b97d09c5db900a4a0bf828d53520a24621e972caf59a6e422a07d8a9aeb235e867dcdc5a241dbbcace37fa7878e4f1a6ad2c63ef5041785f8360af4a01573aff7ef6d1ab591"}, {0xdd, 0x25, "1fd6a042b457173daf84876ce84c883ea02776619c829341660ec106c5496718322f02dcd1"}, {0xdd, 0x7b, "867bb71b45998b04c3dd03cdd315097d4988f2e31b1fe2df1b055d8e1f964043a1c512f7d9e37663a7f86725eade7af00115f509795409d135fdd0396c07193ceafa36db44d395c6bdb6877f3ac2b40484ffc9f6ffdd420c2cef7885e5aa7417a436b076e5e4bb579e09b2b8717f6e491678fedd2d8626409b2767"}, {0xdd, 0x63, "d2122e8f9cf65081263a553bf4feb3ad1dc9d3d1bbd7b275c37ab88818c64e62d5334ceb4afd4b06d07fb8bc156b9d1c1b2b758b2ac63f1947b5a4eb62622f321d0976b7679b75935da8d8d45151deff2a667ee28b6e8def4f6d2bb990becda336d97a"}, {0xdd, 0x7a, "199f36dc4b44b06d3eaa15713c7015584757ff3ba050629c51e17e1b27f0abf6e654755083d08ab38cbbdc12fc48379395a9bbd5e99a34e9b993e827d1399768976785feb717e393e1dbf9b25e6ce77a5823d13e00d8e9ba44f27c666e62f4a6815944cdcaaba6588159f17e2be61ddde8785b3b02deaaabba09"}, {0xdd, 0xbe, "277c473502993f86ba2e7fd955b1370df8382315ab5e53378b0439415501afd1c683316d75e3f5458101283c79cc57f50fa486b5018dbeeb05f32216007861bc9c31e1514a9423e8dd32b4b4e857ff9294f3c591a8d5a70aa6911ed7c7f9e8421df215e62dd683d09510c65b68dd232e1207f05e591e66188dd35d97c50be7fdbe0ff7c1b1762ab5bfbbcae14dcfcda916a511fcbd40f55ed8980377620c330868206eff2c79a0b92beb4ebfb068fce8ec92ecd1a30159cf2a571902a626"}]}, 0x3e7) [ 1707.357412][ T5984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1707.368981][ T5985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249ed0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:17 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) [ 1707.751970][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1707.822612][ T5984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:17 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:17 executing program 4: ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {0x1}, 0x7c9c}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) [ 1708.032797][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1708.276042][ T6000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:18 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249ee0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:18 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1708.743646][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:18 executing program 4: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0xfffffe19) [ 1709.038705][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:18 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:19 executing program 4: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) 03:56:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249ef0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1709.758065][ T6024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:19 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1709.913375][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:19 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0x0, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:19 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) [ 1710.122821][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1710.175193][ T6024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:19 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:20 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="d01c28000802110001ffffffffffff08473c987601f90f0f02008110f9ff0101b67206030303030000"], 0x29) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f0000000340)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x81}, @device_a, @device_b, @broadcast, {0xa, 0xfc0}}, {0xc, 0x1, 0x0, 0x0, 0x20}}, {@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7ffd}, @broadcast, @broadcast, @from_mac=@device_b, {0x1, 0x7}}, {0x9, 0x1}}}, @random="996e3cc721d5e29d6f09d360b487ca291f1e3f38f29fa424ddcdc83458d3dc7b41e03d6d105f0df46e651f84079f36ffb4f6a0599ff6e2d5e57169967f01b4f4ad5fc8a79885711a5750be59ff447f79952fa18783164b7cea9ae70b02a9150ce5813af284b513b0acb9a598ed73479f44931bfd187cd09fb149148e5ecab2b39ce1ea835d00e8f1bb40e7609f946467007e14fb23130a64a15b6a7ca2243d8d673a7e55be5fec1cc5fee4c509570a7981883dfa4e3373be3aba3d4da067d62dad16d23cd0b8dc47660cf7f310be0a1f9ea082ba597c98f9fe6d21b1af242944f3984ace9d8280467f1f27715691ecf226c1622443b804de98b36129954a308617bb96cc147796e4ce735c3ac94142de4c105fea8a99cfc59fd28046dcd2a0cfd59edf03c04afd372f7533e1160d18c0c490f65707635c2de47f6cac930debd5b0a30d5c9fa1bca8a5e3f7e0dd99f4c9af1b8f1f5d4fd69d0540aa0a224ab9f1fec4156c8b7f76d10f1c597b62c3bc7670fde162f281ec55bb8562f297612304fe4731610e27dd109bd2e521fdd076e93fc9ad18fe69b4b3fa13b36cf4133671f28889c98a03ccc3fa62c8f0a9d0d80a13716734d6db18e030b616b10202097fbcb7a7d189d0f3a7ed9a41842fbef3f1bbc896aff6b06c2cd06d8c253feaec2b9cd3b8aec7fe0dfca2c9991b397dd09ae1fb87dc10a3a36e2f87e8891df77b72b8be04628e9ad1501cb9d92845970cf89aa32452c0704bb50a1e82c275be88c95f5f432caa495a003c37dfb390428aeebd3bb08aee1adbf233d17620f8b0da4137efba0524ff2340c72db44476a2ea202fa584a17d53077514f63ac125ef5e8d38ece3b1f43fed45a7d8a05e91ec74d9103dfc080b30a3539ed751b24e3f3efd57ae6af1c200765abbdb096a92ce61d8fb9ea0d058f0fdc38204686522b1c423490870459d6f840c04b96db3b1738ccca1930f0ddfd67fb75ee26eca99beddbd8c4d64eceae98bc499d64e03244aa14e12d8b5c04d596fa5f102289f4fe17290d3a64cf4b0dea1286db7ce2bbaa351eda9b0cedcc2d162ae580d453b40760b38d46050463cfdc0696c144cf2e12770fcfaf5b9539602580b0a5a067a901cc5ba0f6cdff40b9cb8b1c2011292817fde2669e11a9ca84342586e5de88fd8b9877d8708094d0d6f605a115a43ccb1e5a300039913febd28debbf329564a8fa72902dcc57299191438d5e97131040268cdaa9e98d66d4bc3058d18271f7d3131bc4a77f040bd520867d2c9d2b967c06700038e4d0572551f2d5ada27879c777da4117b08fa3f721499a2a679e546fe177b733ed927ce95740d8a4caec38ffd6a658b91b6009b8c56a88ed4b85dd18e55354ebb6daf576dd63f4749fcc9e665484e9f95433ac3e82b6a0a77d6232670c5cbb15981be4a5e64919c3b2124c33ff1144375337959df8f955d1121fdef0c18811ea93c94262154ddf11f82c54ff4eba72db4a2c7422389a946a64cde3538830d8083a51cd6a477c9881f4f27517d6daa7afa2290e19bb640e5210779220ca95369790ee519f0b0de8fe2fae460c42d575bbf07fca2988f79fa"}, 0x4a2) 03:56:20 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249f00000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:20 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1710.693330][ T6047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1710.736453][ T6048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1710.779116][ T6053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1710.818221][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1711.093831][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:20 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1711.225828][ T6047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:20 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) [ 1711.276379][ T6053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1711.281364][ T6048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039fffffff00000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:21 executing program 4: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x5f2) [ 1711.759980][ T6072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1711.815674][ T6074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1711.817824][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:21 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0x0, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:21 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:21 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1712.168637][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1712.221185][ T6072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:22 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0xfffffffffffffdc6) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000340)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @device_a, @device_a, @initial, {0xc, 0x3f}}, @ver_80211n={0x0, 0x6, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x2010, 0x33, @random=0x6, @void, @void, [{0xdd, 0xc1, "9326f08882b661e4f090a70358cb611ebec65d3093bf1b0aba134f1ed8d4c82de4bd02e6a132f781bea060b34654ac1ccd82fa80e16513975f427ed8a2f17792356495ca754e520dd777034c26a3c01a1192315b2bbf5b43d5a84a34519dc9e894302a3b7cd6b42794792af7cbc7db7a43755344162481f25d8955078a606e8b380daa6e3b58c83ac34bf7d75b1e1c409fc77eb5d0810156276aedf79a4f3825bb26a1b36b969e9f2b6ec6192a80e2906a1d264e2651c813d194a1de725c9aaf77"}, {0xdd, 0x8a, "87c524c8e5896c261f7fca8d1c98a859ea29b7023c1d825e18b0c3f8f106b693ae2be61966a5beeb3e3ae385cce7f78aab620d4d2dbcec5c4994b186212ea12d581f7efce862d3e9f534662e4038b410a8b9a088123dcb8fd67b580f045f8ce1bc209e52abcf45f2f9490e8a2ace6a941d3b4607706346ee62e40d7c0da3ac1e7305f3f251f049c07706"}, {0xdd, 0xf8, "0759b558426992b571f5992cb6d30adb37a9cfa15e8fb69769b9d35492791527ce5b9e735b3a2a1ee09981c5aed7bcf0a3bba84a5b9efc16104641e0a2d932c9e050d221729cbde897b57bae02dcd22455e5d508f327870c970a1f4a6e0e7cbd130ff2fa332973b2938b2291aca48d649e7022c0926ecacc35dadff19b482d4ff73374e57c1766a600093ecafdc3d5f917ebf95fd87928b1a59c4713e2e752ee7996153aac4ed6cb598bf371d82c9d0e01f440e0fcbe5ef0723187a052aabe1e3835e351a05ca0b6b5db5e373796621900f5340fc3efca333f37be5c53148a2a48b041c036b397dff56d60a0087d32967f7c2f4e42aa6b3c"}, {0xdd, 0xb3, "29fe196320feedd69c27094e778f621a4ef0d896c4be90dc6bb9265a235c744d658ed492d038683d8fbc6949c9e78791a71cbf5ed329b5fdd16addf9ca7e93e0d571caa53eeb249c0e5df3fe3e95e9e83357350e965eabc621737f7434ebe3dc1e6f1cee6556b011946337fc2f57cb5cbc1456a3ace74f8bc9ae5bbdeddc8a56ea6d27e803b7e286464185cb54213c643f6026813bfa656eccaeb7dab29dd8655de73d639c78ccbc7b602ea0939f9d37974c08"}, {0xdd, 0xa6, "2d01acd94b7a449272b574536896ba344f1a92a9108ff39150a4e43a02225dbd9abca87569412922dbfbdd02c5b2fbc159df5ec6c62be8b59e4f6e204c0691e0db5e6da74f1a3c9de1ac9a838d4a198d0a28925b8fd7282914aecedb843b92c22b46f61b23f1b04b78584fb41e19cf79cf38960b423998eeeb4bc9be9dd9f15c1a245d2e0f14190fd980dbb6a7ea2d3dbdd23817724d5c116df5c4e3edd749eb0a97a2015044"}]}, 0x3c8) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x81}, @device_a, @from_mac=@broadcast, @broadcast, {0x8, 0x20}}, {0x3, 0x0, 0x1, 0x0, 0x81}}, {@type01={{0x0, 0x2, 0xf}, {0x1f}, @broadcast, @random="2b5610ad0073", @random="423f2d685119", {0x6, 0xff7}}, {0x0, 0x1, 0x3, 0x1, 0xaa}}}, @a_msdu=[{@broadcast, @device_b, 0xc8, "915384c6209b4b0eceeb2450ba7f4959b1b4017899a374c7a57de652bbd9a68caab090e5173819c4aedefc85d67579cfad489fde48c721a29edb5a10c6ee0a866f7a8858e83d6aa96d0c14e283af05c24a96f4de460ed636c1a7beab4fc7d450a2a451c7cdbac2a6cc7fbd2fe528915a77eb9e67834a318e4cb60fd96ee3b6ee7ad23cae95fda62705572dc4fda3f8316733c1cf676903b05b6d8ad5e27c31c58397743b27294f0d52edfa60dd9f8a564437f685281eb96893e239e79f179204fa7bfdfb4875ad05"}]}, 0x10c) 03:56:22 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249f10000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1712.680658][ T6096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1712.703173][ T6094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:22 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) [ 1713.060772][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1713.147111][ T6096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1713.158820][ T6094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:22 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0x0, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1713.280379][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:23 executing program 4: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x4c) 03:56:23 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) 03:56:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249f20000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1713.637849][ T6114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1713.899945][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1713.988752][ T6114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1714.171227][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:23 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@cf_end={{}, {0x7f}, @broadcast, @random="98be8d360475"}, 0x10) 03:56:24 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1714.693600][ T6129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1714.732249][ T6130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249f30000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:24 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:24 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1715.000632][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1715.075806][ T6129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1715.128246][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:24 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) 03:56:24 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:24 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000040)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) 03:56:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249f40000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1715.563021][ T6153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:25 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1715.851149][ T6163] __nla_validate_parse: 1 callbacks suppressed [ 1715.851166][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1715.969922][ T6164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:25 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249f50000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:26 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1716.641800][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:26 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) 03:56:26 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:26 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x69, "ece4daa8fc010c83aa2a038bec3309fd16a202cb74d1ff67a4baabd819711972781ad8d0027cb7c2e29c00134da9f15870e09c3491df638bff697d177da640a93c4175a74cb2a9e41eee87f28f6e5589e498c23b64f93d6fa01259b466272c16aea7b0540d48fd6fdb"}, &(0x7f0000000100)=0x71) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000080", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={r1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={r1, @in={{0x2, 0x4e22, @local}}, [0xffffffffffffff6e, 0x0, 0xf0, 0x6, 0x46, 0x100, 0x1, 0x80000000, 0x10001, 0x5, 0x0, 0xd2, 0xfffffffffffffc01, 0x1, 0x1]}, &(0x7f0000000040)=0x100) r2 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000140)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="ecffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={r3}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280)={r4, 0x4ae5}, 0x8) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) [ 1716.826413][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1716.850945][ T6187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1717.280723][ T6195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249f60000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup3(r0, r1, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x1b}]}) dup2(r3, r2) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000040)={0x417b, 0x3031334d, 0x2, @stepwise={0x8, 0xfffffff7, 0xffff, 0x3, 0x4, 0x3}}) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000340)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @random="3ecfac20f306", @broadcast, @device_b, {0x5, 0x3}}, {0x6, 0x1, 0x1, 0x0, 0x38}}, {@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {}, @broadcast, @from_mac=@device_b, @from_mac, {0x4, 0x9}}, {0x3, 0x0, 0x1, 0x1, 0x9}}}, @a_msdu=[{@device_a, @device_b, 0x9c, "f98f872953e916f803088c8b272ea4386f77038e4a8e675675c9afc3d4dac14f61b7fb5dcd9355875db75dae86c93fd8ca81c152529365017d7b23a4ff5564c19860306c99793fe6580910ea24ec28008c05dc2f9183b3a0d5e570a002c4e88adca617e4f6eaee2179fe3b998ed5e36994a25be1e1999485090be09e0897f3fd2f51e711234d8da12b6ffe4306b6c300a4cbed5c9739eebe8f1e8371"}, {@device_a, @device_b, 0xfd, "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"}, {@broadcast, @device_a, 0x53, "fc2bd2c2cc814b1231eb085bf6b019280d5fdb4aba136d8d45f26bc33b49b8fceed335cd4a2a57777242c798b0396ffbe1f7bf89f5e4bf8bf2df9e718911c4f16ed9ddf05dbc5932f43218706c5f211a2d877b"}, {@device_b, @device_a, 0x59, "0d307b193f3a507dbb426a3b193e1ffe4b7f3ec8f5e30820b98b6be0751360ee53fc0d1f5901985f5fdb86d77a9f626a919040e4e88f4b5a6cc4592be92301025ac567bbadeb32c357d2d3c7d159e57867bc706431048f7aae"}, {@device_a, @device_a, 0xd0, "8bf789da2ea6f7d4f261019090fe7bb4c8610f1d942983c7807c1b4df1c9c56e9c21a43f79a3931323a632bfa2df69ce8abf25cb13e7dac46d94044269285abcb41df22c8dc4814e24ddb0ddc0ba7411d44b2c28ca73c2c2067f7a8c828daf8562a166bbb234aff1e6d356300c044ac96b3311a926d4c84f2ccfec14ddcf6cca53533638167ad9ba96e08a560d04444d2b2053bdcff99661722dddb14d0513cbafeddbdca305fda06e982cbb8db3f7178b09e03f831f1232a771ba351c8ed98edb2e9fb659d0b7173ba652d0321b6815"}, {@broadcast, @broadcast, 0x5f, "928f31de738fea9dd8319502aa7cb6fbc972859791f587dc47951a9cb98edc80d3bdc247a90da99be7bb0a2933e88960352b7d5a2e4a19c7b58ca6bc9aa4d34944a2b8efdaa8b3dd9ff5e3e6524bfcb4f47ee3b1e04395591d573eeb4a7ccd"}]}, 0x408) 03:56:27 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:27 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1717.783420][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1717.863372][ T6206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1718.012927][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:27 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1718.359780][ T6222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249f70000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1718.734723][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:28 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/242, 0xf2) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) 03:56:28 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:28 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:28 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1719.003759][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1719.056200][ T6238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1719.499834][ T6258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:29 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249f80000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1719.843787][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:29 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@mgmt_frame=@action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xe6}, @broadcast, @broadcast, @initial, {0x8, 0x2}}, @ver_80211n={0x0, 0x5, 0x0, 0x3, 0x0, 0x2, 0x1}}, @sa_query_req={0x8, 0x0, 0xfa6}}, 0x20) 03:56:29 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1720.105703][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1720.107119][ T6270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1720.158994][ T6273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:29 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249f90000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:30 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:30 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1720.588555][ T6270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1720.636818][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:30 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x60100, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) r3 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000140)={r0, r0}) r4 = openat2(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2c0800, 0xbe996dff9488b5a2, 0x14}, 0x18) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup3(r5, r6, 0x0) ioctl$KVM_SET_CPUID(r7, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x1b, 0xfffffffe}]}) dup2(r8, r7) accept4(r8, &(0x7f0000000180), &(0x7f0000000200)=0x80, 0x100800) close(r4) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x5, 0x54}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) [ 1721.159558][ T6303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249fa0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1721.605609][ T6307] __nla_validate_parse: 1 callbacks suppressed [ 1721.605626][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1721.785521][ T6308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:31 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:31 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1722.030732][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:31 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, &(0x7f0000000340)=@mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7f}, @device_a, @broadcast, @initial, {0x5, 0x8}}, @ver_80211n={0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x1}}, 0x2000, 0xa, @device_b, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x5, [{0xb}, {0x6, 0x1}, {0x24}, {0x48, 0x1}, {0x18, 0x1}]}, @void, [{0xdd, 0x85, "518e205fd0e13595e50474bcd63d531f7ad1f09ce1d00dd1c8026672703d8cb0c9984aaf3c351b017bdbdbfc3f48209fe31f7bdf685d95a3fd587451edd0c2d70398b22451209499bd7671eb221462f60cf212cdb95609dfd5f7d60c57667c2ab7e6ed90c821fc82cf088a13df423a5a7b093d31b093f9a3e44afca3ffe6b4e16788822b64"}, {0xdd, 0xe7, "7393835e8d972f655627019ba3d8e53bf4a832aa592c7e42945a2f3be0e5207e987c70f80b2c117b463edff01890411f17233fbf731623f5a422ba916f7021c19b73a03b752f45405c1c9cacb54982adcfa5eecd321ba031aef2ec2486b5db0f6f33a2b71428c9ddc943629e768c1444a2a328d8025c9cbaddfa17e1964eaa72675891bbf05428e80d96d0a8e250b7536072f063b97fb7029484a587f4ee15353ff1d6d34981f5e600971dcdce0c127405e138399f6fec31517cfe27b6f07176c961403aa468067a7f6d088d7b3c960e7b7850b8a53d2abca75a621ce431f73187cf7064e22c8e"}, {0xdd, 0xd3, "625a67c2c8fbacdd262f42ced1ed57b5e44f1bd9d1cff7cdc9952220a2e2124729adc3e846d83e774b907e509579ea2efe1066a5f705ed3bce82d42257dc94c1ddde8a069bd526f5ae898943001b33621f08719dbdfe86b11317ec451bf330ff77a31352bcb731562b7259ae128ad6494ad7b6989b0d67a64758bbbbaa68f1b1636568e1ff325908d45adaa25a61b14dfe30f7898992326a67ad4196260b81db2593e6ece597f05b4491223df3622fb5ef7871c9f4bf3fa67fca12999d7eb38fc1b9e4b2a0e5a2417cc2bebcd5c905a0b00a3c"}, {0xdd, 0xea, "a006d9e621ec2b455b0b2662d838f7fd3eedabae6c6b5c5709a0ccd86eb1d17b12ef3526f5f85ca58d97f744ecf102bf33ed42e1a26edc589df14e9f8f83c343d688da6677626eb40cd2944cadb07ccf276c1eb765e5f7a67bc56c7acd5781044faf626ea5e047a26cfdfcb8666f85cdfdc44826e9504c0fc28151a50086896bddb1098eccc49d7c247094cf9b6b41a148825413fda126827bb22bdb4adf1d2f4ab4b4b809891369b2d7e4eeaf9cd490b59951a18439fe3fc220ed444a895f97afca01df87eb1da0a0913e16c039a8a1b6712adbc4658ccb2d3c6c950308ad810a9197bac1687d4f7ecc"}, {0xdd, 0xf9, "f377c4642d74b1e6b2cb4b719fb3486fc0c2101945f891ea879a9f0c683e279650b9751cc9dedb43bda7094072ecbcb182ab5f55d0a99b02955469eeda49ae29260432ee0353eea6adfaf129331eec33012742b109c08b629754ddefbbbe1caca2f8c9240fc279d66394bf300bfa4b3c1f27453067a6c31f6c6077138352e7b66365fc7d9f6708abcf9ceefdce19e0e95da00c9c6d292b527755f3ae25dbb967c881364904e04c5c9db1f53209c0b0a96d3a386f12187633a08438caa55fefc391b85ca7954533099f02fe97b0e74b94a7a1c1cc841c25c3db159200a0ff774be55e868d5d548a2388075103bf9ab0b37e382e52ca881620e0"}, {0xdd, 0x8, "a4e080e7bfbfdfd8"}, {0xdd, 0x8d, "68d3f25499c9a3183d5d00df6bac862f6d901abcfdd5041c296ef21b18eda0d23445e94ced0b9836b020e3ece08477207169c829e46605d2a997199cbb9a61cbd9f6f7831fdd53ba781de544d86dce6688432bad81ebed039ed3e7ca842ecc7e4837615a7ea0c5fb917f1b98cffdf6e36601a9f0ca576dd283341c6533dc15132f7cc36918df5cc19988df78eb"}, {0xdd, 0x3d, "0008752985f41305d2ec1dd4fadf4ecb992fcff3e4fcc56b3d2b0b58be236a58afca52bdc8c7556e60263c61a48ec97e5c2b46fffe361f2d464596070c"}, {0xdd, 0xf5, "1350426efb93684ebb19749e8615ab057610ebd8145245fffdd4513c3797eb204ec1042cc1988f351bf42080b1a6de86b74663d46ff5802a5f05ef09938dee0c7a7c3ca42b7eb853b512eeb678bc4e0a696bd0dddcea194fa68906a1e519cd27be52e58add2b21596f59c19a5e0a5f3b85fd34f56550fb09da5619242d5254223456467650818214adf0e14a714c1fb418538f9d4c35335cc460e3000f7cbfb706e3d66ec3bcc75c4b4bf53762aed939a00e0aea63b6141f552e947236dc7718a983e5b144618e86e79dbacd7c3fa16c0bfaf99f5da4e14607f92fcfdeba6bb063ee0dbfafa318720e35f42f67809d40bc438983c8"}]}, 0x630) syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000980)=@mgmt_frame=@assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1f}, @broadcast, @broadcast, @random="0cadc77e0a9a", {0x1, 0x1}}, 0x0, 0x41, @random, @void, @val={0x2d, 0x1a, {0x300, 0x0, 0x7, 0x0, {0x1, 0xb20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x97, 0x9}}, [{0xdd, 0x25, "bcf627abdf40f49ac072aecf4cf7f77b8c45330f8c7251525ccab77bfceeaf4ff3fcf02fc3"}, {0xdd, 0x78, "777d2f37d5bbd9ce4ba36937ef506989bdb66fcb500c98a7500ea007058e971b06a4cce1933b4aa529af36a77a8a4aa87f1aeec4b3fdab39b4e8c4498b5f749ea9f129cec42d5d640441653454da369596c7aaee9f49df5e8065ad26bb3ae011b75f71252dc66cd112b730d9c334511a463ec9311ff05a7b"}, {0xdd, 0xef, "bfe795c45b49d8d2d7c9bdaa70931210bd7ffe8af1a95fdfb7d11e5d477a3e6e3b7d6499fc2b89521f6da1a2c4d348eeec7667be6185656ef55ad0e69b5921d1571223c3db5e388640472ceb5af3b3b4f16581d9adf7caf82839bb436dd8c57fb229f51a7130e7b8a3c97e4a3dbe3833ccd65ef9474fd2616548094502e4f71511ec768ba1f8e5d1586116bcd70d45e17a0def9bb662d13fc995e01a155449d85f9d3f4c726313cf94f8a260bbdca75417578710acc9f6851653df5afebd7d3ed3f4afbda66ce0feefd32fbc624097bf330d4827d1eaf5e6603072069704124c50970bee55ebc55b1c247bc1f70704"}, {0xdd, 0xf7, "1dc966f9551a3ea16c68d9dc0cb0cf3668159821406e980fda5b0bdec83b0d6e8bae366a7fcc023e4a5bea2cd79c938641111c7e31cb4c801c6f463136e1c8bfce83708ed8ca66c6e1b4518082862e2a8bdb100de18b80020910e41925246b56022f70a3dd4321805f103318f36aec26e7c912504df788bb03d955941445ad2cf8da5e2d49485041a33e42e93cb30721e9284541a6a61ca0ddec56e963f6e690c8d8efd6fcf566589bbaad86d3e8cac485cb708e0a59532e7c019a313203d8fae3112f3bfd49c1ef28e61db1035234574b21d01f78c6d20d4b5be644f18ccb4646011a71235bfbde837fb05e31c783ac6a3a9e4e192cbc"}]}, 0x2c5) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@mgmt_frame=@reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @initial, {0x1, 0x7}}, 0x3484, 0x4, @device_a, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0xf6, "866b73791bd678f56107deaa708a9202fcf699046477404e72c6f65928dabe78f7afb6dba20fcec7c0c84407d4dbb0ee21a3f1b1546c7ea58d4bab7abe8321676e3743b7476a8043b0f6fb151d69fee76a0641330ea98cf5e2473ddeb6d724c5311652618d899b634571ad5b1953e2b6ad29aa21a7fe8514d06a791db68d95090f0e870f62b847d00ebe49e928fe12a3d5c5112c73e26bad759eda57a21d78d3b7c291b906926f376f6bdb244e2627606a73edec13a60b6d5dc3e80c1aa551f7af91ba61dbb3f39445f41d6b058622478830def3bce355035da1b9c62c9e01882541f051902b3b2849a17e52bd6235b68a3bde6a756f"}, {0xdd, 0x22, "a0a59ddc3efcd80aaeb46c22a1ec27ecebf9f160ccc997a7e5f721194542888380d6"}, {0xdd, 0x9f, "ebeffca879af7509d496580c45286e29d36dd610b75a50cd85821fcfdd5804665d5ea330a411b199dfacd78713e02564e7c5537a35b7a8696fda57eb7579e2bad946b91a155ab04d6f091678a028a7fa788ed5d427897ce77b6dd7faa6ff2a0e1ea42eee8eb2fd39da12e9283ed553e97f987f20bc2e31e0a02a9883a00c7203b80d20c2fe4985d8d60ecb011f20b247265029c82a5d512c82af4e26b6b4a8"}]}, 0x1e7) 03:56:31 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:32 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1722.358233][ T6325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1722.387994][ T6326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249fb0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1722.428013][ T6328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1722.479931][ T6329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1722.652024][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:32 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1722.837589][ T6325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1722.889161][ T6328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:32 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249fc0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1723.480741][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:33 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:33 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x0, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1723.718598][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039fffffffc0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:33 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1724.472021][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:34 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1724.745231][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:34 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x0, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249fd0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:35 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:35 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1725.537933][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:35 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x0, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1725.755412][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249fe0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:35 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1726.499398][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:36 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1726.822163][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:36 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x0, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:36 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100009050200390000fffe0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:36 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 1727.225379][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:36 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1727.390254][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:37 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090502003900000fff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:37 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:37 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x0, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1728.125792][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1728.364468][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000249ff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:38 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:38 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 1729.182837][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:39 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1729.475018][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:39 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x0, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1729.813612][ T1365] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.836482][ T1365] ieee802154 phy1 wpan1: encryption failed: -22 03:56:39 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:56:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090502003900007fff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:39 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:39 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) [ 1730.365942][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1730.552062][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:40 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', 0x0}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100009050200390003ffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1731.154722][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090502003988a8ffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:41 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:41 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) 03:56:41 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1732.086850][ T6530] __nla_validate_parse: 1 callbacks suppressed [ 1732.086869][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:41 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', 0x0}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1732.414416][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:42 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090502003900e0ffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1733.104973][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1733.426135][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:43 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', 0x0}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:43 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:43 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:43 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:56:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090502003900f0ffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1733.989604][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1734.369782][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090502003900fcffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1734.980634][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:44 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:56:44 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:44 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1735.130906][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:45 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', 0x0}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100009050200397fffffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1735.846006][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1736.188034][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:45 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:46 executing program 1: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:56:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100009050200399effffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:46 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:46 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:56:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039c3ffffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1737.745452][ T6646] __nla_validate_parse: 2 callbacks suppressed [ 1737.745470][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:47 executing program 1: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:56:47 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:56:47 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1738.057401][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:47 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039e4ffffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:48 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1738.826810][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1739.060830][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:48 executing program 1: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:56:48 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) 03:56:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039f0ffffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1739.618763][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:49 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:49 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1739.972513][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039fcffffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:50 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) [ 1740.884114][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1741.129721][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:50 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:50 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:50 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039ffffffff8980000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1741.846732][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1742.106237][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:52 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) 03:56:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:52 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 1742.791585][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:52 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:52 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) 03:56:52 executing program 3: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 1743.007644][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:53 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 1743.698244][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:53 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) [ 1743.913259][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:53 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:53 executing program 3: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:56:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1744.653018][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:54 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 1744.894279][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:54 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000080000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1745.629808][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1745.780100][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:55 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0x10, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:55 executing program 3: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:56:55 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) 03:56:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000400000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:55 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0x0, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1746.479272][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1746.763886][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100009050200390000000000024a0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:56:56 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0x10, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:57 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) 03:56:57 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0x0, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:57 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090502003900000000ffffe00000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1748.387520][ T6852] __nla_validate_parse: 2 callbacks suppressed [ 1748.387538][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1748.777541][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:58 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0x0, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:58 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0x10, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:56:58 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) 03:56:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039fffffffffffff00000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1749.601756][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1749.925233][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:56:59 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:00 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039fffffffffffffc0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:57:00 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:57:00 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1750.591261][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1750.806585][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000000100", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:57:01 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:57:01 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1751.541092][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1751.674492][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:01 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:01 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100009050200390000000000024a0100", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1752.512630][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1752.888931][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:02 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4800) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:02 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0x10, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:02 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:57:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1753.702886][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:03 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1754.037815][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:03 executing program 2: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:57:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:57:04 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0x10, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:04 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 1754.747791][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1755.050887][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000000400", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:57:05 executing program 2: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:57:05 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1755.923446][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:05 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 1756.148402][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:05 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0x10, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000000500", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1756.723995][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:06 executing program 2: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 1756.980766][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:06 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:57:06 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000000600", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:57:07 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1757.641510][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:07 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1757.877318][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:07 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:57:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000000700", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:57:08 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1758.869506][ T7039] __nla_validate_parse: 1 callbacks suppressed [ 1758.869524][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:08 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:08 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000000800", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1759.485427][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1759.845001][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:09 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:57:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000000900", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:57:10 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:10 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1760.645499][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1760.885233][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:10 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000000a00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:57:11 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:57:11 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1761.624826][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:11 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1761.804416][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000000c00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1762.608431][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1762.879423][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:12 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:12 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:12 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000000e00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:57:12 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 1763.482428][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:13 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000000f00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1764.501132][ T7140] __nla_validate_parse: 1 callbacks suppressed [ 1764.501151][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:14 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1764.773385][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:14 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:14 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:57:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000001000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:57:15 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1765.626562][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:15 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1765.943756][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:15 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x4000, 0x142) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r0, &(0x7f0000000100)='./file0\x00', 0x20040, 0x4) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="fa394678e107fe17597cd853445d6c923066cba5a18dbf949ce8c6d105e9f9bfb0ae5bd97b2ba2230e02c5f03c154e3a5e23c93898b8d136f2ef651f6beeaf1892f4a253b792801f7f31e53295769b9fd35ce183c60f0296f070a4ae639cc5dbc8b0d56e549bdecc10b782da6b11cddce565f39a0cd6ed1f776e6df32602006fe4ca8d8e2669b9278dca2d3a207f257ad3cadf9143b64cb9fb0510999ee736c177457641404740f175980f4dc41271a1cf756a0e", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fedbdf250100fc0200000000000000000000000000000400050018e8db7bc4999c56672b5a22902fb54ece33193a0448e98061874f9a06ca1d1a9ded0c80f2ac0357dc4e470d69be714c6604a9dae56e66f7752d159be13da5656444400a4045debe0fe3d609da1327529be76c677eb191e96e252350224dc76722afcca16e7775fd173e30677dd07356e26df1a61f620044277d2f4828415f3b7ce82b755bf2986520fcca5f70adb4cb3b40663070d9e9f4ba90f407d4eb30fc09c52096766a59c9d571d5c6b65a5d0700"], 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x2010, r0, 0x1bd33000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d100)={0xfffffffffffffff9, [{0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "3c1d4c65c79995"}) r3 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x2000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f000005d100)={{0x0, 0x9, 0x0, 0x101, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x3f}}) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r6, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005a900)={0x0, [{}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, r2}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r7, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r8}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r8}], 0xfd, "d4c90300"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f000005f100)={0x4, [{0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, r60}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {r5, r8}], 0x0, "b67d5166ab9c79"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d100)={0xfffffffffffffff9, [{}, {0x0, r182}, {}, {0x0, r265}, {0x0, r139}, {r41}, {r51}, {0x0, r240}, {r94, r102}, {r133, r163}, {r264}, {0x0, r56}, {}, {r69, r140}, {r105}, {r183, r146}, {r118}, {r48, r8}, {0x0, r104}, {0x0, r80}, {}, {r239, r205}, {r177}, {r144}, {r214}, {0x0, r252}, {r10, r229}, {r218, r232}, {0x0, r22}, {0x0, r132}, {r103, r221}, {r89, r157}, {0x0, r19}, {r137, r110}, {0x0, r210}, {0x0, r124}, {}, {r266, r169}, {0x0, r25}, {r76}, {r42, r226}, {r158, r190}, {0x0, r259}, {}, {0x0, r16}, {0x0, r53}, {r201, r66}, {r70, r82}, {r195}, {0x0, r270}, {r95, r255}, {r84, r155}, {0x0, r170}, {}, {r215}, {0x0, r252}, {r251, r267}, {0x0, r228}, {r125, r129}, {0x0, r131}, {0x0, r114}, {r100}, {r112, r11}, {}, {}, {0x0, r107}, {r153, r50}, {}, {r34}, {r193}, {0x0, r145}, {r27}, {0x0, r233}, {}, {r149, r223}, {r261}, {r101, r83}, {}, {r115, r242}, {r234, r57}, {0x0, r122}, {0x0, r155}, {0x0, r97}, {}, {}, {}, {}, {r46}, {r156, r62}, {r184, r257}, {0x0, r64}, {r166, r185}, {r199, r30}, {r38}, {0x0, r254}, {}, {r183}, {r88}, {0x0, r179}, {r178, r244}, {r74, r134}, {r186, r159}, {0x0, r152}, {r130, r33}, {0x0, r35}, {r200, r87}, {0x0, r192}, {r271, r110}, {r202, r143}, {r23}, {}, {r246}, {r227, r50}, {r59}, {0x0, r83}, {r116, r148}, {r123}, {0x0, r167}, {r156, r106}, {r36, r219}, {r135, r86}, {r236, r146}, {0x0, r237}, {0x0, r171}, {r14, r206}, {r208}, {r172}, {0x0, r62}, {}, {}, {r230, r127}, {}, {r235, r28}, {r78, r120}, {r32}, {r55}, {r187}, {r142}, {r75, r1}, {0x0, r90}, {r29}, {0x0, r39}, {r41, r151}, {r156, r65}, {r220, r134}, {r196, r181}, {r262}, {r26, r189}, {r109, r260}, {r18, r45}, {0x0, r119}, {r183}, {0x0, r248}, {0x0, r152}, {r245, r108}, {r224}, {}, {0x0, r77}, {r81, r207}, {0x0, r37}, {r121}, {0x0, r67}, {r63, r213}, {0x0, r173}, {0x0, r49}, {0x0, r163}, {r162, r92}, {r34, r247}, {r201, r13}, {r111}, {0x0, r22}, {}, {r174}, {r71, r113}, {r180, r150}, {r44, r136}, {0x0, r68}, {0x0, r188}, {0x0, r209}, {r204}, {0x0, r147}, {r161, r148}, {}, {r117, r194}, {0x0, r154}, {r186}, {r243}, {r217, r198}, {0x0, r92}, {r231, r253}, {r168, r192}, {r225}, {0x0, r52}, {r58}, {r15, r67}, {r249}, {r249, r268}, {}, {}, {0x0, r98}, {0x0, r254}, {r160}, {}, {r256}, {r175}, {r203, r21}, {r10}, {r211}, {}, {r24}, {r47}, {r91}, {r54}, {0x0, r164}, {r128, r223}, {r258}, {r12}, {r153}, {r31}, {r96, r61}, {r220}, {}, {r222, r238}, {}, {r9}, {0x0, r126}, {r197}, {0x0, r72}, {r14, r212}, {0x0, r49}, {}, {}, {0x0, r181}, {0x0, r263}, {r7, r252}, {r93}, {r40, r73}, {0x0, r269}, {r165, r216}, {0x0, r241}, {0x0, r17}, {r20}, {0x0, r85}, {0x0, r157}, {r89, r79}, {0x0, r49}, {0x0, r250}, {r99}, {0x0, r176}, {r191, r77}, {}, {}, {}, {r141, r138}, {0x0, r43}], 0x8, "3c1d4c65c79995"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001740)={{r7, 0x0, 0x6965, 0x3ff, 0x1, 0x2, 0x1, 0x9, 0x80000001, 0x711, 0xa3, 0x6, 0x0, 0x100000001, 0x7f}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059b40)={0x723, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0xc3, "5374be0ed9db7e"}) 03:57:15 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000001200", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1766.381747][ T7173] hub 9-0:1.0: USB hub found [ 1766.469362][ T7173] hub 9-0:1.0: 8 ports detected 03:57:16 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 1766.691422][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1767.020752][ T7173] hub 9-0:1.0: USB hub found [ 1767.078511][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1767.082255][ T7173] hub 9-0:1.0: 8 ports detected 03:57:16 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:16 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:17 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="10000000", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0003000000"], 0xf8}, 0x1, 0x0, 0x0, 0x20004082}, 0x4004080) r1 = fork() ptrace(0x10, r1) r2 = getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x8, 0x8, 0x240, 0x1, 0x9, r2}) ptrace(0x4208, r2) syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000080)=@mgmt_frame=@probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7}, @device_b, @device_b, @random="ca45c5610b8b", {0x9, 0x5e}}, @ver_80211n={0x0, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @void, @val={0x1, 0x1, [{0x36, 0x1}]}, @val={0x3, 0x1, 0xae}, @val={0x2d, 0x1a, {0x400, 0x3, 0x6, 0x0, {0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x800, 0x9, 0x81}}, @val={0x72, 0x6}, [{0xdd, 0xfd, "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"}, {0xdd, 0xd6, "f6c4785cfa7162dbd36d7207f9ed8ff24904db1e8a53b509190958b2b1951f266060efee06e193080c62039b218247286658f1f2366454175b6e1ae90347e970081e7cdcd2a48d02a32b45771a7053f9fd0577614c5ccec8f6ba651b748bbb536274d3096728d9aaab0f1593b0546dd91f212011f351a1ab3bb29022c0aa16b358bbce1ca035405094bc7e09f86c013a552237875848058240e695f137ba17041d0f307117e7aa5cba50a1443dbf8ac79a0b0349431949a009344161436cf44ac569a4e3e3e297ef872cbe2999add9ad856fe8d39e29"}]}, 0x21d) syz_80211_inject_frame(&(0x7f00000004c0)=@broadcast, &(0x7f0000000500)=@ctrl_frame=@rts={{}, {0x3f}, @device_b, @broadcast}, 0x10) 03:57:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000001600", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1767.766064][ T7207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:17 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1767.816854][ T7209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1767.851625][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:17 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) [ 1768.130160][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000001f00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:57:18 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:57:18 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) 03:57:18 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:20 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:20 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) 03:57:20 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:20 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 1775.545732][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1780.165460][ T7283] chnl_net:caif_netlink_parms(): no params data found [ 1780.632055][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1780.640390][ T7283] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.650624][ T7283] device bridge_slave_0 entered promiscuous mode [ 1781.065180][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1781.073484][ T7283] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.083190][ T7283] device bridge_slave_1 entered promiscuous mode [ 1781.086200][T27051] Bluetooth: hci4: command 0x0409 tx timeout [ 1781.555613][ T7283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1781.568925][ T7283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1781.639109][ T8] device hsr_slave_0 left promiscuous mode [ 1781.645477][ T8] device hsr_slave_1 left promiscuous mode [ 1781.656727][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1781.664189][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1781.673852][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1781.681950][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1781.692229][ T8] device bridge_slave_1 left promiscuous mode [ 1781.699093][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.708290][ T8] device bridge_slave_0 left promiscuous mode [ 1781.714491][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.731343][ T8] device veth1_macvtap left promiscuous mode [ 1781.737826][ T8] device veth0_macvtap left promiscuous mode [ 1781.743875][ T8] device veth1_vlan left promiscuous mode [ 1781.750066][ T8] device veth0_vlan left promiscuous mode [ 1783.176002][ T4400] Bluetooth: hci4: command 0x041b tx timeout [ 1785.248150][ T8299] Bluetooth: hci4: command 0x040f tx timeout [ 1787.335710][ T8299] Bluetooth: hci4: command 0x0419 tx timeout [ 1791.246843][ T1365] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.253168][ T1365] ieee802154 phy1 wpan1: encryption failed: -22 [ 1801.220619][ T8] team0 (unregistering): Port device team_slave_1 removed [ 1801.234309][ T8] team0 (unregistering): Port device team_slave_0 removed [ 1801.250229][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1801.269234][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1801.345277][ T8] bond0 (unregistering): Released all slaves [ 1801.408761][ T7283] team0: Port device team_slave_0 added [ 1801.421886][ T7283] team0: Port device team_slave_1 added [ 1801.464411][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.474643][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.505281][ T7283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1801.522638][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1801.530507][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.557399][ T7283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1801.625919][ T7283] device hsr_slave_0 entered promiscuous mode [ 1801.633153][ T7283] device hsr_slave_1 entered promiscuous mode [ 1801.641228][ T7283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1801.650230][ T7283] Cannot create hsr debugfs directory [ 1801.900820][ T7283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1801.920083][T23375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1801.938838][T23375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1801.958487][ T7283] 8021q: adding VLAN 0 to HW filter on device team0 [ 1801.983418][T23375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1802.001926][T23375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1802.011676][T23375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1802.018898][T23375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1802.028306][T23375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1802.047275][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1802.057061][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1802.067096][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 1802.074158][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1802.083513][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1802.112943][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1802.126610][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1802.137080][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1802.164336][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1802.174083][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1802.194072][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1802.206485][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1802.231770][ T7283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1802.255609][ T7283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1802.265077][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1802.292060][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1802.300783][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1802.326908][ T7283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1802.359042][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1802.388813][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1802.399010][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1802.408694][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1802.420381][ T7283] device veth0_vlan entered promiscuous mode [ 1802.440640][ T7283] device veth1_vlan entered promiscuous mode [ 1802.492035][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1802.501558][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1802.516434][ T7283] device veth0_macvtap entered promiscuous mode [ 1802.530255][ T7283] device veth1_macvtap entered promiscuous mode [ 1802.552819][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1802.564322][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.588055][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1802.599727][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.611839][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1802.623671][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.634937][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1802.646550][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.657412][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1802.668917][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.693667][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1802.710001][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1802.722307][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.741786][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1802.754055][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.774711][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1802.794557][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.804379][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1802.828099][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.842947][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1802.854452][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.866020][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1802.877238][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1802.886637][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1802.894917][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1802.903613][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1802.913233][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1802.923663][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1803.061109][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1803.080512][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1803.132047][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1803.166506][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1803.200719][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1803.229982][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1803.415254][ T7628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1803.437304][ T7628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1803.458312][ T7628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1803.799902][ T7628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1803.812450][ T7632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:53 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@increfs={0x40046304, 0x2}, @register_looper], 0xb6, 0x0, &(0x7f0000000040)="a72b46d9a82e705df6059b5b4062a9f64818a3e8840faee2dd0816802c7eb0e64e4a68addf2423ca91a7caec21d67f294ea428ab16858b1c9d6dbc730baad04ec9aac6b10816d2b749b175f828c4a305b79bc59603f69bfb220d162b6aeedf26f85fbf3c20b12185b6c61b2e2f41ebec2aa9e6437255e692af97c09470d7e3a7b836cdbe397f969f40cfbb175b5160430eb5249e359589ec848b3b2a44278bfb5a1ff72971cce483d6ba4a7478beeae2637ec8a2ddf2"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getrule={0x1c, 0x22, 0x200, 0x70bd25, 0x25dfdbfb, {0xa, 0x10, 0x80, 0x7, 0x5, 0x0, 0x0, 0x1, 0x8}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000) 03:57:53 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:53 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:53 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:57:53 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000002000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1803.974529][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:53 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@rts={{}, {0x80}, @broadcast}, 0x10) [ 1804.307468][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1804.603487][ T7656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1804.620951][ T7658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000003f00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1805.098872][ T7656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:54 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1805.211842][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:54 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:54 executing program 4: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0xfffffffffffffd3d) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000080)=@mgmt_frame=@beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2fcc}, @broadcast, @broadcast, @random="f81cea0ed275", {0x7, 0x3f}}, @ver_80211n={0x0, 0x1f, 0x3, 0x0, 0x0, 0x1}}, 0x2, @default, 0x30, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x1b}, {0x24, 0x1}, {0x5}, {0x48}, {0x18}, {0x60}]}, @val={0x3, 0x1, 0xb}, @void, @val={0x6, 0x2, 0xf6}, @val={0x5, 0xca, {0x20, 0x15, 0x5, "0c742ff387b88c562a0b4b129a2bad2fdd454d76be24a466dca81588fdfe2684fe4d97d485c57fad4374b258eed4b3337cd4ba751e2a4379066007a26b1bee0235d71d6e8f7d1ec14b1d5786ca03002fc2295efc7a1f35ab5b3ed28f7e777b4565f84ff7fb606cebe53ec08efcc447c0f563ae582e95c6e5ec27ad75cd341718d483f759a54c2cdf00db3446263b7eaae6e17cec31728a4c9eda8180fe70ac887da6d99e7d9b1c284222f566a857c8971b8727e14f000ffd598308965ec380ec2f0274728c9b63"}}, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb7, 0x40}}, @val={0x76, 0x6, {0x0, 0x8, 0x20, 0xfffd}}, [{0xdd, 0x3d, "a9b1823559874db5447c189a65b097f75fb51e4d491cbeda2be9b837480812ec3595d7782b250ab4f4cd47996efbeffd0f9359047a34e40d650b010bb5"}, {0xdd, 0x77, "6e0388fb88190a5e57cc89e795e95dc7752227533765fcdf017edb213989904606d2b57e73cb3d09d4dcaeef2eb21522f9347abf1ac54d9ca07d73a9b2db28c6b350d6a8639f94391251f56b0940a114c0e899203a78782b01ff017303afe6fbcdb6f077edf6a3162d4675bb77af3b058a529f715397b7"}, {0xdd, 0xae, "6fb0d674f107beaff099499c5d49caa27fc7839296365cbfbad5e9156d798e0cb21276d5cfc50b9dd5913913c8c502a047a14cd0d998f8601c7fb2a003ccaf8f6e542bdd348d49212a80dbca85a64e30dcf7bda8706b1437f7299fd4f6d47e45494f560c05d96b40dafb9dbf49b330026a891202c41e6065885e31b87c34bf3fe0e2c51c2acc425c0a18281e9bc0b67a94ff0adcfd0dad05d80ec108c64ed30a2477bb491cda9c3097457e7bde03"}]}, 0x28f) [ 1805.416757][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1805.533487][ T7670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:55 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:57:55 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000004000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 03:57:55 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000001140)=ANY=[@ANYBLOB="94001f00080211001b0108021100000001301100d08b7977d2dff130500197786f41c7b6005d6952af74cfa71ac8ba7fc41096c41ad5a4f1628c9cf6f55922e7073fd0e3dee355c004e16d2083fd6fad984e6e3565c4a06bbf08271f4b29b1be84a00ad5f913c7fc96a310d5f7c1ffc78010612c9cd16b193a35118d74d3da0219367ec42891c263e7181904ac736785fd15bac9485ba4e3531e414ca9f363dba6094034151fdb76304c89917d6b4e1cf6e5464caf1ee8ce974d9912552da1026f4714c551f60c5285a610d6cf0b5c59d0c2977a5670cea03c4deb4642d4ca00062f83e9fb88fc69176aa81bc6d56757ea5e641fd0493a6abcf2a01fedb693c50bf795e4134129c05fd3cd3f8676b6280bca7b95ecb69e72628f0a1b0617dceb24d8933f3dda13eda1397dd0b2e25087408aab5fd1624c993b45d3be64dbf8b0ec4c57cd688d7ceb7b5a5de623930ca3eff31958e4"], 0x94) syz_80211_inject_frame(&(0x7f0000000340)=@broadcast, &(0x7f0000000380)=@ctrl_frame=@bar={{}, {0x2}, @device_a, @broadcast, @compressed={{0x0, 0x0, 0x1, 0x0, 0x5}, {0x6}}}, 0x14) syz_80211_inject_frame(&(0x7f0000000d00), &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x128) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x1}, @random="ceaa570ef2bf", @broadcast, @device_b, {0x7, 0x20}}, {0xc, 0x0, 0x1, 0x0, 0x1c}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xb}, @from_mac=@broadcast, @device_a, @random="7ec36b2f8d8e", {0x2, 0x1}}, {0x9, 0x1, 0x0, 0x1, 0x20}}}, @a_msdu=[{@device_a, @device_a, 0x52, "bb4f0c17525661c65996317b84d334ae93484949b0bf8441b20ec99ed6f1612b1167c160ea9a57a4db834e2415c6fe09a7c0bbf28eb6b8f7fe57d0b3feb18ff6acc0c97a5e2ca28a89157c0e1522d297ef8e"}, {@device_a, @device_b, 0x17, "76975f56277bab4fe9af194f4c168ef4236f92e43f7fbf"}, {@device_a, @device_b, 0xea, "d77d182f63973220ff012fdf57bc95292cdc0d6839e39fe013d276069e601333fb4258c75e15d178d46f2bdf817a495223bec172deb659d9068ce33b51153bfb962d2cacbc6ab61ba1acf0860c5781526b136e7527e354cd25e73a06c037508aed9faf6f4d75be84c9c583135048dc899f693d3b936a55c0d9b16202ed6b7875bef768b4a750e541f40cb61f6804760ed6e5fd7ef2ce7a3f15ed8a49d4e41946eb31e463aa8856a4a808da56f7e126cec169d608b307564b82994315a9d0525b626958d959db1f5adbe1b277c43bceb1c289767153c64ebb182c75a4613e2ceda119eb61656b736e67f9"}]}, 0x1b4) syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000400)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xff}, @from_mac=@device_b, @device_b, @broadcast, {0xc, 0x20}}, @random="c9555d566bdc9ac0ea7fa8085a162065e5c42adffd11fc6bcd9ceacf96bd2eee92f5a1c8ff73f86e2631487e4a16a417a96dc55eeba859748e3ce5455c6ee1b89ab58e2818224f090633806706de8f3376a491fd4ef7684fb2d8415fb17d891663462de979e011791c544d0dbb4096a696e927e8235703a69649afbd3bd6f645b3f97bf9b96c42c22bc4099fe27da504c8968801bc3c25e60c18f39663f1b94896687890c563982cb770b194b00ccd7b5fa9542ad3273398a772502f70cf1dd810398eec185ee2b10cf977e017bab7ac85a5080f95a1c1545dd425c325616b7e7730874b48e5e74e7c1a6a6960f63a375aaeed6767e957857fc255f0b45db9220f13df61d443251734356af5ee83948ed8fd51a0ae333baf92625317343a989baf38e7e8a06fefb3c4a7a276b2d10e43298d8bcef4ab30622442d2f46fd023fc99fcd8d9cc60d03dc85c61cd80622f190825a22ed88870c5c88afd45ea192fd80fff44fb3a8a8bd3a472b2f3c2b46af58fd90425512e88625e5e4959c3daa99a1ca4c00de6a14ad220d55f9d4885abda5ff9e5addd1d17ca18d06d127a3874862a9658f2d8c4f02d3d579b8cd9799b8a9bf2cae1e89ebc744c114b934628d10849106bdda0457bf9e7628a7da415305c05fddaa8d77ac34e247b6070b1e7d4baed3d189474f76c27392999408a0dccc28f469500491cf87c7cc1a66270dc4c3ccac88f86e44799cb7ede7f255cfd7746f032b2e017e4c59579983e0f89c9714a09f1dec04a8cf8b07e2e0d0933c901b0d2ae6a3edbcb7b7739ef88d9536792d25913db46c2e2f9d2b913c75057d54b0daf1ec3b3c601f62594ebd4dec3ad27f96f667b0d0a72495b447093585c0b7f159c39de410c37f5586f8e4148b0f0a2fdea30a20499499cae94a7dc937068f25207e203abb54016d90f061abb0c293d458fed22fdd02d271dfe983773f00a6cea2abc94a6e94013a2067eb64c0a6390ffd0c8dc44c1fa17d9c9991e06d4ddcf67f271f98e35a4eb11439620c6539a5ae35581f794141a3cef132e1b43ed57eb9d51763ed4d19ade78402cc0fd324455632b07d75b64e249afec2e55576f3e58ace51ff262ad17e0403ecf0ef0f57ad6877f7e1ecb3efa95d28ef07855c94075f7f0110073610ce05584a4f1336a9e4879e05afab223c219f791a358e8d08d9eec80467a422f196879950e047cad11f75b208f7f98f6eb192a5bfee0c362583c00f7c00629404622dcbe9888c792f4a62e4d84227fb0fbeab9001104f419be34cc8a76fe97afc9acc1f1669c4c6493648c4ee0bcd00c857dde3570d49a1d3c43456a321cfa8540f3efa8fbde228d20e37bea6fb7cf317413b715b871780174581fd9d4ee2e72495d763812f2e2e17d77eb0cb27ee03080760ce6a234684bfe75b9dd3b2ed5b12ce555bf8040967c62dd1534a9681698c1c71bcfdbb99a76cecef056f6e9c0fa215695c138c19c7f4046a2bd51fc93a82810c7a3c94cb20525d6db845a26f6450149ba4def612a3d9efb633508a6756acd331a7f1de57c403761d7c0755a43cf1c3f96b93806c9c51dca68b50fcd5e8ac9e5e6581534607a2457e78dd26f977cbc8192c2990d6a8cd4a345f1d58050b639f6a10bcba1bc9194a579ddb8c2fd4a2c7323a888eb575bac908de066bcc079a99c66d5b8b7f321b0a013ab129382d102ab11c90a4f97484536b2abe640266dcf9c37603b533a2d0d357fb5c8b0c30626cd834557002269a372434f7bd887780ff8f11d15a6624ad4d07ece0f5e342046598513015e4192894405a7ff38fe02d949e3eef6f431a0e84d08d2c8505257ab64ce9a8628c3fd06ce9eb9333aabbb11fb1f2fe03e95794ea83913b7df3237943a535ec38fa04d5f092c5c7cee3b1182f05ce968324e81283c4cd974dd770f494674473f1a18c1969b8cde97d0bf2618cc2bc50f8f75071dc9af88a8727a756a0a24b666052ada50abd666ac9eae92128e0f833aefd7aa02cb9357f249e25d978f7a46fdfe0c5bd90d85d3d76be6c0642405c70171bbe5f99910d45aa9ecdae2223174d9356404190bc1a32aab8a6eea2c060faaceb1f084452d72b210806d8fab5acfe903e52fd33c8304d74761bff0e0ce944a4c1ae09d70fcb94e12885024d1e958ba610bf6ae601f5e8adf6bb99d258ff6e79b7c7dd5cfaf37c3fabe3ff5c9f1dfcc19815284643777899781c66b637a860cff29385626a773a861adf51888333221c32013f13ab4ec929710b2aea020f6922cda9fc3"}, 0x666) syz_80211_inject_frame(&(0x7f0000000a80)=@broadcast, &(0x7f0000000ac0)=@mgmt_frame=@beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x9}, @broadcast, @broadcast, @from_mac, {0x5, 0x3}}, @ver_80211n={0x0, 0x4, 0x3, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x8, @random=0x44, 0x2100, @void, @void, @void, @void, @val={0x6, 0x2, 0x7}, @val={0x5, 0x93, {0x8e, 0x63, 0xa8, "4c193cc7d5928d321489577fa2a8c6712b5062750f8c32ec8aa6a20fad82bb96c20c32f20cb16d65afef9a467fe4c1b4887a9577ea678ddb2d2a2d3206468f88031a00284c9ea794eea9d1872e69cdaa9976224c2fd9bded09a648d9840ef4e36f08c44ac6b8570c34b42154d4bf64e3c8c1e69f89547ab1dac5a7d05b9f97fd6710384693e2219da5fe9c77c4d797b5"}}, @val={0x25, 0x3, {0x1, 0x7c, 0x2}}, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x3f, 0x4, 0x4}}, @val={0x2d, 0x1a, {0x40, 0x1, 0x6, 0x0, {0x6, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x1000, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x48}}, @val={0x76, 0x6, {0x7f, 0x1, 0x33, 0x5674}}, [{0xdd, 0x37, "18361acb0b08f2478a0c8f886383f41da20f063da753c434d480fe8ed76160a9e47bbd5503ce92a4b57f567d9b2a9bbdd152943392ff85"}, {0xdd, 0xfc, "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"}]}, 0x23b) syz_80211_inject_frame(&(0x7f0000000e80), &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x274) [ 1806.250292][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1806.422052][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1806.428015][ T7692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1806.467157][ T7693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1806.567700][ T7695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1806.580077][ T7696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1806.633745][ T7699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1806.649657][ T7692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1806.700004][ T7693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1806.764156][ T7700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1806.764821][ T4399] ------------[ cut here ]------------ 03:57:56 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 03:57:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000024500", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1806.956054][ T4399] WARNING: CPU: 1 PID: 4399 at net/mac80211/sta_info.c:545 sta_info_insert_rcu+0x283/0x2ce0 [ 1807.090600][ T4399] Modules linked in: 03:57:56 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1807.147872][ T4399] CPU: 1 PID: 4399 Comm: kworker/u4:6 Not tainted 5.15.0-rc2-syzkaller #0 [ 1807.226063][ T4399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1807.264816][ T7692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1807.298691][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1807.315354][ T7693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1807.316196][ T7695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1807.337164][ T7696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1807.370695][ T7692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1807.396920][ T4399] Workqueue: phy51 ieee80211_iface_work 03:57:57 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 1807.421017][ T4399] RIP: 0010:sta_info_insert_rcu+0x283/0x2ce0 [ 1807.493670][ T4399] Code: f2 f8 44 89 e6 31 ff 83 e6 01 40 88 b5 38 ff ff ff e8 11 d1 f2 f8 0f b6 85 38 ff ff ff 84 c0 0f 84 fa 00 00 00 e8 bd ca f2 f8 <0f> 0b 41 bc ea ff ff ff e8 b0 ca f2 f8 4c 89 f6 4c 89 ff e8 b5 f9 [ 1807.610734][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:57:57 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0xfffffffffffffff7]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000140)={0xa0000000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000000), 0x0, 0x40800, 0x0, 0xffffffffffffffff}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000080)={0xad, 0x1, 0x7ff}) [ 1807.806117][ T4399] RSP: 0018:ffffc900109a7968 EFLAGS: 00010293 [ 1807.913507][ T4399] RAX: 0000000000000000 RBX: ffff88802b850c80 RCX: 0000000000000000 03:57:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000004800", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1808.087625][ T4399] RDX: ffff88803865b900 RSI: ffffffff888340b3 RDI: 0000000000000003 03:57:57 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1808.210859][ T4399] RBP: ffffc900109a7ab0 R08: 0000000000000000 R09: 0000000000000001 [ 1808.293235][ T4399] R10: ffffffff8883409f R11: 0000000000000000 R12: 00000000ffffffff 03:57:58 executing program 4: syz_80211_inject_frame(&(0x7f0000000080), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/10], 0xa) [ 1808.455856][ T4399] R13: ffff888079a94048 R14: ffff888079a94000 R15: ffff8880ae250d60 [ 1808.470956][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1808.592472][ T4399] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 1808.700586][ T7733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1808.719054][ T4399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1808.742003][ T7734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:58 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1808.818820][ T4399] CR2: 00007f2ba5be41f0 CR3: 0000000072896000 CR4: 00000000001526f0 [ 1808.867044][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1808.917991][ T4399] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1808.989837][ T4399] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1809.104469][ T4399] Call Trace: [ 1809.150078][ T4399] ? find_held_lock+0x2d/0x110 03:57:58 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 1809.214496][ T4399] ? rate_control_rate_init+0x313/0x6a0 [ 1809.229985][ T7733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1809.272550][ T4399] ? sta_info_free+0x3b0/0x3b0 03:57:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000004a00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1809.331903][ T4399] ? __local_bh_enable_ip+0xa0/0x120 03:57:59 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x0, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1809.399338][ T4399] ? rate_control_rate_init+0x346/0x6a0 [ 1809.460843][ T4399] ieee80211_ibss_finish_sta+0x212/0x390 03:57:59 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@pspoll={{}, @default, @from_mac}, 0x10) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000340)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x7fe1}, @device_b, @device_b, @initial, {0x6, 0x4}}, 0x3, @default, 0x803, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @val={0x5, 0xf6, {0x8, 0xcb, 0x9, "20cffcd5060311304f17d02d0d7f29800c339ccf6e20ae5f77a7b598030d41a9d338fda51b0bcc3c38d7055c89c74733f4ac979f94f32f41f125edb85d86ee344833e25983ef5f0b2603ae215e845419638a05055e59b3cbf09c844ca8eaee596cb0afb682b1cb1b44807fd86948176d7f297c654d9b9f0cc946230e0b52324919cbdea460d22ab7315210c369acddc2384d53a63e37e705e3c630c7d832d122e148f12d52875ac6a080b77d1ffc97fd2218cd4b4d36534d1a23cfe7b838d940ae1025f79942db32651d739c067ccaa3ead9840644ca6f0384eeb6d8d9527804ed8088b8520f6047a9c1f39d39279638c406bf"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x9, 0x40, 0x3}}, @void, @void, @void, @void, [{0xdd, 0xc8, "90ad1b639803d6f9acf014092fcae2a8d55f00dc15015629f034c8a82fa2788cf942e77f44d66d402a518d0d1dc0c606cf3e4fed690f836ab2ca2a0f474c4b75058693d01bc7ba7da8fda93e7cfc96b1f8ed433774ebf89540cc8bb0862492bc2e65798875e80e5dcc16bc01c0523ed0155133b916ddde1227eab7b1ae1b2e0166d99aa44c8bd84322c3e7c81105e61c7044124a38cea289f5e63ba7595be10fa7556ea7b084d5684684fa0ee867fdd8af779025854ef0f9a8221832da6c9f12381f4b587d9e5718"}, {0xdd, 0x6, "3d64249bdf51"}]}, 0x1ff) [ 1809.568654][ T4399] ? ieee80211_ibss_build_presp+0x1760/0x1760 [ 1809.639706][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1809.645057][ T4399] ? __local_bh_enable_ip+0xa0/0x120 [ 1809.720955][ T7755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1809.772789][ T4399] ieee80211_ibss_work+0x2c7/0xe80 [ 1809.773196][ T7757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1809.824765][ T7758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1809.851249][ T4399] ? ieee80211_ibss_rx_queued_mgmt+0x1610/0x1610 [ 1809.979572][ T4399] ? mark_held_locks+0x9f/0xe0 [ 1810.032705][ T4399] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1810.032793][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1810.122918][ T4399] ? lockdep_hardirqs_on+0x79/0x100 [ 1810.211317][ T4399] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1810.287010][ T4399] ieee80211_iface_work+0xb70/0xd00 [ 1810.352106][ T7755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1810.355201][ T4399] process_one_work+0x9bf/0x16b0 03:58:00 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1810.402870][ T7758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1810.484124][ T4399] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1810.489569][ T4399] ? rwlock_bug.part.0+0x90/0x90 [ 1810.586081][ T4399] ? _raw_spin_lock_irq+0x41/0x50 03:58:00 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(r0, r1, &(0x7f0000000140), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 1810.637887][ T4399] worker_thread+0x658/0x11f0 [ 1810.676872][ T4399] ? process_one_work+0x16b0/0x16b0 03:58:00 executing program 4: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) [ 1810.739504][ T4399] kthread+0x3e5/0x4d0 03:58:00 executing program 5: mmap(&(0x7f000022d000/0x11000)=nil, 0x11000, 0x1800007, 0xc110, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4996bc5e497851fc) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x191) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/115, 0x73}], 0x2, 0xc061, 0xb) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x102, 0x2c2, '\x00', &(0x7f0000000000)=0x81}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 03:58:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000905020039000000000000034a00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 1810.769531][ T4399] ? set_kthread_struct+0x130/0x130 [ 1810.799249][ T4399] ret_from_fork+0x1f/0x30 [ 1810.829905][ T4399] Kernel panic - not syncing: panic_on_warn set ... [ 1810.836519][ T4399] CPU: 1 PID: 4399 Comm: kworker/u4:6 Not tainted 5.15.0-rc2-syzkaller #0 [ 1810.845068][ T4399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1810.855134][ T4399] Workqueue: phy51 ieee80211_iface_work [ 1810.860705][ T4399] Call Trace: [ 1810.863989][ T4399] dump_stack_lvl+0xcd/0x134 [ 1810.868598][ T4399] panic+0x2b0/0x6dd [ 1810.872533][ T4399] ? __warn_printk+0xf3/0xf3 [ 1810.877155][ T4399] ? __warn.cold+0x1a/0x44 [ 1810.881597][ T4399] ? sta_info_insert_rcu+0x283/0x2ce0 [ 1810.886995][ T4399] __warn.cold+0x35/0x44 [ 1810.890204][ T7770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1810.891252][ T4399] ? sta_info_insert_rcu+0x283/0x2ce0 [ 1810.891290][ T4399] report_bug+0x1bd/0x210 [ 1810.891325][ T4399] handle_bug+0x3c/0x60 [ 1810.914824][ T4399] exc_invalid_op+0x14/0x40 [ 1810.919348][ T4399] asm_exc_invalid_op+0x12/0x20 [ 1810.924214][ T4399] RIP: 0010:sta_info_insert_rcu+0x283/0x2ce0 [ 1810.930218][ T4399] Code: f2 f8 44 89 e6 31 ff 83 e6 01 40 88 b5 38 ff ff ff e8 11 d1 f2 f8 0f b6 85 38 ff ff ff 84 c0 0f 84 fa 00 00 00 e8 bd ca f2 f8 <0f> 0b 41 bc ea ff ff ff e8 b0 ca f2 f8 4c 89 f6 4c 89 ff e8 b5 f9 [ 1810.949839][ T4399] RSP: 0018:ffffc900109a7968 EFLAGS: 00010293 [ 1810.955918][ T4399] RAX: 0000000000000000 RBX: ffff88802b850c80 RCX: 0000000000000000 [ 1810.963899][ T4399] RDX: ffff88803865b900 RSI: ffffffff888340b3 RDI: 0000000000000003 [ 1810.971881][ T4399] RBP: ffffc900109a7ab0 R08: 0000000000000000 R09: 0000000000000001 [ 1810.979861][ T4399] R10: ffffffff8883409f R11: 0000000000000000 R12: 00000000ffffffff [ 1810.987843][ T4399] R13: ffff888079a94048 R14: ffff888079a94000 R15: ffff8880ae250d60 [ 1810.995840][ T4399] ? sta_info_insert_rcu+0x26f/0x2ce0 [ 1811.001240][ T4399] ? sta_info_insert_rcu+0x283/0x2ce0 [ 1811.006640][ T4399] ? sta_info_insert_rcu+0x283/0x2ce0 [ 1811.012033][ T4399] ? find_held_lock+0x2d/0x110 [ 1811.016815][ T4399] ? rate_control_rate_init+0x313/0x6a0 [ 1811.022392][ T4399] ? sta_info_free+0x3b0/0x3b0 [ 1811.027178][ T4399] ? __local_bh_enable_ip+0xa0/0x120 [ 1811.032491][ T4399] ? rate_control_rate_init+0x346/0x6a0 [ 1811.038066][ T4399] ieee80211_ibss_finish_sta+0x212/0x390 [ 1811.043723][ T4399] ? ieee80211_ibss_build_presp+0x1760/0x1760 [ 1811.049813][ T4399] ? __local_bh_enable_ip+0xa0/0x120 [ 1811.055125][ T4399] ieee80211_ibss_work+0x2c7/0xe80 [ 1811.060270][ T4399] ? ieee80211_ibss_rx_queued_mgmt+0x1610/0x1610 [ 1811.066642][ T4399] ? mark_held_locks+0x9f/0xe0 [ 1811.071424][ T4399] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1811.077248][ T4399] ? lockdep_hardirqs_on+0x79/0x100 [ 1811.082459][ T4399] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1811.088286][ T4399] ieee80211_iface_work+0xb70/0xd00 [ 1811.093522][ T4399] process_one_work+0x9bf/0x16b0 [ 1811.098502][ T4399] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1811.103899][ T4399] ? rwlock_bug.part.0+0x90/0x90 [ 1811.108848][ T4399] ? _raw_spin_lock_irq+0x41/0x50 [ 1811.113903][ T4399] worker_thread+0x658/0x11f0 [ 1811.118613][ T4399] ? process_one_work+0x16b0/0x16b0 [ 1811.123837][ T4399] kthread+0x3e5/0x4d0 [ 1811.127923][ T4399] ? set_kthread_struct+0x130/0x130 [ 1811.133143][ T4399] ret_from_fork+0x1f/0x30 [ 1811.138053][ T4399] Kernel Offset: disabled [ 1811.142625][ T4399] Rebooting in 86400 seconds..