2f704adbf5511577272d70f96bb878f6fc6dcf5cacdb1d4a655bdecf868a39b26f3a09a828eaff18805896824e27f7a42bfeded5c0dee34db82f30c8c6b6dc76caa267549c9450adaddf3947651a593e49919b59dd1edd2c0d98fe7cfae73e75cffb7f34d9d5d54f393aef4d761321536c5fd453286271e3ff76f9c89de2e0bcace532d9330bf27b1750756fd9e7b8988c2563409e3e47c6093dff197d60a15d725b58921171454ebdaa5a6c8b966635a9f1f7d", 0x20b, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 11:43:56 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400840, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x9c222ccd0965c56b, 0x102) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async) clock_gettime(0x0, 0x0) read$dsp(r1, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) 11:43:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000100008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:43:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000e0ffff00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2042.683861][T30135] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2042.822729][T30137] gretap0: refused to change device tx_queue_len [ 2042.832538][T30137] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:43:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000110008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:43:56 executing program 0: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003) 11:43:56 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_io_uring_setup(0x4c39, 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) r4 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x401, 0x25, 0x22}, 0x18) sendmsg$nl_route(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_deladdrlabel={0x1c, 0x49, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x81}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008804}, 0x20000000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) clock_gettime(0x0, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) io_setup(0x1b2, &(0x7f00000002c0)) syz_io_uring_setup(0x42e0, &(0x7f0000000000)={0x0, 0x21f4, 0x800, 0x3, 0x3e0, 0x0, r3}, &(0x7f00000000c0), &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="ff0700000000ae00100000da418a3500"]) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r6, 0x0, &(0x7f00000001c0)='./file0\x00', 0xa0, 0x280000, 0x23456}) io_submit(0x0, 0x0, &(0x7f0000000580)) [ 2043.275990][T30144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:43:57 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async, rerun: 64) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) (async) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x2, 0xffffffffffffffff, 0x1}) (async, rerun: 32) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) clock_gettime(0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mprotect(&(0x7f00001ba000/0x2000)=nil, 0x2000, 0x1000001) (async, rerun: 32) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) ioctl$TIOCGPTPEER(r5, 0x5441, 0x6) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:43:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108007fffffff00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:43:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000120008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:43:57 executing program 0: r0 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, r1+60000000}}, 0x0) 11:43:57 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400840, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x9c222ccd0965c56b, 0x102) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r1, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400840, 0x0) (async) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x9c222ccd0965c56b, 0x102) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async) clock_gettime(0x0, 0x0) (async) read$dsp(r1, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)) (async) 11:43:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000fcff00090000001800018014000200f89754d14eac7d45"], 0x2c}}, 0x0) [ 2044.198531][T30160] gretap0: refused to change device tx_queue_len [ 2044.207828][T30160] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2044.251926][T30159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:43:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000140008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:43:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080081ffffff00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:43:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x34}}, 0x0) 11:43:58 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) (async) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x2, 0xffffffffffffffff, 0x1}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mprotect(&(0x7f00001ba000/0x2000)=nil, 0x2000, 0x1000001) (async) mprotect(&(0x7f00001ba000/0x2000)=nil, 0x2000, 0x1000001) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$TIOCGPTPEER(r5, 0x5441, 0x6) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2044.704240][T30170] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2044.932813][T30173] gretap0: refused to change device tx_queue_len [ 2044.942566][T30173] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:43:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000250008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:43:58 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) (async) syz_io_uring_setup(0x4c39, 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async) r4 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x401, 0x25, 0x22}, 0x18) sendmsg$nl_route(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_deladdrlabel={0x1c, 0x49, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x81}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008804}, 0x20000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) clock_gettime(0x0, 0x0) (async) read$dsp(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) (async) io_setup(0x1b2, &(0x7f00000002c0)) (async) syz_io_uring_setup(0x42e0, &(0x7f0000000000)={0x0, 0x21f4, 0x800, 0x3, 0x3e0, 0x0, r3}, &(0x7f00000000c0), &(0x7f0000000100)=0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="ff0700000000ae00100000da418a3500"]) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r6, 0x0, &(0x7f00000001c0)='./file0\x00', 0xa0, 0x280000, 0x23456}) (async) io_submit(0x0, 0x0, &(0x7f0000000580)) 11:43:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800c3ffffff00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2045.206686][T30181] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:43:59 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 11:43:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000480008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2045.541571][T30191] gretap0: refused to change device tx_queue_len [ 2045.550968][T30191] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2045.642611][T30194] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:43:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800f0ffffff00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:43:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000004c0008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:43:59 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 11:43:59 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000240)={0x5, r1, 0x80000}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) creat(&(0x7f0000000280)='./file0\x00', 0x22) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r1, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone3(&(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r3], 0x1}, 0x58) fcntl$lock(r1, 0x5, &(0x7f0000000100)={0x1, 0x2, 0x1828, 0x4, r3}) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) [ 2046.113141][T30200] gretap0: refused to change device tx_queue_len [ 2046.127710][T30200] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2046.142614][T30204] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:00 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:44:00 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 11:44:00 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) (async, rerun: 32) syz_io_uring_setup(0x4c39, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) r4 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x401, 0x25, 0x22}, 0x18) sendmsg$nl_route(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_deladdrlabel={0x1c, 0x49, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x81}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008804}, 0x20000000) (async, rerun: 64) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) clock_gettime(0x0, 0x0) (async) read$dsp(0xffffffffffffffff, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) (async) io_setup(0x1b2, &(0x7f00000002c0)) (async) syz_io_uring_setup(0x42e0, &(0x7f0000000000)={0x0, 0x21f4, 0x800, 0x3, 0x3e0, 0x0, r3}, &(0x7f00000000c0), &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="ff0700000000ae00100000da418a3500"]) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r6, 0x0, &(0x7f00000001c0)='./file0\x00', 0xa0, 0x280000, 0x23456}) (async) io_submit(0x0, 0x0, &(0x7f0000000580)) 11:44:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800fdffffff00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000005c0008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2046.760861][T30218] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2046.814256][T30221] gretap0: refused to change device tx_queue_len [ 2046.823847][T30221] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:00 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 11:44:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000600008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:00 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r3) syz_io_uring_setup(0x4c39, 0x0, 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) clock_gettime(0x0, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) io_setup(0x1b2, &(0x7f00000002c0)) io_submit(0x0, 0x0, &(0x7f0000000580)) 11:44:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800feffffff00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2047.294007][T30228] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x2c}}, 0x0) 11:44:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000680008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2047.578378][T30233] gretap0: refused to change device tx_queue_len [ 2047.588040][T30233] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2047.851660][T30240] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:03 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000240)={0x5, r1, 0x80000}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) (async) creat(&(0x7f0000000280)='./file0\x00', 0x22) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async) clock_gettime(0x0, 0x0) read$dsp(r1, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) syz_clone3(&(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r3], 0x1}, 0x58) fcntl$lock(r1, 0x5, &(0x7f0000000100)={0x1, 0x2, 0x1828, 0x4, r3}) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) 11:44:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800fabe010001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000006c0008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x18, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x18}}, 0x0) 11:44:03 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) (async) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) (async) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) (async) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:44:03 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r3) syz_io_uring_setup(0x4c39, 0x0, 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) clock_gettime(0x0, 0x0) (async) read$dsp(0xffffffffffffffff, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) io_setup(0x1b2, &(0x7f00000002c0)) (async) io_submit(0x0, 0x0, &(0x7f0000000580)) [ 2049.660084][T30251] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:03 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000001640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x3, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x1f, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 2049.701372][T30250] gretap0: refused to change device tx_queue_len [ 2049.716188][T30250] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000700008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800fcbe010001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2050.221878][T15272] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2050.353701][T30271] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2050.386237][T30270] gretap0: refused to change device tx_queue_len [ 2050.396420][T30270] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2050.510797][T15272] usb 1-1: Using ep0 maxpacket: 32 11:44:04 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (rerun: 32) dup(r3) syz_io_uring_setup(0x4c39, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) (rerun: 32) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async, rerun: 64) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) (rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) clock_gettime(0x0, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) (async) io_setup(0x1b2, &(0x7f00000002c0)) (async) io_submit(0x0, 0x0, &(0x7f0000000580)) 11:44:04 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000240)={0x5, r1, 0x80000}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000240)={0x5, r1, 0x80000}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) creat(&(0x7f0000000280)='./file0\x00', 0x22) (async) creat(&(0x7f0000000280)='./file0\x00', 0x22) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r1, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) getpid() (async) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone3(&(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r3], 0x1}, 0x58) (async) syz_clone3(&(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r3], 0x1}, 0x58) fcntl$lock(r1, 0x5, &(0x7f0000000100)={0x1, 0x2, 0x1828, 0x4, r3}) (async) fcntl$lock(r1, 0x5, &(0x7f0000000100)={0x1, 0x2, 0x1828, 0x4, r3}) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) (async) io_setup(0x1b2, &(0x7f00000002c0)) 11:44:04 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) (async) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:44:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800ffffffffff600000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2050.641964][T15272] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2050.651304][T15272] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2050.661934][T15272] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 11:44:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000740008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2050.883125][T15272] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2050.893195][T15272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2050.901638][T15272] usb 1-1: Product: syz [ 2050.906038][T15272] usb 1-1: Manufacturer: syz [ 2050.911058][T15272] usb 1-1: SerialNumber: syz [ 2051.030788][T30282] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2051.107494][T30281] gretap0: refused to change device tx_queue_len [ 2051.117107][T30281] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000007a0008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2051.362749][T15272] usb 1-1: 0:2 : does not exist [ 2051.517690][T15272] usb 1-1: USB disconnect, device number 44 [ 2051.588752][T30292] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 11:44:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000100000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2051.784660][T22910] udevd[22910]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 11:44:05 executing program 3: ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x88140, 0x78) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:44:05 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 11:44:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000600208000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:05 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x7) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = memfd_secret(0x80000) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000240)={0x1, 0x8a1, &(0x7f00000000c0)="368368bbce0f76806e45336a7828e1ba89f06a74de6113bc10b2d791dfe3447a1d3a31c03befc9f1dadd6bee582dfc79bc847dbc5c9b", &(0x7f0000000100)="42eb1a65413198d71ad9ce57b916e94c8e57b3158aede736202390e024269b2ab230ea98d2798bcb92b5fe764d2dbf05712e31", 0x36, 0x33}) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) 11:44:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {0x5, 0x2}, [@HEADER={0x4, 0x2}]}, 0x18}}, 0x0) [ 2052.248097][T30299] gretap0: refused to change device tx_queue_len [ 2052.258732][T30299] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2052.435096][T30305] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x12}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 11:44:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000034000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2052.623996][T30311] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:44:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000308000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {0x10}, [@HEADER={0x4}]}, 0x18}}, 0x0) 11:44:06 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/time\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) [ 2052.994780][T30318] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2053.007308][T30319] gretap0: refused to change device tx_queue_len [ 2053.016807][T30319] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000ffffe000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) [ 2053.571499][T30329] gretap0: refused to change device tx_queue_len [ 2053.580817][T30329] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x15, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 11:44:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000508000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}}, 0x0) 11:44:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:07 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x7) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = memfd_secret(0x80000) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000240)={0x1, 0x8a1, &(0x7f00000000c0)="368368bbce0f76806e45336a7828e1ba89f06a74de6113bc10b2d791dfe3447a1d3a31c03befc9f1dadd6bee582dfc79bc847dbc5c9b", &(0x7f0000000100)="42eb1a65413198d71ad9ce57b916e94c8e57b3158aede736202390e024269b2ab230ea98d2798bcb92b5fe764d2dbf05712e31", 0x36, 0x33}) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) (async) io_setup(0x1b2, &(0x7f00000002c0)) 11:44:07 executing program 3: ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000100)=0x4) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async, rerun: 32) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async, rerun: 64) clock_gettime(0x0, 0x0) (async, rerun: 64) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x88140, 0x78) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2054.225774][T30334] gretap0: refused to change device tx_queue_len [ 2054.235029][T30334] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2054.244364][T30342] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x109}, 0x14}}, 0x0) 11:44:08 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x121801) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0}) 11:44:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000608000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xfffffee1}}, 0x0) [ 2054.775645][T30353] gretap0: refused to change device tx_queue_len [ 2054.785296][T30353] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2054.885545][T30354] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {0x10}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 11:44:08 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x7) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async) clock_gettime(0x0, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = memfd_secret(0x80000) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000240)={0x1, 0x8a1, &(0x7f00000000c0)="368368bbce0f76806e45336a7828e1ba89f06a74de6113bc10b2d791dfe3447a1d3a31c03befc9f1dadd6bee582dfc79bc847dbc5c9b", &(0x7f0000000100)="42eb1a65413198d71ad9ce57b916e94c8e57b3158aede736202390e024269b2ab230ea98d2798bcb92b5fe764d2dbf05712e31", 0x36, 0x33}) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)) 11:44:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000003000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000708000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4, 0xe}]}]}, 0x1c}}, 0x0) [ 2055.404896][T30362] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2055.451038][T30365] gretap0: refused to change device tx_queue_len [ 2055.460206][T30365] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:09 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='/dev/zero\x00', 0xffffffffffffffff) 11:44:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x33fe0}}, 0x0) 11:44:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000908000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000004000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:09 executing program 3: ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000100)=0x4) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x88140, 0x78) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2056.333753][T30379] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2056.356439][T30380] gretap0: refused to change device tx_queue_len [ 2056.371295][T30380] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x2}]}]}, 0x20}}, 0x0) 11:44:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:44:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000a08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:10 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x7f, 0x2, 0xff, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x80, 0x8, 0x8, 0x1f}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) r3 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000240)=""/94, 0x5e}], 0x1, 0x7, 0x9) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r1, &(0x7f0000000140)=""/250, 0xfa) syz_io_uring_setup(0x36ab, &(0x7f0000000340)={0x0, 0x2717, 0x0, 0x3, 0x207, 0x0, r3}, &(0x7f00000003c0), &(0x7f0000000400)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) 11:44:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000005000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:10 executing program 2: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x2000)=nil) [ 2056.957593][T30398] gretap0: refused to change device tx_queue_len [ 2056.966884][T30398] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2056.984819][T30397] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000b08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:10 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x2cc596054b14b8eb, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x80000000}]}) syz_kvm_setup_cpu$x86(r4, r8, &(0x7f0000c2f000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="6736f20f7c76e90f01bc6d00200000c403057cc106c4229d939c023faac6a1c744240067290000c7442402b80e0000c7442406000000000f011c24f3460fc7b7006000002664d80ab9800000c00f3235008000000f300f35c744240028000000c74424025b0e0000ff1c24", 0x6b}], 0x1, 0x4, &(0x7f0000000340)=[@cstype0={0x4, 0xc}, @vmwrite={0x8, 0x0, 0xc, 0x0, 0x1, 0x0, 0x2}], 0x2) r9 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r9, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r10, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f0000000380)) 11:44:11 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000005b80)={0x0, 0x989680}) 11:44:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000006000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:11 executing program 0: msgctl$IPC_RMID(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000005580), 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') r2 = eventfd2(0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cpuset\x00') mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x12, r3, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4, 0x7, r3}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r1) [ 2057.420319][T30404] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000c08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2057.650676][T30410] gretap0: refused to change device tx_queue_len [ 2057.659844][T30410] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:11 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) 11:44:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2057.914957][T30418] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:11 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) [ 2058.270677][T30424] gretap0: refused to change device tx_queue_len [ 2058.279742][T30424] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:12 executing program 4: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x7f, 0x2, 0xff, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x80, 0x8, 0x8, 0x1f}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x7f, 0x2, 0xff, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x80, 0x8, 0x8, 0x1f}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) r3 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000240)=""/94, 0x5e}], 0x1, 0x7, 0x9) (async) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000240)=""/94, 0x5e}], 0x1, 0x7, 0x9) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r1, &(0x7f0000000140)=""/250, 0xfa) syz_io_uring_setup(0x36ab, &(0x7f0000000340)={0x0, 0x2717, 0x0, 0x3, 0x207, 0x0, r3}, &(0x7f00000003c0), &(0x7f0000000400)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) 11:44:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000d08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:12 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) inotify_rm_watch(r0, 0x0) 11:44:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000001000000000000070000000800000300000000140003001585"], 0x30}}, 0x0) [ 2058.896729][T30432] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 2058.947648][T30431] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:13 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x2cc596054b14b8eb, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x80000000}]}) syz_kvm_setup_cpu$x86(r4, r8, &(0x7f0000c2f000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="6736f20f7c76e90f01bc6d00200000c403057cc106c4229d939c023faac6a1c744240067290000c7442402b80e0000c7442406000000000f011c24f3460fc7b7006000002664d80ab9800000c00f3235008000000f300f35c744240028000000c74424025b0e0000ff1c24", 0x6b}], 0x1, 0x4, &(0x7f0000000340)=[@cstype0={0x4, 0xc}, @vmwrite={0x8, 0x0, 0xc, 0x0, 0x1, 0x0, 0x2}], 0x2) r9 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r9, 0x10000000) clock_gettime(0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r10, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f0000000380)) 11:44:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:13 executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone(0x60880000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:44:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000e08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:13 executing program 2: syz_clone(0x83000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)) 11:44:13 executing program 4: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x7f, 0x2, 0xff, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x80, 0x8, 0x8, 0x1f}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) r3 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000240)=""/94, 0x5e}], 0x1, 0x7, 0x9) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) (async) clock_gettime(0x0, 0x0) read$dsp(r1, &(0x7f0000000140)=""/250, 0xfa) syz_io_uring_setup(0x36ab, &(0x7f0000000340)={0x0, 0x2717, 0x0, 0x3, 0x207, 0x0, r3}, &(0x7f00000003c0), &(0x7f0000000400)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) (async) io_setup(0x1b2, &(0x7f00000002c0)) [ 2059.775946][T30446] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2059.823453][T30445] gretap0: refused to change device tx_queue_len [ 2059.832897][T30445] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000f08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000009000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:14 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001140), 0x0, 0x240) [ 2060.388063][T30461] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2060.493250][T30465] gretap0: refused to change device tx_queue_len [ 2060.502590][T30465] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:14 executing program 0: syz_clone(0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:44:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000005e1008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:14 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x2cc596054b14b8eb, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x80000000}]}) syz_kvm_setup_cpu$x86(r4, r8, &(0x7f0000c2f000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="6736f20f7c76e90f01bc6d00200000c403057cc106c4229d939c023faac6a1c744240067290000c7442402b80e0000c7442406000000000f011c24f3460fc7b7006000002664d80ab9800000c00f3235008000000f300f35c744240028000000c74424025b0e0000ff1c24", 0x6b}], 0x1, 0x4, &(0x7f0000000340)=[@cstype0={0x4, 0xc}, @vmwrite={0x8, 0x0, 0xc, 0x0, 0x1, 0x0, 0x2}], 0x2) (async) r9 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r9, 0x10000000) (async) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r10, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) (async) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f0000000380)) 11:44:14 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc0189436, 0x0) 11:44:14 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) r2 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000a99000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000480)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x1, 0x5, 0x1, {0x0, r5, r1}}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x108, 0x208, 0x108, 0xffffffff, 0xffffffff, 0x350, 0x108, 0x350, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @mcast2, [], [], 'veth0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "a2ddef118946153d900ca2477177e3fa9464655d55ef739a1c649a2d93ca"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000500), 0xd00) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000dd5000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f0000000540)="baf80c66b880e6c68f66efbafc0c66b80080ffff66ef643e2e67660fef23660f3806acfe43f0091fbaf80c66b8483bd38966efbafc0c66b8abe4ff2766ef67670f71f0006766c7442400040000006766c7442402899600006766c744240600000000670f011c2466b8070000000f23c00f21f86635020005000f23f8b86c000f00d81109", 0x84}], 0x1, 0x45, &(0x7f0000000640), 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) madvise(&(0x7f0000644000/0x3000)=nil, 0x3000, 0x65) [ 2061.084659][T30471] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2061.247645][T30476] gretap0: refused to change device tx_queue_len [ 2061.257041][T30476] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:15 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) userfaultfd(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 11:44:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000001108000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000000000000b000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:15 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') [ 2061.741592][T30490] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:15 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xfffffffc, 0x3, 0x200}) [ 2062.009488][T30494] gretap0: refused to change device tx_queue_len [ 2062.018982][T30494] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000001208000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2062.284039][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 2062.290924][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 11:44:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000000000000c000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2062.358034][T30500] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:16 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_getevents(r7, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0}]) r9 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r9, 0x0) io_submit(r7, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}]) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000240)={r3}) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x205}, {r9, 0x14}, {r10, 0x8001}], 0x3, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)={[0x4]}, 0x8) io_submit(r6, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:44:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) 11:44:16 executing program 0: ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 11:44:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000001408000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2062.751944][T30503] gretap0: refused to change device tx_queue_len [ 2062.762359][T30503] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2062.919617][T30508] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:17 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) r2 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000a99000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r2, 0x0) (async, rerun: 32) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async, rerun: 32) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000480)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x1, 0x5, 0x1, {0x0, r5, r1}}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x108, 0x208, 0x108, 0xffffffff, 0xffffffff, 0x350, 0x108, 0x350, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @mcast2, [], [], 'veth0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "a2ddef118946153d900ca2477177e3fa9464655d55ef739a1c649a2d93ca"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) (async) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000500), 0xd00) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000dd5000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f0000000540)="baf80c66b880e6c68f66efbafc0c66b80080ffff66ef643e2e67660fef23660f3806acfe43f0091fbaf80c66b8483bd38966efbafc0c66b8abe4ff2766ef67670f71f0006766c7442400040000006766c7442402899600006766c744240600000000670f011c2466b8070000000f23c00f21f86635020005000f23f8b86c000f00d81109", 0x84}], 0x1, 0x45, &(0x7f0000000640), 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async) clock_gettime(0x0, 0x0) (async, rerun: 32) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r5) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)) (async) madvise(&(0x7f0000644000/0x3000)=nil, 0x3000, 0x65) 11:44:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000000000000d000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:17 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x16c8}) 11:44:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000002508000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:17 executing program 0: syz_clone(0x83000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)="06") [ 2063.758923][T30525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:17 executing program 2: syz_clone(0x10011400, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2063.815750][T30526] gretap0: refused to change device tx_queue_len [ 2063.825175][T30526] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000004008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:17 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x64, 0x0, 0x33, 0x30, 0x61, 0x35, 0x63, 0x33, 0x0, 0x0, 0x33, 0x0, 0x37, 0x39, 0x37, 0x6b]}, &(0x7f0000000080)={0x0, "ed3ffdfce85046dc10dabd387f891d4fcbf138881089e2721b0b5b5a621268133d6c56b082bfaaf86dfd6b30c6a98279b2e15c793acb18aae4e6a29c098e9d38"}, 0x48, 0xfffffffffffffffb) keyctl$describe(0x6, r0, 0x0, 0x0) [ 2064.321956][T30536] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:18 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) clock_gettime(0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_getevents(r7, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0}]) (async) r9 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r9, 0x0) (async) io_submit(r7, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}]) (async) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000240)={r3}) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x205}, {r9, 0x14}, {r10, 0x8001}], 0x3, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)={[0x4]}, 0x8) io_submit(r6, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:44:18 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) r2 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000a99000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000480)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x1, 0x5, 0x1, {0x0, r5, r1}}) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x108, 0x208, 0x108, 0xffffffff, 0xffffffff, 0x350, 0x108, 0x350, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @mcast2, [], [], 'veth0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "a2ddef118946153d900ca2477177e3fa9464655d55ef739a1c649a2d93ca"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) (async) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000500), 0xd00) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000dd5000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f0000000540)="baf80c66b880e6c68f66efbafc0c66b80080ffff66ef643e2e67660fef23660f3806acfe43f0091fbaf80c66b8483bd38966efbafc0c66b8abe4ff2766ef67670f71f0006766c7442400040000006766c7442402899600006766c744240600000000670f011c2466b8070000000f23c00f21f86635020005000f23f8b86c000f00d81109", 0x84}], 0x1, 0x45, &(0x7f0000000640), 0x0) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r5) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)) madvise(&(0x7f0000644000/0x3000)=nil, 0x3000, 0x65) 11:44:18 executing program 2: socket$unix(0x1, 0x1, 0x0) select(0x40, &(0x7f00000011c0)={0x9}, 0x0, 0x0, 0x0) 11:44:18 executing program 0: request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0xfffffffffffffffc) 11:44:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000000000000e000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000004808000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2065.102758][T30544] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2065.245069][T30546] gretap0: refused to change device tx_queue_len [ 2065.254520][T30546] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000004c08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:19 executing program 2: syz_clone(0xc8001200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)="018baac9c3a306992c733246c99a5e28f5eef67f21979a0e90ee0d23d077bd32c7128487276774f940ad21ed0daff025afe54b") [ 2065.564141][T30557] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:19 executing program 0: syz_clone(0xcc000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)) 11:44:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000005c08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000000000000f000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:19 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) r1 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) signalfd4(r1, &(0x7f00000000c0)={[0x80000001]}, 0x8, 0x80800) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x81) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) [ 2066.139122][T30564] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:20 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) (async) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) clock_gettime(0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_getevents(r7, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0}]) r9 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r9, 0x0) (async) io_submit(r7, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}]) (async) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000240)={r3}) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x205}, {r9, 0x14}, {r10, 0x8001}], 0x3, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)={[0x4]}, 0x8) (async) io_submit(r6, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:44:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000105e08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2066.328839][T30570] gretap0: refused to change device tx_queue_len [ 2066.338139][T30570] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000010000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2066.734169][T30580] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:20 executing program 2: keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000000c0), 0x0, 0x0, 0x0) 11:44:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000006008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:20 executing program 0: r0 = getpgid(0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x0, 0x2003) [ 2067.151269][T30584] gretap0: refused to change device tx_queue_len [ 2067.160703][T30584] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2067.273130][T30589] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:21 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0x9}]}) 11:44:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000011000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:21 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000721000/0x1000)=nil, 0x1000, 0xb) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x2000, &(0x7f0000baf000/0x2000)=nil}) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x2a) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f000077a000/0x4000)=nil) 11:44:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000026008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d96a91efbc7d53ad12611e681c11aac9a9cf485bc71b1ab39b82dfdb75bd9e402b8406cd8fc89c2f89882b7f7ad3f133da25e11fa8f12ad5483eac21e3cb73e6", "500a9c74d6052e021085577e8db0be5dfb623fb7f0cac36cc1e9ba60803947102be5d1c09d160e0b6cc6530f1dde097201fcd0b0456387528b3e04de9f88a382", "cc2974bfb6565016a5c512a0e1931d9186506eb40294a2493b81dbf8dd401931"}) [ 2068.056463][T30603] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:22 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async, rerun: 64) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async, rerun: 32) r1 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) signalfd4(r1, &(0x7f00000000c0)={[0x80000001]}, 0x8, 0x80800) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x81) (async, rerun: 32) clock_gettime(0x0, 0x0) (async, rerun: 32) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)) 11:44:22 executing program 0: syz_open_dev$loop(&(0x7f0000003200), 0x0, 0x101080) 11:44:22 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 11:44:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000012000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000006808000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2068.889334][T30616] gretap0: refused to change device tx_queue_len [ 2068.898725][T30616] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2068.942183][T30615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:22 executing program 2: syz_open_procfs(0x0, &(0x7f0000000200)='fd\x00') 11:44:22 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0x5421, 0x0) 11:44:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000000000001b000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000006c08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:23 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000721000/0x1000)=nil, 0x1000, 0xb) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x2000, &(0x7f0000baf000/0x2000)=nil}) (async) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x2a) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f000077a000/0x4000)=nil) 11:44:23 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cpuset\x00') read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) [ 2069.635682][T30626] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2069.695421][T30628] gretap0: refused to change device tx_queue_len [ 2069.704629][T30628] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000007008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2070.265575][T30639] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:25 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 11:44:25 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) r1 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) signalfd4(r1, &(0x7f00000000c0)={[0x80000001]}, 0x8, 0x80800) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x81) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) dup(r3) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) signalfd4(r1, &(0x7f00000000c0)={[0x80000001]}, 0x8, 0x80800) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x81) (async) clock_gettime(0x0, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)) (async) 11:44:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000024000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000007408000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:25 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000721000/0x1000)=nil, 0x1000, 0xb) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x2000, &(0x7f0000baf000/0x2000)=nil}) (async) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x2a) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) (async) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f000077a000/0x4000)=nil) 11:44:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000ac0)='net/unix\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) [ 2071.858194][T30649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2071.881125][T30646] gretap0: refused to change device tx_queue_len [ 2071.890218][T30646] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:25 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) 11:44:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000007a08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:26 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002140), 0x2, 0x0) read$FUSE(r0, 0x0, 0xf0ffffff7f0000) 11:44:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000025000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:26 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) r6 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_getevents(r8, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) io_submit(r8, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000901, r10, &(0x7f0000000240)) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2072.539314][T30666] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2072.576201][T30667] gretap0: refused to change device tx_queue_len 11:44:26 executing program 2: add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffa) [ 2072.585532][T30667] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000001227000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:27 executing program 0: syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') 11:44:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000000680300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:27 executing program 2: r0 = socket(0x2, 0xa, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0) 11:44:27 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000000)=0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) [ 2073.613070][T30685] gretap0: refused to change device tx_queue_len [ 2073.622376][T30685] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2073.635352][T30684] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:27 executing program 2: request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9) 11:44:27 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, 0x0, 0x0) 11:44:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000000000163f000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000006800000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:27 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x200000) [ 2074.201362][T30698] gretap0: refused to change device tx_queue_len [ 2074.210803][T30698] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2074.229157][T30699] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:28 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) (async) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) clock_gettime(0x0, 0x0) (async) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) r6 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_getevents(r8, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r9 = socket$can_raw(0x1d, 0x3, 0x1) io_submit(r8, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000901, r10, &(0x7f0000000240)) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) (async) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:44:28 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, 0x0, 0x0, 0x0) 11:44:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000005000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000001640000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:28 executing program 2: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x64, 0x0, 0x0, 0x0, 0x0, 0x35, 0x63]}, &(0x7f0000000080)={0x0, "ed3ffdfce85046dc10dabd387f891d4fcbf138881089e2721b0b5b5a621268133d6c56b082bfaaf86dfd6b30c6a98279b2e15c793acb18aae4e6a29c098e9d38"}, 0x48, 0xfffffffffffffffb) [ 2074.888670][T30709] gretap0: refused to change device tx_queue_len [ 2074.903472][T30709] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2074.909231][T30711] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 11:44:28 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x160}}, 0x0) 11:44:30 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000000)=0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) (async) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) 11:44:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000048000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:30 executing program 2: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000680), 0x2) 11:44:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000208000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:30 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f0000002140), 0x2, 0x0) syz_clone(0x60880000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:44:30 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) (async) clock_gettime(0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) (async) r6 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_getevents(r8, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0) (async) r9 = socket$can_raw(0x1d, 0x3, 0x1) io_submit(r8, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}]) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000901, r10, &(0x7f0000000240)) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2076.481482][T30729] gretap0: refused to change device tx_queue_len [ 2076.490972][T30729] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2076.522485][T30730] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setuid(0xee01) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x14}, 0x14}}, 0x0) 11:44:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000308000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000000000004c000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:30 executing program 0: r0 = getpgid(0x0) pidfd_open(r0, 0x0) syz_open_procfs(0x0, 0x0) [ 2077.144937][T30744] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2077.334169][T30749] gretap0: refused to change device tx_queue_len [ 2077.343668][T30749] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000408000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:31 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x16c8}) [ 2077.754189][T30755] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000060000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:32 executing program 0: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=0x101, 0x4) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 11:44:32 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mremap(&(0x7f000027d000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f00008f2000/0x4000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:44:32 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x1f, 0x1, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000003c0)={r2}) 11:44:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000508000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:32 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000000)=0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 32) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async, rerun: 32) clock_gettime(0x0, 0x0) (async, rerun: 32) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)) [ 2078.981460][T30760] gretap0: refused to change device tx_queue_len [ 2078.990798][T30760] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2079.041380][T30761] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:32 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000080)) 11:44:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000608000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000005865000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:33 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x930, 0x0, 0x10, r0, 0x0) [ 2079.611860][T30784] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2079.689023][T30786] gretap0: refused to change device tx_queue_len [ 2079.698870][T30786] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000708000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000068000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2080.172467][T30791] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:34 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000001200), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) [ 2080.267602][T30794] gretap0: refused to change device tx_queue_len [ 2080.276964][T30794] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:34 executing program 0: memfd_create(&(0x7f0000001140)='},-.]\x00', 0x4) 11:44:34 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) 11:44:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000808000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:34 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0) mremap(&(0x7f000027d000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f00008f2000/0x4000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:44:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000000000006c000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:34 executing program 2: select(0x40, &(0x7f0000000a80), 0x0, &(0x7f0000000b00)={0x6}, &(0x7f0000000b40)={0x0, 0x2710}) 11:44:34 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil}) [ 2081.098080][T30802] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2081.166532][T30806] gretap0: refused to change device tx_queue_len [ 2081.175877][T30806] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:35 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001c00), 0x240100, 0x0) 11:44:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000908000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000074000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:35 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x7fffffff, 0x4280) [ 2081.692105][T30818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x7fffffff, 0xffffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0x4b49, 0x0) [ 2081.774046][T30820] gretap0: refused to change device tx_queue_len [ 2081.783429][T30820] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000a08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2082.358990][T30831] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:36 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async) clock_gettime(0x0, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) 11:44:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000000000007a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000b08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:36 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0x40049409, &(0x7f00000002c0)) 11:44:36 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 11:44:36 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) mremap(&(0x7f000027d000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f00008f2000/0x4000)=nil) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2083.185011][T30838] gretap0: refused to change device tx_queue_len [ 2083.200311][T30838] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2083.244109][T30841] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:37 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0x541b, 0x0) 11:44:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000c08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000081000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:37 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006940)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 11:44:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = creat(&(0x7f0000000800)='./file0\x00', 0x40) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000b00)=0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000e80)="8d2f92a4fa3e5c73b9ce6d2e5af66b9271f90f296590e9dc509fa009f20b312ddc33cda70c2025ff7ffd6b2e87a256dd783e5554d6d1140ed38a43e982f25fc771523b88234fe5e00697d1da3578e5bab1b31c79d359998ce4d4d5ecfc3c54e2bf175b416365fcabe2a842da2046829a66f4e438b5cef9dc2cc610fb015154d7d66f09e0df22008b74c88022f3acc9c72c45c789807a9b992459152e05344d695906c8ecb375968cae60abd3b982148021e2cfa7229d33921b69cd1695ae2a29d1", 0xc1, 0x24004005, &(0x7f0000000040)={0x2, 0x8000, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="491a40136fc85a859caaa5a6d4db1caadf3d408dd77c8248f79093d74db20643f731b58514e0734db5ebe93eedb556c5ee27273b0661c85a83cb4f90379ebdc62f6b7cab29409c03ddc00404d1be944750f529c4efa721d7d58f2bd5ebbfab227ee80e9ba3123eabd3c83d2c4b1a53878c3e11f7bf697c7f99c01a85828ceda4f673707c93617258e634c5c8a89230408e071074865cd4487276b1c7e7de792ff58e8125e47a4b2a6394c10c27067bde2ed99774b6cce6cd5e13f1708e37513811a0a81752df5ad008", 0xc9, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="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", 0x138}], 0x1}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001300)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001480)=[{0x0}, {&(0x7f0000000f80)=""/72, 0x48}, {&(0x7f0000000440)=""/6, 0x6}, {&(0x7f0000001000)=""/253, 0xfd}, {&(0x7f0000001100)=""/56, 0x38}, {&(0x7f0000001140)=""/215, 0xd7}, {&(0x7f0000001240)=""/62, 0x3e}, {&(0x7f0000001280)=""/35, 0x23}, {&(0x7f00000012c0)=""/16, 0x10}], 0x9, &(0x7f0000001540)=""/199, 0xc7}, 0x40) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/223, 0xdf}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="01000000"], 0x3c}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x40, 0x40, 0xff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0xfff8, 0x38, 0x2, 0xc522, 0x8}, [{}], "", ['\x00', '\x00']}, 0x278) [ 2083.791196][T30854] gretap0: refused to change device tx_queue_len [ 2083.800304][T30854] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2083.861870][T30852] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000ffffff81000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2084.151592][T30858] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2084.366637][T30863] gretap0: refused to change device tx_queue_len [ 2084.376038][T30863] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:38 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async) clock_gettime(0x0, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) 11:44:38 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) read$dsp(r7, &(0x7f0000000140)=""/246, 0xf6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:44:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000d08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = creat(&(0x7f0000000800)='./file0\x00', 0x40) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000b00)=0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000e80)="8d2f92a4fa3e5c73b9ce6d2e5af66b9271f90f296590e9dc509fa009f20b312ddc33cda70c2025ff7ffd6b2e87a256dd783e5554d6d1140ed38a43e982f25fc771523b88234fe5e00697d1da3578e5bab1b31c79d359998ce4d4d5ecfc3c54e2bf175b416365fcabe2a842da2046829a66f4e438b5cef9dc2cc610fb015154d7d66f09e0df22008b74c88022f3acc9c72c45c789807a9b992459152e05344d695906c8ecb375968cae60abd3b982148021e2cfa7229d33921b69cd1695ae2a29d1", 0xc1, 0x24004005, &(0x7f0000000040)={0x2, 0x8000, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="491a40136fc85a859caaa5a6d4db1caadf3d408dd77c8248f79093d74db20643f731b58514e0734db5ebe93eedb556c5ee27273b0661c85a83cb4f90379ebdc62f6b7cab29409c03ddc00404d1be944750f529c4efa721d7d58f2bd5ebbfab227ee80e9ba3123eabd3c83d2c4b1a53878c3e11f7bf697c7f99c01a85828ceda4f673707c93617258e634c5c8a89230408e071074865cd4487276b1c7e7de792ff58e8125e47a4b2a6394c10c27067bde2ed99774b6cce6cd5e13f1708e37513811a0a81752df5ad008", 0xc9, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="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", 0x138}], 0x1}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001300)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001480)=[{0x0}, {&(0x7f0000000f80)=""/72, 0x48}, {&(0x7f0000000440)=""/6, 0x6}, {&(0x7f0000001000)=""/253, 0xfd}, {&(0x7f0000001100)=""/56, 0x38}, {&(0x7f0000001140)=""/215, 0xd7}, {&(0x7f0000001240)=""/62, 0x3e}, {&(0x7f0000001280)=""/35, 0x23}, {&(0x7f00000012c0)=""/16, 0x10}], 0x9, &(0x7f0000001540)=""/199, 0xc7}, 0x40) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/223, 0xdf}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="01000000"], 0x3c}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x40, 0x40, 0xff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0xfff8, 0x38, 0x2, 0xc522, 0x8}, [{}], "", ['\x00', '\x00']}, 0x278) 11:44:38 executing program 0: syz_clone(0x191000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2084.657427][T30869] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000004788000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2084.741342][T30867] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 11:44:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000e08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = creat(&(0x7f0000000800)='./file0\x00', 0x40) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000b00)=0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000e80)="8d2f92a4fa3e5c73b9ce6d2e5af66b9271f90f296590e9dc509fa009f20b312ddc33cda70c2025ff7ffd6b2e87a256dd783e5554d6d1140ed38a43e982f25fc771523b88234fe5e00697d1da3578e5bab1b31c79d359998ce4d4d5ecfc3c54e2bf175b416365fcabe2a842da2046829a66f4e438b5cef9dc2cc610fb015154d7d66f09e0df22008b74c88022f3acc9c72c45c789807a9b992459152e05344d695906c8ecb375968cae60abd3b982148021e2cfa7229d33921b69cd1695ae2a29d1", 0xc1, 0x24004005, &(0x7f0000000040)={0x2, 0x8000, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="491a40136fc85a859caaa5a6d4db1caadf3d408dd77c8248f79093d74db20643f731b58514e0734db5ebe93eedb556c5ee27273b0661c85a83cb4f90379ebdc62f6b7cab29409c03ddc00404d1be944750f529c4efa721d7d58f2bd5ebbfab227ee80e9ba3123eabd3c83d2c4b1a53878c3e11f7bf697c7f99c01a85828ceda4f673707c93617258e634c5c8a89230408e071074865cd4487276b1c7e7de792ff58e8125e47a4b2a6394c10c27067bde2ed99774b6cce6cd5e13f1708e37513811a0a81752df5ad008", 0xc9, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="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", 0x138}], 0x1}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001300)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001480)=[{0x0}, {&(0x7f0000000f80)=""/72, 0x48}, {&(0x7f0000000440)=""/6, 0x6}, {&(0x7f0000001000)=""/253, 0xfd}, {&(0x7f0000001100)=""/56, 0x38}, {&(0x7f0000001140)=""/215, 0xd7}, {&(0x7f0000001240)=""/62, 0x3e}, {&(0x7f0000001280)=""/35, 0x23}, {&(0x7f00000012c0)=""/16, 0x10}], 0x9, &(0x7f0000001540)=""/199, 0xc7}, 0x40) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/223, 0xdf}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="01000000"], 0x3c}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x40, 0x40, 0xff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0xfff8, 0x38, 0x2, 0xc522, 0x8}, [{}], "", ['\x00', '\x00']}, 0x278) 11:44:38 executing program 0: munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001340)={&(0x7f0000fea000/0x4000)=nil, &(0x7f0000fe8000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000fec000/0x1000)=nil, &(0x7f0000fe8000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000fe9000/0x4000)=nil, 0x0}, 0x68) [ 2085.180365][T30880] gretap0: refused to change device tx_queue_len [ 2085.189973][T30880] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2085.384455][T30884] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000004888000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000f08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2085.635169][T30886] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2085.838981][T30891] gretap0: refused to change device tx_queue_len [ 2085.848250][T30891] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2085.952989][T30893] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = creat(&(0x7f0000000800)='./file0\x00', 0x40) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000b00)=0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000e80)="8d2f92a4fa3e5c73b9ce6d2e5af66b9271f90f296590e9dc509fa009f20b312ddc33cda70c2025ff7ffd6b2e87a256dd783e5554d6d1140ed38a43e982f25fc771523b88234fe5e00697d1da3578e5bab1b31c79d359998ce4d4d5ecfc3c54e2bf175b416365fcabe2a842da2046829a66f4e438b5cef9dc2cc610fb015154d7d66f09e0df22008b74c88022f3acc9c72c45c789807a9b992459152e05344d695906c8ecb375968cae60abd3b982148021e2cfa7229d33921b69cd1695ae2a29d1", 0xc1, 0x24004005, &(0x7f0000000040)={0x2, 0x8000, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="491a40136fc85a859caaa5a6d4db1caadf3d408dd77c8248f79093d74db20643f731b58514e0734db5ebe93eedb556c5ee27273b0661c85a83cb4f90379ebdc62f6b7cab29409c03ddc00404d1be944750f529c4efa721d7d58f2bd5ebbfab227ee80e9ba3123eabd3c83d2c4b1a53878c3e11f7bf697c7f99c01a85828ceda4f673707c93617258e634c5c8a89230408e071074865cd4487276b1c7e7de792ff58e8125e47a4b2a6394c10c27067bde2ed99774b6cce6cd5e13f1708e37513811a0a81752df5ad008", 0xc9, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="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", 0x138}], 0x1}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001300)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001480)=[{0x0}, {&(0x7f0000000f80)=""/72, 0x48}, {&(0x7f0000000440)=""/6, 0x6}, {&(0x7f0000001000)=""/253, 0xfd}, {&(0x7f0000001100)=""/56, 0x38}, {&(0x7f0000001140)=""/215, 0xd7}, {&(0x7f0000001240)=""/62, 0x3e}, {&(0x7f0000001280)=""/35, 0x23}, {&(0x7f00000012c0)=""/16, 0x10}], 0x9, &(0x7f0000001540)=""/199, 0xc7}, 0x40) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/223, 0xdf}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="01000000"], 0x3c}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x40, 0x40, 0xff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0xfff8, 0x38, 0x2, 0xc522, 0x8}, [{}], "", ['\x00', '\x00']}, 0x278) 11:44:39 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) [ 2086.553257][T30895] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 11:44:41 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async, rerun: 32) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) (rerun: 32) syz_io_uring_submit(0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) clock_gettime(0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) read$dsp(r7, &(0x7f0000000140)=""/246, 0xf6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async, rerun: 64) io_setup(0x1b2, &(0x7f00000002c0)=0x0) (rerun: 64) io_submit(r8, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:44:41 executing program 0: add_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="1b", 0x1, 0xffffffffffffffff) 11:44:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000ffffa888000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000001008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:41 executing program 2: syz_open_procfs(0x0, &(0x7f00000002c0)='gid_map\x00') [ 2087.597174][T30907] gretap0: refused to change device tx_queue_len [ 2087.606728][T30907] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2087.663309][T30909] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:41 executing program 2: syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x12080) 11:44:41 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, 0x0) 11:44:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000ffffffc3000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000001108000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:41 executing program 2: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000e) [ 2088.292286][T30923] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2088.302784][T30924] gretap0: refused to change device tx_queue_len [ 2088.317338][T30924] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:42 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async, rerun: 32) clock_gettime(0x0, 0x0) (async, rerun: 64) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)) (rerun: 64) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)) 11:44:42 executing program 0: capget(&(0x7f0000000500)={0x20071026}, 0x0) 11:44:42 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async, rerun: 64) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async, rerun: 32) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) (rerun: 32) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) clock_gettime(0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) read$dsp(r7, &(0x7f0000000140)=""/246, 0xf6) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:44:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000000008d0000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000001208000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:42 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x160}}, 0x0) 11:44:42 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020c00062c00000028bd7000fddbdf2502001000000004d5000004d500000000070019"], 0x160}}, 0x0) [ 2089.022919][T30937] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2089.049651][T30936] gretap0: refused to change device tx_queue_len [ 2089.060124][T30936] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:42 executing program 2: select(0x0, 0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000b40)={0x0, 0x2710}) 11:44:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000001408000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000fffffff0000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2089.524843][T30950] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2089.581166][T30952] gretap0: refused to change device tx_queue_len [ 2089.590311][T30952] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000002508000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:43 executing program 2: select(0x40, &(0x7f0000000a80), 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x2710}) 11:44:43 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) (async) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) 11:44:43 executing program 0: userfaultfd(0x80002) [ 2090.047119][T30954] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:44 executing program 2: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 11:44:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000010001befa000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000004808000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:44 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 11:44:44 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = memfd_secret(0x0) ftruncate(r3, 0x5) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}) r6 = mmap$IORING_OFF_SQES(&(0x7f00008b5000/0x3000)=nil, 0x3000, 0x100000a, 0x12, r1, 0x10000000) r7 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r7) sendmsg$NL80211_CMD_DEL_INTERFACE(r7, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x0, @fd=r7, 0x2, 0x0, 0x0, 0x4, 0x0, {0x1}}) io_setup(0x1b2, &(0x7f00000002c0)) 11:44:44 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty, 0x80000}, @nfc={0x27, 0x0, 0x1, 0x6}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, r6, 0x3, @unused=[0x7, 0xb55e, 0x2, 0x5], @devid=r8}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000700)={{}, r6, 0x8, @inherit={0x48, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, {0x1, 0x4, 0x1, 0x0, 0x100000001}}}, @name="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"}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000034c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003500)={{}, r9, 0x10, @unused=[0x23, 0x7fff, 0x80000000, 0x1], @devid=r7}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000600)={{}, 0x0, 0x10, @inherit={0x60, &(0x7f0000000240)={0x1, 0x3, 0x2, 0xffffffffffffffcb, {0x0, 0x4, 0x1, 0x0, 0x200}, [0x800, 0x200, 0x8]}}, @devid=r7}) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r10, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2091.221360][T30969] gretap0: refused to change device tx_queue_len [ 2091.230953][T30969] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2091.235563][T30973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:45 executing program 0: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="dd", 0x1}, {0x0}], 0x2, 0x0) 11:44:45 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004200)='cmdline\x00') read$FUSE(r0, &(0x7f0000004240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r1, 0x0) 11:44:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000004c08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000010001befc000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:45 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) 11:44:45 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0x5460, 0x0) [ 2091.833017][T30985] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2091.991225][T30991] gretap0: refused to change device tx_queue_len [ 2092.005736][T30991] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:45 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x4, 0x912, r0, 0x0) 11:44:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000005c08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cpuset\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) 11:44:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000fffffffd000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2092.359553][T30996] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2092.692245][T31004] gretap0: refused to change device tx_queue_len [ 2092.702566][T31004] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:47 executing program 2: syz_clone(0xc8001200, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 11:44:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000006008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:47 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) clock_gettime(0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty, 0x80000}, @nfc={0x27, 0x0, 0x1, 0x6}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00'}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, r6, 0x3, @unused=[0x7, 0xb55e, 0x2, 0x5], @devid=r8}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000700)={{}, r6, 0x8, @inherit={0x48, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, {0x1, 0x4, 0x1, 0x0, 0x100000001}}}, @name="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"}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000034c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003500)={{}, r9, 0x10, @unused=[0x23, 0x7fff, 0x80000000, 0x1], @devid=r7}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000600)={{}, 0x0, 0x10, @inherit={0x60, &(0x7f0000000240)={0x1, 0x3, 0x2, 0xffffffffffffffcb, {0x0, 0x4, 0x1, 0x0, 0x200}, [0x800, 0x200, 0x8]}}, @devid=r7}) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r10, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:44:47 executing program 0: munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 11:44:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000fffffffe000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:47 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) r3 = memfd_secret(0x0) ftruncate(r3, 0x5) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f00008b5000/0x3000)=nil, 0x3000, 0x100000a, 0x12, r1, 0x10000000) (async) r7 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r7) sendmsg$NL80211_CMD_DEL_INTERFACE(r7, 0x0, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x0, @fd=r7, 0x2, 0x0, 0x0, 0x4, 0x0, {0x1}}) (async) io_setup(0x1b2, &(0x7f00000002c0)) [ 2093.594318][T31014] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2093.624162][T31015] gretap0: refused to change device tx_queue_len [ 2093.633617][T31015] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:47 executing program 0: select(0x40, &(0x7f0000000a80), 0x0, &(0x7f0000000b00)={0x6}, 0x0) 11:44:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000006808000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000007fffffff000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:48 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002140), 0x2, 0x0) syz_clone(0x60880000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)="cf61ecaae9f85d1edc24586ae790c0cde4f32478152842d56257a525dca770735f0369362e3ba0") read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) gettid() geteuid() geteuid() read$FUSE(r0, 0x0, 0x0) [ 2094.216989][T31030] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2094.466327][T31032] gretap0: refused to change device tx_queue_len [ 2094.475738][T31032] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:48 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) r3 = memfd_secret(0x0) ftruncate(r3, 0x5) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f00008b5000/0x3000)=nil, 0x3000, 0x100000a, 0x12, r1, 0x10000000) (async) r7 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r7) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r7, 0x0, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x0, @fd=r7, 0x2, 0x0, 0x0, 0x4, 0x0, {0x1}}) (async) io_setup(0x1b2, &(0x7f00000002c0)) 11:44:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000006c08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:48 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) (async, rerun: 64) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (rerun: 64) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) (async, rerun: 32) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (rerun: 32) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty, 0x80000}, @nfc={0x27, 0x0, 0x1, 0x6}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, r6, 0x3, @unused=[0x7, 0xb55e, 0x2, 0x5], @devid=r8}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000700)={{}, r6, 0x8, @inherit={0x48, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, {0x1, 0x4, 0x1, 0x0, 0x100000001}}}, @name="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"}) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000034c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003500)={{}, r9, 0x10, @unused=[0x23, 0x7fff, 0x80000000, 0x1], @devid=r7}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000600)={{}, 0x0, 0x10, @inherit={0x60, &(0x7f0000000240)={0x1, 0x3, 0x2, 0xffffffffffffffcb, {0x0, 0x4, 0x1, 0x0, 0x200}, [0x800, 0x200, 0x8]}}, @devid=r7}) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r10, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:44:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000ffffffff000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2094.896342][T31039] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:48 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps_rollup\x00') [ 2094.998425][T31046] gretap0: refused to change device tx_queue_len [ 2095.007878][T31046] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000060ffffffffff000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000007008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:49 executing program 0: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x1000000) [ 2095.716888][T31058] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:49 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, 0x0) fallocate(r0, 0x0, 0x0, 0x21d42a8a) rename(0x0, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') close(r0) setxattr$incfs_id(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240), &(0x7f0000000280)={'0000000000000000000000000000000', 0x33}, 0x20, 0x2) dup(r0) [ 2095.811744][T31059] gretap0: refused to change device tx_queue_len [ 2095.822055][T31059] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:49 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) poll(&(0x7f0000000000)=[{r0, 0x10}, {r0, 0x22}, {r0, 0x120}], 0x3, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x585b02, 0x28) io_setup(0x1b2, &(0x7f0000000100)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000240)={r6, r7+10000000}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = fcntl$dupfd(r0, 0x0, r1) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001500)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x4000, r2}, 0x18) r12 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000015c0), 0x44080, 0x84) io_submit(0x0, 0x3, &(0x7f0000001640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x6e80, 0xffffffffffffffff, &(0x7f0000000500)="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", 0x1000, 0x7, 0x0, 0x3, r9}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f0000000380)="58e6c836022d28a956650c960a13815c2984d4bee1caf0e99e7b064400a20e8fc5b2c90cbaebc08fa0c5f6e3c6f894d33d0dd56ca261ea69f4c5cb461163f8e4d968a35a8d1f8737a535020606a9b9120b640506828811c0688f3a0c4eaac683b36271b509b63d0213e9f843b7a61f5a46c11ab93afe12c1dea1b9c9bd3092244881c3b95b18f5c3e9685ec388a8636b88510301c7d3ce884f7c533a", 0x9c, 0xffffffffffffff80, 0x0, 0x2, r10}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x7, 0x8, r11, &(0x7f0000001540)="6fee73222295bb8c82340e3e89a369db16f7677b3260488f570216398f4a30759acc6337285d6091d56ecdfbd9132d650d535086a9bc0bc3ddd543cb9a1cd599d6c7a8f30918a3ba3a34169da8cee5c19e6c9ee4ca5054fcc719409f4c3996dc06bde87989461b65fcc3a2e7393efffe23f3a1ac250651fe9d", 0x79, 0x1e9dfd07, 0x0, 0x2, r12}]) 11:44:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000007408000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:49 executing program 0: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x21d42a8a) fcntl$addseals(r0, 0x409, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xfff, 0x0) 11:44:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000002000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2096.187976][T31066] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:50 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2402, 0x110) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:44:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000007a08000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2096.520915][T31071] gretap0: refused to change device tx_queue_len [ 2096.529981][T31071] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000003000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2096.907204][T31076] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000200000008000100000000000a000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2097.211046][T31080] gretap0: refused to change device tx_queue_len [ 2097.225756][T31080] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2097.558569][T31085] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 2097.567258][T31085] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000004000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000200000008000100000000000b000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2098.049329][T31087] gretap0: refused to change device tx_queue_len [ 2098.058596][T31087] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2098.163739][T31089] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 2098.172368][T31089] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000005000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2098.645437][T31092] gretap0: refused to change device tx_queue_len [ 2098.661200][T31092] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:53 executing program 2: socket(0x2, 0xa, 0x608) 11:44:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000018000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:53 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) poll(&(0x7f0000000000)=[{r0, 0x10}, {r0, 0x22}, {r0, 0x120}], 0x3, 0x1) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (rerun: 32) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x585b02, 0x28) (async, rerun: 64) io_setup(0x1b2, &(0x7f0000000100)) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000240)={r6, r7+10000000}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = fcntl$dupfd(r0, 0x0, r1) (async) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001500)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x4000, r2}, 0x18) r12 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000015c0), 0x44080, 0x84) io_submit(0x0, 0x3, &(0x7f0000001640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x6e80, 0xffffffffffffffff, &(0x7f0000000500)="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", 0x1000, 0x7, 0x0, 0x3, r9}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f0000000380)="58e6c836022d28a956650c960a13815c2984d4bee1caf0e99e7b064400a20e8fc5b2c90cbaebc08fa0c5f6e3c6f894d33d0dd56ca261ea69f4c5cb461163f8e4d968a35a8d1f8737a535020606a9b9120b640506828811c0688f3a0c4eaac683b36271b509b63d0213e9f843b7a61f5a46c11ab93afe12c1dea1b9c9bd3092244881c3b95b18f5c3e9685ec388a8636b88510301c7d3ce884f7c533a", 0x9c, 0xffffffffffffff80, 0x0, 0x2, r10}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x7, 0x8, r11, &(0x7f0000001540)="6fee73222295bb8c82340e3e89a369db16f7677b3260488f570216398f4a30759acc6337285d6091d56ecdfbd9132d650d535086a9bc0bc3ddd543cb9a1cd599d6c7a8f30918a3ba3a34169da8cee5c19e6c9ee4ca5054fcc719409f4c3996dc06bde87989461b65fcc3a2e7393efffe23f3a1ac250651fe9d", 0x79, 0x1e9dfd07, 0x0, 0x2, r12}]) 11:44:53 executing program 0: r0 = inotify_init() ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 11:44:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000006000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:53 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2402, 0x110) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2402, 0x110) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) (async) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2099.664779][T31098] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 2099.673425][T31098] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2099.790201][T31102] gretap0: refused to change device tx_queue_len [ 2099.799511][T31102] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000029000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000007000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2100.243439][T31108] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 11:44:54 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (rerun: 64) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) poll(&(0x7f0000000000)=[{r0, 0x10}, {r0, 0x22}, {r0, 0x120}], 0x3, 0x1) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async, rerun: 32) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x585b02, 0x28) (async) io_setup(0x1b2, &(0x7f0000000100)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000240)={r6, r7+10000000}) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = fcntl$dupfd(r0, 0x0, r1) (async, rerun: 64) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001500)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x4000, r2}, 0x18) (async, rerun: 64) r12 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000015c0), 0x44080, 0x84) io_submit(0x0, 0x3, &(0x7f0000001640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x6e80, 0xffffffffffffffff, &(0x7f0000000500)="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", 0x1000, 0x7, 0x0, 0x3, r9}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f0000000380)="58e6c836022d28a956650c960a13815c2984d4bee1caf0e99e7b064400a20e8fc5b2c90cbaebc08fa0c5f6e3c6f894d33d0dd56ca261ea69f4c5cb461163f8e4d968a35a8d1f8737a535020606a9b9120b640506828811c0688f3a0c4eaac683b36271b509b63d0213e9f843b7a61f5a46c11ab93afe12c1dea1b9c9bd3092244881c3b95b18f5c3e9685ec388a8636b88510301c7d3ce884f7c533a", 0x9c, 0xffffffffffffff80, 0x0, 0x2, r10}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x7, 0x8, r11, &(0x7f0000001540)="6fee73222295bb8c82340e3e89a369db16f7677b3260488f570216398f4a30759acc6337285d6091d56ecdfbd9132d650d535086a9bc0bc3ddd543cb9a1cd599d6c7a8f30918a3ba3a34169da8cee5c19e6c9ee4ca5054fcc719409f4c3996dc06bde87989461b65fcc3a2e7393efffe23f3a1ac250651fe9d", 0x79, 0x1e9dfd07, 0x0, 0x2, r12}]) 11:44:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000200000008000100000000002c000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2100.420202][T31111] gretap0: refused to change device tx_queue_len [ 2100.431491][T31111] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000008000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2100.808355][T31120] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 11:44:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002200)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x0) 11:44:54 executing program 0: syz_clone(0xe4000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000080)) 11:44:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000034000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2101.102976][T31125] gretap0: refused to change device tx_queue_len [ 2101.119160][T31125] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2101.289753][T31129] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:55 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2402, 0x110) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) clock_gettime(0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:44:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000009000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$FUSE_INTERRUPT(r0, 0x0, 0xfdde) 11:44:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000004000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:55 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0xfffffffe, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) write$dsp(r0, &(0x7f0000000300)="0fdc0908dd678c80d444f409f5f19a8d5127d296fe4ac95b4d86042fa325a5fe3d5d9a0f474a88117db2038d49c4fe934e35a6034337b81da63902b78299bdb57c156695b8d5a1662e2e06eb2f20eec0c81c26ff9f6b8df37b9ad16928f978fbd5a0b88c25b5d51ed622c31d68dc42c8b5db5e3d1bbe0b59957e6e4e504b8ac04c87745b097e264650c77b3eaa4c5da6a2a11211e45924e51b4c5cc8b376952fb74125bb", 0xa4) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) [ 2101.856250][T31138] gretap0: refused to change device tx_queue_len [ 2101.865453][T31138] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2101.937444][T31144] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 11:44:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000180), 0x4) 11:44:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000005000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:56 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/psched\x00') read$FUSE(r0, 0x0, 0x47) 11:44:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000a000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2102.379316][T31153] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 11:44:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000200000008000100000000000a000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$P9_RGETATTR(r0, &(0x7f0000000340)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0xee01, 0xffffffffffffffff}}, 0xa0) [ 2102.821764][T31157] gretap0: refused to change device tx_queue_len [ 2102.831210][T31157] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2102.895119][T31162] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 2102.903976][T31162] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:56 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000000000), 0x0, 0x0) 11:44:56 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) write$dsp(r8, &(0x7f0000000300)="90d9c5b5e9fe229a99295c12331671faecfa4868359cb3b6e7e45afcc1a6468e0134a8549b9cc35a737ad89b3e87045814558204c14615923993c169a343547fe6d5d62b3719d760b1de1382373313e06739a9bb3c106b8f59ff8a7c53796fe0fb0e3315abe3d3472d34d7cfe4b00b8c87e2bd92a059c6d617f98748a4acc1726ae65bdede8846fd4cd1199a0de679f40b13193bc9d73b06686652e20fb799c124f01ad85a77a875f16a08f1c6cde702959f2de3fcb427f8d548764e", 0xbc) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:44:57 executing program 0: open$dir(&(0x7f0000000140)='./file0/file0\x00', 0x40, 0x10f) r0 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@file={0x1, './file0/file0\x00'}, 0x6e) clock_gettime(0x1, &(0x7f0000000ec0)) mq_open(&(0x7f0000000f40)='\'\x00', 0x40, 0x21, &(0x7f0000000f80)={0x7, 0x7f, 0x7fffffffffffffff, 0x47d}) getsockname$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) connect$unix(r1, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000100)={0x20000000}) 11:44:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000b000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000200000008000100000000000b000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:57 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async, rerun: 32) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async, rerun: 32) syz_io_uring_setup(0xfffffffe, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async, rerun: 32) write$dsp(r0, &(0x7f0000000300)="0fdc0908dd678c80d444f409f5f19a8d5127d296fe4ac95b4d86042fa325a5fe3d5d9a0f474a88117db2038d49c4fe934e35a6034337b81da63902b78299bdb57c156695b8d5a1662e2e06eb2f20eec0c81c26ff9f6b8df37b9ad16928f978fbd5a0b88c25b5d51ed622c31d68dc42c8b5db5e3d1bbe0b59957e6e4e504b8ac04c87745b097e264650c77b3eaa4c5da6a2a11211e45924e51b4c5cc8b376952fb74125bb", 0xa4) (rerun: 32) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async, rerun: 32) io_setup(0x1b2, &(0x7f00000002c0)) (rerun: 32) 11:44:57 executing program 2: r0 = semget(0x3, 0x0, 0x0) semop(r0, &(0x7f0000000300)=[{0x0, 0x401}], 0x1) [ 2103.560355][T31167] gretap0: refused to change device tx_queue_len [ 2103.575442][T31167] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2103.682679][T31173] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 2103.691209][T31173] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000c000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:44:57 executing program 2: pipe(&(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r0, 0x0, 0x0) 11:44:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000010000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:57 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) [ 2104.243975][T31186] gretap0: refused to change device tx_queue_len [ 2104.253433][T31186] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000d000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2104.584561][T31191] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 2104.598055][T31191] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 11:44:58 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) [ 2105.015240][T31198] gretap0: refused to change device tx_queue_len [ 2105.024416][T31198] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:44:59 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) clock_gettime(0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) write$dsp(r8, &(0x7f0000000300)="90d9c5b5e9fe229a99295c12331671faecfa4868359cb3b6e7e45afcc1a6468e0134a8549b9cc35a737ad89b3e87045814558204c14615923993c169a343547fe6d5d62b3719d760b1de1382373313e06739a9bb3c106b8f59ff8a7c53796fe0fb0e3315abe3d3472d34d7cfe4b00b8c87e2bd92a059c6d617f98748a4acc1726ae65bdede8846fd4cd1199a0de679f40b13193bc9d73b06686652e20fb799c124f01ad85a77a875f16a08f1c6cde702959f2de3fcb427f8d548764e", 0xbc) (async) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:44:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000018000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:44:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x1002, 0x0, 0x0) 11:44:59 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) [ 2106.062351][T31202] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 2106.070876][T31202] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:00 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) syz_io_uring_setup(0xfffffffe, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) write$dsp(r0, &(0x7f0000000300)="0fdc0908dd678c80d444f409f5f19a8d5127d296fe4ac95b4d86042fa325a5fe3d5d9a0f474a88117db2038d49c4fe934e35a6034337b81da63902b78299bdb57c156695b8d5a1662e2e06eb2f20eec0c81c26ff9f6b8df37b9ad16928f978fbd5a0b88c25b5d51ed622c31d68dc42c8b5db5e3d1bbe0b59957e6e4e504b8ac04c87745b097e264650c77b3eaa4c5da6a2a11211e45924e51b4c5cc8b376952fb74125bb", 0xa4) (async) clock_gettime(0x0, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)) 11:45:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000e000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:00 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) connect(r0, &(0x7f0000000ac0)=@in6={0x18, 0x2}, 0xc) 11:45:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000029000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:00 executing program 0: r0 = socket$inet(0x18, 0x3, 0x102) getsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) [ 2106.982185][T31217] gretap0: refused to change device tx_queue_len [ 2106.991629][T31217] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2107.011782][T31218] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 11:45:00 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) (async) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) dup(r7) (async) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) write$dsp(r8, &(0x7f0000000300)="90d9c5b5e9fe229a99295c12331671faecfa4868359cb3b6e7e45afcc1a6468e0134a8549b9cc35a737ad89b3e87045814558204c14615923993c169a343547fe6d5d62b3719d760b1de1382373313e06739a9bb3c106b8f59ff8a7c53796fe0fb0e3315abe3d3472d34d7cfe4b00b8c87e2bd92a059c6d617f98748a4acc1726ae65bdede8846fd4cd1199a0de679f40b13193bc9d73b06686652e20fb799c124f01ad85a77a875f16a08f1c6cde702959f2de3fcb427f8d548764e", 0xbc) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:45:00 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0xfcf1c505f9e89622, 0x0) 11:45:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000f000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000200000008000100000000002c000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:01 executing program 0: setitimer(0x0, &(0x7f0000000100)={{}, {0x8000000001}}, 0x0) 11:45:01 executing program 2: pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) [ 2107.685349][T31233] gretap0: refused to change device tx_queue_len [ 2107.694620][T31233] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2107.762857][T31236] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 11:45:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000010000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000034000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:01 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r0, &(0x7f0000000080)="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", 0x171, 0x0, 0x0, 0x0) 11:45:01 executing program 0: socket(0x10, 0x0, 0x80) 11:45:01 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000f45000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/123, 0xfffffffffffffd6c, 0x1, &(0x7f00000003c0)=""/161, 0xfffffffffffffdfd}, &(0x7f0000000240)=0x40) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000004, 0x4010, r5, 0x8c6d36f44872bd90) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)=0x9) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) r6 = syz_open_dev$vcsa(&(0x7f0000000280), 0xff, 0xc081) openat$cgroup_ro(r6, &(0x7f0000000480)='blkio.bfq.time\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) [ 2108.378336][T31247] gretap0: refused to change device tx_queue_len [ 2108.392973][T31247] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:02 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000180), 0x8, 0xf487cab8fa12fd8d) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000240)={0xa, &(0x7f00000001c0)=[{0x101, 0x3, 0x0, 0x9}, {0x979, 0x1, 0x2, 0x4}, {0x2, 0x6, 0x81}, {0x20, 0xff, 0x2, 0x1}, {0x101, 0x1, 0x0, 0x8}, {0x5, 0x1d, 0xe9, 0x7}, {0x7fff, 0x2, 0x7, 0x3ff}, {0x0, 0xd6, 0x0, 0xffff}, {0x9, 0x22, 0x4, 0x8}, {0x9, 0xff, 0x2}]}) io_uring_enter(r4, 0x4ed3, 0x496e, 0x12, &(0x7f0000000100)={[0xfffffffffffffffe]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) r6 = accept$inet(r3, &(0x7f0000000280)={0x2, 0x0, @initdev}, &(0x7f0000000440)=0x10) recvmsg(r6, &(0x7f0000002680)={&(0x7f0000000480)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000600)=""/94, 0x5e}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2, &(0x7f0000001680)=""/4096, 0x1000}, 0x40010102) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000300)=""/261, 0x105) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:45:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000000680300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:02 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred, @rights, @cred, @rights, @cred, @rights, @rights], 0xe8}, 0x1) 11:45:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000011000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:02 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) [ 2108.885915][T31261] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:02 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000040)=0xc) 11:45:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008020300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2109.102637][T31266] gretap0: refused to change device tx_queue_len [ 2109.111964][T31266] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000012000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:03 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @remote, @val, {@ipv4}}, 0x0) [ 2109.472472][T31274] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:03 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000001340), 0x10, 0x0, 0x0) 11:45:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008030300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2109.787959][T31277] gretap0: refused to change device tx_queue_len [ 2109.797361][T31277] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2110.119206][T31285] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:04 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async, rerun: 32) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000f45000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/123, 0xfffffffffffffd6c, 0x1, &(0x7f00000003c0)=""/161, 0xfffffffffffffdfd}, &(0x7f0000000240)=0x40) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000004, 0x4010, r5, 0x8c6d36f44872bd90) (async, rerun: 64) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async, rerun: 64) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)=0x9) clock_gettime(0x0, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async, rerun: 32) r6 = syz_open_dev$vcsa(&(0x7f0000000280), 0xff, 0xc081) (rerun: 32) openat$cgroup_ro(r6, &(0x7f0000000480)='blkio.bfq.time\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)) 11:45:04 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) (async, rerun: 32) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (rerun: 32) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000180), 0x8, 0xf487cab8fa12fd8d) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000240)={0xa, &(0x7f00000001c0)=[{0x101, 0x3, 0x0, 0x9}, {0x979, 0x1, 0x2, 0x4}, {0x2, 0x6, 0x81}, {0x20, 0xff, 0x2, 0x1}, {0x101, 0x1, 0x0, 0x8}, {0x5, 0x1d, 0xe9, 0x7}, {0x7fff, 0x2, 0x7, 0x3ff}, {0x0, 0xd6, 0x0, 0xffff}, {0x9, 0x22, 0x4, 0x8}, {0x9, 0xff, 0x2}]}) io_uring_enter(r4, 0x4ed3, 0x496e, 0x12, &(0x7f0000000100)={[0xfffffffffffffffe]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) r6 = accept$inet(r3, &(0x7f0000000280)={0x2, 0x0, @initdev}, &(0x7f0000000440)=0x10) recvmsg(r6, &(0x7f0000002680)={&(0x7f0000000480)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000600)=""/94, 0x5e}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2, &(0x7f0000001680)=""/4096, 0x1000}, 0x40010102) (async) clock_gettime(0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 32) read$dsp(r0, &(0x7f0000000300)=""/261, 0x105) (rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) (async, rerun: 32) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (rerun: 32) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:45:04 executing program 2: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40)='./file0\x00') 11:45:04 executing program 0: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0\x00') open$dir(&(0x7f0000000100)='./file1\x00', 0x200, 0x0) 11:45:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800001b000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008040300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2111.201488][T31292] gretap0: refused to change device tx_queue_len [ 2111.211045][T31292] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:05 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @random="7705000001d7", @val, {@ipv4}}, 0x0) [ 2111.324555][T31295] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000024000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008050300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:05 executing program 0: shmat(0x0, &(0x7f0000ff9000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ff7000/0x1000)=nil, 0x0) 11:45:05 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000001000)) [ 2111.814565][T31307] gretap0: refused to change device tx_queue_len [ 2111.824747][T31307] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2111.895511][T31310] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008060300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2112.352233][T31316] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000025000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:06 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000000000000001}) 11:45:06 executing program 0: syz_emit_ethernet(0x40, &(0x7f0000000080)={@random="c5e004603f40", @broadcast, @val, {@ipv6}}, 0x0) 11:45:06 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) (async) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000180), 0x8, 0xf487cab8fa12fd8d) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000240)={0xa, &(0x7f00000001c0)=[{0x101, 0x3, 0x0, 0x9}, {0x979, 0x1, 0x2, 0x4}, {0x2, 0x6, 0x81}, {0x20, 0xff, 0x2, 0x1}, {0x101, 0x1, 0x0, 0x8}, {0x5, 0x1d, 0xe9, 0x7}, {0x7fff, 0x2, 0x7, 0x3ff}, {0x0, 0xd6, 0x0, 0xffff}, {0x9, 0x22, 0x4, 0x8}, {0x9, 0xff, 0x2}]}) io_uring_enter(r4, 0x4ed3, 0x496e, 0x12, &(0x7f0000000100)={[0xfffffffffffffffe]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) accept$inet(r3, &(0x7f0000000280)={0x2, 0x0, @initdev}, &(0x7f0000000440)=0x10) (async) r6 = accept$inet(r3, &(0x7f0000000280)={0x2, 0x0, @initdev}, &(0x7f0000000440)=0x10) recvmsg(r6, &(0x7f0000002680)={&(0x7f0000000480)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000600)=""/94, 0x5e}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2, &(0x7f0000001680)=""/4096, 0x1000}, 0x40010102) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000300)=""/261, 0x105) (async) read$dsp(r0, &(0x7f0000000300)=""/261, 0x105) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:45:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008070300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:06 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async, rerun: 64) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000f45000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/123, 0xfffffffffffffd6c, 0x1, &(0x7f00000003c0)=""/161, 0xfffffffffffffdfd}, &(0x7f0000000240)=0x40) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (rerun: 64) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000004, 0x4010, r5, 0x8c6d36f44872bd90) (async, rerun: 32) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async, rerun: 32) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)=0x9) (async) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) r6 = syz_open_dev$vcsa(&(0x7f0000000280), 0xff, 0xc081) openat$cgroup_ro(r6, &(0x7f0000000480)='blkio.bfq.time\x00', 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) [ 2113.238286][T31323] gretap0: refused to change device tx_queue_len [ 2113.247464][T31323] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2113.250044][T31324] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:07 executing program 0: pipe2(&(0x7f0000002b80)={0xffffffffffffffff}, 0x0) dup(r0) 11:45:07 executing program 2: syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[], 0x0) clock_gettime(0x4, &(0x7f0000000040)) 11:45:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000048000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008080300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:07 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)="f98f036650879ddc33988dc8", 0xc) 11:45:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) [ 2113.830595][T31340] gretap0: refused to change device tx_queue_len [ 2113.839644][T31340] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2113.916629][T31342] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800004c000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:07 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) ioctl$SNDCTL_SYNTH_MEMAVL(r5, 0xc004510e, &(0x7f0000000100)=0x3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r6, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) mprotect(&(0x7f0000412000/0x2000)=nil, 0x2000, 0x1000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:45:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008090300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:08 executing program 0: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0\x00') lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 11:45:08 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000240)=""/57, 0x39}], 0x2, &(0x7f0000000500)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000380)=""/54, 0x36}, {&(0x7f00000003c0)=""/105, 0x69}, {&(0x7f0000001500)=""/148, 0x94}, {&(0x7f00000015c0)=""/210, 0xd2}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f00000016c0)=""/140, 0x8c}, {&(0x7f0000001780)=""/252, 0xfc}, {&(0x7f0000001880)=""/230, 0xe6}, {&(0x7f0000006e00)=""/231, 0xe7}], 0x9, &(0x7f0000001b40)=""/140, 0x8c}}, {{&(0x7f0000001c00)=@rc, 0x80, &(0x7f0000004740)=[{&(0x7f0000004340)=""/117, 0x75}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/242, 0xf2}, {&(0x7f0000002e00)=""/130, 0x82}, {&(0x7f00000043c0)=""/2}], 0x4, &(0x7f0000002ec0)}, 0x3f}, {{&(0x7f0000002f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000006d40)=[{&(0x7f0000002f80)=""/21, 0xffffffffffffff87}, {&(0x7f0000002fc0)=""/125, 0x7d}, {&(0x7f0000003040)=""/55, 0x37}, {&(0x7f0000003080)=""/210, 0xd2}, {&(0x7f0000003180)=""/10, 0xa}, {&(0x7f00000031c0)=""/51, 0x33}, {&(0x7f0000003200)=""/43, 0x2b}, {&(0x7f0000003240)=""/116, 0x74}, {&(0x7f00000032c0)=""/122, 0x7a}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000006b40)=""/214, 0xd6}, {&(0x7f0000006c40)=""/244, 0xf4}], 0xc, &(0x7f0000004400)=""/73, 0x49}, 0x2}, {{&(0x7f0000004480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000004700)=[{&(0x7f0000004500)=""/254, 0xfe}, {&(0x7f0000004600)=""/203, 0xcb}], 0x2}, 0x7}, {{0x0, 0x0, &(0x7f00000068c0)}, 0x2}], 0x6, 0x40, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0xe}]}, 0x34}}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000002ec0)={0x59de, 0xbe2, &(0x7f0000001980)="f0bac4a2966a931cd691f70e5928d49829e4d639c0db614907d1af5fe7bf37e61342c818009cd4de8b87354526e955493e8ed9ee96ad9908a3b6af15f994afdbfa4d850c63ab8df3bc5514b48686a701d966ccc9fcd30726c6debd5308dfac1f6bf0bc4ad8ccf99f0cffada2cb129add5ed0d6985fe3d2d116fea8328a790cbcab35a71010e200008c1188aa7e9dfe710a1a85db3d37954f5e6e259cc4ed07a58f5bb27cc08474872d7d2c66db8dbc5fd0a8ffb342126c4281f16b46b47cf8ccdb5294b5be217b108f1a8aaa", &(0x7f0000001c80)="cfc3c03224f1af21feb26bbe9103d2c605ad0861c2281907f478e39b3a8dbd1cf7a708c2b85627365decb18671629024f408eb278c20c900d06fa7a6228efa16cb2989a9c727e76cb0bae0b011743a458e32b6044d6a0e86bc35af1a16eb", 0xcc, 0x5e}) dup(r3) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000006ac0)={[{0x0, 0xffff, 0xea, 0x9a, 0x2, 0x4, 0x13, 0x0, 0x1, 0x0, 0x4, 0x0, 0x1aef}, {0x1, 0x0, 0x54, 0x0, 0x7, 0x3, 0x5, 0x5, 0x3, 0x8, 0x28, 0x1, 0x5}, {0x20, 0x3ff, 0x7b, 0x7f, 0x9, 0x0, 0x1, 0xa9, 0x2, 0xb2, 0x4, 0x1, 0x5e0}], 0xffff}) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) 11:45:08 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @random, @val, {@ipv4}}, 0x0) [ 2114.432852][T31351] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2114.468426][T31352] gretap0: refused to change device tx_queue_len [ 2114.477592][T31352] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000000000080a0300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:08 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @broadcast, @empty, @multicast1}}}}, 0x0) 11:45:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000060000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:08 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x3}, 0xc) [ 2114.880704][T31364] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000000000080b0300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:08 executing program 0: mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ff1000/0xe000)=nil, 0xe000) 11:45:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000240)="f2c97dc46fbdd018b0b3190151804a6f2c25f02bc27159a39346dd51d30c435aade144ac01a879e95f3fa1a548514d0152f2b06a75f6660d65826d26f9edcd2a201da61341555db3605832b8df93dc22ec66937f6ba793cf3254eb2facdd6843f061dd760581a3ea45373b426c29efb22c2f28d09e37f0f88df8055c1407c301059673b1532cd8ab1df59372d56a0a86ed", 0x91}], 0x1}, 0x0) [ 2115.328049][T31374] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000068000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 11:45:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000000000080c0300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2116.594988][T31383] gretap0: refused to change device tx_queue_len [ 2116.604461][T31383] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2116.658531][T31386] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:10 executing program 0: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x1ff) 11:45:10 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) (async) r6 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) ioctl$SNDCTL_SYNTH_MEMAVL(r5, 0xc004510e, &(0x7f0000000100)=0x3) (async) ioctl$SNDCTL_SYNTH_MEMAVL(r5, 0xc004510e, &(0x7f0000000100)=0x3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r6, 0x10000000) clock_gettime(0x0, 0x0) (async) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) mprotect(&(0x7f0000412000/0x2000)=nil, 0x2000, 0x1000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:45:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800006c000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:10 executing program 2: r0 = syz_open_dev$hidraw(&(0x7f0000000440), 0x81, 0x0) read$hidraw(r0, &(0x7f0000000480)=""/102, 0x66) 11:45:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000000000080d0300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:10 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async, rerun: 32) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000240)=""/57, 0x39}], 0x2, &(0x7f0000000500)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000380)=""/54, 0x36}, {&(0x7f00000003c0)=""/105, 0x69}, {&(0x7f0000001500)=""/148, 0x94}, {&(0x7f00000015c0)=""/210, 0xd2}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f00000016c0)=""/140, 0x8c}, {&(0x7f0000001780)=""/252, 0xfc}, {&(0x7f0000001880)=""/230, 0xe6}, {&(0x7f0000006e00)=""/231, 0xe7}], 0x9, &(0x7f0000001b40)=""/140, 0x8c}}, {{&(0x7f0000001c00)=@rc, 0x80, &(0x7f0000004740)=[{&(0x7f0000004340)=""/117, 0x75}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/242, 0xf2}, {&(0x7f0000002e00)=""/130, 0x82}, {&(0x7f00000043c0)=""/2}], 0x4, &(0x7f0000002ec0)}, 0x3f}, {{&(0x7f0000002f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000006d40)=[{&(0x7f0000002f80)=""/21, 0xffffffffffffff87}, {&(0x7f0000002fc0)=""/125, 0x7d}, {&(0x7f0000003040)=""/55, 0x37}, {&(0x7f0000003080)=""/210, 0xd2}, {&(0x7f0000003180)=""/10, 0xa}, {&(0x7f00000031c0)=""/51, 0x33}, {&(0x7f0000003200)=""/43, 0x2b}, {&(0x7f0000003240)=""/116, 0x74}, {&(0x7f00000032c0)=""/122, 0x7a}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000006b40)=""/214, 0xd6}, {&(0x7f0000006c40)=""/244, 0xf4}], 0xc, &(0x7f0000004400)=""/73, 0x49}, 0x2}, {{&(0x7f0000004480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000004700)=[{&(0x7f0000004500)=""/254, 0xfe}, {&(0x7f0000004600)=""/203, 0xcb}], 0x2}, 0x7}, {{0x0, 0x0, &(0x7f00000068c0)}, 0x2}], 0x6, 0x40, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0xe}]}, 0x34}}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000002ec0)={0x59de, 0xbe2, &(0x7f0000001980)="f0bac4a2966a931cd691f70e5928d49829e4d639c0db614907d1af5fe7bf37e61342c818009cd4de8b87354526e955493e8ed9ee96ad9908a3b6af15f994afdbfa4d850c63ab8df3bc5514b48686a701d966ccc9fcd30726c6debd5308dfac1f6bf0bc4ad8ccf99f0cffada2cb129add5ed0d6985fe3d2d116fea8328a790cbcab35a71010e200008c1188aa7e9dfe710a1a85db3d37954f5e6e259cc4ed07a58f5bb27cc08474872d7d2c66db8dbc5fd0a8ffb342126c4281f16b46b47cf8ccdb5294b5be217b108f1a8aaa", &(0x7f0000001c80)="cfc3c03224f1af21feb26bbe9103d2c605ad0861c2281907f478e39b3a8dbd1cf7a708c2b85627365decb18671629024f408eb278c20c900d06fa7a6228efa16cb2989a9c727e76cb0bae0b011743a458e32b6044d6a0e86bc35af1a16eb", 0xcc, 0x5e}) (async, rerun: 64) dup(r3) (async, rerun: 64) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000006ac0)={[{0x0, 0xffff, 0xea, 0x9a, 0x2, 0x4, 0x13, 0x0, 0x1, 0x0, 0x4, 0x0, 0x1aef}, {0x1, 0x0, 0x54, 0x0, 0x7, 0x3, 0x5, 0x5, 0x3, 0x8, 0x28, 0x1, 0x5}, {0x20, 0x3ff, 0x7b, 0x7f, 0x9, 0x0, 0x1, 0xa9, 0x2, 0xb2, 0x4, 0x1, 0x5e0}], 0xffff}) (async, rerun: 32) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async, rerun: 32) io_setup(0x1b2, &(0x7f00000002c0)) (rerun: 32) [ 2117.178669][T31397] gretap0: refused to change device tx_queue_len [ 2117.182733][T31393] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2117.193950][T31397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:11 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x4020940d, &(0x7f00000000c0)) 11:45:11 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e8169523010902240001ff007e000904340102d469e70009058acf"], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x0) 11:45:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000000000080e0300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000074000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2117.688474][T31410] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:11 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 11:45:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000000000080f0300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2117.900592][T31413] gretap0: refused to change device tx_queue_len [ 2117.915870][T31413] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2117.958026][ T773] usb 3-1: new high-speed USB device number 49 using dummy_hcd 11:45:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800007a000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2118.180031][T31417] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2118.253496][ T773] usb 3-1: Using ep0 maxpacket: 8 [ 2118.280908][T18696] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2118.371090][ T773] usb 3-1: config 255 has an invalid interface number: 52 but max is 0 [ 2118.379756][ T773] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2118.390636][ T773] usb 3-1: config 255 has no interface number 0 [ 2118.397180][ T773] usb 3-1: config 255 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2118.408778][ T773] usb 3-1: config 255 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2118.423907][ T773] usb 3-1: config 255 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2118.438376][ T773] usb 3-1: config 255 interface 52 has no altsetting 0 [ 2118.458067][T31419] gretap0: refused to change device tx_queue_len [ 2118.467495][T31419] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2118.682092][ T773] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 2118.691987][ T773] usb 3-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 2118.700921][ T773] usb 3-1: Product: syz [ 2118.701096][T18696] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2118.705264][ T773] usb 3-1: Manufacturer: syz [ 2118.727776][ T773] usb 3-1: SerialNumber: syz [ 2118.863841][T18696] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2118.873468][T18696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2118.881894][T18696] usb 1-1: SerialNumber: syz 11:45:12 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async) ioctl$SNDCTL_SYNTH_MEMAVL(r5, 0xc004510e, &(0x7f0000000100)=0x3) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r6, 0x10000000) (async) clock_gettime(0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) mprotect(&(0x7f0000412000/0x2000)=nil, 0x2000, 0x1000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:45:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000030000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:12 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000240)=""/57, 0x39}], 0x2, &(0x7f0000000500)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000380)=""/54, 0x36}, {&(0x7f00000003c0)=""/105, 0x69}, {&(0x7f0000001500)=""/148, 0x94}, {&(0x7f00000015c0)=""/210, 0xd2}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f00000016c0)=""/140, 0x8c}, {&(0x7f0000001780)=""/252, 0xfc}, {&(0x7f0000001880)=""/230, 0xe6}, {&(0x7f0000006e00)=""/231, 0xe7}], 0x9, &(0x7f0000001b40)=""/140, 0x8c}}, {{&(0x7f0000001c00)=@rc, 0x80, &(0x7f0000004740)=[{&(0x7f0000004340)=""/117, 0x75}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/242, 0xf2}, {&(0x7f0000002e00)=""/130, 0x82}, {&(0x7f00000043c0)=""/2}], 0x4, &(0x7f0000002ec0)}, 0x3f}, {{&(0x7f0000002f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000006d40)=[{&(0x7f0000002f80)=""/21, 0xffffffffffffff87}, {&(0x7f0000002fc0)=""/125, 0x7d}, {&(0x7f0000003040)=""/55, 0x37}, {&(0x7f0000003080)=""/210, 0xd2}, {&(0x7f0000003180)=""/10, 0xa}, {&(0x7f00000031c0)=""/51, 0x33}, {&(0x7f0000003200)=""/43, 0x2b}, {&(0x7f0000003240)=""/116, 0x74}, {&(0x7f00000032c0)=""/122, 0x7a}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000006b40)=""/214, 0xd6}, {&(0x7f0000006c40)=""/244, 0xf4}], 0xc, &(0x7f0000004400)=""/73, 0x49}, 0x2}, {{&(0x7f0000004480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000004700)=[{&(0x7f0000004500)=""/254, 0xfe}, {&(0x7f0000004600)=""/203, 0xcb}], 0x2}, 0x7}, {{0x0, 0x0, &(0x7f00000068c0)}, 0x2}], 0x6, 0x40, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0xe}]}, 0x34}}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000002ec0)={0x59de, 0xbe2, &(0x7f0000001980)="f0bac4a2966a931cd691f70e5928d49829e4d639c0db614907d1af5fe7bf37e61342c818009cd4de8b87354526e955493e8ed9ee96ad9908a3b6af15f994afdbfa4d850c63ab8df3bc5514b48686a701d966ccc9fcd30726c6debd5308dfac1f6bf0bc4ad8ccf99f0cffada2cb129add5ed0d6985fe3d2d116fea8328a790cbcab35a71010e200008c1188aa7e9dfe710a1a85db3d37954f5e6e259cc4ed07a58f5bb27cc08474872d7d2c66db8dbc5fd0a8ffb342126c4281f16b46b47cf8ccdb5294b5be217b108f1a8aaa", &(0x7f0000001c80)="cfc3c03224f1af21feb26bbe9103d2c605ad0861c2281907f478e39b3a8dbd1cf7a708c2b85627365decb18671629024f408eb278c20c900d06fa7a6228efa16cb2989a9c727e76cb0bae0b011743a458e32b6044d6a0e86bc35af1a16eb", 0xcc, 0x5e}) (async) dup(r3) (async) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000006ac0)={[{0x0, 0xffff, 0xea, 0x9a, 0x2, 0x4, 0x13, 0x0, 0x1, 0x0, 0x4, 0x0, 0x1aef}, {0x1, 0x0, 0x54, 0x0, 0x7, 0x3, 0x5, 0x5, 0x3, 0x8, 0x28, 0x1, 0x5}, {0x20, 0x3ff, 0x7b, 0x7f, 0x9, 0x0, 0x1, 0xa9, 0x2, 0xb2, 0x4, 0x1, 0x5e0}], 0xffff}) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) 11:45:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008100300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2119.101189][ T773] usb 3-1: Can not set alternate setting to 1, error: -71 [ 2119.108813][ T773] synaptics_usb: probe of 3-1:255.52 failed with error -71 [ 2119.185133][ T773] usb 3-1: USB disconnect, device number 49 [ 2119.191131][T31421] gretap0: refused to change device tx_queue_len [ 2119.193820][T31421] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2119.264560][T31425] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000050000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008110300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2119.682473][T18696] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 11:45:13 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x0, 0x1f, 0x2, 0x4, 0xff, 0x6}, 0x20, &(0x7f0000000800)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x81, 0x0, 0x100, [0x0, 0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9}]}, 0x2, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x41e}}, {0x2, &(0x7f00000008c0)=@string={0x2}}]}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) syz_open_dev$char_usb(0xc, 0xb4, 0x10001) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 2119.861326][T31438] gretap0: refused to change device tx_queue_len [ 2119.870356][T31438] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2119.941178][T31437] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000060000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008120300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2120.406472][ T5087] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2120.450930][T31445] gretap0: refused to change device tx_queue_len [ 2120.460225][T31445] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2120.629552][T31447] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2120.681120][ T5087] usb 3-1: Using ep0 maxpacket: 8 [ 2120.843479][ T5087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2120.855007][ T5087] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2120.864548][ T5087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2120.922676][ T5087] usb 3-1: config 0 descriptor?? [ 2121.233912][ T773] usb 1-1: USB disconnect, device number 45 [ 2121.245064][ T773] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device 11:45:15 executing program 0: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 11:45:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000070000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008140300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:15 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) openat(r3, &(0x7f0000000100)='./file0\x00', 0x101240, 0x2a) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2121.275715][ T5087] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 11:45:15 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000e66000/0x2000)=nil, 0x2000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) read$dsp(r0, &(0x7f0000000240)=""/96, 0x60) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) read$dsp(r1, &(0x7f00000000c0)=""/124, 0x7c) [ 2121.583841][T31459] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2121.620978][T31460] gretap0: refused to change device tx_queue_len [ 2121.629954][T31460] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:15 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x80, &(0x7f0000000000), 0x4) 11:45:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000d0080000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2121.903950][ T5087] usb 3-1: USB disconnect, device number 50 11:45:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008250300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2121.980046][ T5087] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 2122.267627][T31476] gretap0: refused to change device tx_queue_len [ 2122.276902][T31476] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:16 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000000080)) [ 2122.369843][T31478] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:16 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x0, 0x1f, 0x2, 0x4, 0xff, 0x6}, 0x20, &(0x7f0000000800)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x81, 0x0, 0x100, [0x0, 0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9}]}, 0x2, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x41e}}, {0x2, &(0x7f00000008c0)=@string={0x2}}]}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) syz_open_dev$char_usb(0xc, 0xb4, 0x10001) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 11:45:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000090000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008480300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:16 executing program 0: symlinkat(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') [ 2122.927770][T31486] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2122.977923][T31485] gretap0: refused to change device tx_queue_len [ 2122.987784][T31485] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000000000084c0300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:16 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000e66000/0x2000)=nil, 0x2000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) read$dsp(r0, &(0x7f0000000240)=""/96, 0x60) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) read$dsp(r1, &(0x7f00000000c0)=""/124, 0x7c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000e66000/0x2000)=nil, 0x2000, 0x17) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async) read$dsp(r0, &(0x7f0000000240)=""/96, 0x60) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async) clock_gettime(0x0, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)) (async) read$dsp(r1, &(0x7f00000000c0)=""/124, 0x7c) (async) [ 2123.261363][T15189] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2123.392850][T31494] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:17 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1003, 0x0, 0x0) 11:45:17 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async, rerun: 64) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) openat(r3, &(0x7f0000000100)='./file0\x00', 0x101240, 0x2a) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async, rerun: 64) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async, rerun: 32) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x12, 0xffffffffffffffff, 0x10000000) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) clock_gettime(0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) (rerun: 64) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:45:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000a0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2123.555860][T15189] usb 3-1: Using ep0 maxpacket: 8 11:45:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000000000085c0300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2123.701236][T15189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2123.712635][T15189] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2123.717910][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 2123.722349][T15189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2123.728763][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 [ 2123.854145][T15189] usb 3-1: config 0 descriptor?? [ 2123.862988][T31503] gretap0: refused to change device tx_queue_len [ 2123.872973][T31503] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:17 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt(r0, 0x0, 0x0, &(0x7f0000000040)=""/49, &(0x7f0000000080)=0x31) [ 2124.064802][T31509] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000b0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2124.203262][T15189] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2124.596494][T31517] gretap0: refused to change device tx_queue_len [ 2124.606087][T31517] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2124.830698][ T5087] usb 3-1: USB disconnect, device number 51 [ 2124.884237][ T5087] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:45:19 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x0, 0x1f, 0x2, 0x4, 0xff, 0x6}, 0x20, &(0x7f0000000800)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x81, 0x0, 0x100, [0x0, 0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9}]}, 0x2, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x41e}}, {0x2, &(0x7f00000008c0)=@string={0x2}}]}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) syz_open_dev$char_usb(0xc, 0xb4, 0x10001) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 11:45:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008600300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:19 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 11:45:19 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000e66000/0x2000)=nil, 0x2000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) read$dsp(r0, &(0x7f0000000240)=""/96, 0x60) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) read$dsp(r1, &(0x7f00000000c0)=""/124, 0x7c) 11:45:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000c0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2125.771303][T31531] gretap0: refused to change device tx_queue_len [ 2125.780681][T31531] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2125.807441][T31532] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:19 executing program 0: syz_clone(0x80200000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2125.931713][ T5087] usb 3-1: new high-speed USB device number 52 using dummy_hcd 11:45:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008680300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2126.190807][ T5087] usb 3-1: Using ep0 maxpacket: 8 [ 2126.258974][T31542] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2126.371200][ T5087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2126.383604][ T5087] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2126.393229][ T5087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2126.472037][ T5087] usb 3-1: config 0 descriptor?? [ 2126.768838][ T5087] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 11:45:20 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async, rerun: 32) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) openat(r3, &(0x7f0000000100)='./file0\x00', 0x101240, 0x2a) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) clock_gettime(0x0, 0x0) (async, rerun: 64) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 32) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) (async, rerun: 32) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:45:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000d0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000000000086c0300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:20 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x65) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000074000/0x3000)=nil, 0x3000, 0x6) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000500)=""/255, 0xff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x2181) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20000040) 11:45:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5421, &(0x7f0000000040)={'ip6gretap0\x00'}) [ 2127.232098][T31555] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2127.271513][T31557] gretap0: refused to change device tx_queue_len [ 2127.281252][T31557] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2127.369757][ T5087] usb 3-1: USB disconnect, device number 52 [ 2127.445145][ T5087] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:45:21 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x0, 0x1f, 0x2, 0x4, 0xff, 0x6}, 0x20, &(0x7f0000000800)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x81, 0x0, 0x100, [0x0, 0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9}]}, 0x2, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x41e}}, {0x2, &(0x7f00000008c0)=@string={0x2}}]}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) syz_open_dev$char_usb(0xc, 0xb4, 0x10001) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 11:45:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008700300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000e0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:21 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 2128.306469][T31576] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2128.328884][T31575] gretap0: refused to change device tx_queue_len [ 2128.340363][T31575] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:22 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x2, &(0x7f0000000c00)=@raw=[@cb_func], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d80)={0x0, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000e00)=[{}, {0x0, 0x0, 0x4}]}, 0x90) 11:45:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008740300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2128.594359][ T5087] usb 3-1: new high-speed USB device number 53 using dummy_hcd 11:45:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000f0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2128.864452][ T5087] usb 3-1: Using ep0 maxpacket: 8 [ 2128.866721][T31582] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2128.988473][ T5087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2128.999921][ T5087] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2129.009649][ T5087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2129.041207][T31584] gretap0: refused to change device tx_queue_len [ 2129.051890][T31584] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2129.088330][ T5087] usb 3-1: config 0 descriptor?? [ 2129.353170][ T5087] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 11:45:23 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x65) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x65) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000074000/0x3000)=nil, 0x3000, 0x6) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000500)=""/255, 0xff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x2181) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x2181) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20000040) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20000040) 11:45:23 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000003180), 0x0, 0x0) 11:45:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000000000087a0300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000110000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:23 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2129.913550][T15189] usb 3-1: USB disconnect, device number 53 [ 2129.918866][T31591] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2129.945088][T31594] gretap0: refused to change device tx_queue_len [ 2129.954535][T31594] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2129.995196][T15189] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:45:24 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x0, 0x1f, 0x2, 0x4, 0xff, 0x6}, 0x20, &(0x7f0000000800)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x81, 0x0, 0x100, [0x0, 0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9}]}, 0x2, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x41e}}, {0x2, &(0x7f00000008c0)=@string={0x2}}]}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) syz_open_dev$char_usb(0xc, 0xb4, 0x10001) write$char_usb(r1, 0x0, 0x0) 11:45:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000120000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x1}, 0x48) 11:45:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000500", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2130.722930][T31607] gretap0: refused to change device tx_queue_len [ 2130.735323][T31607] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:24 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000800)) 11:45:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000027120000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000600", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2131.062822][ T773] usb 3-1: new high-speed USB device number 54 using dummy_hcd 11:45:25 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x65) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000074000/0x3000)=nil, 0x3000, 0x6) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) (async) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000500)=""/255, 0xff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) (async) io_setup(0x1b2, &(0x7f00000002c0)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x2181) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20000040) 11:45:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x1b, &(0x7f00000000c0)=""/27, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) [ 2131.257033][T31617] gretap0: refused to change device tx_queue_len [ 2131.268017][T31617] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2131.381093][ T773] usb 3-1: Using ep0 maxpacket: 8 11:45:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000700", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800003f160000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2131.531806][ T773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2131.543516][ T773] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2131.553148][ T773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.618899][ T773] usb 3-1: config 0 descriptor?? [ 2131.673222][T31622] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2131.819111][T31626] gretap0: refused to change device tx_queue_len [ 2131.828457][T31626] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:25 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) (async) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2131.919039][ T773] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2133.152575][T18696] usb 3-1: USB disconnect, device number 54 [ 2133.192649][T18696] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:45:27 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x0, 0x1f, 0x2, 0x4, 0xff, 0x6}, 0x20, &(0x7f0000000800)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x81, 0x0, 0x100, [0x0, 0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9}]}, 0x2, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x41e}}, {0x2, &(0x7f00000008c0)=@string={0x2}}]}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:45:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) 11:45:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000900", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000040160000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:27 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000cec000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="262e0f7fdec4e19d71d44cc4c171fd3f66b828008ec866baf80cb8f4b8278cef66bafc0cb8feff0000ef26672e3e0fae870010b805000000b9002800000f01c167660f38140166ba420066ed0fc79d00680000", 0x53}], 0x1, 0x14, &(0x7f0000000240)=[@vmwrite={0x8, 0x0, 0x19, 0x0, 0x1, 0x0, 0x3, 0x0, 0x100000001}], 0x1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000280)=0xffffff81) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) 11:45:27 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2133.888039][T31645] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2133.931663][T31647] gretap0: refused to change device tx_queue_len [ 2133.941181][T31647] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:27 executing program 0: mkdir(&(0x7f0000003540)='./file1\x00', 0x0) 11:45:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000a00", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000001b0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2134.274857][ T773] usb 3-1: new high-speed USB device number 55 using dummy_hcd 11:45:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @private}}}], 0x20}, 0x20044045) [ 2134.359404][T31657] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000b00", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2134.541879][ T773] usb 3-1: Using ep0 maxpacket: 8 [ 2134.554995][T31661] gretap0: refused to change device tx_queue_len [ 2134.564407][T31661] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2134.731286][ T773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2134.743784][ T773] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2134.753539][ T773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.817975][ T773] usb 3-1: config 0 descriptor?? 11:45:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000240000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2135.139218][ T773] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2135.217720][T31668] gretap0: refused to change device tx_queue_len [ 2135.227003][T31668] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2136.458285][ T773] usb 3-1: USB disconnect, device number 55 [ 2136.477739][ T773] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:45:30 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x0, 0x1f, 0x2, 0x4, 0xff, 0x6}, 0x20, &(0x7f0000000800)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x81, 0x0, 0x100, [0x0, 0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9}]}, 0x2, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x41e}}, {0x2, &(0x7f00000008c0)=@string={0x2}}]}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) 11:45:30 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000280)) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000300)) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_getevents(r4, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}]) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000240)={0x3, 0x20, [0xfffffffffffffd12, 0x2, 0x0, 0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r6, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:45:30 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 11:45:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000c00", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000250000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:30 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000cec000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="262e0f7fdec4e19d71d44cc4c171fd3f66b828008ec866baf80cb8f4b8278cef66bafc0cb8feff0000ef26672e3e0fae870010b805000000b9002800000f01c167660f38140166ba420066ed0fc79d00680000", 0x53}], 0x1, 0x14, &(0x7f0000000240)=[@vmwrite={0x8, 0x0, 0x19, 0x0, 0x1, 0x0, 0x3, 0x0, 0x100000001}], 0x1) (async, rerun: 64) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async, rerun: 64) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) (async) clock_gettime(0x0, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000280)=0xffffff81) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async, rerun: 32) io_setup(0x1b2, &(0x7f00000002c0)) (rerun: 32) [ 2137.142912][T31674] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2137.165998][T31676] gretap0: refused to change device tx_queue_len [ 2137.175356][T31676] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:31 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000180)=@framed={{}, [@call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 11:45:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000d00", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000012270000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2137.580867][ T773] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2137.745598][T31692] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:31 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) [ 2137.860156][T31693] gretap0: refused to change device tx_queue_len [ 2137.869763][T31693] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2137.893410][ T773] usb 3-1: Using ep0 maxpacket: 8 11:45:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000e00", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000163f0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2138.021775][ T773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2138.033556][ T773] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2138.044022][ T773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2138.104266][ T773] usb 3-1: config 0 descriptor?? [ 2138.392535][ T773] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2138.393570][T31700] gretap0: refused to change device tx_queue_len [ 2138.416988][T31700] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2138.622024][ T773] usb 3-1: USB disconnect, device number 56 [ 2138.652000][ T773] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:45:32 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x0, 0x1f, 0x2, 0x4, 0xff, 0x6}, 0x20, &(0x7f0000000800)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x81, 0x0, 0x100, [0x0, 0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9}]}, 0x2, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x41e}}, {0x2, &(0x7f00000008c0)=@string={0x2}}]}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) 11:45:32 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000cec000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="262e0f7fdec4e19d71d44cc4c171fd3f66b828008ec866baf80cb8f4b8278cef66bafc0cb8feff0000ef26672e3e0fae870010b805000000b9002800000f01c167660f38140166ba420066ed0fc79d00680000", 0x53}], 0x1, 0x14, &(0x7f0000000240)=[@vmwrite={0x8, 0x0, 0x19, 0x0, 0x1, 0x0, 0x3, 0x0, 0x100000001}], 0x1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000280)=0xffffff81) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000cec000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="262e0f7fdec4e19d71d44cc4c171fd3f66b828008ec866baf80cb8f4b8278cef66bafc0cb8feff0000ef26672e3e0fae870010b805000000b9002800000f01c167660f38140166ba420066ed0fc79d00680000", 0x53}], 0x1, 0x14, &(0x7f0000000240)=[@vmwrite={0x8, 0x0, 0x19, 0x0, 0x1, 0x0, 0x3, 0x0, 0x100000001}], 0x1) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) (async) clock_gettime(0x0, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000280)=0xffffff81) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)) (async) 11:45:32 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x6, &(0x7f0000000180)=@framed={{}, [@func, @func, @func]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 11:45:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008001100", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000016400000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:32 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) (async) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000280)) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000300)) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_getevents(r4, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}]) (async) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000240)={0x3, 0x20, [0xfffffffffffffd12, 0x2, 0x0, 0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r6 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r6, 0x10000000) (async) clock_gettime(0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) (async) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2139.361065][T31707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2139.374937][T31709] gretap0: refused to change device tx_queue_len [ 2139.384300][T31709] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:33 executing program 0: socketpair(0x25, 0x5, 0x0, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000013c0)={[{0x0, 'hugetlb'}]}, 0x9) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001440)={0xffffffffffffffff}, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000001c80), 0x8) 11:45:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008001200", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2139.741028][T18696] usb 3-1: new high-speed USB device number 57 using dummy_hcd 11:45:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000088470000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2139.949195][T31719] netlink: 'syz-executor.1': attribute type 18 has an invalid length. [ 2139.957854][T31719] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2139.993151][T18696] usb 3-1: Using ep0 maxpacket: 8 11:45:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5, 0x0, 0x0, 0x11}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x2f}, 0x20) [ 2140.132073][T18696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2140.144288][T18696] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2140.153906][T18696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2140.244330][T18696] usb 3-1: config 0 descriptor?? 11:45:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000480000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008001300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2140.603416][T18696] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2140.768201][T31729] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2140.811387][T18696] usb 3-1: USB disconnect, device number 57 [ 2140.816890][T31728] gretap0: refused to change device tx_queue_len [ 2140.826874][T31728] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2140.890016][T18696] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:45:35 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x0, 0x1f, 0x2, 0x4, 0xff, 0x6}, 0x20, &(0x7f0000000800)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x81, 0x0, 0x100, [0x0, 0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9}]}, 0x2, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x41e}}, {0x2, &(0x7f00000008c0)=@string={0x2}}]}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) 11:45:35 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0) 11:45:35 executing program 4: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x4, 0x3, 0x69f, 0x40, 0x8, 0x2, &(0x7f0000000000)="c31af9ecf4a006f7"}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) 11:45:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008011700", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000088480000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2141.645588][T31737] gretap0: refused to change device tx_queue_len [ 2141.654609][T31737] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2141.672896][T31739] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:35 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000280)) (async) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000300)) (async) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_getevents(r4, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}]) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000240)={0x3, 0x20, [0xfffffffffffffd12, 0x2, 0x0, 0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r6 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r6, 0x10000000) clock_gettime(0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) (async) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:45:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008014600", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000004c0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:35 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xcac0, 0x0) [ 2142.040779][ T773] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2142.222394][T31748] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2142.259706][T31753] gretap0: refused to change device tx_queue_len [ 2142.269001][T31753] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x10, 0x0, 0x0, 0x3}, 0x48) [ 2142.383977][ T773] usb 3-1: Using ep0 maxpacket: 8 11:45:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000200", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2142.546949][ T773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2142.558587][ T773] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2142.568425][ T773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2142.645049][ T773] usb 3-1: config 0 descriptor?? 11:45:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000065580000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2142.963255][T31760] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2143.000120][ T773] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2143.141335][T31763] gretap0: refused to change device tx_queue_len [ 2143.150737][T31763] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2143.186204][T15189] usb 3-1: USB disconnect, device number 58 [ 2143.274067][T15189] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:45:37 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x0, 0x1f, 0x2, 0x4, 0xff, 0x6}, 0x20, &(0x7f0000000800)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x81, 0x0, 0x100, [0x0, 0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9}]}, 0x2, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x41e}}, {0x2, &(0x7f00000008c0)=@string={0x2}}]}) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:45:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000400", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:37 executing program 0: socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000040)) 11:45:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000600000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:37 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, 0x0, 0x26, 0x0, 0xb}, 0x20) 11:45:37 executing program 4: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x4, 0x3, 0x69f, 0x40, 0x8, 0x2, &(0x7f0000000000)="c31af9ecf4a006f7"}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async) clock_gettime(0x0, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) [ 2143.980239][T31769] gretap0: refused to change device tx_queue_len [ 2143.989465][T31769] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2144.067568][T31774] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:37 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000080)=@framed={{}, [@cb_func]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 11:45:37 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11b) faccessat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x200) 11:45:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000500", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000ff600000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2144.402474][T15189] usb 3-1: new high-speed USB device number 59 using dummy_hcd 11:45:38 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11b) faccessat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x1000) 11:45:38 executing program 3: r0 = getpid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffff7}) [ 2144.597090][T31787] gretap0: refused to change device tx_queue_len [ 2144.606945][T31787] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2144.703685][T15189] usb 3-1: Using ep0 maxpacket: 8 [ 2144.881924][T15189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2144.894248][T15189] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2144.903797][T15189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.976538][T15189] usb 3-1: config 0 descriptor?? [ 2145.263383][T15189] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2146.518384][ T773] usb 3-1: USB disconnect, device number 59 [ 2146.549847][ T773] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:45:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000600", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000058650000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:40 executing program 3: r0 = memfd_create(&(0x7f0000000040)='/\x00', 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x5451, 0x0) 11:45:40 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2, 0x1000) 11:45:40 executing program 4: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x4, 0x3, 0x69f, 0x40, 0x8, 0x2, &(0x7f0000000000)="c31af9ecf4a006f7"}) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) (rerun: 64) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 32) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async, rerun: 32) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async, rerun: 64) io_setup(0x1b2, &(0x7f00000002c0)) 11:45:40 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) [ 2147.285901][T31801] gretap0: refused to change device tx_queue_len [ 2147.302129][T31801] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:41 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11b) faccessat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) 11:45:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x28e4}, 0x48) 11:45:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000700", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000680000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2147.629673][ T773] usb 3-1: new high-speed USB device number 60 using dummy_hcd 11:45:41 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@generic={&(0x7f0000000c40)='./file0\x00'}, 0x18) 11:45:41 executing program 0: bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000005c0), 0x4) [ 2147.856226][T31813] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2147.921862][ T773] usb 3-1: Using ep0 maxpacket: 8 [ 2147.962878][T31815] gretap0: refused to change device tx_queue_len [ 2147.972300][T31815] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2148.072267][ T773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2148.083762][ T773] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2148.093327][ T773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:45:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000800", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2148.218458][ T773] usb 3-1: config 0 descriptor?? 11:45:42 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00'}, 0x18) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) 11:45:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000006c0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2148.452913][T31821] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 11:45:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x48) [ 2148.550102][ T773] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2148.701935][T31825] gretap0: refused to change device tx_queue_len [ 2148.711245][T31825] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000900", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2149.023617][T31830] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2149.800870][ T773] usb 3-1: USB disconnect, device number 60 [ 2149.833199][ T773] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:45:44 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:45:44 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000100)=0xda) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) read$dsp(r3, &(0x7f0000000300)=""/238, 0xee) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x2, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) 11:45:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000740000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002000)="1a", 0x1}], 0x1}, 0x0) 11:45:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000a00", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:44 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) [ 2150.522667][T31841] gretap0: refused to change device tx_queue_len [ 2150.532764][T31841] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2150.638257][T31840] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001c80)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x38}, 0x0) 11:45:44 executing program 3: syz_clone(0x4000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 11:45:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000007a0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2150.901194][T15189] usb 3-1: new high-speed USB device number 61 using dummy_hcd 11:45:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000b00", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:44 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, 0x0, 0x0) [ 2151.180908][T15189] usb 3-1: Using ep0 maxpacket: 8 11:45:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000002d80)={&(0x7f0000001640)=@abs, 0x9b, 0x0, 0x2}, 0x0) [ 2151.241451][T31855] gretap0: refused to change device tx_queue_len [ 2151.251982][T31855] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2151.362340][T15189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2151.373939][T15189] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2151.383664][T15189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.462890][T15189] usb 3-1: config 0 descriptor?? [ 2151.769215][T15189] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2152.997188][T15189] usb 3-1: USB disconnect, device number 61 [ 2153.023810][T15189] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:45:47 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000001140)='^', 0x49) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 11:45:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000c00", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000810000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:47 executing program 3: bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000005100)='./file0\x00', 0x0) 11:45:47 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x15c, 0x0, 0x0, 0x0, 0x3}, [@generic={0x27}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000380)='syzkaller\x00', 0x513a, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x4, 0x7fffffff, 0x6d7762e7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000580)=[r2, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000005c0)=[{}, {0x0, 0x1, 0xa, 0x5}, {0x0, 0x2, 0x7, 0x3}, {0x0, 0x3, 0x3, 0x5}, {0x4, 0x1, 0x7, 0x9}, {0x4, 0x4, 0xe, 0x4}, {0x2}, {0x5, 0x1, 0xe, 0xb}], 0x10, 0x9}, 0x90) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=r1, 0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000880)={r2}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000740)=@raw=[@jmp={0x5, 0x1, 0x5, 0x8, 0xb, 0x0, 0x9148e671181442cf}], &(0x7f0000000780)='GPL\x00', 0x80000001, 0x0, 0xfffffffffffffffc, 0x41000, 0x5, '\x00', 0x0, 0x17, r3, 0x8, &(0x7f0000000800)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x8, 0x7}, 0x10}, 0x90) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@func, @typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @volatile={0xe, 0x0, 0x0, 0x9, 0x3}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0, 0x2e, 0x5f, 0x61, 0x6f, 0x7f, 0x2e]}}, &(0x7f0000000bc0)=""/167, 0x51, 0xa7, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x18, 0x3f, 0x278, 0x7, 0x2000, 0xffffffffffffffff, 0x6, '\x00', r0, r2, 0x3, 0x3, 0x2}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000dc0)={r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0x20, 0x6, 0x7fff, 0xe4fd, 0x18, r4, 0x4, '\x00', 0x0, r4, 0x3, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0xf, &(0x7f00000009c0)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3f}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xb2d}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @exit, @jmp={0x5, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffff000}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1ff}], 0x0, 0xaf66, 0x8c, &(0x7f0000000a80)=""/140, 0x41100, 0x26, '\x00', r0, 0x25, r5, 0x8, &(0x7f0000000cc0)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) openat$cgroup(r4, &(0x7f00000036c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000004d00)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004e00)={0x1a, 0xc, &(0x7f0000003780)=@raw=[@btf_id={0x18, 0x9}, @cb_func={0x18, 0xd, 0x4, 0x0, 0x8}, @map_fd, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x10001}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}], &(0x7f0000003800)='syzkaller\x00', 0x6, 0x64, &(0x7f0000003840)=""/100, 0x41000, 0x18, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f00000039c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000003a00)={0x1, 0x3, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) mkdir(&(0x7f0000005100)='./file0\x00', 0x180) 11:45:47 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) (async) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000100)=0xda) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) read$dsp(r3, &(0x7f0000000300)=""/238, 0xee) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async) clock_gettime(0x2, 0x0) (async) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000000)=0x7) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (async) io_setup(0x1b2, &(0x7f00000002c0)) [ 2153.766914][T31872] gretap0: refused to change device tx_queue_len [ 2153.776626][T31872] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) close(r1) 11:45:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000d00", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:47 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109002, 0x0) 11:45:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000047880000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2154.092648][T15189] usb 3-1: new high-speed USB device number 62 using dummy_hcd 11:45:48 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)='M', 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)=[{0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 2154.270917][T31883] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2154.344996][T31884] gretap0: refused to change device tx_queue_len [ 2154.354703][T31884] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2154.421668][T15189] usb 3-1: Using ep0 maxpacket: 8 11:45:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) [ 2154.541071][T15189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2154.552494][T15189] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2154.566954][T15189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2154.595463][T15189] usb 3-1: config 0 descriptor?? [ 2154.894532][T15189] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2155.115657][T15189] usb 3-1: USB disconnect, device number 62 [ 2155.143151][T15189] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:45:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000e00", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:49 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) (async, rerun: 32) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) (rerun: 32) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000100)=0xda) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 64) read$dsp(r3, &(0x7f0000000300)=""/238, 0xee) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) (async) clock_gettime(0x2, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) (async) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) (rerun: 64) io_setup(0x1b2, &(0x7f00000002c0)) 11:45:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000048880000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:49 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002000)="1a", 0x1}], 0x300, 0x0, 0x803e}, 0x248d1) 11:45:49 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0000000000000000000006471a010000190581aa"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xaa, 0xa1, 0xd8, 0x0, 0x1b3d, 0x1ca, 0xfadb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x21, 0x4f, 0x66, 0x0, [], [{}, {{0x9, 0x5, 0x1, 0x3, 0x0, 0x6}}, {}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x0, 0x87, &(0x7f0000000040)=ANY=[], 0x0) 11:45:49 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000001140)='^', 0x49) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 11:45:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008001000", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2155.935161][T31900] gretap0: refused to change device tx_queue_len [ 2155.948957][T31900] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001780)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x10040) [ 2156.072463][T15189] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 2156.169581][T31905] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 2156.178232][T31905] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2156.210687][T15272] usb 3-1: new high-speed USB device number 63 using dummy_hcd 11:45:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000008d00000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:50 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000001240)='ns/user\x00') 11:45:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008001100", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2156.492000][T15272] usb 3-1: Using ep0 maxpacket: 8 [ 2156.502534][T15189] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2156.517783][T15189] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2156.528276][T15189] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 2156.538833][T15189] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2156.549021][T15189] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2156.558552][T15189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2156.623029][T15272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2156.634557][T15272] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2156.644257][T15272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2156.698081][T31912] gretap0: refused to change device tx_queue_len [ 2156.707499][T31912] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2156.707798][T15189] hub 4-1:1.0: bad descriptor, ignoring hub [ 2156.736949][T15189] hub: probe of 4-1:1.0 failed with error -5 [ 2156.745097][T15189] cdc_wdm 4-1:1.0: skipping garbage [ 2156.750600][T15189] cdc_wdm 4-1:1.0: skipping garbage [ 2156.753831][T15272] usb 3-1: config 0 descriptor?? [ 2156.829061][T15189] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2156.836867][T15189] cdc_wdm 4-1:1.0: Unknown control protocol [ 2156.855444][T31914] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:50 executing program 0: syz_clone(0x1aa03000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 2156.890804][T31896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.900891][T31896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:45:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000400300000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2157.073439][T15272] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 2157.191890][ T5094] usb 4-1: USB disconnect, device number 49 11:45:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002240)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40000042) 11:45:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008001200", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2157.296970][ T773] usb 3-1: USB disconnect, device number 63 11:45:51 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) [ 2157.425298][ T773] iowarrior 3-1:0.0: I/O-Warror #1 now disconnected [ 2157.659138][T31924] netlink: 'syz-executor.1': attribute type 18 has an invalid length. [ 2157.669038][T31924] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2157.752043][ T5094] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2158.015176][ T5094] usb 4-1: Using ep0 maxpacket: 8 [ 2158.158402][ T5094] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2158.169101][ T5094] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2158.178661][ T5094] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2158.188899][ T5094] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 2158.199200][ T5094] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2158.208728][ T5094] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2158.296529][ T5094] hub 4-1:1.0: bad descriptor, ignoring hub [ 2158.303045][ T5094] hub: probe of 4-1:1.0 failed with error -5 [ 2158.311511][ T5094] cdc_wdm 4-1:1.0: skipping garbage [ 2158.316980][ T5094] cdc_wdm 4-1:1.0: skipping garbage [ 2158.322754][ T5094] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 2158.626315][T15189] usb 4-1: USB disconnect, device number 50 11:45:52 executing program 3: ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x88140, 0x78) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:45:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000034000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:52 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_getevents(r7, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0}]) r9 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r9, 0x0) io_submit(r7, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}]) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000240)={r3}) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x205}, {r9, 0x14}, {r10, 0x8001}], 0x3, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)={[0x4]}, 0x8) io_submit(r6, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:45:52 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000001140)='^', 0x49) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 11:45:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008001300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:52 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) [ 2159.167942][T31934] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2159.367077][T31940] gretap0: refused to change device tx_queue_len [ 2159.381425][T31940] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008001701", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2159.570675][T15272] usb 3-1: new high-speed USB device number 64 using dummy_hcd 11:45:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000ffffe000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2159.840833][T15272] usb 3-1: Using ep0 maxpacket: 8 11:45:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008004601", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2159.982220][T15272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2159.998001][T15272] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2160.008172][T15272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2160.091250][T15272] usb 3-1: config 0 descriptor?? [ 2160.112555][T31955] gretap0: refused to change device tx_queue_len [ 2160.123348][T31955] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000302", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2160.463405][T15272] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2160.625783][T15272] usb 3-1: USB disconnect, device number 64 [ 2160.686272][T31961] gretap0: refused to change device tx_queue_len [ 2160.688042][T15272] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 2160.695459][T31961] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2160.754773][T31963] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000303", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2161.331239][T31965] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080088a8ffff00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000002000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2161.702003][T31967] gretap0: refused to change device tx_queue_len [ 2161.711399][T31967] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:55 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x8001) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000370000/0x4000)=nil, 0x4000}}) r7 = dup(r2) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000302000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000340)="0f08ba2100b0ddee0f35660f3802f4360f01df0fc1640f66b90b04000066b86d84000066ba000000000f3066b80500000066b9490000000f01c166b91b01000066b80100000066ba000000000f309a81001c01", 0x53}], 0x1, 0x28, &(0x7f0000000400), 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r8, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r6, 0xc0485630, &(0x7f0000000240)={0x1f, "32b6aa2d578303bf0d165f2241cb67011a3c06cc9f8963af9e1fcdecf77550b2", 0x2, 0x7f, 0x8, 0x8000, 0x2}) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) 11:45:55 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001140)='^', 0x49) write$char_usb(r0, 0x0, 0x0) 11:45:55 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) 11:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000304", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2161.795157][T31969] 0ªX¹¦Dö»: refused to change device tx_queue_len [ 2161.805042][T31969] A link change request failed with some changes committed already. Interface c0ªX¹¦Dö» may have been left with an inconsistent configuration, please check. 11:45:55 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x10, 0x20, 0x8, 0x0, {{0x13, 0x4, 0x1, 0x7, 0x4c, 0x66, 0x0, 0x40, 0xa94bbef825c090c5, 0x0, @private=0xa010101, @broadcast, {[@rr={0x7, 0xb, 0x1f, [@local, @broadcast]}, @lsrr={0x83, 0x1b, 0x85, [@private=0xa010100, @rand_addr=0x64010100, @loopback, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x2d}]}, @rr={0x7, 0xf, 0xf7, [@remote, @remote, @empty]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000660000012bbd7000fddbdf25000000005c90822d165a0d888eb1", @ANYRES32=r1, @ANYBLOB="0b0009000d00000009000f0008000b000100000008000b000300000008000b000700000008000b0009000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000055}, 0x44000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x5e4f3c8b7c4154e9, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) syz_io_uring_setup(0x4c39, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) clock_gettime(0x0, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = syz_io_uring_setup(0x6, &(0x7f0000000300)={0x0, 0x1269, 0x80, 0x2, 0x7, 0x0, r5}, &(0x7f0000000280), &(0x7f0000000380)=0x0) io_getevents(0x0, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0}]) r9 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r9, 0x0) io_submit(0x0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}]) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000540)=[{}, {0xffffffffffffffff, 0x333}, {r4, 0x1000}, {0xffffffffffffffff, 0x2080}, {r9, 0x1000}, {r6, 0x40}, {r6, 0x202}, {r3, 0xc0}, {r6, 0x88}, {r5, 0x10}], 0xa, &(0x7f0000000440)={r10, r11+10000000}, &(0x7f00000005c0)={[0x7f]}, 0x8) syz_io_uring_submit(0x0, r7, &(0x7f0000000400)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, r4, 0x0, &(0x7f00000003c0)='./file0\x00', 0x80}) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) io_setup(0x1ba, &(0x7f00000002c0)) io_submit(0x0, 0x0, &(0x7f0000000580)) 11:45:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000003000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2162.123911][T31975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2162.330655][ T5087] usb 3-1: new high-speed USB device number 65 using dummy_hcd 11:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000305", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2162.488973][T31984] gretap0: refused to change device tx_queue_len [ 2162.498332][T31984] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2162.662509][ T5087] usb 3-1: Using ep0 maxpacket: 8 [ 2162.753670][T31992] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000004000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2162.798549][ T5087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2162.810343][ T5087] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2162.820027][ T5087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.925230][ T5087] usb 3-1: config 0 descriptor?? 11:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000306", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2163.264816][ T5087] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2163.287955][T31995] gretap0: refused to change device tx_queue_len [ 2163.298014][T31995] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2163.390860][ T5087] usb 3-1: USB disconnect, device number 65 [ 2163.438233][ T5087] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:45:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000005000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2163.552197][T31998] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000307", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:57 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x10, 0x20, 0x8, 0x0, {{0x13, 0x4, 0x1, 0x7, 0x4c, 0x66, 0x0, 0x40, 0xa94bbef825c090c5, 0x0, @private=0xa010101, @broadcast, {[@rr={0x7, 0xb, 0x1f, [@local, @broadcast]}, @lsrr={0x83, 0x1b, 0x85, [@private=0xa010100, @rand_addr=0x64010100, @loopback, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x2d}]}, @rr={0x7, 0xf, 0xf7, [@remote, @remote, @empty]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000660000012bbd7000fddbdf25000000005c90822d165a0d888eb1", @ANYRES32=r1, @ANYBLOB="0b0009000d00000009000f0008000b000100000008000b000300000008000b000700000008000b0009000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000055}, 0x44000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x5e4f3c8b7c4154e9, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) syz_io_uring_setup(0x4c39, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) clock_gettime(0x0, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = syz_io_uring_setup(0x6, &(0x7f0000000300)={0x0, 0x1269, 0x80, 0x2, 0x7, 0x0, r5}, &(0x7f0000000280), &(0x7f0000000380)=0x0) io_getevents(0x0, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0}]) r9 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r9, 0x0) io_submit(0x0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}]) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000540)=[{}, {0xffffffffffffffff, 0x333}, {r4, 0x1000}, {0xffffffffffffffff, 0x2080}, {r9, 0x1000}, {r6, 0x40}, {r6, 0x202}, {r3, 0xc0}, {r6, 0x88}, {r5, 0x10}], 0xa, &(0x7f0000000440)={r10, r11+10000000}, &(0x7f00000005c0)={[0x7f]}, 0x8) syz_io_uring_submit(0x0, r7, &(0x7f0000000400)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, r4, 0x0, &(0x7f00000003c0)='./file0\x00', 0x80}) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) io_setup(0x1ba, &(0x7f00000002c0)) io_submit(0x0, 0x0, &(0x7f0000000580)) [ 2163.970079][T32000] gretap0: refused to change device tx_queue_len [ 2163.979373][T32000] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2164.053167][T32002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:58 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001140)='^', 0x49) write$char_usb(r0, 0x0, 0x0) 11:45:58 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) openat(r8, &(0x7f0000000100)='./file0\x00', 0x20002, 0x81) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:45:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000006000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000308", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:45:58 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) syz_io_uring_setup(0x4c39, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) clock_gettime(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r2}, 0x18) read$dsp(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) io_setup(0x1b2, &(0x7f00000002c0)) io_submit(0x0, 0x0, &(0x7f0000000580)) [ 2164.984001][T32009] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2165.046800][T32016] gretap0: refused to change device tx_queue_len [ 2165.056669][T32016] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000309", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2165.250724][T15272] usb 3-1: new high-speed USB device number 66 using dummy_hcd 11:45:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000007000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2165.444226][T32025] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2165.540627][T15272] usb 3-1: Using ep0 maxpacket: 8 11:45:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000200000008000100000000000800030a", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2165.669338][T32027] gretap0: refused to change device tx_queue_len [ 2165.671322][T15272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2165.678581][T32027] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2165.687024][T15272] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2165.712528][T15272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:45:59 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000869000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000100)=0x40, 0x1, 0x4) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000a2d000/0x3000)=nil, 0x3000}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYRES16=r5], 0x48}, 0x1, 0x0, 0x0, 0x851}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@gettfilter={0x4c, 0x2e, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x5, 0xfffd}, {0x5, 0xb}, {0x8, 0x10}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xae6}, {0x8, 0xb, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8081}, 0x1) connect$can_bcm(r8, &(0x7f0000000240), 0x10) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r10, 0x200000000000032b, &(0x7f0000000240)) [ 2165.836492][T15272] usb 3-1: config 0 descriptor?? [ 2166.017335][T32030] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000008000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000200000008000100000000000800030b", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2166.243118][T15272] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2166.353894][T15272] usb 3-1: USB disconnect, device number 66 [ 2166.410161][T15272] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 2166.534923][T32038] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2166.560686][T32039] gretap0: refused to change device tx_queue_len [ 2166.569825][T32039] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000200000008000100000000000800030c", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:00 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001140)='^', 0x49) write$char_usb(r0, 0x0, 0x0) [ 2167.126613][T32044] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2167.440827][ T5094] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2167.705788][ T5094] usb 3-1: Using ep0 maxpacket: 8 [ 2167.831284][ T5094] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2167.842865][ T5094] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2167.852368][ T5094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2167.907968][ T5094] usb 3-1: config 0 descriptor?? 11:46:01 executing program 0: mmap(&(0x7f0000570000/0x2000)=nil, 0x2000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00008aa000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000100)="b80a000f00d0660f3881adb0ce67dec9f30f5d1966018c4e0081650c5f006566660f3881431965660f388208ba2000b80030ef3665decf", 0x37}], 0x1, 0x3, &(0x7f0000000280), 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) clock_nanosleep(0x4, 0x1, &(0x7f0000000000), &(0x7f00000000c0)) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) mq_notify(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x3c, 0x0, @thr={&(0x7f0000000300)="6f4590111acf60502e966c334ab15ea7ac837c3d3a7320b00e28b8c4eaabd3b053eb0f38512e094eb60a579dcddc61322dcd91ed063c703159a013f93c901724b5e980f1d308a1e979defc402d97d4a4f00ad858f4c143278f5499007e2b91cbbdd7002a9ea510a40b140834ad9c21332379fd1fbc08ac7d897c93abd3d413b6f399ceab5a98191ca9e649fc6af65f7962cebc86", &(0x7f0000000280)="a5d3aa8e637302aa03f015d6f63347eec3c4ffdeb1a43cf8025536663913d03c08563531587e9518d13f3919ff43d8a7f1b7349ef3d1a5be879a8f79a72fff"}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) 11:46:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000009000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:01 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) syz_io_uring_setup(0x4c39, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) clock_gettime(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r2}, 0x18) read$dsp(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) io_setup(0x1b2, &(0x7f00000002c0)) io_submit(0x0, 0x0, &(0x7f0000000580)) 11:46:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000200000008000100000000000800030d", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2168.148149][T32051] gretap0: refused to change device tx_queue_len [ 2168.157547][T32051] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2168.174688][T32054] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2168.259545][ T5094] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2168.361016][ T5094] usb 3-1: USB disconnect, device number 67 [ 2168.409309][ T5094] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:46:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000200000008000100000000000800030e", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000000a000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:02 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000869000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000100)=0x40, 0x1, 0x4) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000a2d000/0x3000)=nil, 0x3000}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYRES16=r5], 0x48}, 0x1, 0x0, 0x0, 0x851}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@gettfilter={0x4c, 0x2e, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x5, 0xfffd}, {0x5, 0xb}, {0x8, 0x10}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xae6}, {0x8, 0xb, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8081}, 0x1) connect$can_bcm(r8, &(0x7f0000000240), 0x10) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r10, 0x200000000000032b, &(0x7f0000000240)) [ 2168.777629][T32060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2168.873977][T32062] gretap0: refused to change device tx_queue_len [ 2168.883350][T32062] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:02 executing program 2: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001140)='^', 0x49) write$char_usb(r0, 0x0, 0x0) 11:46:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000200000008000100000000000800030f", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000000b000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2169.239245][T32069] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:46:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000310", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2169.531074][T32074] gretap0: refused to change device tx_queue_len [ 2169.540077][T32074] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000000c000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2169.752658][T32077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2170.051301][T32080] gretap0: refused to change device tx_queue_len [ 2170.060682][T32080] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:04 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r5, 0x10000000) clock_gettime(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x0, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$can_bcm(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:46:04 executing program 2: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001140)='^', 0x49) write$char_usb(r0, 0x0, 0x0) 11:46:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000311", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:04 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) syz_io_uring_setup(0x4c39, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) clock_gettime(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r2}, 0x18) read$dsp(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) io_setup(0x1b2, &(0x7f00000002c0)) io_submit(0x0, 0x0, &(0x7f0000000580)) 11:46:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000000d000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2170.865532][T32090] gretap0: refused to change device tx_queue_len [ 2170.874933][T32090] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2170.915820][T32086] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:46:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000000e000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:05 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000869000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000100)=0x40, 0x1, 0x4) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000a2d000/0x3000)=nil, 0x3000}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYRES16=r5], 0x48}, 0x1, 0x0, 0x0, 0x851}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@gettfilter={0x4c, 0x2e, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x5, 0xfffd}, {0x5, 0xb}, {0x8, 0x10}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xae6}, {0x8, 0xb, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8081}, 0x1) connect$can_bcm(r8, &(0x7f0000000240), 0x10) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r10, 0x200000000000032b, &(0x7f0000000240)) 11:46:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000312", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:05 executing program 2: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001140)='^', 0x49) write$char_usb(r0, 0x0, 0x0) [ 2171.523986][T32102] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:46:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000314", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000000f000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2172.259706][T32115] gretap0: refused to change device tx_queue_len [ 2172.269136][T32115] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2172.292038][T32114] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:46:06 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = dup(r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r5, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:46:06 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:46:06 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f000099d000/0x1000)=nil, 0x1000, 0x13) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r3, 0x800c5011, &(0x7f0000000000)) io_setup(0x1b2, &(0x7f00000002c0)) 11:46:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000325", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000010000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2173.074747][T32127] gretap0: refused to change device tx_queue_len [ 2173.084088][T32127] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2173.126912][T32129] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:46:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000348", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000011000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2173.620148][T32136] gretap0: refused to change device tx_queue_len [ 2173.629957][T32136] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2173.699552][T32138] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:46:08 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:46:08 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xfffffffe}, &(0x7f0000000240)=0x8) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:46:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000012000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000200000008000100000000000800034c", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2174.899072][T32149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2174.928227][T32150] gretap0: refused to change device tx_queue_len [ 2174.938298][T32150] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000200000008000100000000000800035c", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:09 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = dup(r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r5, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:46:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000001b000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2175.375490][T32156] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2175.654347][T32160] gretap0: refused to change device tx_queue_len [ 2175.668893][T32160] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, 0x0, 0x0) close(r0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000040)={0x81, 0x6, 0x7, 0xb5, &(0x7f0000000180)=""/181, 0xf9, &(0x7f0000000300)=""/249}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup(r5) syz_io_uring_setup(0x4c39, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) clock_gettime(0x0, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) io_setup(0x1b2, &(0x7f00000002c0)) io_submit(0x0, 0x0, &(0x7f0000000580)) 11:46:09 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:46:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000360", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000024000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2176.036531][T32166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2176.190686][T32176] gretap0: refused to change device tx_queue_len [ 2176.199925][T32176] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000368", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000025000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2176.573169][T32179] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2176.771621][T32181] gretap0: refused to change device tx_queue_len [ 2176.780880][T32181] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:11 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x1, 0x10000000, 0x1016, 0x2, 0x0, 0x6, 0x0, 0x6}}) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) 11:46:11 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:46:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000200000008000100000000000800036c", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000001227000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2177.593014][T32188] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2177.917014][ T5087] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2178.120986][ T5087] usb 3-1: device descriptor read/64, error -71 11:46:12 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = dup(r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = syz_io_uring_setup(0x4c39, 0x0, 0x0, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r5, 0x10000000) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000057e000/0x2000)=nil, 0x2000) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:46:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000163f000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000370", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:12 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) syz_io_uring_setup(0x4c39, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0xc008ae88, &(0x7f00000001c0)={0xfe, 0x0, [{0x400000f4}]}) syz_kvm_setup_cpu$x86(r4, r8, &(0x7f0000957000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0f01cb640f01c9b800008ed00fae820200440f20c0663507000000440f22c00f21c266b92e0900000f32660f3ace9a050035666716bad004ec", 0x39}], 0x1, 0x0, &(0x7f00000000c0)=[@cstype3={0x5, 0x5}], 0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r11, 0x8040ae69, &(0x7f0000000100)={0x1, 0x101, 0x6, 0x0, 0xffffff01}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) clock_gettime(0x0, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) io_setup(0x1b2, &(0x7f00000002c0)) io_submit(0x0, 0x0, &(0x7f0000000580)) [ 2178.400650][ T5087] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2178.512252][T32200] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2178.610735][ T5087] usb 3-1: device descriptor read/64, error -71 [ 2178.620639][T32201] gretap0: refused to change device tx_queue_len [ 2178.635607][T32201] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000374", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2178.750256][ T5087] usb usb3-port1: attempt power cycle [ 2178.853232][T32209] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:46:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000001640000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000200000008000100000000000800037a", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2179.180732][ T5087] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2179.238579][T32216] gretap0: refused to change device tx_queue_len [ 2179.254019][T32216] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2179.292802][ T5087] usb 3-1: device descriptor read/8, error -71 11:46:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000048000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2179.591569][ T5087] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2179.720743][ T5087] usb 3-1: device descriptor read/8, error -71 11:46:13 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x1, 0x10000000, 0x1016, 0x2, 0x0, 0x6, 0x0, 0x6}}) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) [ 2179.873174][T32225] gretap0: refused to change device tx_queue_len [ 2179.879935][ T5087] usb usb3-port1: unable to enumerate USB device [ 2179.882597][T32225] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:14 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:46:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000360", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000004c000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2180.877963][T32234] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2180.885581][T32236] gretap0: refused to change device tx_queue_len [ 2180.901272][T32236] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2181.240989][T15272] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2181.450861][T15272] usb 3-1: device descriptor read/64, error -71 [ 2181.751078][T15272] usb 3-1: new high-speed USB device number 73 using dummy_hcd 11:46:15 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf250400000014000200776731000000000000000000000000000500040100000000050004000200000005000400020000000500040001000000140002006d6163766c616e3000000000000000000500040001000000584b6a364fec83aa54a8236a4d"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8008881) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) io_setup(0x1b2, &(0x7f00000002c0)=0x0) io_getevents(r4, 0x8, 0x0, &(0x7f0000000400), 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}]) r6 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0) mmap(&(0x7f0000088000/0x1000)=nil, 0x1000, 0x2000007, 0x4010, r6, 0x320f6000) io_submit(r4, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}]) dup(r6) syz_io_uring_setup(0x4c39, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) clock_gettime(0x0, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x5}) r8 = fcntl$dupfd(r7, 0x0, r3) ioctl$BLKRRPART(r8, 0x125f, 0x0) io_setup(0x1b2, &(0x7f00000002c0)) io_submit(0x0, 0x0, &(0x7f0000000580)) 11:46:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000060000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108001100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:15 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x1, 0x10000000, 0x1016, 0x2, 0x0, 0x6, 0x0, 0x6}}) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) [ 2181.970783][T15272] usb 3-1: device descriptor read/64, error -71 [ 2182.092275][T32240] gretap0: refused to change device tx_queue_len [ 2182.102017][T32240] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2182.104631][T15272] usb usb3-port1: attempt power cycle [ 2182.138466][T32243] 0ªX: refused to change device tx_queue_len [ 2182.145438][T32243] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. [ 2182.208241][T32244] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:46:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000005865000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001680e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2182.624710][T15272] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2182.678584][T32254] gretap0: refused to change device tx_queue_len [ 2182.687306][T32255] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2182.687928][T32254] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2182.756559][T15272] usb 3-1: device descriptor read/8, error -71 [ 2182.782535][T32257] 0ªX: refused to change device tx_queue_len [ 2182.788801][T32257] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. 11:46:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2183.051454][T15272] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2183.122527][T32260] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2183.161667][T15272] usb 3-1: device descriptor read/8, error -71 [ 2183.286530][T15272] usb usb3-port1: unable to enumerate USB device 11:46:17 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:46:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000068000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001480c00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="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", 0x195}, {&(0x7f00000003c0)="ee25b6ecdec9781610ea7dfe224975d00501343152595050ddee898ef0bfc74d101acaf9b5d87f3b1d80c020d1e543cd38c13468054ddf2628d0d1351973fd240b6345be326e7c04630c61f3c9caac7fd666ad454466fb86051885897d45d25bc05d71ee78581e16577c25358f15b8efc563696f78f6524a7fdc6358420892e560a82cffaced742ca7ca4b6e8072be6bff1eb0d0b7361a657e0a0652fafce5f5094c969de98b5ceb", 0xa8}, {&(0x7f0000000680)="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", 0xdc5}], 0x3}, 0x0) 11:46:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x100) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000940)='U', 0x1}], 0x1}, 0x0) [ 2183.991226][T32262] gretap0: refused to change device tx_queue_len [ 2184.000245][T32262] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2184.098923][T32270] 0ªX: refused to change device tx_queue_len [ 2184.105589][T32270] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. [ 2184.192873][T32269] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:46:18 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 11:46:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000006c000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:18 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x2, &(0x7f00000011c0)) 11:46:18 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x401c5820, &(0x7f00000011c0)) 11:46:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2184.441411][T15272] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2184.638475][T32279] gretap0: refused to change device tx_queue_len [ 2184.647810][T32279] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:18 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x2c}, 0x20) [ 2184.684407][T15272] usb 3-1: device descriptor read/64, error -71 [ 2184.780971][T32282] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2184.973668][T15272] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2185.154343][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 2185.161631][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 [ 2185.230838][T15272] usb 3-1: device descriptor read/64, error -71 [ 2185.351568][T15272] usb usb3-port1: attempt power cycle [ 2185.770681][T15272] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2185.860979][T15272] usb 3-1: device descriptor read/8, error -71 [ 2186.130537][T15272] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2186.221583][T15272] usb 3-1: device descriptor read/8, error -71 [ 2186.341234][T15272] usb usb3-port1: unable to enumerate USB device 11:46:20 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:46:20 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x61}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 11:46:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18530c00000000000000000000000000741908000000000018000000e1080000000000000300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 11:46:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000074000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:20 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8901, &(0x7f00000011c0)) [ 2187.413705][T32293] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2187.444681][T32297] gretap0: refused to change device tx_queue_len 11:46:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0xfffffffffffffffc}], 0x2}, 0x0) [ 2187.453973][T32297] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:21 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x40086602, 0x0) 11:46:21 executing program 0: socketpair(0x1, 0x0, 0x7fb4, &(0x7f0000000140)) 11:46:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800000000007a000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2187.671175][ T5094] usb 3-1: new high-speed USB device number 80 using dummy_hcd 11:46:21 executing program 4: socketpair(0x11, 0x3, 0x0, &(0x7f0000001a80)) [ 2187.881400][ T5094] usb 3-1: device descriptor read/64, error -71 [ 2187.999862][T32306] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2188.054986][T32307] gretap0: refused to change device tx_queue_len [ 2188.064174][T32307] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2188.211903][ T5094] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2188.420719][ T5094] usb 3-1: device descriptor read/64, error -71 [ 2188.547034][ T5094] usb usb3-port1: attempt power cycle [ 2188.960935][ T5094] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2189.080895][ T5094] usb 3-1: device descriptor read/8, error -71 [ 2189.350679][ T5094] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2189.441578][ T5094] usb 3-1: device descriptor read/8, error -71 [ 2189.561678][ T5094] usb usb3-port1: unable to enumerate USB device 11:46:24 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:46:24 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) 11:46:24 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f00000036c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:46:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000081000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:24 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) [ 2190.534211][T32320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2190.570064][T32318] gretap0: refused to change device tx_queue_len 11:46:24 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x3}]}, {0x0, [0x0, 0x0, 0x51, 0x5f, 0x5f]}}, 0x0, 0x2b}, 0x20) [ 2190.579425][T32318] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0xfcd3, &(0x7f0000000080), 0x1}, 0x0) 11:46:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000ffffff81000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2190.840972][T15272] usb 3-1: new high-speed USB device number 84 using dummy_hcd 11:46:24 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) [ 2190.964270][T32330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2191.060630][T15272] usb 3-1: device descriptor read/64, error -71 [ 2191.077539][T32332] gretap0: refused to change device tx_queue_len [ 2191.086863][T32332] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2191.344772][T15272] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2191.410632][T32336] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2191.570668][T15272] usb 3-1: device descriptor read/64, error -71 [ 2191.691403][T15272] usb usb3-port1: attempt power cycle [ 2192.110633][T15272] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2192.201046][T15272] usb 3-1: device descriptor read/8, error -71 [ 2192.470803][T15272] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2192.565606][T15272] usb 3-1: device descriptor read/8, error -71 [ 2192.691334][T15272] usb usb3-port1: unable to enumerate USB device 11:46:27 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:46:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)=""/93, 0x5d}, {0x0}], 0x2}, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000940)='U', 0x1}], 0x1}, 0x0) 11:46:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000004788000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:27 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 11:46:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x7}, [@initr0]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 11:46:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2193.723064][T32346] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2193.736111][T32345] gretap0: refused to change device tx_queue_len [ 2193.746193][T32345] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@initr0]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 11:46:27 executing program 4: mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0xfffffffe) 11:46:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="f048ae4a3d9baa69dcb587c1d87ac05f577235a6844e9c0cf4b201b6b5bcab77ccd220a6d1bd80427524c78d3b398df5", 0x30}, {&(0x7f0000000140)="2a73953c060b353d5ec6ec1471ee86b490d08d9611adf08e7f3d8a5dc18cf9ee5bccc8d9c8602d34b1b34aa75cd938e07ce522e0547fb8329936d018bb0800086052cdbc7fc5a386191c1e78cd164ebf47b43e52bb5b2f51861d8dbe05201e5ef224c4983d275d8719fb574fc0", 0x6d}, {&(0x7f00000001c0)="ace0dbca6cb345146a0b47f122b8d3c8", 0x10}, {&(0x7f0000000680)="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", 0xf54}], 0x4}, 0x0) 11:46:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000200000008000100000000000800035e", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000004888000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2194.112152][T15272] usb 3-1: new high-speed USB device number 88 using dummy_hcd 11:46:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x12, 0x1, &(0x7f0000000300)=@raw=[@jmp], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) [ 2194.330899][T15272] usb 3-1: device descriptor read/64, error -71 [ 2194.373854][T32357] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2194.385565][T32359] gretap0: refused to change device tx_queue_len [ 2194.394874][T32359] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2194.611944][T15272] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2194.820796][T15272] usb 3-1: device descriptor read/64, error -71 [ 2194.946269][T15272] usb usb3-port1: attempt power cycle [ 2195.360644][T15272] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2195.451614][T15272] usb 3-1: device descriptor read/8, error -71 [ 2195.720596][T15272] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2195.834155][T15272] usb 3-1: device descriptor read/8, error -71 [ 2195.977282][T15272] usb usb3-port1: unable to enumerate USB device 11:46:30 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:46:30 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x3}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x34, 0x0, 0x1}, 0x20) 11:46:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)=""/93, 0x5d}, {&(0x7f0000000180)=""/4, 0x4}], 0x2}, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000940)='U', 0x1}, {&(0x7f0000000980)="87a6647cb4850853d1d9eca7685ee273eef8a28bcc760132103f95e7e44cdf510f5e9664ee7eb2dfc8c2e759a70532ea4e9d952d09725ad72b0f7610613679fd0176d6f2d32c17f8714ec292059f4b207d3827781eb00d6e3349f2644b9af74d", 0x60}], 0x2}, 0x0) 11:46:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40) 11:46:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000ffffa888000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2196.978739][T32372] gretap0: refused to change device tx_queue_len [ 2196.989446][T32372] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) [ 2197.020267][T32373] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:46:30 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@map, 0xffffffffffffffff, 0x11, 0x0, 0x0, @prog_fd}, 0x20) 11:46:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000ffffffc3000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2197.203377][ T5087] usb 3-1: new high-speed USB device number 92 using dummy_hcd 11:46:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x16, 0x0, 0x3, 0x8}, 0x48) [ 2197.442689][T32379] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:46:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'macvlan0\x00', 0x400}) [ 2197.531376][ T5087] usb 3-1: Using ep0 maxpacket: 8 [ 2197.651708][ T5087] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2197.662388][ T5087] usb 3-1: config 0 has no interfaces? [ 2197.668186][ T5087] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2197.681739][ T5087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2197.749845][T32384] gretap0: refused to change device tx_queue_len [ 2197.759257][T32384] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2197.764091][ T5087] usb 3-1: config 0 descriptor?? 11:46:33 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:46:33 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) 11:46:33 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0) 11:46:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:33 executing program 0: bpf$MAP_CREATE(0x18, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}, 0x48) 11:46:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000008d0000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2199.862119][ T5087] usb 3-1: USB disconnect, device number 92 [ 2200.039263][T32392] gretap0: refused to change device tx_queue_len [ 2200.049106][T32392] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2200.129741][T32390] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:46:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x17, 0x1, 0x0, 0x3, 0x0, 0x1}, 0x48) 11:46:34 executing program 4: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x8) 11:46:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000fffffff0000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x16, 0x0, 0x0, 0x8}, 0x48) 11:46:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2200.548937][ T5087] usb 3-1: new high-speed USB device number 93 using dummy_hcd 11:46:34 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) [ 2200.597358][T32405] gretap0: refused to change device tx_queue_len [ 2200.606689][T32405] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2200.795987][T32410] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2200.831449][ T5087] usb 3-1: Using ep0 maxpacket: 8 [ 2200.954407][ T5087] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2200.965188][ T5087] usb 3-1: config 0 has no interfaces? [ 2200.971155][ T5087] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2200.980656][ T5087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2201.026173][ T5087] usb 3-1: config 0 descriptor?? 11:46:36 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:46:36 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="91", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x4040805) 11:46:36 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x82003, 0x0) [ 2203.146765][ T5087] usb 3-1: USB disconnect, device number 93 11:46:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000fffffffd000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) [ 2203.415722][T32424] gretap0: refused to change device tx_queue_len [ 2203.424930][T32424] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:37 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) [ 2203.483137][T32425] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:46:37 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)=@generic={&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) 11:46:37 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') 11:46:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000fffffffe000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:37 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x4e4001, 0x0) [ 2203.822285][ T5094] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2203.953209][T32433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2204.091217][ T5094] usb 3-1: Using ep0 maxpacket: 8 [ 2204.251106][ T5094] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2204.261679][ T5094] usb 3-1: config 0 has no interfaces? [ 2204.267457][ T5094] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2204.277420][ T5094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2204.298922][T32437] gretap0: refused to change device tx_queue_len [ 2204.301017][ T5094] usb 3-1: config 0 descriptor?? [ 2204.308471][T32437] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:40 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b00010000000109040000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:46:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x0, 0x0, 0x9ca0, 0x0, 0x1}, 0x48) 11:46:40 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="9163", 0x2}, {0x0}], 0x2}, 0x4040805) 11:46:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:40 executing program 4: r0 = socket$inet(0x2, 0x4003, 0x0) setsockopt$inet_opts(r0, 0x0, 0x66, 0x0, 0x0) 11:46:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000060ff000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2206.368385][T15272] usb 3-1: USB disconnect, device number 94 [ 2206.588199][T32446] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2206.618590][T32447] gretap0: refused to change device tx_queue_len [ 2206.627983][T32447] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000000c0)="f982fd26176ae6b01d90cbd12bda7636be8aa67ef13787b596cdf5edc31d809054076bd12550f9f6fdea7f73cd9529b7488ad8a4f1b9ad90de9cb615e98764f60048ad9fe8d503ff88e95cdb2de0025caa8b2a01b0a1a012253ee45851bc9c97b2ef3522edcb229545ba0eb4f0a3eb053a3d3840669c7331b7fa715ac31978814b7563a6dc35d3c66f18d34fee0f8714a289b103ee7ed70a880d6e040992e462d3aa1ed4b5bff3baaa7d6bdaf1568cf3c380d6e6d25e4fe87ac6d2444c62dc57ccc53d2935dc53b22ede2e92164a3f1b35110da6689c", 0xd6}, {&(0x7f00000001c0)="0c36f6f871082e66a1cad99b3a54e303a3749714f97aa2ea1d9ca1a25a00dcdd1e1ecf20a53dc7350740df1a0f5ab05002906d0374452d1343cf50ab197566f2bae5ecea7ab05148ef29c2dde9cb6da444c8d204a4e035c32484834f3844504aad1bbb569d333e846e4210a80ec4023df92759529bc97c3f12af40b35645b6616d4168e21ec1a83ed147b31fae7476f640d807f487d8f78f30a675", 0x9b}], 0x2}, 0x0) 11:46:40 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) 11:46:40 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000080), &(0x7f0000001580)=0x4) 11:46:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000088a8ffff000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2207.074027][T15272] usb 3-1: new high-speed USB device number 95 using dummy_hcd 11:46:40 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 2207.195612][T32460] gretap0: refused to change device tx_queue_len [ 2207.211443][T32460] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2207.285278][T32462] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2207.361451][T15272] usb 3-1: Using ep0 maxpacket: 8 [ 2207.529045][T15272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2207.541002][T15272] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2207.551826][T15272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.633529][T15272] usb 3-1: config 0 descriptor?? [ 2207.701554][T15272] iowarrior 3-1:0.0: no interrupt-in endpoint found 11:46:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000e0ffff000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:43 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001c40), 0x10, 0x0) 11:46:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000310", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:43 executing program 0: syz_emit_ethernet(0x4f, &(0x7f0000000100)={@broadcast, @random="af19080c94cd", @val, {@ipv4}}, 0x0) 11:46:43 executing program 4: pipe2(&(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setown(r0, 0x6, 0x0) [ 2209.607833][T15272] usb 3-1: USB disconnect, device number 95 11:46:43 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b00010000000109040000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) [ 2209.813521][T32477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2209.824667][T32478] gretap0: refused to change device tx_queue_len [ 2209.834268][T32478] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:43 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff}) readv(r0, &(0x7f0000002980)=[{&(0x7f0000001540)=""/126, 0x7e}], 0x1) execve(0x0, 0x0, 0x0) 11:46:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010800007fffffff000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:43 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fsync(r0) 11:46:43 executing program 3: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) [ 2210.273115][T15272] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2210.276195][T32485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2210.338593][T32490] gretap0: refused to change device tx_queue_len [ 2210.348817][T32490] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000302", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:44 executing program 0: open$dir(&(0x7f00000005c0)='./file0\x00', 0x200, 0x0) r0 = getegid() lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, r0) 11:46:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000081ffffff000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2210.531060][T15272] usb 3-1: Using ep0 maxpacket: 8 11:46:44 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000002180), &(0x7f00000021c0)=0xc) [ 2210.693128][T15272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2210.704142][T15272] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2210.713669][T15272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.768895][T15272] usb 3-1: config 0 descriptor?? [ 2210.786901][T32495] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2210.876965][T15272] iowarrior 3-1:0.0: no interrupt-in endpoint found 11:46:44 executing program 3: pipe2(&(0x7f0000000100), 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) 11:46:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000000000080003ff", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2211.083451][T32501] gretap0: refused to change device tx_queue_len [ 2211.098546][T32501] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2211.235060][T32503] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:46:46 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b00010000000109040000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:46:46 executing program 0: socketpair(0x10, 0x0, 0x20, 0x0) 11:46:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000080)={0x0, 0x4000008}, 0x10) 11:46:46 executing program 4: socket(0x0, 0x0, 0x7) 11:46:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000c3ffffff000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2212.865635][T15272] usb 3-1: USB disconnect, device number 96 [ 2213.063785][T32511] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2213.146137][T32516] gretap0: refused to change device tx_queue_len [ 2213.155705][T32516] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:46 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000001040)=0x1003) 11:46:47 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 11:46:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2213.501032][T15272] usb 3-1: new high-speed USB device number 97 using dummy_hcd 11:46:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000f0ffffff000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), 0x4) 11:46:47 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{}, "3198480f44ddf4d0", "c3e9c8ab7fcd38fd230266205dda6eee", "15f552c9", "7ab753bf1b47636a"}, 0x28) [ 2213.695639][T32525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2213.775424][T15272] usb 3-1: Using ep0 maxpacket: 8 [ 2213.907031][T32528] gretap0: refused to change device tx_queue_len [ 2213.916492][T32528] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2213.971006][T15272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2213.981931][T15272] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2213.992474][T15272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2214.028514][T15272] usb 3-1: config 0 descriptor?? [ 2214.108157][T15272] iowarrior 3-1:0.0: no interrupt-in endpoint found 11:46:49 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:46:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0x0) 11:46:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 11:46:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000fdffffff000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:49 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) [ 2216.120726][T15272] usb 3-1: USB disconnect, device number 97 [ 2216.321103][T32539] gretap0: refused to change device tx_queue_len [ 2216.330242][T32539] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) [ 2216.389685][T32543] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:46:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0xfffffffffffffd06) 11:46:50 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 11:46:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000feffffff000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2216.770659][T15272] usb 3-1: new high-speed USB device number 98 using dummy_hcd 11:46:50 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80802, 0x0) write$cgroup_type(r0, 0x0, 0x0) [ 2216.899069][T32554] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2216.981825][T32555] gretap0: refused to change device tx_queue_len [ 2216.991075][T32555] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2217.060829][T15272] usb 3-1: Using ep0 maxpacket: 8 [ 2217.181737][T15272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2217.192464][T15272] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2217.205916][T15272] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2217.215641][T15272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2217.267345][T15272] usb 3-1: config 0 descriptor?? [ 2217.362954][T15272] iowarrior 3-1:0.0: no interrupt-in endpoint found 11:46:53 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:46:53 executing program 4: socket(0x10, 0x802, 0x0) 11:46:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0xfffffd28) 11:46:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000007100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x13}) ioctl$TUNSETOFFLOAD(r0, 0x400454cd, 0x306) 11:46:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000fabe0100010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2219.359338][ T5094] usb 3-1: USB disconnect, device number 98 [ 2219.552618][T32563] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:46:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000007100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0189436, &(0x7f0000000040)={'pimreg0\x00'}) [ 2219.634837][T32569] gretap0: refused to change device tx_queue_len [ 2219.645852][T32569] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:53 executing program 3: syz_clone(0x40002000, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) 11:46:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000fcbe0100010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:53 executing program 0: syz_clone(0x2002000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="0e7cb7ae65aac9ec115ca921a09145b041b91af185deef03808439a4bbb64b1ab3a9c56fe28144858da7509c79fa36cc2ee1a8d8db608427f44242bc6225d4c5d58b919550fd9d109e5654ca6c19c045f15d4b1dad4954a3d59d585e0caaf34e2eb9ff9050ef5c62cebb77af8b9b9b5b9b7f7967e4acd9eb2220817c8c78eb") syz_clone(0x40002000, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="270e36be1eb3b7d8b45dbd91c18c57b4c43c359c7cdbae6484a803cc636d982be982f3a3e2a13eed1e23799f10c21d2e39ec93efb2077f1a74a74aa7b8f9aa60315bdb4ab28a4e7c") [ 2220.030591][T32574] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2220.082159][ T5094] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 2220.164733][T32579] gretap0: refused to change device tx_queue_len [ 2220.175090][T32579] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:46:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2220.371334][ T5094] usb 3-1: Using ep0 maxpacket: 8 [ 2220.501889][ T5094] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2220.517804][ T5094] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2220.531631][ T5094] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2220.541236][ T5094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2220.652302][T32585] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2220.755402][ T5094] usb 3-1: config 0 descriptor?? [ 2220.824277][ T5094] iowarrior 3-1:0.0: no interrupt-in endpoint found 11:46:56 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:46:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r2 = openat$cgroup_ro(r0, &(0x7f0000000580)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@map=r2, 0x3, 0x1, 0x177, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000700)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000740)="8d99553646acbc89d47b96442585d226472b8e8b2212805af8d1d66b4adaf91534db38866bcc767dfdd70e5203b86c7a7e0e42d8a0d095c5c6910912c28989ad2cfc2933ecc9d2e26acdd6fc8fe667", 0x4f}, {&(0x7f00000007c0)="8c9febafae78fcf84ded72e917f114b51580a21e888fefb3f949fa04c2d5171895e502a44c3fdedd17df37bee5a4c301aba66aea848115aa79fe50bfde208a7cd32f5b001c847d470937404e58bd77259fe3b5383953b5cc0a9457c1b944be12a98f5c053781197bf3447f838c71e0cd1bff6d83559974bde04ebec5d2f8147896c07cfe16ff", 0x86}, {&(0x7f0000000880)="f2c83ed4cce41ca35687cd2ac96f5a62ac0e55ac0454979081c50aa73487c1e101f5002f671f27d72393b8c24473507cef8e381f95274db1331f8839cc333082306b8fe42558136e445458ebc04578158fbcf07a8826bcb56e4b6e3e2fefa1e1a5a5806408b28cee509b09b44ef8f3a65fe65cb8014da993c070e9a660b8fce93565ac712d7476e5c7e0d4002f5d28813873e5400f91058994a6a22814f81bf537", 0xa1}, {&(0x7f0000000940)="897920c3d615e62f9d8613f5a7239aff73b56ff0e8b2d11fb82f70870e270c78038ffc0f365d150cd017168feb6dfec5653b61df9b04dafc91fef30d700c6fa0678cdc95c619c3538fa1f03866b5950f02ee3900bf50160b0e80d25b7806cb9a47873b", 0x63}], 0x4, &(0x7f0000000a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x47, [@private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @generic={0x44, 0x6, "58b17bfc"}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x2c, [@dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, @rand_addr=0x64010101]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @multicast2}}}, @ip_retopts={{0x118, 0x0, 0x7, {[@cipso={0x86, 0xe, 0x2, [{0x7, 0x8, "5e517229900f"}]}, @cipso={0x86, 0x4e, 0xffffffffffffffff, [{0x0, 0x11, "4ab6de4db6d95b7e5bfffc4984ece7"}, {0x5, 0x9, "2031764b543ec9"}, {0x5, 0x11, "ef9a68807454d1831755bec8bea0d3"}, {0x0, 0x12, "c59c3f8c76457e9fbd711c6a51bd1e1d"}, {0x2, 0xb, "99a9ed92edaad2934b"}]}, @timestamp_addr={0x44, 0x4, 0x57, 0x1, 0xc}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x3d, [@broadcast]}, @ssrr={0x89, 0x23, 0xbe, [@private=0xa010102, @multicast2, @empty, @remote, @rand_addr=0x64010101, @multicast2, @empty, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0x11, 0x1, 0x8, [{@multicast1, 0x7fff}, {@remote, 0x6}, {@local, 0x3}, {@rand_addr=0x64010102, 0x5}, {@rand_addr=0x64010102, 0x1000}]}, @cipso={0x86, 0x4a, 0x0, [{0x2, 0xc, "c7903f08f8b8b0e87c22"}, {0x0, 0x4, "db97"}, {0x6, 0x10, "f5d976d1e4f0506537011cc44157"}, {0x6, 0x4, 'tL'}, {0x7, 0x2}, {0x5, 0x2}, {0x0, 0x4, "a23c"}, {0x2, 0xc, "218efff17bac9e5b8a07"}, {0x5, 0xc, "c52a5c3adf4bd30a5bbb"}]}, @noop]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x83, 0x9, "87dccc15afeb60"}]}}}], 0x1d0}, 0x12) syz_clone(0x4000000, &(0x7f00000000c0), 0x0, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)="dc9428bbb8256f7193622eb90bb4929848e135bd770d7eeab9fc2025c358ab3d40657717dfae471e821c8a664e5720d7bc7371158c767c5832a451a887b8e75d9d98b70dd5758f261bad04b648a980c3766864a72c1bd2aa250d") 11:46:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000007100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x13}) ioctl$TUNSETOFFLOAD(r0, 0x400454cd, 0x7) 11:46:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000ffffffffff6000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000000000080003ff", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:56 executing program 0: r0 = syz_clone(0x20000200, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007200)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_procfs$namespace(r0, 0x0) [ 2222.704167][T15272] usb 3-1: USB disconnect, device number 99 [ 2222.941433][T32592] gretap0: refused to change device tx_queue_len [ 2222.950976][T32592] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2222.992066][T32593] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:46:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:46:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000007100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x13}) ioctl$TUNSETOFFLOAD(r0, 0x400454cd, 0xfffffffe) 11:46:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000007100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x13}) ioctl$TUNSETOFFLOAD(r0, 0x400454cd, 0x305) [ 2223.451076][ T773] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 2223.485395][T32605] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:46:57 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 11:46:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2223.721470][ T773] usb 3-1: Using ep0 maxpacket: 8 [ 2223.763277][T32607] gretap0: refused to change device tx_queue_len [ 2223.772563][T32607] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2223.898793][ T773] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2223.909393][ T773] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2223.922925][ T773] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2223.932375][ T773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2224.064829][ T773] usb 3-1: config 0 descriptor?? [ 2224.162771][ T773] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 2224.210852][T32614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:46:59 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:46:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000007100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x2}) ioctl$TUNSETIFF(r0, 0x400454cd, 0x0) 11:46:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000180)=@gcm_256={{}, "70d6881e58a16692", "6318bc489924e6a78064712cda0a1cf7a26dd4eb75b689a8a171cb7f089e9940", "a14d829f", "9e484ba89d236f4f"}, 0x38) 11:46:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f0000000580)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@map=r1, 0x0, 0x1, 0x177, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000700)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000740)="8d99553646acbc89d47b96442585d226472b8e8b2212805af8d1d66b4adaf91534db38866bcc767dfdd70e5203b86c7a7e0e42d8a0d095c5c6910912c28989ad2cfc2933ecc9d2e26acdd6fc8fe667", 0x4f}, {&(0x7f00000007c0)="8c9febafae78fcf84ded72e917f114b51580a21e888fefb3f949fa04c2d5171895e502a44c3fdedd17df37bee5a4c301aba66aea848115aa79fe50bfde208a7cd32f5b001c847d470937404e58bd77259fe3b5383953b5cc0a9457c1b944be12a98f5c053781197bf3447f838c71e0cd1bff6d83559974bde04ebec5d2f8147896c07cfe16ff", 0x86}, {&(0x7f0000000880)="f2c83ed4cce41ca35687cd2ac96f5a62ac0e55ac0454979081c50aa73487c1e101f5002f671f27d72393b8c24473507cef8e381f95274db1331f8839cc333082306b8fe42558136e445458ebc04578158fbcf07a8826bcb56e4b6e3e2fefa1e1a5a5806408b28cee509b09b44ef8f3a65fe65cb8014da993c070e9a660b8fce93565ac712d7476e5c7e0d4002f5d28813873e5400f91058994a6a22814f81bf537", 0xa1}, {&(0x7f0000000940)="897920c3d615e62f9d8613f5a7239aff73b56ff0e8b2d11fb82f70870e270c78038ffc0f365d150cd017168feb6dfec5653b61df9b04dafc91fef30d700c6fa0678cdc95c619c3538fa1f03866b5950f02ee3900bf50160b0e80d25b7806cb9a47873b", 0x63}], 0x4, &(0x7f0000000a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x47, [@private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @generic={0x44, 0x6, "58b17bfc"}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x2c, [@dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, @rand_addr=0x64010101]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @multicast2}}}, @ip_retopts={{0x10c, 0x0, 0x7, {[@cipso={0x86, 0xe, 0x2, [{0x7, 0x8, "5e517229900f"}]}, @cipso={0x86, 0x4e, 0xffffffffffffffff, [{0x0, 0x11, "4ab6de4db6d95b7e5bfffc4984ece7"}, {0x5, 0x9, "2031764b543ec9"}, {0x5, 0x11, "ef9a68807454d1831755bec8bea0d3"}, {0x0, 0x12, "c59c3f8c76457e9fbd711c6a51bd1e1d"}, {0x2, 0xb, "99a9ed92edaad2934b"}]}, @timestamp_addr={0x44, 0x4, 0x57, 0x1, 0xc}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x3d, [@broadcast]}, @ssrr={0x89, 0x23, 0xbe, [@private=0xa010102, @multicast2, @empty, @remote, @rand_addr=0x64010101, @multicast2, @empty, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0x11, 0x1, 0x8, [{@multicast1, 0x7fff}, {@remote, 0x6}, {@local, 0x3}, {@rand_addr=0x64010102, 0x5}, {@rand_addr=0x64010102, 0x1000}]}, @cipso={0x86, 0x40, 0x0, [{0x2, 0xc, "c7903f08f8b8b0e87c22"}, {0x0, 0x4, "db97"}, {0x6, 0x10, "f5d976d1e4f0506537011cc44157"}, {0x6, 0x4, 'tL'}, {0x7, 0x2}, {0x5, 0x2}, {0x0, 0x4, "a23c"}, {0x2, 0xc, "218efff17bac9e5b8a07"}, {0x5, 0x2}]}, @noop]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x83, 0x9, "87dccc15afeb60"}]}}}], 0x1c8}, 0x12) syz_clone(0x4000000, &(0x7f00000000c0)="99ef1d3547a3ee2dae2e2285b166d7c017dde9428d10aa5b079a27695f5231cb42b6c936d940eb8043b950a69f8e1087da35c50271b971a40a97527cab9b370ddf0dc268e3b9322c1455d39a2f77a07c97973cfddc8dd5911b5e681c8ac644d55e3b41e85180e42c89eb867356f7a0f0d37e25000a8b692b423e58395fc6a408aa412fe48b514635178f4462418e10abee3c", 0x92, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)="dc9428bbb8256f7193622eb90bb4929848e135bd770d7eeab9fc2025c358ab3d40657717dfae471e821c8a664e5720d7bc7371158c767c5832a451a887b8e75d9d98b70dd5758f261bad04b648a980c3766864a72c1bd2aa250d") 11:46:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:46:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000340000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2226.190484][ T773] usb 3-1: USB disconnect, device number 100 [ 2226.475383][T32620] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2226.501477][T32624] gretap0: refused to change device tx_queue_len [ 2226.510959][T32624] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:00 executing program 0: syz_clone(0xaa040380, 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000ffffe0000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:00 executing program 3: io_setup(0x9, &(0x7f0000000280)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x3938700}, 0x0) [ 2226.901111][T15189] usb 3-1: new high-speed USB device number 101 using dummy_hcd 11:47:00 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00'}) [ 2227.094867][T32631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2227.186509][T15189] usb 3-1: Using ep0 maxpacket: 8 [ 2227.226535][T32633] gretap0: refused to change device tx_queue_len [ 2227.236284][T32633] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2227.375997][T15189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2227.386549][T15189] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2227.396171][T15189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2227.469032][T15189] usb 3-1: config 0 descriptor?? [ 2227.566155][T15189] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 2227.868310][T32641] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:03 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:47:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000000010000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:03 executing program 4: gettid() syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40000) 11:47:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x80, 0x4) 11:47:03 executing program 0: bpf$BPF_BTF_LOAD(0x36, 0x0, 0x0) 11:47:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2229.611483][ T773] usb 3-1: USB disconnect, device number 101 [ 2229.810808][T32646] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2229.959692][T32652] gretap0: refused to change device tx_queue_len [ 2229.968890][T32652] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 11:47:04 executing program 4: getgroups(0x2, &(0x7f0000000000)=[0xee00, 0xffffffffffffffff]) setregid(r0, 0x0) 11:47:04 executing program 0: bpf$BPF_BTF_LOAD(0x8, &(0x7f0000000180)={0x0, 0x0, 0x2d, 0x0, 0x0, 0x120000}, 0x20) [ 2230.313640][T32658] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2230.324635][ T773] usb 3-1: new high-speed USB device number 102 using dummy_hcd 11:47:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000000020000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2230.591274][ T773] usb 3-1: Using ep0 maxpacket: 8 [ 2230.714504][ T773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2230.725264][ T773] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2230.734904][ T773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2230.811181][ T773] usb 3-1: config 0 descriptor?? [ 2230.822937][T32666] gretap0: refused to change device tx_queue_len [ 2230.832831][T32666] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2230.864647][ T773] iowarrior 3-1:0.0: no interrupt-in endpoint found 11:47:06 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:47:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=@deltfilter={0x24}, 0x24}}, 0x0) 11:47:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000000030000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:06 executing program 3: bpf$MAP_CREATE(0x21, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 11:47:06 executing program 0: bpf$MAP_CREATE(0x10, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 2232.871319][T15272] usb 3-1: USB disconnect, device number 102 [ 2233.084550][T32678] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2233.187174][T32680] gretap0: refused to change device tx_queue_len [ 2233.196560][T32680] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:07 executing program 3: bpf$BPF_BTF_LOAD(0x6, &(0x7f0000000180)={0x0, 0x0, 0x2d}, 0x20) 11:47:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 11:47:07 executing program 0: bpf$BPF_BTF_LOAD(0x1a, 0x0, 0x0) 11:47:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000000040000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2233.570767][T32688] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2233.591876][T15272] usb 3-1: new high-speed USB device number 103 using dummy_hcd 11:47:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001f40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0) [ 2233.890914][T15272] usb 3-1: Using ep0 maxpacket: 8 [ 2233.946737][T32694] gretap0: refused to change device tx_queue_len [ 2233.956103][T32694] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2234.030984][T15272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2234.041249][T15272] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2234.050887][T15272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.083809][T15272] usb 3-1: config 0 descriptor?? [ 2234.151211][T15272] iowarrior 3-1:0.0: no interrupt-in endpoint found 11:47:09 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:47:09 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8993, &(0x7f0000000040)) 11:47:09 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000003c0)=@generic={0x1, 0x7fffffffffffffff}) 11:47:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:09 executing program 3: request_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0) 11:47:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000000050000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2236.146492][ T5094] usb 3-1: USB disconnect, device number 103 [ 2236.251902][T32699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:10 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0x541b, 0x20000000) [ 2236.434348][T32705] gretap0: refused to change device tx_queue_len [ 2236.443546][T32705] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:10 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x890c, 0x0) 11:47:10 executing program 4: request_key(&(0x7f0000000380)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0) 11:47:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000000060000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2236.842971][ T5094] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2236.911773][T32713] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:10 executing program 3: syz_clone3(&(0x7f0000000400)={0x1100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2237.121787][ T5094] usb 3-1: Using ep0 maxpacket: 8 [ 2237.134428][T32721] gretap0: refused to change device tx_queue_len [ 2237.144398][T32721] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2237.251746][ T5094] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2237.263856][ T5094] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2237.274643][ T5094] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2237.284170][ T5094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2237.361772][ T5094] usb 3-1: config 0 descriptor?? [ 2237.659565][ T5094] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2237.860797][T32708] iowarrior 3-1:0.0: Error -90 while submitting URB [ 2237.874266][ T5094] usb 3-1: USB disconnect, device number 104 [ 2237.905223][ T5094] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:47:12 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x15, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0x2, 0x0, 0x0, @private1}}]}, 0x38}}, 0x0) 11:47:12 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:47:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:12 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/pid_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') 11:47:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_clone(0x20061000, &(0x7f00000008c0), 0x0, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000c80)) [ 2238.695930][T32735] gretap0: refused to change device tx_queue_len [ 2238.705649][T32735] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2238.744666][T32736] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:12 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8954, 0x0) 11:47:12 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)={0x0, "1d6b3f56918707db19a9d814b926906c94d8dcf82170ffdd064cca1e342ee843eb5695b889cf2a826d6085a87ba1caba42778754282c888fa3b26d3a04250571"}, 0x48, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, 0x0, 0x0, r0) [ 2238.901865][T18696] usb 3-1: new high-speed USB device number 105 using dummy_hcd 11:47:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000000080000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:12 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8932, &(0x7f0000000040)) [ 2239.180977][T18696] usb 3-1: Using ep0 maxpacket: 8 11:47:13 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8948, &(0x7f0000000040)) [ 2239.308125][T32745] gretap0: refused to change device tx_queue_len [ 2239.309355][T32746] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2239.317394][T32745] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2239.327474][T18696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2239.357710][T18696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2239.368380][T18696] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2239.377951][T18696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:47:13 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x891f, &(0x7f0000000040)) [ 2239.468674][T18696] usb 3-1: config 0 descriptor?? [ 2239.795216][T18696] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2239.939259][T32728] iowarrior 3-1:0.0: Error -90 while submitting URB [ 2239.976742][T15272] usb 3-1: USB disconnect, device number 105 [ 2240.017183][T15272] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:47:14 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:47:14 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8912, &(0x7f0000000040)) 11:47:14 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8923, &(0x7f0000000040)) 11:47:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000000090000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:14 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x890b, 0x0) [ 2240.689151][T32757] gretap0: refused to change device tx_queue_len [ 2240.699047][T32757] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2240.745172][T32763] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:14 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x15, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, @sadb_address={0x5, 0x18, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x60}}, 0x0) 11:47:14 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x8}) 11:47:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000000000000a0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:14 executing program 0: syz_io_uring_setup(0x6e9, &(0x7f0000000100)={0x0, 0x0, 0x1000}, &(0x7f0000000180), &(0x7f00000001c0)) 11:47:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2241.071112][T18696] usb 3-1: new high-speed USB device number 106 using dummy_hcd 11:47:15 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) [ 2241.278159][ T306] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2241.302432][ T304] gretap0: refused to change device tx_queue_len [ 2241.311582][ T304] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2241.340688][T18696] usb 3-1: Using ep0 maxpacket: 8 [ 2241.491849][T18696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2241.508010][T18696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2241.518645][T18696] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2241.528286][T18696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2241.598164][T18696] usb 3-1: config 0 descriptor?? [ 2241.879692][T18696] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2242.075867][T32764] iowarrior 3-1:0.0: Error -90 while submitting URB [ 2242.098019][T18696] usb 3-1: USB disconnect, device number 106 [ 2242.123079][T18696] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:47:16 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x401c5820, &(0x7f0000000100)={0xa9}) 11:47:16 executing program 4: r0 = io_uring_setup(0x6082, &(0x7f00000000c0)) syz_io_uring_setup(0xbea, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000000000), &(0x7f00000001c0)) 11:47:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000000000000b0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:16 executing program 3: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 11:47:16 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001140)='^', 0x49) write$char_usb(r0, 0x0, 0x0) [ 2242.868452][ T319] gretap0: refused to change device tx_queue_len [ 2242.877985][ T319] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2242.895883][ T318] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:16 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r1}) 11:47:16 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) 11:47:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000000000000c0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2243.121321][T15189] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2243.131756][T18696] usb 3-1: new high-speed USB device number 107 using dummy_hcd 11:47:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) [ 2243.363023][ T327] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2243.381768][T15189] usb 4-1: Using ep0 maxpacket: 8 [ 2243.392450][ T328] gretap0: refused to change device tx_queue_len 11:47:17 executing program 4: r0 = syz_open_dev$media(&(0x7f00000002c0), 0x1, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000340)) [ 2243.401784][ T328] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2243.430726][T18696] usb 3-1: Using ep0 maxpacket: 8 11:47:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2243.542303][T15189] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2243.558893][T15189] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2243.569806][T15189] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2243.580252][T15189] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2243.593873][T15189] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2243.603435][T15189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.621837][T18696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 11:47:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000000000000d0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2243.636476][T18696] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2243.646039][T18696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.715499][T18696] usb 3-1: config 0 descriptor?? 11:47:17 executing program 4: r0 = syz_open_dev$media(&(0x7f00000002c0), 0x1, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000340)) [ 2243.971448][ T335] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2244.022748][T18696] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2244.058114][ T338] gretap0: refused to change device tx_queue_len [ 2244.073216][ T338] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2244.137590][T18696] usb 3-1: USB disconnect, device number 107 [ 2244.148642][T15189] usb 4-1: GET_CAPABILITIES returned 0 [ 2244.155971][T15189] usbtmc 4-1:16.0: can't read capabilities 11:47:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2244.253890][T18696] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 2244.446239][T15272] usb 4-1: USB disconnect, device number 51 [ 2244.613468][ T343] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:18 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_type(r0, &(0x7f0000000780), 0x2, 0x0) 11:47:18 executing program 4: syz_clone(0x2002800, 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000000000000e0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:18 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001140)='^', 0x49) write$char_usb(r0, 0x0, 0x0) 11:47:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:18 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)) read$dsp(r0, &(0x7f0000000140)=""/250, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x28) io_setup(0x1b2, &(0x7f00000002c0)) [ 2245.378831][ T352] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2245.427435][ T351] gretap0: refused to change device tx_queue_len [ 2245.436796][ T351] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:19 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) 11:47:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:19 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x40086602, 0x0) 11:47:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000000000000f0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2245.742885][T15189] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2245.911362][ T361] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:19 executing program 4: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5403, &(0x7f0000000000)={0x14e8, 0x1, 0x0, 0xfffffff7, 0x0, "02dd3c957f070fcb3b7e1ee5ac065b000100", 0x0, 0x5}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) 11:47:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2246.060186][T15189] usb 3-1: Using ep0 maxpacket: 8 11:47:19 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) [ 2246.226615][ T365] gretap0: refused to change device tx_queue_len [ 2246.231450][T15189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2246.236051][ T365] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2246.244313][T15189] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2246.269692][T15189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2246.354523][T15189] usb 3-1: config 0 descriptor?? 11:47:20 executing program 4: unshare(0x40000080) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000036c0), 0x60802, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0xffffffff, 0x6, 0x7, 0xffffffff, 0x8000000000000000]}, &(0x7f00000000c0)=0x78) write$vhost_msg(r0, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000036c0), 0x60802, 0x0) write$vhost_msg(r1, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000036c0), 0x60802, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000100)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0xf}}, 0x8) write$vhost_msg(r2, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080), 0x2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r2, 0x0) r5 = add_key$keyring(&(0x7f0000002e80), &(0x7f0000002ec0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000002dc0)='pkcs7_test\x00', &(0x7f0000002e00)={'syz', 0x1}, &(0x7f0000002e40)='/proc/capi/capi20ncci\x00', r5) syz_io_uring_setup(0x70cd, &(0x7f0000000180)={0x0, 0x967e, 0x40, 0x3, 0x267, 0x0, r2}, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000002d80)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r2, 0x0, &(0x7f0000002d40)={&(0x7f0000000280)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @null, @null]}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000300)="428e3b0f707ac83ee0d3bb3694a0236659300d9cad7c6b93a7789e98", 0x1c}, {&(0x7f0000000340)="582a53eb5f5689110a30e2981c40c0bca2450dc4b98be303ffc349e20614f0df9884268156955de6fbdeb0528345d55c10ffc0c031eb0427a2f9e2e9e3936e9f2c4af513584261d2ef7ebff1289712aebd70c204c4fcc2fc8bfcc5366b9fc7e83ed77d5197e32786d043c55096b77f3b4984a142d09e8c035122fff762fad54de77e920ed18fd3498a5674afb553b8c3ede9292f22662850b3c136cd866b6d19999a015f75443f468585da9cc1e96c3a901c4dc129bf15ebd4ecaec8aed667969a1a313bc58f8549f5fedc214cad98c9e80f95068785683634c009385973cbb7930cbc5c6f91c41bc6bb60ca6ac08d138467dd75469aebf33af64d800c4b55846cb6041ea875f9af2d2a5e3344d47894a8b831a9d0b68d2bbe6a7decce8c1eb87e42958a81568eadfe0042de056dafcc0643bff96872d7542b5de36d845c21380a9e7655b4c66a5078e727fca4608334af55d15561461a877d9cec9d165495787bcab1bff5dc96bf012a2f9bec5fb4130765f58064d3ba719c76d6688ab63cde4b6a186525e6979751f200276495104d8ed3ec44c989b81eb9e409fbde61d6475d6451ce2d1ea015962fcc7a8ede0a0719badfc19ed02570a0c1e60767f027ebc483d4ab3fedd090f642e7cae5dcbd9cae04e81a42a1ac9d3696003406d8a49cdf61c6376282ea20b080b303b7ff65e8db1af1e0fc4fdc6262a1162192a5e217c62738b18227c09fd8a0478d3717eff4988224161a96d8491627a07451d58e891c4ee362445f98838969351a7d05888597441718ffc02828b0a5b96d0dca4dcb0f947fcf69e33a1534fe181a01257f88913bac13033132fef7f086bf61239edb5f024031abea5824b75f3508ddd61037bd888f6b4bd8e095824a0c35b0dc3f4c972de64c16c2bab64f4dc95aae60124ddd0b2a4a50290d3a9134dce4bbd2353c9884e745872a5ca79d78d63192f00f93b71f6916caf01a2c115b65381955c748de960c76a5c656f6b465117cbfe72b716f65c5a44acbf022b3f53a49c5bb29a41b4112b9aa15ea37f4ab46b688be9c91850991e99e8bd39de2e74d396e2419ff82dd7967253c9662e73d3dd80afedf733313e962719712958c8669f6639fae890fcabeeaa69fe0cd47f248ed21e99f7799b1546be8ad95cc4492a28e8e48bc1c9253a087a9c4dbeee4116f242e9bddd233ec0ac56954d6750c827f256557aaec3f95595589fce05f285623cb93d9b8469391ac11e83915178e354c0394fc8f8f7a521210c1d986de96c52912a35fa8469057264fbeed17e51333ba4db7d0981deb5461df11bb7a8521b83081453e07e4926ad9488ca1b2d9448916ec8627688b5e69df5ef360af1b5641f75297cd69ceaed417704a5f38f26d8ace9c32fcc576db88caea8ae2634215b41c9edfd508b8780885dc436234a41cfda624175f05f9f6d7d7bf073ea069cdaf61dc18782c32b9619f18374aac3623ce45a4c832e9a3f607bf294f412808d773514fd2203b5d8df7e4008b533d166448274ec6c5867fd960e9b6edd2ce464cf795598df430983683349dd786273e8ffb3201c910b2a4fa6c9e8dec2af4ae16540fb63d544c426f63ac74eb6145f686c9ca75a02262d49476f4f17080bc9f81c450c9081d8226d3926b11d0ea013784503336dcf12bb8da0f279032f9034be42b4dbc7337582a589867641043b97276a87891a5e31a67e7d39b8532e4c669397992f3c3965f2613edd52a37d3f632666276a72ed71a01fc95202d320415874036e57dfd4549a28206d31b14981cf476f198d8711412a13c5f4d0c07a00ad21df22e391527f2bd195feea1af226ab2c433e77b31dfc10bc8c5d844df8d40609c354b048cf3a35909bcac09f44063dbfd11bd160afcc5579ea0b18e16768a31c1aafeaf0d62570c886b498741c070b12d9a30037ea6f3b375b0ea59d96de90f7bccd33d00a884e6b7e4ce0f25ffbf80357f4a7255ecde5b0d2e4e5314cc2f8ce9cfb7eb5f3f9afc86e8e1dc9f064d00312352df12c43a147a741914d6abd8e648f37462d1bac35ea4e5d590e5096e10cd6351b2131d2497c0b1eef160f1a3e2c89a730c6a5d2aadf893e483be48fb549f867c26ef5226d97925fd9703bdb28cf88f751907d61daa5823e4de1b49ea28bbfa849c4d956235f6e3e5e4d68f1e3dada773de1778f9a40b16a8daadb9794f5b33dfb4617eb25127f9bee1025f3dc0f3bc857f499bae6fdfdf3622a41780aeeb6ad27e00516a7ee1d4a636eb588279901ab09ceb12b43e5f247df5f14a1aa72e68cf150e125c4de4602a50c5e2293e608e76497caad9ad1415c822a486a30dddc0719c6fe94c7aed760d1e514e0897f386ce1d9291496c53f12edaa651e293d5101d7db1e6be745c6f9fcfaf6e4c99f8c77de0d3435d7197ae11f09bfdea68e17bf53d73845ebeca4373c2bbd9b88564dc1a8e07606093fb6c25d953a6e82aab920f132fcd32bf24ec8555047be77c19ef4f85447279f96be437ce8105f436dc2cc6510a328ef8ba80b317d81e95ce5408b7f7d3a5c0bbce5e47f628900194e6263819c231dfe177a69bdabe7422b3c8ed27a24bc0a4c53efc23f5b5f891a4236a63b356639cab05ff0d6926b99fc0e4d1e8cfc449f4ec85b5efbbcf074df86b29f221b1feb3f19dad308495fc1c38995da2e43c01d076add201d9722f94ee724809a8293db5a173ed59a8b0e5e73f4329c5fe90134356369980025eb52a05a8b19cd81958e9e80d058044503183a43dd3c02be009f247dfa5f6e18f201f7a3428cbfb87c6f6d2218208eb5d850c6535b5b9f5e6f76a15a2995299c17a5aed04ae4f707ae6bc6dc14ac03aa58232d1f9637e6f53cacab8a806c9245c517c19a06bce62497f86f46d85f90d7a59ec3d2a518e980bce9133de8f109921472e6332a5bbcb15f73d806dbc4fa8e8cc72c92e5932a376ecded7745c2a5a23bac9c13a451417f571991dea3c9327b368858a3499846b8a740ef5cee9de28b311e25abb686e3565267eebcf6b99c64aed45fa9fde070999aaa2bf074687de3d0f4b786b78120362ee52f7706bb30439b0f088abf8c75343d8ad9581a90ffdbf3093d3aa15a7c54ffa92252addd06b5ae12eba20594e88ebce96480c8afa728f6bd8b20d0de8ce3e3c56d6a70af6bcc3b95f8009aa7147a660730be7eaa5ac720192ea26a75228de3371578cafb8a4e7c9114e73d3cce202c4530f5ff024678b881507e217e03055123e262847d57892a9eb74e11e4ba1a5a6f01ea37f75950a64c2ceb91f8f011c6a8d5b765152cc72d9cc93404c33c32b758b38ed9395a24ed0f61e5c3e6d6171a9ab03c3fab22ed50b37e2b189cb59896f6b0502220b142da89e62b6faea8f9d196cc8758201b74749df3663726042db25e24d491761c2574c812b20d8f7c93b798b1a65a221455260c31466921b5dc307b391f4936168fccb5514f30fac1eb6e083b2958e1335b75ef178a592e46b0f43e617da1a999f73a7da99e3127aff869fbf34f53d0e906faba3720faff225cf0eb304a9a9e469ec58a8d1c813539a855c01e6f8419255915941d513eba5e23c2289a8f10cb2175911cfbaff10abe63aebac6015e03575980e2d53dba242c03947591ecc1f286599b2231f9dac19d2679c7912a1ab6ad31a17caf783721476f8867f2ff5c9ea1346ccc7d14290bdaea9e7e34d82adcd3b2581a2ef81dbadc02c3b6253098c1e0f7f5225d74d7fec14d80f63d98afb2f856e19e5c9b34592f65d2e4c4a58861b22fe76ad12dc1e3d753a18a54f0999bf4a8ec915b084537c6eb61a51007690fd44001b21fd5a7ba910cf5d259ecd88bb14d0825589ad777a3692c5d5529c73b7c7469ab8ace113c84a928e2eb68273e1e38cb8a27978ea1c14aa295ec67a7d1b4c9fbb240feb21b35513220623705cad1d1adde054c99066967333f18390073f5286252debebbbb1f4dcce47b485c2770cf887cbef134d9997b4d034b9eb0f52c5e171c03b60c47080fd901e0028c3dbec1ff8322dca0ff3c032dba861fd4658dcd4ac02f09fd59bf3a96ade0cdfad6dd2dd581b3ba40e72bf72fdf7423ea71458c43b898406610b02d26a628a9bdf05b0b86ac606f6982091bbc92d065800903aea31e79fe84346ae60eb8ac39caa528efccb09ee5f0fe168ebc55193e29e3c0d1a84e872eef1b5ee18621d15fa29bed35037fdd38725d4327f3a6327c1d99de9bd6fe40b8498061750ff8e4bd49e2bfe1026d11b1f4155a36f74db78cde43638300ee4c3526fb4578d3643c4699bc36eac62cf8aa1077f775cc7b3fbb7d1c5aae870f1d36376af1d76f6e58612a33df7b0779dd27ed026c138c3e521ce1f62ebb4d221ae028e4d1f3673042af6faa0c17084e4d0eb53e9408fb094c8aa0c2dc744c8cafb401daa781c34c2a0a38f9cea36168216db44b8d7153313d01891c5c7e3ac121a4b50f4acaa1e5d0c22731dad67f28e64264922454a2c892eaac4449f62dc8963b2106b882e35dbcfb2c3d4aa52b4296b11fdb93f35e01a808c87be995bc39c4b7e1cbd8b50ce13d340afda618ebd746a4d9cb2e1297ab526a119383d25750f4b52733aad42e313ee23f05f0b02a2389850168f64469c49e7d2f0c12975bd39ad3a5cb78fbb15c4e4118c2ec40245be6917cfde6a71de37b95466e0c389ce5f2a054b174fd58266818373e6962c3df99f4bddac41e24c4882fac96a849169247ee5461ab94f677a6895af03efa3574c99991ea2f748953a7fa711463f7c9593cff29ea8fd6296d40524572947a4241c948ca6b41dab0eb852a8e2e1220f63016dd18d3994a55de79992909ebd4fae9c2668e4e7a87ddfd7491c7538fe1e282def2897c91fd6692db1f285b0639895095472a6d09e64d697d8150aa0a95754a4c841adf063aa13ecfa2df9599cf176fe4059f0dc30884710517b55089f9c17417acc599e854c8c055106a7caf0a8eb7c05e37304f67770ea6cefb42b493cea4221db97c5ef4fd15fe691247ebdf47eac98bd1cc5a2550ca9a7834d9a4849ebb8ad5bccbdf6cc8ff332e3123931fb87a1e750da7e978938a9275a205ca30610497d3752f4fc4070981d2125c87bab628543c03ae98a2d2bdf474ccbe833fd881b9f094e762f2e8b59a31a6a80f3a24c2035d6711505c516918cd6ea0112b796f87f0a3bc32b139194caf6e6d9929aad36803df84e72588b7eb6b8f47b5290705d9eb4b5041e1c8109cd43bc36a98202f9184212d859d06a31d7be1f4df42b62914a711c1eecd326763a68b1f4d6bfda6b800cfa840696bde3058cf2c03d4904914a904e9c864ee65433c5980370912b7c68c4ee9ee9b2d5baaf154a472dcd324f2e154ffc322c523f9c2fc35f7dfe6656541e95d7fbd06a51ec6e50bed98190ca2ab57ba8157068e0e9575eaf2906bd55054a0eaee77082b5954b1b505ea70bd2f45a8b88c07b9d27cd18b92c5f463fa99a94c6b63b998a576a0de24f3d39e40fbfa077caa4a0f210f1d47a90ea78bcf2326ee7b9e80e6545ae0afb2e0ac102772580eec0ea872c9715ffbd812e4fb135435cb77ca6785b148f94616a6afbbe2b1bc657b19ed9d2f31465bbe41faadc09f7bd57ad4db35600b0df8afcb33f16d2ebb6eb0f3aefa570562fe867f21948f71df0263acafb8b781f1c4ad3043ac1473c0d468e2a637e5676952ab010ebe52bf92f78f71966262f71a8fe962199be1aa4008d0e7452df86ad34c6aedfc2d686c2d4e6ee6009c32b54a7d06cb6d2a22e98010ff8810ebc657f", 0x1000}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="b7a109e0f108e42b7b81beb45cf791574309bb2f91bef4a2b05cc9ce6a959d97b1f438196c580eb39912254a47d9d0b3d080c6fb3ec2d767972f0d9c0bab18fc9c90a9295f6ff95abf7eccc4a96ff142c1e3b958ab3c7a8fbc836964360d24d097f3a0f0bd6ae1d457a978025267b98302bb75ec0718527d22ec9eb095ced06d7bc986d4cd0a1197bcad333458ceab24078eef191256631840fdecbc896db54d578d385bac0e387bb469cd5958e07630d777a0379f7619d23a86d388041380e4923a56291da61da7b2bbab15cd5a01c4df193d70c63ac9faf9c50a476525663d19ea80dc3d02a2093bf875a4a70015", 0xef}, {&(0x7f0000002440)="2dfb2d5e0db393c7cf70288c4c89ea6d4b0fe0be2a56ab8907b35b9419a86cde56fff8c84d0f2adb308620be6bcf0797ab08ad29c61b8499a5880223970b968ad253adcd8e0b4140275c86882696e001330975dd1df67cf2f4204e532473819db2", 0x61}, {&(0x7f00000024c0)="78d484808c89c69cdf8a9f6da1af9aaa6f5d9ea0358102a6f928e6c3ca9c6ccf9001d629d350c21eeb6de639ffbb6d7f7d8c923a1319d39bd02400964167c20ae26b385e881dbaf0a813ac6e8d35f653b72169074716e54765db4e0899c73cc22742a100f622b8b786988a3ecf478617369bd962ce9f1445fbb2adb5420a62ab0f9c2b73dcd98ea2bc3ba88cbccf881f29723a5384df9ddeab98ce3efbdafd7b00692a619b250f77a78db62a333bc62606db0d77ff5fe8bdb26bd70f22f4c9b575f7abbf45ce94a8c5c91643b7aceed9565376be9b9a760fb182f8f0ae8cf0d4997a851425cf3d9b18bb2ce1bd1eab17dee3", 0xf2}, {&(0x7f00000025c0)="54822b8a12a7f16d45bc99f67913698ffdb19443dc158b7da3815f1df4554334e98157f323935a9d326e8e4c1fba676f9f16a03eab1c1edc37f47b822914fc731b2a93d2bcedac353d7d44e614bba0d71fc5eb986cb4a9c0a0d7bc65a2e90422318dac326af665c6387170e273a5d36b7d230917fdceeff857321e967fec1903498a723b8953ff2bd660d99459877712646de5b2777c348a0f157343cb495ea834a839c6c3ca98a5ce26ec376a6f270f0e4c522b0226079aa7e935f7b5d3f8bbf30586a77e055762d3b2e0f94161e100047368a245a62d38409be75c27b256d51229966ca4e253b47ee7b7d35019810601c0dd4dca6d79cdeb", 0xf9}, {&(0x7f00000026c0)="d473fbb9cdcf52fa861c5addea7cb8cb72aa54bc22e0cfb5747ff3004d04e7efa2031b1cea91cb3dafba6b8b766cce6f48d086c955a7ec27faba3f624a5c35aad1b95ff071c2aeabd536ee7289058386c46a3b59f9a45129b2bd21b6ab1b9a3b6307b0c02673e95f1a0a67213b934f90ea22768ee8cd6c36d2d8981461e2e0ce8113da556e231d31fdc0998c6526c2206da8c069c66876df21c252ba9955dd6526949b91e6003d09b30ebd9b4d1af8de7b29d27c6224504d723257cd9c21dd0ea171b63df555b22d7a0ac0ced66a117898b6c91a74ab8c1e32bdd49ee8eb", 0xde}, {&(0x7f00000027c0)="a4308014496e1a4ffbe8389becab83889b8f3063b5e5d215319f233c9d11290da39d60a3df6b751c096853cb678ffc09360e20c84477e0b1b05095a3108393d8e9aab4a5e0933a8c83a2e8ca027ade9b6248eab193579454f37218794fc321e6076b204065586f1feb68cb531ef5b030e5df2e2d0dda69d8b7f30d1da0e3660a106490db252e63d1a42a67724411144fcd97ae72bbb6c674a5880ba29bb144e62d575f0f40c190ca2c75cb83ef2f0088e882796b0e62c84e1c9cd080e0a9ec346a1cdb94593a32cccef79038de3cf221c76b", 0xd2}], 0x9, &(0x7f0000002980)=[{0x18, 0x0, 0x0, "fe"}, {0x30, 0x11, 0x0, "66aeb36d1eb3b9a6fc0e31ffdd69253afef79629d2d3c9f357"}, {0x10}, {0x28, 0x29, 0x0, "f145bb15343b7aae5506b99c6d81965ba33d"}], 0x80}}) [ 2246.411835][ T370] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:20 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 2246.613617][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 2246.625170][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 [ 2246.713580][T15189] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2246.805239][T15189] usb 3-1: USB disconnect, device number 108 [ 2246.855209][T15189] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:47:21 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001140)='^', 0x49) write$char_usb(r0, 0x0, 0x0) 11:47:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2247.511878][ T381] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:21 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x540d, 0x0) 11:47:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000000100000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:21 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 11:47:21 executing program 4: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5452, &(0x7f0000000100)=0xa) 11:47:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2247.821280][T15272] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2247.965342][ T388] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:21 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000004c0)=[{}, {}]}) [ 2248.076244][T15272] usb 3-1: Using ep0 maxpacket: 8 [ 2248.082803][ T391] gretap0: refused to change device tx_queue_len [ 2248.092230][ T391] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:21 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@empty, @remote}, 0xc) 11:47:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2248.242685][T15272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2248.254320][T15272] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2248.267978][T15272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:47:22 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000000)='*#/)+@}.@{\x00', 0xb) [ 2248.344170][T15272] usb 3-1: config 0 descriptor?? 11:47:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000000110000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2248.643004][ T399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2248.659488][T15272] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2248.763533][T15272] usb 3-1: USB disconnect, device number 109 [ 2248.863862][T15272] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 2248.906082][ T403] gretap0: refused to change device tx_queue_len [ 2248.915346][ T403] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:23 executing program 4: setpriority(0x58ad7916a569946f, 0xffffffffffffffff, 0x0) 11:47:23 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:47:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000000120000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:23 executing program 0: syz_open_dev$admmidi(&(0x7f0000000040), 0x2, 0x10801) 11:47:23 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x5452, 0x0) [ 2249.533705][ T411] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2249.566203][ T413] gretap0: refused to change device tx_queue_len [ 2249.575469][ T413] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:23 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000280), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000980)={0x80000000, &(0x7f00000008c0), &(0x7f0000000900)}) 11:47:23 executing program 4: socket(0x11, 0x2, 0x0) socket(0x11, 0xa, 0x0) 11:47:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0xfffffffe, 0x1, 0x3}, 0x48) 11:47:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2249.781109][T15189] usb 3-1: new high-speed USB device number 110 using dummy_hcd 11:47:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000000000001b0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2250.062725][T15189] usb 3-1: Using ep0 maxpacket: 8 11:47:23 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000140)=@framed={{}, [@func, @jmp]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 11:47:23 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) [ 2250.191623][ T423] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2250.200805][T15189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2250.217759][T15189] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2250.227203][T15189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2250.317694][T15189] usb 3-1: config 0 descriptor?? [ 2250.427658][ T426] gretap0: refused to change device tx_queue_len [ 2250.437084][ T426] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2250.624319][T15189] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2250.825018][T15189] usb 3-1: USB disconnect, device number 110 [ 2250.865820][T15189] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:47:25 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:47:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB='\t'], 0x30}}, 0x0) 11:47:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000008c0)={0x20, r1, 0x1, 0x0, 0x0, {0x2}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) 11:47:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0901000000000000000009"], 0x30}}, 0x0) 11:47:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000000240000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2251.511897][ T434] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2251.564587][ T435] gretap0: refused to change device tx_queue_len [ 2251.573747][ T435] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2251.644531][ T437] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:25 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000280), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000b40)=[{}, {}, {}, {}, {0x0, 0x80000000}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000000c0)={r1, 0x0, 0x0}) 11:47:25 executing program 0: memfd_create(&(0x7f0000000040)='\x00', 0x9) 11:47:25 executing program 3: r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) 11:47:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000000250000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2252.030670][T15272] usb 3-1: new high-speed USB device number 111 using dummy_hcd 11:47:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48) [ 2252.167529][ T451] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2252.214222][ T452] gretap0: refused to change device tx_queue_len [ 2252.223517][ T452] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2252.300817][T15272] usb 3-1: Using ep0 maxpacket: 8 [ 2252.441865][T15272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2252.454083][T15272] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2252.468524][T15272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2252.534091][T15272] usb 3-1: config 0 descriptor?? [ 2252.787486][T15272] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2252.996904][T15272] usb 3-1: USB disconnect, device number 111 [ 2253.003352][ C1] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 2253.027929][T15272] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:47:27 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000001140)='^', 0x49) write$char_usb(r1, 0x0, 0x0) 11:47:27 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000280), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000b40)=[{}, {}, {}, {}, {0x0, 0x80000000}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000680)={{}, {r2}}) 11:47:27 executing program 3: r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={'syz', 0x3}, r1) 11:47:27 executing program 4: mmap$snddsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x124008d4f30398b6, 0xffffffffffffffff, 0x0) 11:47:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000012270000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2253.745697][ T465] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:27 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x76c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x40}}, [{}]}}}]}}]}}, 0x0) 11:47:27 executing program 4: memfd_create(&(0x7f0000000280)='\x00', 0x0) 11:47:27 executing program 0: setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, 0x0) socket$can_raw(0x1d, 0x3, 0x1) [ 2253.856124][ T460] gretap0: refused to change device tx_queue_len [ 2253.867007][ T460] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2254.129431][T15189] usb 3-1: new high-speed USB device number 112 using dummy_hcd 11:47:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000000000163f0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:28 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4000008, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x1}) [ 2254.246940][ T474] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2254.414861][T15189] usb 3-1: Using ep0 maxpacket: 8 [ 2254.456595][ T477] gretap0: refused to change device tx_queue_len [ 2254.465982][ T477] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2254.491258][T18696] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2254.581897][T15189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2254.593687][T15189] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2254.603191][T15189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2254.674343][T15189] usb 3-1: config 0 descriptor?? [ 2254.760973][T18696] usb 4-1: Using ep0 maxpacket: 8 [ 2254.900951][T18696] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2254.935251][T15189] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2255.081137][T18696] usb 4-1: New USB device found, idVendor=045e, idProduct=076c, bcdDevice= 0.40 [ 2255.090912][T18696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2255.099216][T18696] usb 4-1: Product: syz [ 2255.103858][T18696] usb 4-1: Manufacturer: syz [ 2255.108715][T18696] usb 4-1: SerialNumber: syz [ 2255.162865][T15189] usb 3-1: USB disconnect, device number 112 [ 2255.189488][T15189] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 2255.218824][T18696] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 2255.405708][T18696] usb 4-1: USB disconnect, device number 52 11:47:29 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) 11:47:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000016400000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:29 executing program 0: setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) 11:47:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000000000080003ff", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:29 executing program 4: syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x76c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x130, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x40}}, [{}]}}}]}}]}}, 0x0) [ 2255.902450][ T486] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:29 executing program 0: syz_open_dev$audion(&(0x7f0000000280), 0x1, 0x0) [ 2255.954603][ T488] gretap0: refused to change device tx_queue_len [ 2255.963843][ T488] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:29 executing program 3: syz_open_dev$audion(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/vmallocinfo\x00', 0x0, 0x0) 11:47:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000000000080003ff", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2256.131598][T15272] usb 5-1: new high-speed USB device number 21 using dummy_hcd 11:47:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000000480000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2256.312179][T15189] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2256.376698][ T494] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2256.490788][T15272] usb 5-1: Using ep0 maxpacket: 8 11:47:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2256.561855][T15189] usb 3-1: Using ep0 maxpacket: 8 11:47:30 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r0, 0x400c4808, &(0x7f0000000740)={0x1, "b1"}) [ 2256.601504][ T497] gretap0: refused to change device tx_queue_len [ 2256.611434][ T497] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2256.647065][T15272] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 11:47:30 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x76c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x130, 0x3, [{{0x9, 0x4, 0x0, 0xfb, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x8}}]}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x300, 0x3, 0x7, 0x81, 0x8, 0x3}, 0x5, &(0x7f0000000ac0)={0x5, 0xf, 0x5}, 0x1, [{0x33, &(0x7f0000000b00)=@string={0x33, 0x3, "9e0f3979ffd85b299d99fa1335d285312e337d1d9b6c0737e2df71e8b1e14bf65683c363253e1eac2e441a887925565151"}}]}) [ 2256.713100][T15189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2256.725155][T15189] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2256.734671][T15189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2256.803584][T15189] usb 3-1: config 0 descriptor?? [ 2256.887180][ T500] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2256.891273][T15272] usb 5-1: New USB device found, idVendor=045e, idProduct=076c, bcdDevice= 0.40 [ 2256.906250][T15272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2256.914634][T15272] usb 5-1: Product: syz [ 2256.919044][T15272] usb 5-1: Manufacturer: syz [ 2256.924074][T15272] usb 5-1: SerialNumber: syz [ 2257.090998][T15189] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2257.300594][T15189] usb 3-1: USB disconnect, device number 113 [ 2257.317222][T18696] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2257.348759][T15189] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 2257.357766][T15272] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 2257.447340][T15272] usb 5-1: USB disconnect, device number 21 [ 2257.600718][T18696] usb 1-1: Using ep0 maxpacket: 8 [ 2257.721427][T18696] usb 1-1: config 1 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 2257.733228][T18696] usb 1-1: config 1 interface 0 altsetting 251 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2257.743570][T18696] usb 1-1: config 1 interface 0 has no altsetting 0 11:47:31 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) 11:47:31 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 11:47:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000000000004c0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:31 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "8e04f37f40c7437944ed1758830a1cc6a45e630e92ea795d3a42a9237f7ce049"}) [ 2257.948641][T18696] usb 1-1: New USB device found, idVendor=045e, idProduct=076c, bcdDevice= 0.40 [ 2257.958967][T18696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2257.968380][T18696] usb 1-1: Product: syz [ 2257.973196][T18696] usb 1-1: Manufacturer: syz [ 2257.978250][T18696] usb 1-1: SerialNumber: syz [ 2258.126258][ T510] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2258.146310][ T509] gretap0: refused to change device tx_queue_len [ 2258.156481][ T509] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000200000008000100000000000800037f", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01012bbd7000ffdbdf250600"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x24048090) 11:47:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000000600000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2258.403692][ T5094] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2258.492436][T18696] usbhid 1-1:1.0: can't add hid device: -22 [ 2258.505717][T18696] usbhid: probe of 1-1:1.0 failed with error -22 11:47:32 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x2}) [ 2258.562917][T18696] usb 1-1: USB disconnect, device number 46 [ 2258.639514][ T516] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2258.671709][ T518] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2258.720826][ T519] gretap0: refused to change device tx_queue_len [ 2258.721487][ T5094] usb 3-1: Using ep0 maxpacket: 8 [ 2258.729891][ T519] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000058650000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2258.927433][ T5094] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2258.938982][ T5094] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2258.948486][ T5094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:47:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x1, @pix_mp={0x0, 0x0, 0x38415262}}) 11:47:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000001ac0)={@val, @val={0x0, 0x5}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @redirect={0x5, 0x0, 0x0, @local, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}, 0xfdef) [ 2259.033701][ T5094] usb 3-1: config 0 descriptor?? [ 2259.209223][ T523] gretap0: refused to change device tx_queue_len [ 2259.224484][ T523] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2259.316152][ T5094] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2259.518679][ T5094] usb 3-1: USB disconnect, device number 114 [ 2259.525049][ C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 2259.564840][ T5094] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:47:33 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) 11:47:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000000000080003f0", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:33 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1, &(0x7f0000000240)=@raw=[@generic], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 11:47:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x6c, &(0x7f0000000040)={r1}, &(0x7f0000000080)=0x14) 11:47:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000000680000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:33 executing program 3: clock_gettime(0x6adda340d8b38497, 0x0) [ 2260.308933][ T538] gretap0: refused to change device tx_queue_len [ 2260.318187][ T538] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:34 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x4}) [ 2260.356606][ T540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:34 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) read$dsp(r0, &(0x7f0000000100)=""/188, 0xbc) 11:47:34 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x1, @pix_mp={0x0, 0x0, 0x32314752}}) 11:47:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000000000006c0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000000000080003fd", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2260.630766][T18696] usb 3-1: new high-speed USB device number 115 using dummy_hcd 11:47:34 executing program 4: fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) [ 2260.920675][T18696] usb 3-1: Using ep0 maxpacket: 8 [ 2260.926953][ T548] gretap0: refused to change device tx_queue_len [ 2260.936547][ T548] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2261.009659][ T550] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2261.081838][T18696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2261.093416][T18696] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2261.103083][T18696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2261.157097][T18696] usb 3-1: config 0 descriptor?? [ 2261.432673][T18696] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2261.671998][ T773] usb 3-1: USB disconnect, device number 115 [ 2261.725154][ T773] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:47:36 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140), 0x0) write$char_usb(r1, 0x0, 0x0) 11:47:36 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x1, @pix_mp={0x0, 0x0, 0x32314742}}) 11:47:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23020000000000000000020000000800010000000000080003ff", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:36 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 11:47:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000000740000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) [ 2262.482984][ T557] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2262.527247][ T560] gretap0: refused to change device tx_queue_len [ 2262.536700][ T560] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x803e000000000000}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 11:47:36 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f00000006c0)=""/245, 0x26, 0xf5, 0x1}, 0x20) 11:47:36 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x5, 0x7, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:47:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000000000007a0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2262.941108][ T773] usb 3-1: new high-speed USB device number 116 using dummy_hcd 11:47:36 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x4, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29}, 0x20) [ 2263.179866][ T571] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2263.240830][ T773] usb 3-1: Using ep0 maxpacket: 8 [ 2263.381951][ T773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2263.394112][ T773] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2263.404731][ T773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2263.452871][ T574] gretap0: refused to change device tx_queue_len [ 2263.462964][ T574] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2263.496162][ T773] usb 3-1: config 0 descriptor?? [ 2263.814518][ T773] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2264.001670][ T5087] usb 3-1: USB disconnect, device number 116 [ 2264.022544][ T5087] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:47:38 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140), 0x0) write$char_usb(r1, 0x0, 0x0) 11:47:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:38 executing program 0: setsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) 11:47:38 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="af9cba5f81984d96950e2242b23adfdd045657e573fb65cf8c436900676607eec2783335f5bb6ce743b9b65eb2690a860e06b3690dfb231b4807d171d45d7a7f593ec64e4104b89b09", 0x9f}, {&(0x7f0000000400)="2afd39fd7edaac66ed36674418ebfd44cabb3e256572735cd383a1221971dc9272c1412b43fdfcd3273f3792a66684f7fdcabd115baedbb84280e83b3a75ec7fb22d1b0f462b9248aba2d520b6d74419ed74b2b2dca39ee1340233b4f416d532ab2434274820467475048c2868a2f102f2fe3d", 0x73}, {&(0x7f0000000140)="f2483c62756185e15758ded5da742c7bd0319cf71d0d3f47fcf77add23f52ee489eee108f90eb3f76d15279b972661a41c1a1b629b1964902a56ae8e912d4e6389df49f1609c08d114d20d181689bae87674dcedec33f56ae9d2e4aec0c5e1ee7bcef1f96c65071f4314436efd0ac15ceb1d0897bef1599870816fbbaff94c1465160c6ec7988744e19d28ac2e8ce1dcdcaf0b3c8909be", 0x9f}, {&(0x7f0000000200)="ab3ca21115ca473d5e8d72aaa9e5809f8ebe20d47ac3ff9bdd43eec85c12496aa8f864c695ae152dfa4101ff9e3edf230f1c0fb7c51811a69da1a5ad0770cdfeb95f7a124928d76cdc9413949ab783e42a02d17d0d4c8606e22c4070c87c9f8907d0ff3216eaaabffb6729ebaf692069efb6e49203392cf488afe18066736fbdd962f3b5e6dcd8d4dd1f31a1d62455d519adfca5722cc3b1476550e41331e4b0eed519dd61b1eae1f121263f6b80c924fb2f13f8c3a3f0", 0xb7}, {&(0x7f00000002c0)="e6dbf1974567c60ed2ad6624872c2eadabac4eddf2aaace247ec422ebba990ffe0b7abb1d3f5f3b9d1214700136d1eb600000000", 0xfffffffffffffeb8}, {&(0x7f0000000300)="f2e465bee47fefe626e7f054602905053ef5dd289c3c5d4859d31e18e1d963f28b19a6686cb0ba38c45cfeee12e6e70695ade34daef8f557492a31821270fbd3b37f73cc491822281d5d490670afb380899b68f68c6653aa563daefea4e4f7fcf25df8edf58ec5a344d82b7f97fb4d9f69", 0x71}], 0x6, 0x4, 0x0) 11:47:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000000810000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001100)) [ 2264.799708][ T583] gretap0: refused to change device tx_queue_len [ 2264.808927][ T583] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2264.839097][ T585] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:38 executing program 3: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000100)={0x80000001, 0xfffffffffffffff8}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00') fcntl$lock(r1, 0x0, &(0x7f00000004c0)) r2 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x5451, 0x0) 11:47:38 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) fcntl$getflags(r0, 0x3) 11:47:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000ffffff810000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:38 executing program 4: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x8, 0x400000) read$hiddev(r0, &(0x7f00000000c0)=""/126, 0x7e) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000079381010c2154000f3070182030109021b0001000000080904000001e104550009058b"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x441, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 11:47:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2265.210912][ T5087] usb 3-1: new high-speed USB device number 117 using dummy_hcd 11:47:39 executing program 0: poll(&(0x7f0000000d40)=[{}, {}], 0x2, 0x1f) [ 2265.452121][ T596] gretap0: refused to change device tx_queue_len [ 2265.468392][ T596] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2265.500754][ T5087] usb 3-1: Using ep0 maxpacket: 8 [ 2265.547595][ T599] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2265.632046][ T5087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2265.643624][ T5087] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2265.653199][ T5087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.724332][ T5087] usb 3-1: config 0 descriptor?? [ 2265.741408][ T773] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2265.995812][ T5087] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2266.040651][ T773] usb 5-1: Using ep0 maxpacket: 16 [ 2266.171098][ T773] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2266.204519][ T5087] usb 3-1: USB disconnect, device number 117 [ 2266.210886][ C1] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 2266.237268][ T5087] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 2266.371135][ T773] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice= 7.f3 [ 2266.380762][ T773] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 2266.393428][ T773] usb 5-1: Product: syz [ 2266.397847][ T773] usb 5-1: Manufacturer: syz [ 2266.403219][ T773] usb 5-1: SerialNumber: syz [ 2266.429633][ T773] usb 5-1: config 0 descriptor?? [ 2266.481584][ T773] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 2266.496057][ T773] imon 5-1:0.0: unable to initialize intf0, err -19 [ 2266.503942][ T773] imon:imon_probe: failed to initialize context! [ 2266.510610][ T773] imon 5-1:0.0: unable to register, err -19 11:47:40 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) bind(r0, &(0x7f0000000780)=@in={0x2, 0x3}, 0xc) 11:47:40 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140), 0x0) write$char_usb(r1, 0x0, 0x0) 11:47:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000047880000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:40 executing program 0: setitimer(0x0, &(0x7f00000011c0)={{}, {0x0, 0x5f5}}, &(0x7f0000001200)) getitimer(0x0, &(0x7f0000000180)) setitimer(0x0, 0x0, 0x0) 11:47:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="8d", 0x1}], 0x1}, 0x1) 11:47:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000048880000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2267.311043][T18696] usb 3-1: new high-speed USB device number 118 using dummy_hcd 11:47:41 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0, 0x0) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) [ 2267.461219][ T620] gretap0: refused to change device tx_queue_len [ 2267.471404][ T620] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2267.562705][ T624] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2267.571549][T18696] usb 3-1: Using ep0 maxpacket: 8 [ 2267.712457][T18696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2267.729001][T18696] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2267.738955][T18696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.839590][T18696] usb 3-1: config 0 descriptor?? [ 2268.098245][T18696] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2268.319539][ T773] usb 3-1: USB disconnect, device number 118 [ 2268.353179][ T773] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:47:43 executing program 4: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) read$char_usb(r0, &(0x7f0000000000)=""/55, 0x37) write$char_usb(r0, &(0x7f0000000040)="22429cf1e9eff0c20f2d6b23de5f27d3152f7899febb8feddf591219f5d205a43a1b286a37ab393815c3ea6f54bf8315c0174c57cd5eebb5dab003b59a08ceddb56230a16ae49907efca2f13d2e1a4ef59029d60503b5021d946da9fc94c8722a7f68f518c1ce14df6cfea4b2eb1c70ff848462095a9347edc543bddbce8254d76652249774788b4bf2d5979affd4e1ea5e375f28dfaf6e78d97fef8582754d5bd8551ef0893d9a34cf9cfa8c1f83c69952dd5598a079146a0755c6c10eec9bdc3ad24a7c29020666e3400b04a6486f50afa5f1d4a2b04a03561d60aa5ac4bf61cb31f53220f4c07e598d8a3a775796d414596", 0xf3) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) write$char_usb(r1, &(0x7f0000000140)="e4b701418b2d11f0b3418c99388adf1a279694e85d1b9f1b", 0x18) write$char_usb(r0, &(0x7f0000000180)="8ea0d6a02fbd88e81118faf83db33cb6af5a4590aff5c4fdab874a2ab29efebb5a85180aa34edb689f10f0cc54e669a968665c04104aec115448fc3bec684f66bf028d774d", 0x45) syz_open_dev$char_usb(0xc, 0xb4, 0x1) read$char_usb(r0, &(0x7f0000000200)=""/117, 0x75) syz_open_dev$char_usb(0xc, 0xb4, 0x1f) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) read$char_usb(r2, &(0x7f0000000280)=""/92, 0x5c) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x6) read$char_usb(r3, &(0x7f0000000300)=""/155, 0x9b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x456ea42f) write$char_usb(r4, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x9) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffff8001) write$char_usb(0xffffffffffffffff, &(0x7f0000000440), 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000540)=""/228, 0xe4) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) read$char_usb(r5, &(0x7f0000000740)=""/242, 0xf2) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) read$char_usb(r6, &(0x7f0000000840)=""/4, 0x4) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 11:47:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000ffffa8880000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:43 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) 11:47:43 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000001100)={0x18, 0x1}, 0xc) fchownat(0xffffffffffffffff, &(0x7f0000001140)='./file0\x00', 0x0, 0x0, 0x4) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) 11:47:43 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 11:47:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2269.264591][ T773] usb 5-1: USB disconnect, device number 22 11:47:43 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x400000000000000, 0xffffffffffffffff}) 11:47:43 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa}]}]}}, 0x0, 0x2e}, 0x20) [ 2269.548744][ T637] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2269.571749][ T636] gretap0: refused to change device tx_queue_len [ 2269.581104][ T636] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000ffffffc30000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2269.826791][ T5094] usb 3-1: new high-speed USB device number 119 using dummy_hcd 11:47:43 executing program 0: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmdt(0x0) 11:47:43 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 2270.076066][ T648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2270.112117][ T5094] usb 3-1: Using ep0 maxpacket: 8 [ 2270.241617][ T5094] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2270.253060][ T5094] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2270.259636][ T649] gretap0: refused to change device tx_queue_len [ 2270.262562][ T5094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2270.271488][ T649] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2270.359155][ T5094] usb 3-1: config 0 descriptor?? 11:47:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000140)="8d", 0x1}], 0x1}, 0x1) 11:47:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:44 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 11:47:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000000008d00000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2270.644581][ T5094] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2270.829604][ T657] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2270.923749][ T660] gretap0: refused to change device tx_queue_len [ 2270.933266][ T660] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2271.875721][ T5087] usb 3-1: USB disconnect, device number 119 [ 2271.898189][ T5087] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:47:46 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 11:47:46 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) utime(0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x8, 0x0, 0x0) rt_sigreturn() utime(&(0x7f00000002c0)='./bus\x00', 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) msgctl$IPC_RMID(r1, 0x0) 11:47:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:46 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x442, 0x0) ioctl$TIOCVHANGUP(r0, 0x5451, 0x0) 11:47:46 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmmsg(r0, &(0x7f0000000900), 0x10, 0x0) 11:47:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000fffffff00000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2272.578232][ T671] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2272.592059][ T667] gretap0: refused to change device tx_queue_len [ 2272.601534][ T667] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa) 11:47:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xfffffffffffffffd}, {0x0}], 0x9}, 0x0) 11:47:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000010001befa0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2272.922277][ T5094] usb 3-1: new high-speed USB device number 120 using dummy_hcd 11:47:46 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2273.182380][ T680] gretap0: refused to change device tx_queue_len [ 2273.191851][ T680] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2273.220994][ T5094] usb 3-1: Using ep0 maxpacket: 8 [ 2273.233537][ T681] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@bloom_filter={0x1e, 0x0, 0x3f, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x48) [ 2273.371005][ T5094] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2273.382464][ T5094] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2273.392034][ T5094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.471555][ T5094] usb 3-1: config 0 descriptor?? [ 2273.769917][ T5094] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2275.027533][ T5094] usb 3-1: USB disconnect, device number 120 [ 2275.049547][ T5094] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:47:49 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001140)='^', 0x49) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 11:47:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000010001befc0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:49 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@generic={0x0, 0x0, 0x18}, 0x18) 11:47:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:49 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002640)={@map, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 11:47:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x2, &(0x7f0000000900)=@raw=[@cb_func], &(0x7f0000000940)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) [ 2275.773535][ T697] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2275.791354][ T695] gretap0: refused to change device tx_queue_len [ 2275.800674][ T695] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00'}) 11:47:49 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00'}, 0x18) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x2}, 0x8, 0x10, 0x0}, 0x90) 11:47:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002400), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000002500)) 11:47:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000fffffffd0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2276.211122][T18696] usb 3-1: new high-speed USB device number 121 using dummy_hcd 11:47:50 executing program 4: mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x1ff) [ 2276.367691][ T709] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2276.498891][ T712] gretap0: refused to change device tx_queue_len [ 2276.509773][ T712] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2276.545893][T18696] usb 3-1: Using ep0 maxpacket: 8 [ 2276.682313][T18696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2276.693835][T18696] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2276.703777][T18696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.747829][T18696] usb 3-1: config 0 descriptor?? [ 2277.030685][T18696] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2278.286609][ T5094] usb 3-1: USB disconnect, device number 121 [ 2278.318967][ T5094] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 11:47:52 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x1}]}}, 0x0, 0x26}, 0x20) 11:47:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) close(r0) 11:47:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:52 executing program 4: socketpair$tipc(0x1e, 0x0, 0x0, 0xffffffffffffffff) 11:47:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000fffffffe0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x2, &(0x7f0000000900)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000940)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 11:47:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, 0x0}, 0x81) [ 2279.071632][ T720] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:52 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000003880), 0x42100, 0x0) [ 2279.129780][ T726] gretap0: refused to change device tx_queue_len [ 2279.139407][ T726] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:53 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x81243, 0x0) 11:47:53 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 11:47:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000000007fffffff0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) 11:47:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/47, 0x2f}], 0x1, &(0x7f00000007c0)}, 0x122) 11:47:53 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 11:47:53 executing program 3: bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001340)={0xffffffffffffffff}, 0x4) syz_clone(0x1000000, &(0x7f0000001c00)="490fcc1b0b532361a5dacc88a7b7dd82e38044b0613cb26a510c804abe57c6c5a02e29e73515a99a9daa93c63f70673a624746a5580765e7b4967d490979a4ff86c08f4cdb3cd5ddf9352e549a8ff808652335afc12624f3fb98", 0x5a, &(0x7f0000001d00), &(0x7f0000001d40), &(0x7f0000001d80)="b99d7dd0d30a17c22d1485927ed07ea4ccc5db39cce026891af400809cf3e1a74786fe49f0d49ea55901c0bfb3558062ea3abbeeda7a6be3541812da5e89c27e1ce5bdb5dfab462edc5c7bad1dd839af80ae8ab42af06e6315b7caba8501a154f9ae5847ea1d5957bdd7653ff695aafbbdf3aca4417995cb1e17e3a8b94e4063ae") openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 2279.704603][ T737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2279.852360][ T738] gretap0: refused to change device tx_queue_len [ 2279.861865][ T738] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, 0x0, 0x0) 11:47:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000000ffffffff0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000002200)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) [ 2280.341637][ T752] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:54 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x1ff) 11:47:54 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) [ 2280.488106][ T757] gretap0: refused to change device tx_queue_len [ 2280.497447][ T757] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:54 executing program 0: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000011c0)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001340)={0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x5, 0x7, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0xfffff800, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f00000014c0)=@o_path={&(0x7f0000001480)='./file0\x00', 0x0, 0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x0, 0x4, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@exit]}, 0x0, 0x7e, 0x35, &(0x7f0000001280)=""/53, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000001580)=[{0x4, 0x4, 0xe, 0x8}, {0x2, 0x2, 0x0, 0x9}, {0x0, 0x5}, {0x5, 0x3, 0xb}, {0x5, 0x0, 0x6, 0x6cd68de7a3d687b1}], 0x10, 0x5}, 0x90) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000017c0)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000018c0)=@o_path={0x0, 0xffffffffffffffff, 0x4000, r2}, 0x18) recvmsg(r0, 0x0, 0x40000003) syz_clone(0x1000000, 0x0, 0x0, &(0x7f0000001d00), 0x0, &(0x7f0000001d80)="b99d7dd0d30a17c22d1485927ed07ea4ccc5db39cce026891af400809cf3e1a74786fe49f0d49ea55901c0bfb3558062ea") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001ec0)='cpuset.effective_mems\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 11:47:54 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000900)=@raw=[@func, @cb_func], &(0x7f0000000940)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 11:47:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000060ffffffffff0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:54 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={0x0, &(0x7f00000011c0)=""/152, 0x0, 0x98}, 0x20) [ 2280.918648][ T767] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x5}, 0x48) 11:47:54 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000}, 0x18) 11:47:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:55 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 11:47:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000020000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:55 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@bloom_filter={0x1e, 0x0, 0x3f, 0x8}, 0x48) 11:47:55 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20) [ 2281.602767][ T785] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:55 executing program 2: socketpair(0x2c, 0x3, 0x4, &(0x7f0000000040)) [ 2281.692257][ T788] gretap0: refused to change device tx_queue_len [ 2281.701610][ T788] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:55 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) 11:47:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002400), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 11:47:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000030000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:55 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x3}]}}, 0x0, 0x26}, 0x20) 11:47:55 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000012c0)=ANY=[], 0x0, 0x1a, 0x0, 0x9}, 0x20) 11:47:55 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) [ 2282.289854][ T799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2282.385739][ T804] gretap0: refused to change device tx_queue_len [ 2282.394946][ T804] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:56 executing program 3: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) 11:47:56 executing program 0: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001140)={0xffffffffffffffff, 0x20, &(0x7f0000001100)={&(0x7f0000000000)=""/226, 0xe2, 0x0, 0x0}}, 0x10) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001440)=@generic={&(0x7f0000001400)='./file0\x00', 0x0, 0x8}, 0x18) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000014c0)=@o_path={0x0, 0x0, 0x18}, 0x18) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x0, 0x0, 0x0, &(0x7f0000001240)='syzkaller\x00', 0x7e, 0x35, &(0x7f0000001280)=""/53, 0x41000, 0x9, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000012c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001300)={0x1, 0x6, 0x0, 0x4}, 0x10, r0, 0xffffffffffffffff, 0x6, &(0x7f0000001540)=[r1, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r3], &(0x7f0000001580)=[{0x4, 0x4, 0xe, 0x8}, {0x5, 0x5, 0x6, 0x8}, {0x0, 0x4}, {0x1f, 0x5, 0x10, 0x4}, {0x5, 0x3, 0xb}, {0x5, 0x0, 0x2, 0xa}], 0x10, 0x5}, 0x90) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001700)=@generic={&(0x7f00000016c0)='./file0\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@bloom_filter={0x1e, 0x7fffffff, 0x3f, 0x8, 0x10, r3, 0x5822, '\x00', 0x0, r1, 0x0, 0x2, 0x3, 0x3}, 0x48) openat$cgroup_int(r1, &(0x7f00000017c0)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001880)=@generic={&(0x7f0000001840)='./file0\x00', 0x0, 0x8}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000018c0)=@o_path={&(0x7f0000001800)='./file0\x00', r5, 0x4000, r4}, 0x18) r6 = syz_clone(0x1000000, &(0x7f0000001c00)="490fcc1b0b532361a5dacc88a7b7dd82e38044b0613cb26a510c804abe57c6c5a02e29e73515a99a9daa93c63f70673a624746a5580765e7b4967d490979a4ff86c08f4cdb3cd5ddf9352e549a8ff808652335afc12624f3fb981cd7158656924ad3418d053686cd3f0f", 0x6a, &(0x7f0000001d00), &(0x7f0000001d40), &(0x7f0000001d80)="b99d7dd0d30a17c22d1485927ed07ea4ccc5db39cce026891af400809cf3e1a74786fe49f0d49ea55901c0bfb3558062ea3abbeeda7a6be3541812da5e89c27e1ce5bdb5dfab462edc5c7bad1dd839af80ae8ab42af06e6315b7caba8501a154f9ae5847ea1d5957bdd7653ff695aafbbdf3aca4417995cb1e17e3a8b94e4063ae") write$cgroup_pid(r1, &(0x7f0000001e40)=r6, 0x12) r7 = openat$cgroup(r1, &(0x7f0000001e80)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000001ec0)='cpuset.effective_mems\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002080)={0xffffffffffffffff, 0x58, &(0x7f0000002000)}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f00000020c0), 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002200)=@base={0x8, 0x0, 0x0, 0x7, 0xc01, r1, 0x0, '\x00', 0x0, r1, 0x3, 0x3, 0x5}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002280)={0x0, 0x8, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x6, 0x1, &(0x7f0000001f00)=@raw=[@generic={0x2, 0x6, 0x9, 0x0, 0x7f}], &(0x7f0000001f40)='syzkaller\x00', 0x1f, 0x76, &(0x7f0000001f80)=""/118, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002100)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000002140)={0x3, 0x6, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000022c0)=[r8, r3, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, r9, r10], &(0x7f0000002300)=[{0x3, 0x3, 0xe}]}, 0x90) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000002400), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFINDEX(r11, 0x400454da, &(0x7f0000002500)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002640)={@map=r9, 0x7, 0x0, 0xfffffffb, &(0x7f0000002540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000002580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000025c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002600)=[0x0, 0x0, 0x0]}, 0x40) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002680)={0x30d}, 0x8) 11:47:56 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x541b, 0x0) 11:47:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:56 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x4, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2a}, 0x20) 11:47:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000040000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:56 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000001180), 0x8) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000011c0)='devices.allow\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001440)=@generic={&(0x7f0000001400)='./file0\x00'}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f00000014c0)=@o_path={&(0x7f0000001480)='./file0\x00'}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x0, 0x4, &(0x7f0000001200)=@framed={{}, [@exit]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000017c0)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001880)=@generic={&(0x7f0000001840)='./file0\x00'}, 0x18) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, &(0x7f0000001d40), 0x0) [ 2282.902137][ T817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:56 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8}, 0x18) [ 2283.056260][ T820] gretap0: refused to change device tx_queue_len [ 2283.065544][ T820] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:56 executing program 2: write$cgroup_pid(0xffffffffffffffff, &(0x7f00000013c0), 0x12) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001d00)) 11:47:57 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) 11:47:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000050000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:57 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x20) [ 2283.481481][ T828] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:57 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x7}]}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x0, 0x0]}}, 0x0, 0x38, 0x0, 0x1}, 0x20) 11:47:57 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x31}, 0x20) 11:47:57 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00'}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00'}, 0x18) [ 2283.761993][ T833] gretap0: refused to change device tx_queue_len [ 2283.771289][ T833] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 11:47:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000060000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000740)=[{0x0, 0x3e80}, {0x0}, {0x0}, {0x0}, {0x0, 0x5f}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 11:47:57 executing program 0: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000001180), 0x8) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000011c0)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001500)={0xffffffffffffffff, 0x5c3e, 0x10}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)="b9") r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000020c0), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002100)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000022c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002300)=[{0x0, 0x3, 0xe}]}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000002400), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 11:47:57 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, 0x0, 0x1a}, 0x20) [ 2284.286654][ T844] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2284.421032][ T851] gretap0: refused to change device tx_queue_len [ 2284.430168][ T851] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:58 executing program 4: bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000003880), 0x42100, 0x0) 11:47:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x5, 0x7, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x48) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 11:47:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 11:47:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000070000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x4, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2a}, 0x20) [ 2284.950142][ T869] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, &(0x7f0000000900)={[{0x0, 'io'}]}, 0x4) 11:47:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000002200)=@base={0x8}, 0x48) [ 2285.045697][ T874] gretap0: refused to change device tx_queue_len [ 2285.055024][ T874] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5}, 0x48) 11:47:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:59 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@bloom_filter={0x1e, 0x7fffffff}, 0x48) 11:47:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000080000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2285.485918][ T889] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000740)=[{0x0, 0x3e80}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 11:47:59 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000001080)=@o_path={0x0, 0x0, 0xc000}, 0x18) 11:47:59 executing program 3: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000001180), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x5, 0x7, 0x6, 0x5, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001440)=@generic={&(0x7f0000001400)='./file0\x00'}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f00000014c0)=@o_path={&(0x7f0000001480)='./file0\x00'}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001500)={0xffffffffffffffff, 0x5c3e, 0x10}, 0xc) openat$cgroup_int(r0, &(0x7f00000017c0)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001880)=@generic={&(0x7f0000001840)='./file0\x00', 0x0, 0x8}, 0x18) recvmsg(r0, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=""/87, 0x57}, 0x40000003) syz_clone(0x1000000, &(0x7f0000001c00)="490fcc1b0b532361a5dacc88a7b7dd82e38044b0613cb26a510c804abe57c6c5a02e29e73515a99a9daa93c63f70673a624746a5580765e7b4967d490979a4ff86c08f4cdb3cd5ddf9352e549a8ff808652335afc12624f3fb981cd7158656924ad3418d053686cd3f0fb4f09ee13ff9ded9685c11bdca5d246a27511266e0a781127b5dc94e30832993c6fcd82370ae3b4d255d0b402e91e5369e9047b951ca98285939bdf8df4e606d2c9a5f6b3da5cfbefb2add90a5f283bd13921223ed04594602a2836e1b1f72ea02f8b178cf166c", 0xd1, &(0x7f0000001d00), 0x0, &(0x7f0000001d80)="b99d7dd0d30a17c22d1485927ed07ea4ccc5db39cce026891af400809cf3e1a74786fe49f0d49ea55901c0bfb3558062ea3abbeeda7a6be3541812da5e89c27e1ce5bdb5dfab462edc5c7bad1dd839af80ae8ab42af06e6315b7caba8501a154f9") write$cgroup_pid(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001ec0)='cpuset.effective_mems\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002080)={r1, 0x58, &(0x7f0000002000)}, 0x10) 11:47:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:47:59 executing program 0: syz_clone(0x51001000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) [ 2285.776592][ T896] gretap0: refused to change device tx_queue_len [ 2285.785849][ T896] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:47:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'bridge0\x00'}) 11:47:59 executing program 4: syz_clone(0x8082000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2286.002071][ T904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000090000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:47:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:00 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x577d02, 0x0) 11:48:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 11:48:00 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000040)={0x1, "b1"}) [ 2286.573127][ T918] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2286.587041][ T914] gretap0: refused to change device tx_queue_len [ 2286.596416][ T914] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:48:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x80, 0x5, 0x7ffe, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x6, 0x2f, 0x0, @broadcast, @rand_addr=0x640100fc}}}}) 11:48:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast}}}}) 11:48:00 executing program 2: syz_clone(0xa00e8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 11:48:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000a0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2286.991196][ T5094] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2287.152658][ T929] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:01 executing program 0: syz_clone(0x21008080, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2287.324667][ T932] gretap0: refused to change device tx_queue_len [ 2287.333890][ T932] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2287.372133][ T5094] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2287.388039][ T5094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2287.399952][ T5094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 11:48:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2287.410191][ T5094] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 11:48:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'netpci0\x00', 0xc00}) [ 2287.562709][ T5094] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2287.572751][ T5094] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2287.586165][ T5094] usb 4-1: Manufacturer: syz 11:48:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001ac0)={@val={0x0, 0x806}, @val={0x5}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @redirect={0x5, 0x0, 0x0, @local, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}, 0xfdef) 11:48:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000b0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2287.687053][ T936] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2287.703480][ T5094] usb 4-1: config 0 descriptor?? 11:48:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2288.057895][ T941] gretap0: refused to change device tx_queue_len [ 2288.067579][ T941] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2288.139435][ T946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2288.189715][ T5094] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 2288.256445][ T5094] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 2288.339302][ T5094] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2289.058986][ T5087] usb 4-1: USB disconnect, device number 53 11:48:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000007100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x114b}) 11:48:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000000c0)={'gre0\x00', 0x0}) 11:48:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000c0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8923, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast}}}}) 11:48:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r1 = gettid() r2 = gettid() sendmsg$unix(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee01}}}], 0x40}, 0x0) [ 2289.905033][ T957] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2289.962006][ T956] gretap0: refused to change device tx_queue_len [ 2289.972092][ T956] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:48:03 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x0, 0x481044c94f0c9830, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 11:48:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8943, &(0x7f00000000c0)={'gre0\x00', 0x0}) 11:48:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000d0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2290.212112][ T961] €: renamed from gre0 (while UP) 11:48:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x8000000) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:48:04 executing program 3: syz_usbip_server_init(0x5) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usbip_server_init(0x0) 11:48:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x801c581f, 0x0) 11:48:04 executing program 2: r0 = socket(0x29, 0x2, 0x0) sendmsg$rds(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40010) [ 2290.585512][ T971] gretap0: refused to change device tx_queue_len [ 2290.594945][ T971] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2290.717446][ T972] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000e0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2290.880834][ T978] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 2290.887703][ T978] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2290.896087][ T978] vhci_hcd vhci_hcd.0: Device attached 11:48:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:04 executing program 0: syz_usbip_server_init(0x5) gettid() geteuid() getresgid(0x0, &(0x7f0000000940), &(0x7f0000000980)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) syz_usbip_server_init(0x2) [ 2290.984171][ T986] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2291.013117][ T980] vhci_hcd: connection closed [ 2291.022981][ T5183] vhci_hcd: stop threads 11:48:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0) [ 2291.032619][ T5183] vhci_hcd: release socket [ 2291.037258][ T5183] vhci_hcd: disconnect device [ 2291.252453][ T994] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 2291.259328][ T994] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2291.272412][ T994] vhci_hcd vhci_hcd.0: Device attached [ 2291.329301][ T998] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2291.367904][ T990] gretap0: refused to change device tx_queue_len [ 2291.383300][ T990] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2291.429191][ T994] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 2291.436023][ T994] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2291.444359][ T994] vhci_hcd vhci_hcd.0: Device attached 11:48:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast}}}}) 11:48:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000bc0)=""/4096, &(0x7f0000001bc0)=0x1000) [ 2291.498287][ T1006] vhci_hcd: connection closed [ 2291.499052][ T1001] vhci_hcd: connection closed [ 2291.505051][ T3213] vhci_hcd: stop threads [ 2291.514502][ T3213] vhci_hcd: release socket [ 2291.519114][ T3213] vhci_hcd: disconnect device 11:48:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2291.556458][ T3213] vhci_hcd: stop threads [ 2291.561184][ T3213] vhci_hcd: release socket [ 2291.565840][ T3213] vhci_hcd: disconnect device 11:48:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000000f0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000007100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1101}) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) 11:48:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) [ 2291.939421][ T1011] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2292.052674][ T1015] gretap0: refused to change device tx_queue_len [ 2292.062382][ T1015] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:48:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8927, &(0x7f00000000c0)={'gre0\x00', 0x0}) 11:48:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000100000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:06 executing program 2: r0 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000240)={{}, {0x0, r1+60000000}}, 0x0) 11:48:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x2}, 0x8) 11:48:06 executing program 4: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) [ 2292.461144][ T1024] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2292.602224][ T1026] gretap0: refused to change device tx_queue_len [ 2292.611680][ T1026] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:48:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:06 executing program 3: socket(0x0, 0x80814, 0x0) 11:48:06 executing program 0: setreuid(0xee00, 0x0) r0 = getpgid(0x0) ptrace(0x9, r0) 11:48:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000110000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:06 executing program 2: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6b02f17a7f000001"], 0x1) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=ANY=[], 0x10) r1 = dup(r0) listen(r1, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt(r2, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000000c0)=0xfffe, 0x4) dup2(0xffffffffffffffff, r0) r3 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000180), &(0x7f00000001c0)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$unix(0x1, 0x5, 0x0) dup2(r5, r4) getpeername(r4, &(0x7f0000000100), &(0x7f0000000240)=0xc) setsockopt$sock_int(r3, 0xffff, 0x1, &(0x7f0000000200)=0x8, 0x4) connect$unix(r3, &(0x7f0000000000)=ANY=[], 0x10) accept$inet(r0, &(0x7f0000000040), &(0x7f0000000140)=0xc) [ 2293.023168][ T1035] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:06 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x76, &(0x7f0000000040)={r1}, &(0x7f0000000080)=0x14) 11:48:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2293.385470][ T1042] gretap0: refused to change device tx_queue_len [ 2293.395185][ T1042] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:48:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r1}, 0x8) 11:48:07 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x0, 0x3006}}) [ 2293.573298][ T1048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x28}}, 0x0) 11:48:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000120000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2293.761480][ T1050] sctp: [Deprecated]: syz-executor.0 (pid 1050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2293.761480][ T1050] Use struct sctp_sack_info instead 11:48:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:07 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x10, &(0x7f0000000400)=@framed={{}, [@initr0, @generic, @map_fd, @kfunc, @initr0, @map_val, @cb_func, @alu]}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000480)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) [ 2294.107557][ T1055] gretap0: refused to change device tx_queue_len [ 2294.117462][ T1055] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:48:08 executing program 2: r0 = landlock_create_ruleset(&(0x7f0000000000)={0xc0c}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000040)={0x404}, 0x0) 11:48:08 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0xd, @pix_mp}) [ 2294.268457][ T1059] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000001b0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:08 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1}]}}) 11:48:08 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x48001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0xc0045006, &(0x7f0000000200)=0x7c) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045005, &(0x7f0000000040)=0xff5a) 11:48:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000080)=0x14) 11:48:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:08 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000280)={0x10, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x420}}) [ 2294.786388][ T1071] gretap0: refused to change device tx_queue_len [ 2294.795669][ T1071] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:48:08 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x74c, 0xffffffffffffffff, 0x39c, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) [ 2294.907800][ T1075] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000240000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:08 executing program 2: clock_gettime(0xb, &(0x7f00000003c0)) 11:48:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) 11:48:09 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r0, 0x5423, 0x0) [ 2295.454095][ T1083] gretap0: refused to change device tx_queue_len [ 2295.463709][ T1083] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:48:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="0004040000000000a30100001d1800000000000000000000fc010000000000d1b8"], 0x28) 11:48:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01012bbd7000ffdbdf2506000000050004040000000008"], 0x34}}, 0x0) [ 2295.601532][ T1087] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:09 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0x4020940d, &(0x7f0000000480)={0x0, @pix_mp}) 11:48:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000250000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:09 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x9, @pix_mp}) [ 2295.957074][ T1096] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2296.069571][ T1098] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) 11:48:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x1, 0x1, 0x2}) 11:48:09 executing program 2: r0 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r0, 0x400c4807, &(0x7f0000000740)) 11:48:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0400990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2296.356884][ T1103] gretap0: refused to change device tx_queue_len [ 2296.368148][ T1103] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:48:10 executing program 0: openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 11:48:10 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x1, @pix_mp={0x0, 0x0, 0x30314742}}) 11:48:10 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="717fc959a797c3c326612ad3016f8e3e2fb784b023fb90e571d86697ce0cdcf6885eec9f71b91eecb54e5ba23d4fd65d46aa5e6d562e49bb777123b7b2ddc0d1b09c0688720009afa301f38393d8a84bf8b6e2c23abde02ad0622fece4e11750aee12f291dfba456ff3107ed467f992a8156d820e26aecbd77c7b290468840ab8f17a44ea9570c1d569ee554639f0c5938e2874419f22ac58ea92593e80efbee777945c9e0133bccade985849796a87bd91d16786a4cc6d0592c259b3663b37ffa857347ace6e4c7"}) [ 2296.624648][ T1112] netlink: 'syz-executor.1': attribute type 153 has an invalid length. 11:48:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x77, &(0x7f0000000100)=@assoc_value={r1}, 0x8) 11:48:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000480000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0600990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:10 executing program 0: syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local={0x3}, @random="7f0a000300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2803, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}, "0000b50800000000"}}}}}, 0x0) 11:48:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x71, &(0x7f0000000100)=@assoc_value={r1}, 0x8) 11:48:10 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x2, @sliced}) [ 2297.127509][ T1122] gretap0: refused to change device tx_queue_len [ 2297.136970][ T1122] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2297.186139][ T1125] netlink: 'syz-executor.1': attribute type 153 has an invalid length. 11:48:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000004c0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="1000990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:11 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x1, @pix_mp={0x0, 0x0, 0x33565348}}) 11:48:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) 11:48:11 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 11:48:11 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x5, &(0x7f0000000400)=@framed={{}, [@cb_func]}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) [ 2297.684309][ T1133] netlink: 'syz-executor.1': attribute type 153 has an invalid length. [ 2297.693846][ T1133] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2297.869114][ T1141] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 11:48:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="2400990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2297.911273][ T1142] gretap0: refused to change device tx_queue_len [ 2297.920204][ T1142] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:48:11 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x48001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0xc0045006, &(0x7f0000000200)) ioctl$SNDCTL_DSP_SPEED(r0, 0x40045010, &(0x7f0000000040)=0xff5a) 11:48:11 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 11:48:11 executing program 0: pselect6(0x40, &(0x7f00000002c0), &(0x7f0000000300)={0x6}, 0x0, &(0x7f0000000380)={0x77359400}, 0x0) 11:48:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) [ 2298.211801][ T1147] netlink: 'syz-executor.1': attribute type 153 has an invalid length. 11:48:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000600000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="2800990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r0, 0x540d, 0x0) 11:48:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x34}}, 0x0) [ 2298.570135][ T1158] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 2298.599458][ T1159] gretap0: refused to change device tx_queue_len [ 2298.608871][ T1159] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:48:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000680000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 2298.777079][ T1163] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:12 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x74c}, 0x48) 11:48:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x7c, &(0x7f0000000100)=@assoc_value={r1}, 0x8) 11:48:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) 11:48:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c01170009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2299.137708][ T1167] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2299.271946][ T1172] gretap0: refused to change device tx_queue_len [ 2299.281270][ T1172] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:48:13 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x6, &(0x7f0000000400)=@framed={{}, [@initr0, @generic={0x6}]}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000480)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000015c0)=[{}], 0x10, 0x7}, 0x90) [ 2299.313836][ T1175] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 2299.359789][ T1177] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:13 executing program 0: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r0, 0x4805, &(0x7f0000000740)={0x1, "b1"}) 11:48:13 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xfc}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000480)={0x20, 0x1, 0x32, "b5a897ab1243ec012a70cde7b70f4cd76c5a80a66db2e1614570ceef2764b0234e3b86e7abdd7f99501cdfb2fc70408cb0a9"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000740)={0x1, "b1"}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000080)={0x0, 0x0, 0x2, {0x2}}, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)={0x0, 0x22, 0x3, {[@local=@item_012={0x0, 0x2, 0x1806fbc9a0e45c35}, @main=@item_012={0x1, 0x0, 0x0, "97"}]}}, 0x0}, 0x0) 11:48:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) 11:48:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c01460009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000006c0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2299.775545][ T1184] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. 11:48:13 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x4018480c, 0x0) [ 2299.878810][ T1189] gretap0: refused to change device tx_queue_len [ 2299.888981][ T1189] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2299.932246][ T1188] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) 11:48:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c02990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000740000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:14 executing program 0: syz_open_dev$dri(&(0x7f0000000640), 0xff, 0x185001) [ 2300.369854][ T1196] gretap0: refused to change device tx_queue_len [ 2300.385654][ T1196] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:48:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) 11:48:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001ac0)={@val={0x0, 0x4}, @val={0x5, 0x0, 0xd}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @redirect={0x5, 0x0, 0x0, @local, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}, 0xfdef) 11:48:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c03990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001080000007a0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) 11:48:14 executing program 0: syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) pselect6(0x40, &(0x7f00000002c0)={0x1f}, 0x0, 0x0, 0x0, 0x0) 11:48:14 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x20, 0x1, 0x0, "f14971a619ff5bdda1be5f5644903e33c33c48c98c41874accb94b3f066e8bef"}) [ 2300.922020][ T1211] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c04990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2301.159740][ T1219] gretap0: refused to change device tx_queue_len [ 2301.168943][ T1219] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:48:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x1, @pix_mp={0x0, 0x0, 0x47524247}}) 11:48:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) 11:48:15 executing program 3: syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000740)={0x1, "b1"}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000000)={0x3, 0x1, 0x0, 0x1000, 0x3312}) 11:48:15 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local={0x3}, @random="7f0a000300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2803, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}, "0000b50800000000"}}}}}, 0x0) 11:48:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000300000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2301.492790][ T1223] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp}) 11:48:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c05990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) 11:48:15 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000180)) [ 2301.906053][ T1233] gretap0: refused to change device tx_queue_len 11:48:15 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r0, 0x541d, 0x0) [ 2302.049570][ T1239] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) 11:48:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000500000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c06990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="01012b"], 0x34}}, 0x0) 11:48:16 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000180)) 11:48:16 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r0, 0x400c4807, &(0x7f0000000740)={0x1, "b1"}) [ 2302.571679][ T1249] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) [ 2302.652916][ T1253] gretap0: refused to change device tx_queue_len 11:48:16 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x6, &(0x7f0000000400)=@framed={{}, [@initr0, @generic={0x6}]}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000480)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000015c0)=[{}, {}]}, 0x90) 11:48:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x34}}, 0x0) 11:48:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c07990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000600000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2303.070845][ T1263] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 11:48:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) 11:48:16 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000480)) [ 2303.183823][ T1266] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2303.281446][ T1267] gretap0: refused to change device tx_queue_len [ 2303.290789][ T1267] net_ratelimit: 2 callbacks suppressed [ 2303.290858][ T1267] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:48:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@overlay={0x0, 0xb, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c77dc9ef"}}) 11:48:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c08990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:17 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x80, 0x200080) 11:48:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000700000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) 11:48:17 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000480)) [ 2303.738003][ T1276] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r1}, 0xc) 11:48:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c09990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2303.974936][ T1280] gretap0: refused to change device tx_queue_len [ 2303.987634][ T1280] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:48:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r0, 0x540b, &(0x7f0000000480)) 11:48:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x1, @pix_mp={0x0, 0x0, 0x30314752}}) 11:48:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) [ 2304.231777][ T1287] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:18 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000480)) 11:48:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000d00800000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c0a990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x0, 0x0, {0x1, @raw_data="969714259f8f1d76a4cbcb06bd667c25617c84cb2094da3b74cf3963b82e6964202a44a18f3e7d7d0f16b8de8fafb3c8e547ae8d38c5b006ab435a4dcf781197ff4868f52dd3c4e048c5cb962b9c4d5695f337c3d293cd3a4b1c2d161327b8216109e672a262c146993fca719559aea68663243139b6b0a86eb6be3f0c0539f20ee561994287dc6edc19d72e2856cd02b034a311bbc562c7f2597992187ecd55036137e5e35e51022850aa3c70b71459bed9e93e893e2696765176916ad7c0688f4f4a0af56b09f3"}}) [ 2304.671852][ T1297] gretap0: refused to change device tx_queue_len [ 2304.686625][ T1297] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:48:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) 11:48:18 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045007, 0x0) 11:48:18 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000480)) [ 2304.882329][ T1299] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000900000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:18 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x8, &(0x7f0000000400)=@framed={{}, [@initr0, @generic={0x6}, @map_fd]}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000480)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 11:48:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c0b990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) 11:48:19 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000480)) [ 2305.370547][ T1311] gretap0: refused to change device tx_queue_len [ 2305.379796][ T1311] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2305.474389][ T1313] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa]}}) 11:48:19 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r0, 0x40184810, &(0x7f0000000740)) 11:48:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c0c990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:19 executing program 4: close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) 11:48:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:19 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000480)) 11:48:19 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c40)=0xffffffffffffffff, 0x4) [ 2306.095783][ T1327] gretap0: refused to change device tx_queue_len [ 2306.105123][ T1327] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2306.125069][ T1328] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2306.130662][ T5094] usb 1-1: new high-speed USB device number 47 using dummy_hcd 11:48:20 executing program 4: close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) 11:48:20 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000480)) 11:48:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000b00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:20 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000480), 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000740)={0x1, "b1"}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 11:48:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c0d990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) [ 2306.575574][ T5094] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2306.586895][ T5094] usb 1-1: config 0 has no interfaces? [ 2306.703565][ T1338] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2306.714283][ T1341] gretap0: refused to change device tx_queue_len [ 2306.723593][ T1341] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2306.739460][ T5094] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 11:48:20 executing program 4: close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) [ 2306.739623][ T5094] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2306.739755][ T5094] usb 1-1: Manufacturer: syz [ 2306.750704][ T5094] usb 1-1: config 0 descriptor?? [ 2307.086456][T15272] usb 1-1: USB disconnect, device number 47 11:48:21 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x8000, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000140)) 11:48:21 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000480)) 11:48:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c0e990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) 11:48:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000c00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:21 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x7, 0x1, 0x0, "96ba93cefe377bc0f3f3fcff6670105cc62883c075802ca7040b47e9f43578bb"}) 11:48:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001ac0)={@val={0x0, 0x4}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @redirect={0x5, 0x0, 0x0, @local, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}, 0xfdef) [ 2307.876192][ T1354] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2307.911162][ T1355] gretap0: refused to change device tx_queue_len 11:48:21 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000480)) [ 2307.920694][ T1355] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:48:21 executing program 2: syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local={0x3}, @random="7f0a000300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2803, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}, "0000b50800000000"}}}}}, 0x0) 11:48:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) [ 2308.038219][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 2308.045111][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 11:48:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c0f990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000d00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 11:48:22 executing program 2: syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000001640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0x30, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x4a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x7c, {0x7, 0x25, 0x1, 0x3}}}}}}}]}}, &(0x7f0000001800)={0x0, 0x0, 0x5, &(0x7f0000001780)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000001d80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x6, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x3, 0x0, {0x7}}}}}}}]}}, 0x0) 11:48:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) [ 2308.593624][ T1367] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 11:48:22 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000480)) [ 2308.697275][ T1369] gretap0: refused to change device tx_queue_len [ 2308.706606][ T1369] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 11:48:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001ac0)={@val={0x0, 0x4}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @redirect={0x5, 0x0, 0x0, @local, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}, 0xfdef) 11:48:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2302000000000000000002000000080001000000000008000300", @ANYRES32=r3, @ANYBLOB="0c10990009000000", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080002"], 0x48}}, 0x0) 11:48:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) 11:48:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000010000108000000000e00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) [ 2309.090593][T15272] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2309.119628][ T1378] ===================================================== [ 2309.127065][ T1378] BUG: KMSAN: uninit-value in llc_rcv+0x1107/0x14a0 [ 2309.134146][ T1378] llc_rcv+0x1107/0x14a0 [ 2309.138597][ T1378] __netif_receive_skb+0x1a6/0x5a0 [ 2309.144080][ T1378] netif_receive_skb+0x58/0x660 [ 2309.149147][ T1378] tun_rx_batched+0x3ee/0x980 [ 2309.154152][ T1378] tun_get_user+0x54c5/0x69c0 [ 2309.159200][ T1378] tun_chr_write_iter+0x3af/0x5d0 [ 2309.164607][ T1378] vfs_write+0x8ef/0x15c0 [ 2309.169155][ T1378] ksys_write+0x20f/0x4c0 [ 2309.173806][ T1378] __x64_sys_write+0x93/0xd0 [ 2309.178623][ T1378] do_syscall_64+0x41/0xc0 [ 2309.183353][ T1378] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2309.189496][ T1378] [ 2309.192038][ T1378] Uninit was created at: [ 2309.196626][ T1378] slab_post_alloc_hook+0x12f/0xb70 [ 2309.202230][ T1378] kmem_cache_alloc_node+0x577/0xa80 [ 2309.207756][ T1378] kmalloc_reserve+0x13d/0x4a0 [ 2309.213021][ T1378] __alloc_skb+0x318/0x740 [ 2309.217673][ T1378] alloc_skb_with_frags+0xc8/0xbd0 [ 2309.223123][ T1378] sock_alloc_send_pskb+0xa80/0xbf0 [ 2309.228571][ T1378] tun_get_user+0x23d0/0x69c0 [ 2309.233647][ T1378] tun_chr_write_iter+0x3af/0x5d0 [ 2309.238874][ T1378] vfs_write+0x8ef/0x15c0 [ 2309.243600][ T1378] ksys_write+0x20f/0x4c0 [ 2309.248155][ T1378] __x64_sys_write+0x93/0xd0 [ 2309.253083][ T1378] do_syscall_64+0x41/0xc0 [ 2309.257722][ T1378] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2309.263931][ T1378] [ 2309.266376][ T1378] CPU: 1 PID: 1378 Comm: syz-executor.0 Tainted: G W 6.6.0-rc4-syzkaller-00029-gcbf3a2cb156a #0 [ 2309.278575][ T1378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2309.288916][ T1378] ===================================================== [ 2309.296130][ T1378] Disabling lock debugging due to kernel taint [ 2309.302516][ T1378] Kernel panic - not syncing: kmsan.panic set ... [ 2309.309078][ T1378] CPU: 1 PID: 1378 Comm: syz-executor.0 Tainted: G B W 6.6.0-rc4-syzkaller-00029-gcbf3a2cb156a #0 [ 2309.321202][ T1378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2309.331427][ T1378] Call Trace: [ 2309.334830][ T1378] 11:48:22 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000480)) [ 2309.337879][ T1378] dump_stack_lvl+0x1bf/0x240 [ 2309.342768][ T1378] dump_stack+0x1e/0x20 [ 2309.347115][ T1378] panic+0x4d5/0xc70 [ 2309.351300][ T1378] ? add_taint+0x108/0x1a0 [ 2309.355914][ T1378] kmsan_report+0x2d0/0x2d0 [ 2309.360636][ T1378] ? __msan_warning+0x96/0x110 [ 2309.365589][ T1378] ? llc_rcv+0x1107/0x14a0 [ 2309.370224][ T1378] ? __netif_receive_skb+0x1a6/0x5a0 [ 2309.375755][ T1378] ? netif_receive_skb+0x58/0x660 [ 2309.380987][ T1378] ? tun_rx_batched+0x3ee/0x980 [ 2309.386053][ T1378] ? tun_get_user+0x54c5/0x69c0 11:48:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4}, @eol, @timestamp={0x8, 0xa}, @generic={0x0, 0xb, "66c3a1791a5e0879de"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) [ 2309.391280][ T1378] ? tun_chr_write_iter+0x3af/0x5d0 [ 2309.396669][ T1378] ? vfs_write+0x8ef/0x15c0 [ 2309.401379][ T1378] ? ksys_write+0x20f/0x4c0 [ 2309.406084][ T1378] ? __x64_sys_write+0x93/0xd0 [ 2309.411069][ T1378] ? do_syscall_64+0x41/0xc0 [ 2309.415895][ T1378] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2309.422180][ T1378] ? kmsan_internal_memmove_metadata+0x9a/0x360 [ 2309.428658][ T1378] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2309.434692][ T1378] ? __pskb_pull_tail+0x1d03/0x2310 [ 2309.440109][ T1378] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2309.446156][ T1378] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2309.452200][ T1378] __msan_warning+0x96/0x110 [ 2309.456995][ T1378] llc_rcv+0x1107/0x14a0 [ 2309.461479][ T1378] __netif_receive_skb+0x1a6/0x5a0 [ 2309.466851][ T1378] ? llc_set_station_handler+0x70/0x70 [ 2309.472682][ T1378] netif_receive_skb+0x58/0x660 [ 2309.477754][ T1378] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2309.483792][ T1378] ? tun_rx_batched+0x37c/0x980 [ 2309.488831][ T1378] tun_rx_batched+0x3ee/0x980 [ 2309.493687][ T1378] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2309.499795][ T1378] tun_get_user+0x54c5/0x69c0 [ 2309.504630][ T1378] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2309.511096][ T1378] tun_chr_write_iter+0x3af/0x5d0 [ 2309.516294][ T1378] ? tun_chr_read_iter+0x670/0x670 [ 2309.521588][ T1378] vfs_write+0x8ef/0x15c0 [ 2309.526111][ T1378] ksys_write+0x20f/0x4c0 [ 2309.530631][ T1378] __x64_sys_write+0x93/0xd0 [ 2309.535401][ T1378] do_syscall_64+0x41/0xc0 [ 2309.539964][ T1378] ? sysvec_apic_timer_interrupt+0x4d/0x90 [ 2309.545961][ T1378] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2309.552036][ T1378] RIP: 0033:0x7fdec607cae9 [ 2309.556583][ T1378] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2309.576485][ T1378] RSP: 002b:00007fdec6db40c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2309.585076][ T1378] RAX: ffffffffffffffda RBX: 00007fdec619bf80 RCX: 00007fdec607cae9 [ 2309.593192][ T1378] RDX: 000000000000fdef RSI: 0000000020001ac0 RDI: 0000000000000003 [ 2309.601291][ T1378] RBP: 00007fdec60c847a R08: 0000000000000000 R09: 0000000000000000 [ 2309.609393][ T1378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2309.617846][ T1378] R13: 000000000000000b R14: 00007fdec619bf80 R15: 00007fdec62bfa48 [ 2309.625977][ T1378] [ 2309.629419][ T1378] Kernel Offset: disabled [ 2309.633812][ T1378] Rebooting in 86400 seconds..