{}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:58:42 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="41000000c0aec1b60328909d90c1a89788297799ea5e615251ba01bbd79191d348caf1c513a73a2ad2af5a8d6d200a7d0ea1e3ca8816d2993d84cc2653e223baf624aa2d6df119a2e177c4502369c44e5e49301e878b59c6683c61920a548c2e0f5db904cc25b4dc26ab6151caccc7125ea3997386b7dee562494afd45293c3ef6f6d9bd64e2beeb21a05a2e6b6032b251da"], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:58:42 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="41000000c0aec1b60328909d90c1a89788297799ea5e615251ba01bbd79191d348caf1c513a73a2ad2af5a8d6d200a7d0ea1e3ca8816d2993d84cc2653e223baf624aa2d6df119a2e177c4502369c44e5e49301e878b59c6683c61920a548c2e0f5db904cc25b4dc26ab6151caccc7125ea3997386b7dee562494afd45293c3ef6f6d9bd64e2beeb21a05a2e6b6032b251da"], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async, rerun: 32) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (rerun: 32) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:58:43 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (rerun: 32) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="41000000c0aec1b60328909d90c1a89788297799ea5e615251ba01bbd79191d348caf1c513a73a2ad2af5a8d6d200a7d0ea1e3ca8816d2993d84cc2653e223baf624aa2d6df119a2e177c4502369c44e5e49301e878b59c6683c61920a548c2e0f5db904cc25b4dc26ab6151caccc7125ea3997386b7dee562494afd45293c3ef6f6d9bd64e2beeb21a05a2e6b6032b251da"], 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (rerun: 64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 32) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:58:44 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/126, 0xffffffffffffffe3) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) r4 = fcntl$dupfd(r0, 0x605, r0) read$nci(r4, &(0x7f0000000000)=""/16, 0x10) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:58:45 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/126, 0xffffffffffffffe3) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) r4 = fcntl$dupfd(r0, 0x605, r0) read$nci(r4, &(0x7f0000000000)=""/16, 0x10) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3526.306679][T29787] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 00:58:46 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYRES32=r2, @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=0x0, @ANYBLOB="839f3a514c3aef34d0ba9a09a5ea98ab7a8ca051064b99623e0077cc740d85d1b11fbdf5c4ffd477f29834a58df7b92a31d6a52930cb95876277f48f67cf3e63f354b50b85de3e8c60"], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x63, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x200, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x0, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x0, 0x3, 0x22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000861}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000900)={0x2c, r3, 0x1, 0x70bd26, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x34}}, 0x40004810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x121, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/70, 0x46) (async, rerun: 32) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 32) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x140448a4) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 32) r6 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setstatus(r6, 0x4, 0x800) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB='\x00P\v\x00\x00\x00\x00\x00\x00\x00'], 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=r1, @ANYBLOB="080004000000000008000700070000006380f48dfc22985fea658b2c374fe7e4a0d542f0dc123e5391cfacf1d726f180aec4ca65ec82f82ab30f8e708466b5e3042c856fc6ef1eda45a89b35300199997b50fa7051aec622"], 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:58:46 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f00000005c0)=""/126, 0xffffffffffffffe3) (async, rerun: 32) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) r4 = fcntl$dupfd(r0, 0x605, r0) read$nci(r4, &(0x7f0000000000)=""/16, 0x10) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:58:48 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000005e00), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5) read$nci(r4, 0x0, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010100000000000000000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd26, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) write$nci(r4, &(0x7f0000000000)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x1, {0xfb, 0x9, 0x0, 0x8, 0x4, 0x3f}}, 0xc) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3529.137329][T17760] nci: nci_data_exchange_complete: no rx callback, dropping rx data... 00:58:49 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000005e00), 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5) (async) read$nci(r4, 0x0, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010100000000000000000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd26, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) write$nci(r4, &(0x7f0000000000)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x1, {0xfb, 0x9, 0x0, 0x8, 0x4, 0x3f}}, 0xc) (async, rerun: 32) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 64) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async, rerun: 64) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3530.277073][T29958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 00:58:50 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="4000733c7078b981649195000000000000"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) openat$nci(0xffffff9c, &(0x7f00000009c0), 0x2, 0x0) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r3, 0x4, 0x163, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffff3f}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:58:50 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000005e00), 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5) read$nci(r4, 0x0, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010100000000000000000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd26, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) write$nci(r4, &(0x7f0000000000)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x1, {0xfb, 0x9, 0x0, 0x8, 0x4, 0x3f}}, 0xc) (async, rerun: 32) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (rerun: 32) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async, rerun: 32) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:58:51 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000900)={0x3e4, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x168, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x23fdca475b13f931}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x90, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x9c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x124, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x11}, 0x8000) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:58:53 executing program 0: openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000900)={0x3e4, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x168, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x23fdca475b13f931}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x90, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x9c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x124, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x11}, 0x8000) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000900)={0x3e4, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x168, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x23fdca475b13f931}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x90, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x9c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x124, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x11}, 0x8000) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:58:54 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000900)={0x3e4, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x168, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x23fdca475b13f931}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x90, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x9c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x124, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x11}, 0x8000) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:58:55 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000009c0)=""/94, 0x5e) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) write$nci(r0, &(0x7f0000000980)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x1, 0x2, 0x5, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000fedbdf250200000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="e9a9d31577540fd29918ac73dbaacc8320"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) write$nci(r0, &(0x7f0000000680)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0x4, {0x0, 0x6}}, 0x5) 00:58:56 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000009c0)=""/94, 0x5e) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) write$nci(r0, &(0x7f0000000980)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x1, 0x2, 0x5, 0x0, 0x1}, 0x4) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000fedbdf250200000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="e9a9d31577540fd29918ac73dbaacc8320"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) write$nci(r0, &(0x7f0000000680)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0x4, {0x0, 0x6}}, 0x5) 00:58:57 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000009c0)=""/94, 0x5e) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) write$nci(r0, &(0x7f0000000980)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x1, 0x2, 0x5, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000fedbdf250200000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="e9a9d31577540fd29918ac73dbaacc8320"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) write$nci(r0, &(0x7f0000000680)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0x4, {0x0, 0x6}}, 0x5) 00:58:58 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2) (rerun: 64) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="4000733c7078b981649195000000000000"], 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) openat$nci(0xffffff9c, &(0x7f00000009c0), 0x2, 0x0) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async, rerun: 64) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r3, 0x4, 0x163, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffff3f}]}, 0x24}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:58:58 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/108, 0x7b) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:00 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/108, 0x7b) (async) read$nci(r0, &(0x7f00000005c0)=""/108, 0x7b) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:02 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 64) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/108, 0x7b) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:03 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x9, r3, 0x1, 0x123, 0x234}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x100000001, 0xd8, 0x24b}) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="36aa6c18a7ba6de8b84c65d793002e5dbc2bf14e55b48e96e39960a4713a5ebbb49cb390bed37eb3660be2ba"], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000a00)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x2, @v={0x80, 0x1, 0x1, 0x6, 0x9, 0x7f, 0x2, {0x6, 0x4, "eff374ee868e550d"}, 0x7, 0x81, 0x1, 0x5, 0xe2, "892d5b8916fb0c68647a2c36531e1200817a8f3fdc9cb04093feccaf3ed4dfd4d34b109b2215035b5753e4ef5cfe78c9b04acc1944e5a719cda184230e93e4fc01d2a2a6376580876940cf779bae907253cfe9ff18d1dd41a0a728f2efb33444c0f7f87a7904066b7924a992047840d281e9dbebaf908d20687a9f91b1c3691a5b8112d0b11bd3e63a5d143a8561dca036db349717ae9c4fe92f0f7699b187dd882ea35b2196ff1c88c6fb6354eb27833234c59293bf500476d0a97287a4d585c98f21e813c04164cbe8d192f15ade47b2f8ca0852e7568e15c0acf86fce42e2b8ca"}}, 0xfb) r4 = openat$zero(0xffffff9c, &(0x7f0000000180), 0x8082, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001c00)=ANY=[@ANYRESHEX, @ANYRESDEC=r6, @ANYBLOB="000200000000bfdbdf2501488483c5a1dc6ffcc3e00000000c00004001000000000000000000817d7e9a526b5c937974644ad2efb0bfd371150790adf42805e4b2aeb03cedb8216fa430839dce80cea4708109593cc6a78a20b7119dacaafa6da0fa0c6f62038d036e3eb421d69d3926a4e2b43b143817e9eca455ffda054c76e43cf6c57f20fd26cdc744c9fbb446c179464490a70b8033111854a6d1a02b2fcb6a81289dedc2eb405ef41f1987d5a305a3de3c04a7159890acb70e5519721770c7c107bedd7bbb93c799f5e788e520370e65a59bc7b029e29b62ba", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r6, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000b80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r6, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}}, 0x20000800) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000900)) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:05 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x9, r3, 0x1, 0x123, 0x234}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x100000001, 0xd8, 0x24b}) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="36aa6c18a7ba6de8b84c65d793002e5dbc2bf14e55b48e96e39960a4713a5ebbb49cb390bed37eb3660be2ba"], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000a00)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x2, @v={0x80, 0x1, 0x1, 0x6, 0x9, 0x7f, 0x2, {0x6, 0x4, "eff374ee868e550d"}, 0x7, 0x81, 0x1, 0x5, 0xe2, "892d5b8916fb0c68647a2c36531e1200817a8f3fdc9cb04093feccaf3ed4dfd4d34b109b2215035b5753e4ef5cfe78c9b04acc1944e5a719cda184230e93e4fc01d2a2a6376580876940cf779bae907253cfe9ff18d1dd41a0a728f2efb33444c0f7f87a7904066b7924a992047840d281e9dbebaf908d20687a9f91b1c3691a5b8112d0b11bd3e63a5d143a8561dca036db349717ae9c4fe92f0f7699b187dd882ea35b2196ff1c88c6fb6354eb27833234c59293bf500476d0a97287a4d585c98f21e813c04164cbe8d192f15ade47b2f8ca0852e7568e15c0acf86fce42e2b8ca"}}, 0xfb) (async) r4 = openat$zero(0xffffff9c, &(0x7f0000000180), 0x8082, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001c00)=ANY=[@ANYRESHEX, @ANYRESDEC=r6, @ANYBLOB="000200000000bfdbdf2501488483c5a1dc6ffcc3e00000000c00004001000000000000000000817d7e9a526b5c937974644ad2efb0bfd371150790adf42805e4b2aeb03cedb8216fa430839dce80cea4708109593cc6a78a20b7119dacaafa6da0fa0c6f62038d036e3eb421d69d3926a4e2b43b143817e9eca455ffda054c76e43cf6c57f20fd26cdc744c9fbb446c179464490a70b8033111854a6d1a02b2fcb6a81289dedc2eb405ef41f1987d5a305a3de3c04a7159890acb70e5519721770c7c107bedd7bbb93c799f5e788e520370e65a59bc7b029e29b62ba", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) (async) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r6, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) (async) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000b80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r6, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}}, 0x20000800) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000900)) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:06 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x9, r3, 0x1, 0x123, 0x234}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x100000001, 0xd8, 0x24b}) (async, rerun: 32) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (rerun: 32) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="36aa6c18a7ba6de8b84c65d793002e5dbc2bf14e55b48e96e39960a4713a5ebbb49cb390bed37eb3660be2ba"], 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (rerun: 64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000a00)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x2, @v={0x80, 0x1, 0x1, 0x6, 0x9, 0x7f, 0x2, {0x6, 0x4, "eff374ee868e550d"}, 0x7, 0x81, 0x1, 0x5, 0xe2, "892d5b8916fb0c68647a2c36531e1200817a8f3fdc9cb04093feccaf3ed4dfd4d34b109b2215035b5753e4ef5cfe78c9b04acc1944e5a719cda184230e93e4fc01d2a2a6376580876940cf779bae907253cfe9ff18d1dd41a0a728f2efb33444c0f7f87a7904066b7924a992047840d281e9dbebaf908d20687a9f91b1c3691a5b8112d0b11bd3e63a5d143a8561dca036db349717ae9c4fe92f0f7699b187dd882ea35b2196ff1c88c6fb6354eb27833234c59293bf500476d0a97287a4d585c98f21e813c04164cbe8d192f15ade47b2f8ca0852e7568e15c0acf86fce42e2b8ca"}}, 0xfb) (rerun: 32) r4 = openat$zero(0xffffff9c, &(0x7f0000000180), 0x8082, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001c00)=ANY=[@ANYRESHEX, @ANYRESDEC=r6, @ANYBLOB="000200000000bfdbdf2501488483c5a1dc6ffcc3e00000000c00004001000000000000000000817d7e9a526b5c937974644ad2efb0bfd371150790adf42805e4b2aeb03cedb8216fa430839dce80cea4708109593cc6a78a20b7119dacaafa6da0fa0c6f62038d036e3eb421d69d3926a4e2b43b143817e9eca455ffda054c76e43cf6c57f20fd26cdc744c9fbb446c179464490a70b8033111854a6d1a02b2fcb6a81289dedc2eb405ef41f1987d5a305a3de3c04a7159890acb70e5519721770c7c107bedd7bbb93c799f5e788e520370e65a59bc7b029e29b62ba", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r6, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) (async) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000b80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r6, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}}, 0x20000800) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000900)) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async, rerun: 64) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:07 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x1, {{0x1}, {0x0, 0xfffd, 0x5}}}, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) read$nci(r0, &(0x7f0000000900)=""/228, 0xe4) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:07 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (rerun: 32) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 32) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x1, {{0x1}, {0x0, 0xfffd, 0x5}}}, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 64) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (rerun: 32) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 64) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) read$nci(r0, &(0x7f0000000900)=""/228, 0xe4) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:08 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x1, {{0x1}, {0x0, 0xfffd, 0x5}}}, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000900)=""/228, 0xe4) (async, rerun: 32) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (rerun: 32) [ 3549.016621][T30132] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 00:59:09 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="4000733c7078b981649195000000000000"], 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) openat$nci(0xffffff9c, &(0x7f00000009c0), 0x2, 0x0) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r3, 0x4, 0x163, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffff3f}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:10 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000000)=0x6, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x840) r5 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r5, &(0x7f0000000f00)={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfc, 0x75}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000884}, 0x40004) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3551.897291][ T29] audit: type=1400 audit(3551.830:410): avc: denied { bind } for pid=30353 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3551.932842][ T29] audit: type=1400 audit(3551.860:411): avc: denied { write } for pid=30353 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 00:59:12 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000000)=0x6, 0x4) (async) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000000)=0x6, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x840) r5 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r5, &(0x7f0000000f00)={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfc, 0x75}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000884}, 0x40004) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:12 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) r4 = creat(&(0x7f00000008c0)='./file0\x00', 0x140) read$nci(r4, &(0x7f0000000900)=""/32, 0x20) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="987aec7dc1079e00f4bed91c2c0000aa7c610428e8bf1dd7f06ea9f0bc85884c4484fcf57d05a541c5d7af881568c4afe41dbdbceb1bf0a239072774c76b1571b146c7ec3b03b7df4fa1f32b2da98ce237c95cb9b941f3fafe4fcdba78f66f0ba3ecf3ed5fb54984a91c5dfe67d47bce346daa26839a0cc9e77edc13f41d837f66f3ad82a6c1c1b0a2", @ANYRES16=r3, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=r1, @ANYBLOB="08000400000000000800030001000000"], 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="400400000100000000009f2d0feff49cff0b75d065a4c22e37e059f47b700a71ccedda7925ac74952c625ad5289041a4a589e4c3bf4be5bfce25623b9014195b5dbae6530fbcbaedb9472b470cfff27554e4d923c7d9f401c8bf5490e0d37dadcbdac475f18c844b019f89b03fe93f7ff1819d8faa8826e8f67edbd460dc06fcc44cefc117daca25243241168abd96d3bdd6bd3e6c3d3a02aa6267c0d40571efc75743f21dbf8d4cc985d57006ec5f705e692409123ac44b64ce5790"], 0x7) 00:59:13 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000000)=0x6, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x840) r5 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r5, &(0x7f0000000f00)={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0xc) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfc, 0x75}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000884}, 0x40004) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:15 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="40048000265eb2"], 0x7) 00:59:16 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="40048000265eb2"], 0x7) [ 3556.776627][T30436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 00:59:16 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) r4 = creat(&(0x7f00000008c0)='./file0\x00', 0x140) read$nci(r4, &(0x7f0000000900)=""/32, 0x20) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="987aec7dc1079e00f4bed91c2c0000aa7c610428e8bf1dd7f06ea9f0bc85884c4484fcf57d05a541c5d7af881568c4afe41dbdbceb1bf0a239072774c76b1571b146c7ec3b03b7df4fa1f32b2da98ce237c95cb9b941f3fafe4fcdba78f66f0ba3ecf3ed5fb54984a91c5dfe67d47bce346daa26839a0cc9e77edc13f41d837f66f3ad82a6c1c1b0a2", @ANYRES16=r3, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=r1, @ANYBLOB="08000400000000000800030001000000"], 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="400400000100000000009f2d0feff49cff0b75d065a4c22e37e059f47b700a71ccedda7925ac74952c625ad5289041a4a589e4c3bf4be5bfce25623b9014195b5dbae6530fbcbaedb9472b470cfff27554e4d923c7d9f401c8bf5490e0d37dadcbdac475f18c844b019f89b03fe93f7ff1819d8faa8826e8f67edbd460dc06fcc44cefc117daca25243241168abd96d3bdd6bd3e6c3d3a02aa6267c0d40571efc75743f21dbf8d4cc985d57006ec5f705e692409123ac44b64ce5790"], 0x7) 00:59:16 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="40048000265eb2"], 0x7) 00:59:17 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xa}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3558.339535][T17760] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 3559.995285][T30471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3560.007490][T30459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 00:59:19 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xa}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:20 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) r4 = creat(&(0x7f00000008c0)='./file0\x00', 0x140) read$nci(r4, &(0x7f0000000900)=""/32, 0x20) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 32) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="987aec7dc1079e00f4bed91c2c0000aa7c610428e8bf1dd7f06ea9f0bc85884c4484fcf57d05a541c5d7af881568c4afe41dbdbceb1bf0a239072774c76b1571b146c7ec3b03b7df4fa1f32b2da98ce237c95cb9b941f3fafe4fcdba78f66f0ba3ecf3ed5fb54984a91c5dfe67d47bce346daa26839a0cc9e77edc13f41d837f66f3ad82a6c1c1b0a2", @ANYRES16=r3, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=r1, @ANYBLOB="08000400000000000800030001000000"], 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="400400000100000000009f2d0feff49cff0b75d065a4c22e37e059f47b700a71ccedda7925ac74952c625ad5289041a4a589e4c3bf4be5bfce25623b9014195b5dbae6530fbcbaedb9472b470cfff27554e4d923c7d9f401c8bf5490e0d37dadcbdac475f18c844b019f89b03fe93f7ff1819d8faa8826e8f67edbd460dc06fcc44cefc117daca25243241168abd96d3bdd6bd3e6c3d3a02aa6267c0d40571efc75743f21dbf8d4cc985d57006ec5f705e692409123ac44b64ce5790"], 0x7) 00:59:21 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xa}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3563.636733][T30495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3563.637179][T30495] nci: nci_start_poll: failed to set local general bytes 00:59:23 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) close_range(r0, 0xffffffffffffffff, 0x2) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) r4 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r4, &(0x7f0000000900)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x1, 0x2, 0x1, 0x1, {0x1, 0x7fff, 0x0, 0xfffb, 0x0, 0xff, 0x9, 0x9, 0x1000, "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"}}, 0x1011) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:24 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) close_range(r0, 0xffffffffffffffff, 0x2) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) r4 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r4, &(0x7f0000000900)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x1, 0x2, 0x1, 0x1, {0x1, 0x7fff, 0x0, 0xfffb, 0x0, 0xff, 0x9, 0x9, 0x1000, "075fb1e66444158927c71f5b9c984a45f8f68bd16c338c70a15c7bc81439b4460866261ac5d44a763a1a80da20a4ac048785f3ee34d0e3190a87e594ee68c8f90950921c4f740e8d3be3b685fb38214b8593873c1334268eaf3afd4df0e189a380b683a57d243f4e3eeb7833b6de2bc1830ed982e958c6fe8f48365e05c8f0c312f2f848d6e89ea90b55d7eee86c33a48e759d19f225b545ace16db99a9d4cf984f5e0c67b8ccaafd4ff5beb34802a0d2b000ae165dc6bc5d071aba5adc8041b01683cecb7a2d0cba1fd935e86021d40ad2c80a5e9ba85aa1283872d484ea0384b95a95f383272c41b1b5d3c1e47d78c3d320015272ee5bf68ec0d71e98fbf1a3f8035f0deed1305a85a7df94130fddadeb0cacab691470a7e2d0dd7b706dccfd3ddf4063d0cd11bd6e0d821dae6efb192ec4026d5fce35cb68aeec3f18206b3e54379e422c575b7b24529e0d6900dca542a343579959262c42db894097f004a0e565a53112a32e63e3a173d5efb75c6a80b7445b25ac8699691ba78e51e4adadb49bc5e8b9c35b56d22587029c922ff7b8c8821a02178b6f87989638c38edfee4fc2509bef1bfa04fc94e2fccd4afe35ed3f20d14d8eac2c476344f30846b21efabd7facec5a641895c4cb30bee655211b7b814fd3034a02e8f0f69a4e0c846797f1d14038c6159d0165873932d9fbad8def4ed022e5c98d8d26dc06dc7d9df8d6413a420512bfec7d4efb5258f43cd6168f2e28091cb84d767da72637c6d3cbfd9627792165abbad194f088aff97d8c5c311de5f6179aec3299a29735917292887bfc1f62914ad6ab6dd571b4616077666ab5d4deac848d3f5d9bb103cc714290611997a8e1fba29e388552c53c5f8419a27c6879e9ad442b9022b7712417d2cce253a1afdd10284166bdb1c9222d260ce38f12e6fb5403d52b746d9f1c32b4f0da8d896afafb499aeff859cae8372916c38383de5806edb4c173f1055782f99e1796f31532728ae3ca9eb2e5b45ef30c92dc15395c43689bfbb527bfbb2774409008ffd9bda3ff5067df7d5d88456bb1799103ab9d20d3b3ed0f211e02624afb9a56f7accdd309733bea24098d505e0984578808b17fc6f727a9c7d29aa44359d55a984505c6c816ac5617480bc1b69407f4b3218c16c3e354797562a37e26e6e224a10d12695c92165b9704be5545c299ce6f0dbe97c997827c6e6da615688ac57894b61f070a251ef1beb0e16a5c5f4d0c72ac1999de737bb405b092398d635a164d358b971b41bdbdd1166c4d46a6df4fb36fd59878c73da5d5d23460816dab35ab7a427678667338ed7e6bc17558443226d281174e1524308049df992c8ecc0496270ccbea9f289753a851c203a0e262bcafabdbdba69b48f0978362138ed28b95d894b3158e130e41b9dfb2d04cd2aa0b07552d2b97f6a0a2fc2d66953e1205802f95a21d7896d9dc7c0c384f7a2c6b948648fa2a7cc83ee27acb9c5b0b792143e27cca059bc25868be37cbbfceeb152dab9f18bfc90d36a413dc7369b865582d89371918396a9dac4f6e510c1625c25796c6afe6837e2d3814a2b73b870cdbc381bd9b051882d4d562aa7c2be7b8ed71b16e5c7d87dc45397594bd67f276c63de857d46b6373f463ff2e2e85be81401c54d067d9a4f444e362890ed5b292feb254aaac43e6acaf5a4742bbc6ec13801457fecfb5d5f2244ca9efbe51d661dbdb18ce23b576aa8705bc9963a2defb248e7fd440f78ac1e00887c0349ee604840299cfc41d42545d1222c4b97ef71df562912c98984102809d6dec84b3baca5c0505f2aec81b80406b8b33468d68c195e3d8268356eefc97df33fef5d657111f80d6f8d3ede51b7b14a6c9bea8ede79e6aa025d5560140ea0813e5bc1c5fc7eaeeeb4f9e7917a88a842c694834d34978f3caba1accf5389babbeb1a95c966d2d6f2579d023226da236b564f0b0bfde84e4850184923cb25ab77016fdd6013251227778367319ede38d45474b416fe739e7b9ff1bb7cfdce967176d550577e3325d2ece3d09e0008b4991c7ded16f8101fc60ec6443d6631b1cf05cab368c54b836235f08f4c4d7a0d52e143c0daee2d477f4a2aca7213aa037a7e626c70ce5486a0a16ef92a538930674c506db6e35b7e3e822489b4ae83a3f468346172a3cc96fb507a4ff0b79effef92f61ecf7ecf13e962d30b3fc4c009a3b245fd5496d67cce0a411228f76403030f5f2a6b8c9cdcf3ca2c47a893e0c029808ed4d7b698d66ff633b63790f9293e7d6b5f8eef9d2e244087b266fc84b76a192fe7646e8d998996cc78353cf1517a7e6f123790201a3b82f945ceb51401cf251b00c39e12267514f071054951b18ff3bc6bcc1266ffcc19037ff7040920769b8a0f3b6b804b32ec31755225d8938c568796b3b3a3ac913dea4b0880d389ffc48f355de4b5483ba0bf17cc6bb387dc77c8892ff69d669947fcc80c11a011679db7c2e747520ccdfc91e101b259eaf65c67be5584d01ad3a71e09486fa1c059f839ac96e5ce80c9e94762f47fa328181f25a323aaa41115e74bd7af12fb699deb781385ec3c809fcc9d2b76e7351cd239ec72ed07debd791319babe46f8ed8007594e8ab3ccc578f00c006dee6402ec75177e46b60dc2e9397fb7c65f9acf0807c8a60c34afed8e4e2d086b6b023d6a9f8106747dcccb1bf2cc3a68febae4906adbd58349892d89c8c1d79685665f6e6b0faadf3c84bc29d36a518614e9d3efeab482684ac154b4c60095f97fac4be60a1ed844d2fbbdf6d39900c9dce0947ea7ec50fc858a96032f3f1c71e2a33ee04ed09b334633fd9853eae2e3f2162a884b55299d5409c4de1caf2d67eb497466dc52cec05be5cdabbfb80dded048cb61cbadbf3c88a9a306b778bc0951243bdcd6e550a4a604948f902d84c82631732de2d38d686e2d0746057698252a204e4ae1ab5202b234bbcbc996103f21ebaf9b35a65d41418d7f5ee80d440d48766039d0740f31e5320b489d79c1aff191596b21d68a21124d081263896f6f655f8a61fe259725db47994f625a6ccd2b74a6f0b09cd69c4afa9bd55d04f432cd02bef4f094466120267cf8b510696a764690dffc3fe7617813f4b25c89a2e27f3e28505b4a43710579e6943b7867917e37176516f28246d26b8453c34ccf3dba2d5a12eeb923e11d9fc518fc740dd286e37363fc4e933a456da81289c5f02b35a3a51d45b7213b0353d6dee19ca632700bc00ff0ec8d3a41a617badc340b33b764d421e8616072e0353be0f002813ddddb23ff6c0b433459ef40354ea8faef7cae0deaf66c028405d5c64f42ce82a9c53c88eb02a4939954bf01b85cab98c3990be20c03f3fce2115b61277df255b3af09cf58737c0bf5ff66fcf590ff6e415219a97991c4f934c62362f05e3b39826acefc75d912aa83625ce765ed8ed054024847e0dd2289dd7b0874aeef17c23a2bba82c64d3f1efa2de59e6d04b67d58cf793305f77a859e6f3afc2d32144f027c4e472f1802567721f30835c244e3d293bca2b7e61c6600139d87761ffeb4cdf89fbec5eec33d6d6b4b288edad40a9339e552de73a72ed0bf02967c7ddb4c0415089390d2c71f6cfc57089cde769626debcf1ca2ec9315f35fe9deb53ddfde7144be37c0e395ee5fc76386b1f0d7463e11bbb72cf083f89675788931f308ced06a637593f1f09568ecab4e3fe70356df339a2643dd165ee7f226ac0706a89690b646dadb9c22f858bb46118a03afba7d7ebe6a53ec421b2fa94f58c2215c89472c5468c4c1f2d6861cd6a6866f76063a2b819de212b155db71e27b1fbfecef140b2e47c863a64cb6afb675cbb33250bb18bf3533a5d70042c392e3be6c6656fe928e554dc819c98eb784d60b7a183b56106b04555af2731bfba426b8f2f120f473aad5254bdb9b0fbae73e47a133181d0b793ae5935245d93e843de9f443f81d9c9c54e1e5a09a6e3b3b5f30520bdcb423d59eeda153925e6e2ec44154507145df62108bdb11003cbb9526137221ab7156f5ed136321a7c84c28f35e02de0fa47547fb8c0634285f6106a11590f5bc190acc47c10615a0daa64a8957fa4a2a679b4499350cb0ba69597dc46f57b9e41cde086550f193510bac794521a2177d882fbeb52b181f87aa23aca43351d0544437fb03df84fa3333d281cad37e8a1259f2aa41c82b4c5691cb9d6845c94c167fd22bee76f831c7526cc23e44e11e7d41481e467cf4653706a282ebe3b5507b88893a17618d5b662bb4e68ab9bf023ee835e7c895800338a8da61f30f9608415588e1a8a75de9a35b86f5d62fc3d4e5c3b537de1ed772f5243325547941c9c0efb0ccfbcc8a3f978e0e0e1e70754223a1a8a6d71f0308d5a18ee18af88f9189bd1ffae082423b223a15330725fecf01357d3344d95739f86c7ad516a09ebc019e09933f25fee3301878d8ce7eca51471ca243c964430ce5765b301870c15cb81626b7e785c812a40a533823024f263b28db05c948f6eff3187f233b4608e8559f43e6dbb5af00b60d22acee974c10a0beb7ad8f05c02a632fdf10c1a1d6d56955f428fe2ede7a3448c877a47eee6fdcccc6ad077a99f08a82a88e4c41e4ab8bfc0fb27222bf0f94e055fb551d304ea797ecf1fee95453d183025b7cea3fc53c6a69d3d9db56d5deba8b5571b2ec852c4c73c0ba1c4d9a905301fcb1996214900e72fa6b83f5e7b5c8b726e3c0efa8c8537e061ab3e653ce4f12d4198898b098441cacfc22118624c155b59a7de9b085fd67e5202c5ded4add11437ab86916dc1caeb818d83bad1336e0a8bf0ae496c9ae2a5e8514d699517b43d809207aa7157af231217ab7e55b43a51f716cd142a287883733b296c85f6faf895ba533faa7821ec8292c6aaea84f4172813e14089cdae74f62e1e9d7502713c3b27f9cf839bb8aff6e952b6105197a6878bbfc013cf49a9d5dfadf88e39db68ce6fc28c27caad52c0e091deafc270bfdbffe596223bbaab4dd8a4246b9b88cfa3ea6ed9492df92e0c183d39787b414cd2eeb74522f3f04bb9bf517ad77aa57e39b4b0ef2f4fe785237b25e14fd0d154041a2b7df65e81cc9775ff92cfe685ba30aa9115b31419d9567981f5c7f7335ad9dd89ac798de2bd5428c255a2f0f3358b530862b061eef109c7e15f138c1c2f7734e8d4eda91448cc6f05b20c1565c352200d4a5868a6b262b1f546e275f8962488e72ae58ce11c95024739d86ea35201800fe5b0fc28268c985fdb9026492b6af4a64352014b563918066530b131458131fea2596a67e166561d529efd8ffe2428cd0d414dbff4453b19200e7504982e93a18a41763bc8213161d839346c5d99f261263fb57b09e74f4e901036b5a3733b8e6bef17792766a8c9af853ec557b917ac79e434a7d11e681be46b766d4d67f05c0eda82357f2ea7a7f5be63021fc5289aadbcfcbab7fdcd1b2d897a59b6182264e33cb659a8eec266f8e1d4453a0b04ae7c8e31e339c7ecbfbf0df71dea287dd9dd73202b1f5b099520414aa54b51ba1b5a26779df992cda18a6544ace8480d5532d4d5d8ba000ccd800f9887d4ff601b99d08f48075ea116312bd3a2392eae13f1ae2657b1dfb71aaa86eec9fcfadf1b1845867b7b2951763389623b81d6f08513051dedcde3bcd2d7999ebcbd352f7b6b3c3c104f33b4bfb26a523a10902cd33f65f071d20cf1b96fd548c7fcaefba8cbb3b9faae044b9ee6cf342d0117ec310c9e61a1fe9cadf93914054dddb6557c18389e8b6f5584453fb1"}}, 0x1011) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:25 executing program 0: openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) close_range(r0, 0xffffffffffffffff, 0x2) (async) close_range(r0, 0xffffffffffffffff, 0x2) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) r4 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r4, &(0x7f0000000900)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x1, 0x2, 0x1, 0x1, {0x1, 0x7fff, 0x0, 0xfffb, 0x0, 0xff, 0x9, 0x9, 0x1000, "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"}}, 0x1011) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:26 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0xfffffff5, r5, 0x200, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) r6 = openat$nci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) read$nci(r6, &(0x7f00000009c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="61db8b5a3f6300000000"], 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r6, &(0x7f00000002c0)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x1, 0x2, 0x0, 0xfd, 0x1}, 0x4) read$nci(r0, &(0x7f0000000000)=""/58, 0x3a) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr(r7, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00', &(0x7f0000000080)='/o\x00\x00\x00\x00\x00\x00\x00\x00', 0xa, 0x0) write$nci(r7, &(0x7f0000000a40)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0xb0, {0x1, 0x98, "c7f07f8cf1f6021a4c4652cbbde89eb4ea2bbd16e6eb441f0c14f674b6760eb66c1796b3a68136a61291b492f6daaab68bfec4a8f187cfc5ac81a14fbabfbd7cf526f075110ba6353e86b9dab255437914d0e96deb27d4e8f36cbce035da315682fddfe2bc4b39bd05c306636714fe1f7c08ccc179e4305118517350a5503763a80eb0fcef3d7049136fac58aa05cac55a51e36190ddf6ff"}}, 0x9d) 00:59:27 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0xfffffff5, r5, 0x200, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async, rerun: 32) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 32) r6 = openat$nci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) read$nci(r6, &(0x7f00000009c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 32) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (rerun: 64) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (rerun: 32) write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="61db8b5a3f6300000000"], 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async, rerun: 64) write$nci(r6, &(0x7f00000002c0)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x1, 0x2, 0x0, 0xfd, 0x1}, 0x4) (rerun: 64) read$nci(r0, &(0x7f0000000000)=""/58, 0x3a) (async, rerun: 32) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr(r7, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00', &(0x7f0000000080)='/o\x00\x00\x00\x00\x00\x00\x00\x00', 0xa, 0x0) write$nci(r7, &(0x7f0000000a40)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0xb0, {0x1, 0x98, "c7f07f8cf1f6021a4c4652cbbde89eb4ea2bbd16e6eb441f0c14f674b6760eb66c1796b3a68136a61291b492f6daaab68bfec4a8f187cfc5ac81a14fbabfbd7cf526f075110ba6353e86b9dab255437914d0e96deb27d4e8f36cbce035da315682fddfe2bc4b39bd05c306636714fe1f7c08ccc179e4305118517350a5503763a80eb0fcef3d7049136fac58aa05cac55a51e36190ddf6ff"}}, 0x9d) [ 3568.806596][T30481] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 00:59:28 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x9e, 0x1}, 0x4) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:29 executing program 0: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0xfffffff5, r5, 0x200, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async, rerun: 32) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 32) r6 = openat$nci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) read$nci(r6, &(0x7f00000009c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (rerun: 64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="61db8b5a3f6300000000"], 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r6, &(0x7f00000002c0)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x1, 0x2, 0x0, 0xfd, 0x1}, 0x4) read$nci(r0, &(0x7f0000000000)=""/58, 0x3a) (async, rerun: 64) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr(r7, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00', &(0x7f0000000080)='/o\x00\x00\x00\x00\x00\x00\x00\x00', 0xa, 0x0) (async, rerun: 64) write$nci(r7, &(0x7f0000000a40)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0xb0, {0x1, 0x98, "c7f07f8cf1f6021a4c4652cbbde89eb4ea2bbd16e6eb441f0c14f674b6760eb66c1796b3a68136a61291b492f6daaab68bfec4a8f187cfc5ac81a14fbabfbd7cf526f075110ba6353e86b9dab255437914d0e96deb27d4e8f36cbce035da315682fddfe2bc4b39bd05c306636714fe1f7c08ccc179e4305118517350a5503763a80eb0fcef3d7049136fac58aa05cac55a51e36190ddf6ff"}}, 0x9d) (rerun: 64) 00:59:29 executing program 0: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x1a, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff}]}, 0x0, 0x4, 0xe4, &(0x7f00000005c0)=""/228, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000006c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x7, 0x8}, 0x10}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)={@map=r1, r2, 0x0, 0x0, 0x0, @prog_id}, 0x20) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x2b, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @call={0x85, 0x0, 0x0, 0x7d}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, @call={0x85, 0x0, 0x0, 0x33}, @jmp={0x5, 0x0, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000d80)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e00)={0x5, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[0xffffffffffffffff, 0xffffffffffffffff, r1, r1], 0x0, 0x10, 0x3}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000f80)={@cgroup=r4, r3, 0x4, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000013c0), 0x2, 0x0) mkdir(&(0x7f0000001440)='./file0\x00', 0xc2) 00:59:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0) [ 3571.637225][T17760] nci: nci_add_new_protocol: the target found does not have the desired protocol 00:59:31 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000480)=""/223, 0x1000000, 0xdf, 0x1}, 0x20) close(0xffffffffffffffff) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000880)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 3573.239922][T30624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 00:59:33 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x9e, 0x1}, 0x4) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x9e, 0x1}, 0x4) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3578.169012][T30654] nci: nci_activate_target: unable to find the selected target [ 3578.171678][T30653] nci: nci_activate_target: unable to find the selected target 00:59:38 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x400, 0x4}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, 0x0, &(0x7f0000000080)=""/28}, 0x20) 00:59:38 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0x40505330, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) 00:59:39 executing program 0: add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) [ 3579.847253][T30653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 00:59:39 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x9e, 0x1}, 0x4) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001140)={0x20, 0x1, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x20}}, 0x0) 00:59:41 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{}, 'port0\x00'}) [ 3581.816219][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 00:59:42 executing program 0: mount$fuse(0xedc000000000, 0x0, 0x0, 0x0, 0x0) 00:59:42 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000001f80)) [ 3583.106390][T30672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3583.110132][T30665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 00:59:43 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80284504, &(0x7f0000000180)={0x0, 0x0, 0x0}) 00:59:43 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd27, 0x234}, 0x14}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000440)=0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0xfffffffffffffff8) r1 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0/file0\x00'}, 0x6e) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000400)=0x0) lchown(&(0x7f00000000c0)='./file0/file0/file0\x00', r5, 0xee00) sendmsg$sock(r3, 0x0, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$sock_int(r2, 0x1, 0x0, 0x0, 0x0) accept4$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmsg(r4, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x114) write$binfmt_elf64(r4, &(0x7f00000000c0)=ANY=[], 0x100000530) 00:59:47 executing program 0: r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000002780)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 00:59:48 executing program 0: r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) quotactl$Q_QUOTAOFF(0x0, &(0x7f0000002780)=@filename='./file0\x00', 0x0, 0x0) 00:59:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x2, 0x7, 0x900}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000100)}, 0x20) 00:59:49 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000080), 0x0, 0x8) 00:59:50 executing program 0: signalfd4(0xffffffffffffffff, &(0x7f00000007c0), 0x8, 0x180800) 00:59:50 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd27, 0x234}, 0x14}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 00:59:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) 00:59:55 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x6, "1ae1588661afdfa0e21ea6432f6ebc0b8b7cf4e5a89011ab6cb4e9b960dda6e5"}) 00:59:56 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000b00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000500)='./file0\x00', 0x0) 00:59:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r2, @ANYBLOB="08001b"], 0x30}}, 0x0) 00:59:57 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd27, 0x234}, 0x14}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:59:58 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) 00:59:58 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @random="156307be2ebb", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0x30, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "6a930e", 0x0, 0x0, 0x0, @remote, @dev}}}}}}}, 0x0) 00:59:59 executing program 0: socketpair$unix(0x2, 0x2, 0x11, &(0x7f0000000000)) 00:59:59 executing program 0: syz_clone(0xc2800200, 0x0, 0x0, 0x0, 0x0, 0x0) 01:00:01 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) read$nci(r0, &(0x7f0000000900)=""/180, 0xb4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:00:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x1}) ioctl$TUNGETVNETLE(r0, 0x400454cd, 0x0) 01:00:01 executing program 0: socketpair(0x2, 0xa, 0x0, &(0x7f0000001780)) 01:00:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) 01:00:03 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) 01:00:03 executing program 0: getrandom(&(0x7f0000001680)=""/193, 0xc1, 0x1) 01:00:04 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual', 0x0, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) 01:00:04 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) 01:00:05 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 3606.271907][T31085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:00:06 executing program 0: semget(0x2, 0x0, 0x640) 01:00:06 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) read$nci(r0, &(0x7f0000000900)=""/180, 0xb4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:00:06 executing program 0: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0xe815125e80a2f8e1) 01:00:07 executing program 0: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0xe815125e80a2f8e1) 01:00:07 executing program 0: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0xe815125e80a2f8e1) 01:00:08 executing program 0: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0xe815125e80a2f8e1) 01:00:08 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) 01:00:09 executing program 0: syz_clone(0x18064000, 0x0, 0x0, 0x0, 0x0, 0x0) 01:00:09 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0x31, 0x0, 0x0) 01:00:10 executing program 0: keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfffb}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x3}, [@obex={0x5}, @mdlm_detail={0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0x2, &(0x7f0000000380)=@string={0x2}}, {0x0, 0x0}, {0x2, &(0x7f0000000580)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x44d}}]}) [ 3612.299653][T31113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3612.300127][T31113] nci: nci_start_poll: failed to set local general bytes [ 3612.302459][T31123] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3612.302800][T31123] nci: nci_start_poll: failed to set local general bytes 01:00:12 executing program 0: syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40}}}}}]}}]}}, 0x0) 01:00:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x10}, [@FRA_DST={0x4, 0x1, @multicast2}]}, 0x24}}, 0x0) [ 3614.906407][T31243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:00:14 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180300002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:00:15 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xb}]}}) [ 3617.435019][T31111] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:00:19 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 32) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 32) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) read$nci(r0, &(0x7f0000000900)=""/180, 0xb4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:00:19 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x50) 01:00:21 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x0, 0x0, 0x0}, 0x90) 01:00:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x11, 0xa, 0x0, 0x4) 01:00:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8929, &(0x7f00000000c0)={'sit0\x00', 0x0}) 01:00:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}], 0xf}, 0x0) 01:00:24 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000780)={0x80000000}) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x1f8) 01:00:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) 01:00:25 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4000081a0000"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r6 = fcntl$dupfd(r0, 0x0, r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) r8 = syz_open_dev$mouse(&(0x7f0000000980), 0x8, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x80, 0x0, 0x514, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nfc\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x800) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:00:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) 01:00:26 executing program 0: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000180)='bbr\x00', 0x4) 01:00:27 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'X'}}, 0x119) write$UHID_INPUT2(r0, &(0x7f0000001840), 0x20001846) 01:00:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)={0x44, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x44}}, 0x0) 01:00:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@ipv4_newroute={0x50, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_MARK={0x8}, @RTA_MARK={0x8}, @RTA_FLOW={0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8}}]}, 0x50}}, 0x0) 01:00:28 executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 01:00:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0xffffffffffffffff) 01:00:30 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0x0, 0x800}, 0x20) 01:00:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000640)=@assoc_value, &(0x7f0000000680)=0x8) 01:00:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)='\"', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x18) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x0, 0x0, 0x0) 01:00:32 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4000081a0000"], 0x6) (async, rerun: 64) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (rerun: 64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 64) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (rerun: 64) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) (async) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) (async, rerun: 32) r6 = fcntl$dupfd(r0, 0x0, r0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) r8 = syz_open_dev$mouse(&(0x7f0000000980), 0x8, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x80, 0x0, 0x514, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nfc\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x800) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:00:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x3, &(0x7f0000000800)) 01:00:36 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4000081a0000"], 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) (async) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) (async) r6 = fcntl$dupfd(r0, 0x0, r0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) (async) r8 = syz_open_dev$mouse(&(0x7f0000000980), 0x8, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x80, 0x0, 0x514, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nfc\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x800) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:00:40 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f0000000000)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0x6, {0x1, 0x20}}, 0x5) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000ac0)={&(0x7f0000000040), 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0xbc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0560e7e7b974fa5a57e190f9109c3bdf"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f72e11520695037b124db7c1af77ad3ca28040855a345a41ae74f4a46e0ec509"}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf1c}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6b6d19e1cf53b4eef74611e96726e68d"}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000840}, 0x40000) 01:00:45 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0xc8000, 0x0) 01:00:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x5, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:00:46 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 01:00:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) 01:00:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x349400, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 01:00:48 executing program 0: syz_io_uring_setup(0x6ae4, &(0x7f0000000000), &(0x7f0000000080), 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) [ 3649.182270][T31745] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:00:49 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 01:00:49 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f0000000000)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0x6, {0x1, 0x20}}, 0x5) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0x6, {0x1, 0x20}}, 0x5) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r2) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000ac0)={&(0x7f0000000040), 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0xbc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0560e7e7b974fa5a57e190f9109c3bdf"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f72e11520695037b124db7c1af77ad3ca28040855a345a41ae74f4a46e0ec509"}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf1c}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6b6d19e1cf53b4eef74611e96726e68d"}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000840}, 0x40000) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000ac0)={&(0x7f0000000040), 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0xbc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0560e7e7b974fa5a57e190f9109c3bdf"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f72e11520695037b124db7c1af77ad3ca28040855a345a41ae74f4a46e0ec509"}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf1c}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6b6d19e1cf53b4eef74611e96726e68d"}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000840}, 0x40000) 01:00:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 01:00:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000400)=@in={0x10, 0x2}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000440)="93", 0x1}, {0x0}], 0x2}, 0x0) 01:00:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000000080), 0x4) 01:00:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000400)=@in={0x10, 0x2}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000500)="e4", 0x1}], 0x1}, 0x0) 01:00:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000040)=0x14) 01:00:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x5452, &(0x7f0000001000)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 01:00:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 01:00:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8910, &(0x7f0000000a80)={'batadv_slave_1\x00'}) 01:00:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xbdf, 0x0, "f9413fb25f90b3f4"}) [ 3656.747536][T31773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:00:56 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f0000000000)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0x6, {0x1, 0x20}}, 0x5) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000ac0)={&(0x7f0000000040), 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0xbc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0560e7e7b974fa5a57e190f9109c3bdf"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f72e11520695037b124db7c1af77ad3ca28040855a345a41ae74f4a46e0ec509"}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf1c}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6b6d19e1cf53b4eef74611e96726e68d"}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000840}, 0x40000) 01:00:57 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x101}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x7]}, 0x8}) 01:00:57 executing program 0: io_uring_setup(0x6ee4, &(0x7f0000000fc0)={0x0, 0x0, 0x1014}) 01:00:58 executing program 0: io_uring_setup(0x6ee4, &(0x7f0000000fc0)={0x0, 0x0, 0x1014}) 01:00:58 executing program 0: io_uring_setup(0x6ee4, &(0x7f0000000fc0)={0x0, 0x0, 0x1014}) [ 3659.116614][T31095] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:00:59 executing program 0: io_uring_setup(0x6ee4, &(0x7f0000000fc0)={0x0, 0x0, 0x1014}) 01:01:00 executing program 0: io_uring_setup(0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x1014}) 01:01:00 executing program 0: io_uring_setup(0x0, 0x0) 01:01:01 executing program 0: io_uring_setup(0x0, 0x0) 01:01:02 executing program 0: io_uring_setup(0x0, 0x0) [ 3662.177637][T31816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3662.178066][T31816] nci: nci_start_poll: failed to set local general bytes 01:01:02 executing program 0: io_uring_setup(0x0, &(0x7f0000000fc0)) 01:01:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 01:01:03 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000001c00), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) 01:01:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ac0)={0x14}, 0x14}}, 0x0) 01:01:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x0, 0x0, 0x0, "0738c887f7cd1a5b0c09ef192c0e0c8fa3eb18042dc6dccbcb1f5b000216a14fcb12e60caffb35936e4afb94c66d43fb1b411d01217c2f3c15dd92ce48b0f8d8fa2c56b913eb43f9d1a027f595bb87f1"}, 0xd8) 01:01:05 executing program 0: openat$drirender128(0xffffffffffffff9c, 0x0, 0x420000, 0x0) 01:01:06 executing program 0: openat$drirender128(0xffffffffffffff9c, 0x0, 0x420000, 0x0) 01:01:06 executing program 0: openat$drirender128(0xffffffffffffff9c, 0x0, 0x420000, 0x0) [ 3667.426561][T31828] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:01:07 executing program 1: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x123, 0x236, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}]}, 0x1c}}, 0x4) read$nci(0xffffffffffffffff, &(0x7f0000000200)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(0xffffffffffffffff, &(0x7f0000000380)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(0xffffffffffffffff, &(0x7f0000000500)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(0xffffffffffffffff, &(0x7f00000005c0)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r3 = timerfd_create(0x5, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000000)) read$nci(0xffffffffffffffff, &(0x7f0000000680)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="4136b064579ab4038000"], 0x4) write$nci(0xffffffffffffffff, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=r0, @ANYBLOB="0800040000000000080003000100000018899edf7f5e5999ead691ba1b551f05e4d99b289d"], 0x2c}}, 0x0) read$nci(0xffffffffffffffff, &(0x7f0000000840)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:01:07 executing program 0: openat$drirender128(0xffffffffffffff9c, 0x0, 0x420000, 0x0) 01:01:08 executing program 0: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) 01:01:08 executing program 0: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) 01:01:08 executing program 1: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x123, 0x236, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}]}, 0x1c}}, 0x4) (async) read$nci(0xffffffffffffffff, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(0xffffffffffffffff, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(0xffffffffffffffff, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(0xffffffffffffffff, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(0xffffffffffffffff, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(0xffffffffffffffff, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(0xffffffffffffffff, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) r3 = timerfd_create(0x5, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000000)) (async) read$nci(0xffffffffffffffff, &(0x7f0000000680)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="4136b064579ab4038000"], 0x4) (async) write$nci(0xffffffffffffffff, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=r0, @ANYBLOB="0800040000000000080003000100000018899edf7f5e5999ead691ba1b551f05e4d99b289d"], 0x2c}}, 0x0) (async) read$nci(0xffffffffffffffff, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(0xffffffffffffffff, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:01:09 executing program 0: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) 01:01:09 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0xaa381) write$evdev(r0, &(0x7f00000000c0)=[{{}, 0x1, 0x8001}], 0x18) 01:01:09 executing program 1: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x123, 0x236, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}]}, 0x1c}}, 0x4) (async) read$nci(0xffffffffffffffff, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(0xffffffffffffffff, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(0xffffffffffffffff, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(0xffffffffffffffff, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(0xffffffffffffffff, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(0xffffffffffffffff, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(0xffffffffffffffff, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r3 = timerfd_create(0x5, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000000)) (async) read$nci(0xffffffffffffffff, &(0x7f0000000680)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="4136b064579ab4038000"], 0x4) write$nci(0xffffffffffffffff, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=r0, @ANYBLOB="0800040000000000080003000100000018899edf7f5e5999ead691ba1b551f05e4d99b289d"], 0x2c}}, 0x0) (async) read$nci(0xffffffffffffffff, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(0xffffffffffffffff, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:01:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x0, 0x3}) 01:01:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000600)={0x0, 0x0, 0x80400}) 01:01:11 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x0, 0x2, 0x4, 0x7, 0x1}, 0x4) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:01:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000004140)='net/dev\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 01:01:11 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0) 01:01:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000002140), 0x4) 01:01:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000040)=@abs={0x1}, 0x6e, 0x0}, 0x0) [ 3673.637504][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:01:13 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f000000aa00), 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 01:01:14 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) linkat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x0) 01:01:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) [ 3675.208792][T31987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:01:15 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x0, 0x2, 0x4, 0x7, 0x1}, 0x4) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:01:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x0, 0x0, 0x0, 0x406, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 01:01:16 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_clone(0x200400, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000180)="d2df45b45b02a25359fc96c5f3bfeb9a6fa35ebf3d53a8be8d2723d71793a7a40913218ee3bb7d") 01:01:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0xfff, 0x9, 0x8}, 0x48) [ 3677.417212][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:01:17 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f000000bf00)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f000000bc00)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) 01:01:18 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00') [ 3679.018463][T32020] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3679.018846][T32020] nci: nci_start_poll: failed to set local general bytes [ 3679.023353][T32010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:01:19 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x0, 0x2, 0x4, 0x7, 0x1}, 0x4) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:01:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x57, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) 01:01:20 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x83, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7}, 0x8) [ 3680.521847][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:01:20 executing program 0: r0 = fsopen(&(0x7f0000000180)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 01:01:21 executing program 0: msgrcv(0x0, &(0x7f0000007e80)={0x0, ""/4096}, 0x1008, 0x3, 0x4800) 01:01:22 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) [ 3682.197790][T32044] nci: nci_start_poll: failed to set local general bytes [ 3682.199051][T32046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:01:22 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0xcd}, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:01:24 executing program 0: syz_usb_connect$uac1(0x0, 0x7e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x3f, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 01:01:26 executing program 0: syz_usb_connect$uac1(0x1, 0x9e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0x40}, [@mixer_unit={0x5, 0x24, 0x4, 0x1, 0x81}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x1f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x7, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0xef, 0x3f, {0x7, 0x25, 0x1, 0x180, 0x1, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x2, 0xfe, 0xfc, "", "5492"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x40, 0x0, "b933"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xbf, 0x3, 0x5, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x2, 0x3f, {0x7}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x9, 0x1, 0x1f, 0x0, 0x8}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x59}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x816}}, {0xc9, &(0x7f0000000300)=@string={0xc9, 0x3, "923fe45c6d0fa678073cf114d59f6c05d2dcfa9f4f1a27bc20751773f2000d1bd922d2b35adc8bd0ed9c4e81b90c79605e6701c84eec5bf50684d6ce113baecd654bedfe8005a7468a0221f05340818b331c450030c426a54614fbad4f3c8e7df9803d446d7a0de795f062811ec29f717533e9982e9a4be97ed53676571bc5426a4cc1c138bb37f1e2e9a7617be2fadd66ef663b23260563ad600dd76129d0b5576513fd4bf625037ed0572790d875206eea5537de578c3f1d73c0f18ebe21a3047c4bbfc07800"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41b}}]}) 01:01:28 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000003540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 3690.386814][T32057] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:01:30 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 32) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 64) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (rerun: 64) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0xcd}, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:01:31 executing program 0: syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x10f242) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) [ 3693.044467][T32075] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3693.044776][T32075] nci: nci_start_poll: failed to set local general bytes 01:01:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}}, 0x0) 01:01:34 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002ac0)='ns/time_for_children\x00') 01:01:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 01:01:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000580), 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000480)={0x240e}, 0x4) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 3698.226102][T32084] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:01:38 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0xcd}, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:01:38 executing program 0: socketpair(0x23, 0x2, 0x1, &(0x7f00000000c0)) 01:01:39 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x27, &(0x7f0000000000), 0x4) 01:01:39 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29, 0x0, 0x9}, 0x20) 01:01:40 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000000)) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/66, &(0x7f0000000080)=0x42) 01:01:41 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002d80)={@ifindex, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 01:01:41 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 01:01:42 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 01:01:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair(0x1e, 0x0, 0x85e1, &(0x7f00000000c0)) 01:01:44 executing program 0: timer_create(0x3, &(0x7f0000001bc0)={0x0, 0x1e, 0x2, @thr={0x0, 0x0}}, &(0x7f0000001c00)) 01:01:44 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000180)) 01:01:45 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0, 0x0) 01:01:46 executing program 0: syz_emit_ethernet(0x52, &(0x7f0000000080)={@random="43e006b98a0f", @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "029e7f", 0x1c, 0x6, 0x0, @dev, @dev, {[@dstopts], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 01:01:46 executing program 0: r0 = semget$private(0x0, 0x1, 0x0) semctl$GETNCNT(r0, 0x1, 0xe, 0x0) [ 3706.787242][T32198] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:01:47 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5d) 01:01:49 executing program 0: syz_emit_ethernet(0x25, &(0x7f0000000000)={@multicast, @random="49fa662ef02b", @void, {@generic={0x17, "86a434cc566613078e88873459ef526bb5fb52e638c9f4"}}}, 0x0) 01:01:49 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="400000000000e16ad0354c690d9c62fbd81e1ea25b91ab115b994e3ef6bed55f8a3f0df56a4c17bae8bb164b58e56a0d1ab24b477035f8472258e8ff5a3310c21fe768e5b34f929b4c9d47c6e5f335ad079a6633c9e9dc439a2ec7f49f0b126d613b4a21134d31aaaf0761255db60de7"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) r4 = syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x1) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000b00)={"07138f9f2e56a5742bb1ff873ba4763d", r5, 0x0, {0x3, 0x8000}, {0x3, 0x6756ab6b}, 0x4030, [0x1, 0x2, 0x71caa37d, 0x0, 0x5, 0xfde, 0x4, 0x8000, 0xfffffffffffffffa, 0x7, 0x100000001, 0xb1ad, 0x3, 0xffffffff, 0x9, 0x6faf2531]}) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:01:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x24, r1, 0xf81, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 01:01:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x105, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000240)={0x0, 0x4220}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001d80)=[{0x0}, {&(0x7f0000001700)="ad", 0x1}], 0x2}, 0x0) 01:01:51 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x3}, 0x10) 01:01:52 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x3}, 0x10) 01:01:53 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x3}, 0x10) 01:01:54 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x3}, 0x10) 01:01:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x53, 0x0, 0x0) 01:01:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) fchownat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0xa8}, 0x0) 01:01:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x102, &(0x7f0000000a80), &(0x7f00000003c0)=0x8) [ 3718.316827][T32246] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:01:58 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="400000000000e16ad0354c690d9c62fbd81e1ea25b91ab115b994e3ef6bed55f8a3f0df56a4c17bae8bb164b58e56a0d1ab24b477035f8472258e8ff5a3310c21fe768e5b34f929b4c9d47c6e5f335ad079a6633c9e9dc439a2ec7f49f0b126d613b4a21134d31aaaf0761255db60de7"], 0x6) (async, rerun: 32) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 32) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) r4 = syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x1) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 32) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000b00)={"07138f9f2e56a5742bb1ff873ba4763d", r5, 0x0, {0x3, 0x8000}, {0x3, 0x6756ab6b}, 0x4030, [0x1, 0x2, 0x71caa37d, 0x0, 0x5, 0xfde, 0x4, 0x8000, 0xfffffffffffffffa, 0x7, 0x100000001, 0xb1ad, 0x3, 0xffffffff, 0x9, 0x6faf2531]}) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:01:58 executing program 0: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000ac0), 0x2, 0x200000) 01:01:59 executing program 0: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000ac0), 0x2, 0x200000) 01:01:59 executing program 0: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000ac0), 0x2, 0x200000) 01:02:00 executing program 0: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000ac0), 0x2, 0x200000) 01:02:01 executing program 0: syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x161c03) 01:02:01 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000001780)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xb858}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0xfff}, [@acm={0x4}]}, {[{}], {}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x93}}}}}]}}]}}, 0x0) [ 3722.667571][T32286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3722.668143][T32286] nci: nci_start_poll: failed to set local general bytes 01:02:04 executing program 0: socketpair(0x10, 0x3, 0x0, &(0x7f0000000d40)) 01:02:04 executing program 0: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x400000) 01:02:05 executing program 0: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB='3'], 0x168}}, 0x0) 01:02:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000200)="ec", 0x1, 0x0, 0x0, 0x0) 01:02:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8931, &(0x7f0000000340)={'batadv_slave_1\x00'}) 01:02:06 executing program 0: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x36d157c6e43592f1) 01:02:07 executing program 0: getegid() syz_clone(0x40000000, &(0x7f00000040c0), 0x0, 0x0, 0x0, 0x0) [ 3727.736658][T32286] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:02:07 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="400000000000e16ad0354c690d9c62fbd81e1ea25b91ab115b994e3ef6bed55f8a3f0df56a4c17bae8bb164b58e56a0d1ab24b477035f8472258e8ff5a3310c21fe768e5b34f929b4c9d47c6e5f335ad079a6633c9e9dc439a2ec7f49f0b126d613b4a21134d31aaaf0761255db60de7"], 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) r4 = syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}}, 0x0) (async) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x1) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000b00)={"07138f9f2e56a5742bb1ff873ba4763d", r5, 0x0, {0x3, 0x8000}, {0x3, 0x6756ab6b}, 0x4030, [0x1, 0x2, 0x71caa37d, 0x0, 0x5, 0xfde, 0x4, 0x8000, 0xfffffffffffffffa, 0x7, 0x100000001, 0xb1ad, 0x3, 0xffffffff, 0x9, 0x6faf2531]}) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:02:09 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="02090702070000002dbd7000fddbdf2502000a0001000000810000000000000002000b00030000000400000000000000010015"], 0x38}}, 0x0) [ 3729.547778][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:02:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)='c', 0x1) 01:02:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8991, &(0x7f0000000340)={'batadv_slave_1\x00'}) [ 3730.966968][T32450] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3730.997360][T32455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:02:11 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:02:11 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000024001d0f00"/20, @ANYRES32=r0, @ANYBLOB="00000010f1ffffff0000000008000d00040076d20b000100636c73616374"], 0x40}}, 0x0) [ 3732.447428][T32473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3732.487066][T32473] gre0: Caught tx_queue_len zero misconfig 01:02:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc000000", @ANYRES16, @ANYBLOB="200027bd7000fedbdf250a0000000410030081c97ce57b26aa89a6822bdc951aa2bb756028f64b379dfec987c44f206b30e52c26037117053315c05804738ea4699545aac730b20010c593529afd472ddeb82c6705f1582b23624af6bb1ae10db4edb0dd7f0a34bf1a2b9083829f23a6a8926d7241e5fe5543f57499307f9f1727affce45c3c859866ed29c59dc099e7b26d017f4054b29abee9c1eb020e839eee2201749531a24d426c1ed08a8b2a84005c0e914c635ea5e9d842089bfa6e632890c03d03a04fa17e962ab5d8ce6c4f341294f9c0d3c96b2dc8b6662ae2b34101d4298d53c01fe81b807362ee6da60955f26ae896182d51"], 0x246c}}, 0x0) 01:02:13 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) 01:02:16 executing program 0: syz_clone(0x11000, 0x0, 0x0, 0x0, 0x0, 0x0) 01:02:17 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) 01:02:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x81, 0x4) 01:02:19 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001ac0), 0x4) [ 3739.356795][T32464] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:02:19 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:02:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a2, &(0x7f0000000340)={'batadv_slave_1\x00'}) 01:02:20 executing program 0: syz_clone3(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, {0x2000033}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3741.328592][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:02:21 executing program 0: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)="ce", 0x1, r0) 01:02:22 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="02027be207"], 0x38}}, 0x0) 01:02:23 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) write$selinux_attr(r0, &(0x7f00000000c0)='system_u:object_r:hald_sonypic_exec_t:s0\x00', 0x29) 01:02:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5423, 0xf01ed6507e0000) 01:02:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0d'], 0x30}}, 0x0) 01:02:26 executing program 0: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x4}, 0x0, &(0x7f0000000140)={0x0, r0+60000000}, 0x0) 01:02:26 executing program 0: syz_clone3(&(0x7f0000001580)={0x83805080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:02:27 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x400c1) [ 3747.998338][T32489] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:02:28 executing program 1: openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:02:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8920, &(0x7f0000000340)={'batadv_slave_1\x00'}) 01:02:29 executing program 0: mknodat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0xc000, 0x0) 01:02:29 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0xfffffffffffffef6) 01:02:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8943, &(0x7f0000000340)={'batadv_slave_1\x00'}) [ 3751.337170][T32540] nci: nci_activate_target: unable to find the selected target [ 3751.338950][T32526] nci: nci_activate_target: unable to find the selected target 01:02:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891e, &(0x7f0000000340)={'batadv_slave_1\x00'}) 01:02:32 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x4842) [ 3753.148745][T32525] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:02:33 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB="bd22d05a89ae13424b8850485922d3b56e98918df020c22c04bc1a84418406760dcb537b463569b268b0b716fcb75b007130c7a1d260282380e9e03b2f2b713587f13a1b050788fa64a298891c420dd74ad6d2ae88a79a7cb35f260add"], 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r2) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x4008800) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="b7d54bedadf1d587b777dd59d7e41c99bcc13fc27c0125b03d3912bb4bafdf3da47ca29c213cb0279e45e7f0e38ec9a7dfbe845d679b64a1968be05a4d9295347d6ac24670e7f0229e94da58ebbbdc6bf953e6ec14306ac2aba86268fb1202aa0db26dace579eb1e1c1b3b9a26a6946ec5fd3d4675ed296acea5c4e123371102cb364e6ee46013dafa0902cd6a4cb221e752bca23ddcfa6b628196d5575cc77273f4fd7255139d55a8bad28dcdc87a80b070a71c92148ead6518a7b3", @ANYRES16=r3, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=r1, @ANYBLOB="08000300ffffffff"], 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000a80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0xff, {0x1, 0x0, 0x0, 0x1}}, 0x7) write$nci(r0, &(0x7f0000000ac0)=@DATA={0x2, 0x0, 0x0, 0x0, 0x1c, "32447c2ed35402e160505bc4772c313afa1533cc781d37c29346e82db46291415e94054b15478a0a19fb8eca5053b6e1066bfd58cc143b521cb6b9ea6ace62a3dd63faf61a44ca9b65b2dc11501355c617617656536deab87b09138fc3e320616ba75cb85513791b511f4795ddabca1179e9f686523d5b7f393eedd86e847140329ecd4a64a7f1019ca6c9f7e0b2c8c62d1d6563d4c960bd4d83902d0faf20456f0df89c9f717da53962ad9fdbea0b94cd8e9e9e203cb021bd1226243be77d0033bbb8ed6367c35597e1ed5713a14726c468afe820eea8bc62ff38e14ae914d03c5d1308b165"}, 0xe9) 01:02:33 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, 0x0, 0x0) 01:02:34 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 01:02:35 executing program 0: setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000003c0)={{0xa, 0x4e23, 0x10, @private2={0xfc, 0x2, '\x00', 0xc9}, 0x80000000}, {0xa, 0x4e20, 0xe3dd, @private0, 0x7}, 0x0, {[0x7fff, 0x4, 0x2, 0x313f, 0x200, 0xd9, 0x1, 0x1]}}, 0x5c) r0 = socket$inet6(0xa, 0x0, 0x5) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000380)={@private0, 0x7f}) syz_clone(0x21000000, &(0x7f00000000c0)="206e94", 0x3, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 01:02:36 executing program 0: syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x4002) 01:02:37 executing program 0: unshare(0x400) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) [ 3758.097553][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:02:38 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) 01:02:39 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 3759.767505][T32572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:02:39 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB="bd22d05a89ae13424b8850485922d3b56e98918df020c22c04bc1a84418406760dcb537b463569b268b0b716fcb75b007130c7a1d260282380e9e03b2f2b713587f13a1b050788fa64a298891c420dd74ad6d2ae88a79a7cb35f260add"], 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r2) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x4008800) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="b7d54bedadf1d587b777dd59d7e41c99bcc13fc27c0125b03d3912bb4bafdf3da47ca29c213cb0279e45e7f0e38ec9a7dfbe845d679b64a1968be05a4d9295347d6ac24670e7f0229e94da58ebbbdc6bf953e6ec14306ac2aba86268fb1202aa0db26dace579eb1e1c1b3b9a26a6946ec5fd3d4675ed296acea5c4e123371102cb364e6ee46013dafa0902cd6a4cb221e752bca23ddcfa6b628196d5575cc77273f4fd7255139d55a8bad28dcdc87a80b070a71c92148ead6518a7b3", @ANYRES16=r3, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=r1, @ANYBLOB="08000300ffffffff"], 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000a80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0xff, {0x1, 0x0, 0x0, 0x1}}, 0x7) write$nci(r0, &(0x7f0000000ac0)=@DATA={0x2, 0x0, 0x0, 0x0, 0x1c, "32447c2ed35402e160505bc4772c313afa1533cc781d37c29346e82db46291415e94054b15478a0a19fb8eca5053b6e1066bfd58cc143b521cb6b9ea6ace62a3dd63faf61a44ca9b65b2dc11501355c617617656536deab87b09138fc3e320616ba75cb85513791b511f4795ddabca1179e9f686523d5b7f393eedd86e847140329ecd4a64a7f1019ca6c9f7e0b2c8c62d1d6563d4c960bd4d83902d0faf20456f0df89c9f717da53962ad9fdbea0b94cd8e9e9e203cb021bd1226243be77d0033bbb8ed6367c35597e1ed5713a14726c468afe820eea8bc62ff38e14ae914d03c5d1308b165"}, 0xe9) 01:02:40 executing program 0: syz_clone3(&(0x7f0000001440)={0x800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:02:41 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) clock_gettime(0x3, 0x0) write$FUSE_BMAP(r0, 0x0, 0xf0ffffff7f0000) syz_clone(0x40004000, &(0x7f0000002100)="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", 0xf80, &(0x7f0000000040), 0x0, 0x0) [ 3762.898801][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 3763.984891][T32596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:02:44 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB="bd22d05a89ae13424b8850485922d3b56e98918df020c22c04bc1a84418406760dcb537b463569b268b0b716fcb75b007130c7a1d260282380e9e03b2f2b713587f13a1b050788fa64a298891c420dd74ad6d2ae88a79a7cb35f260add"], 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 64) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r2) (rerun: 64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x4008800) (async, rerun: 32) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 32) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 64) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="b7d54bedadf1d587b777dd59d7e41c99bcc13fc27c0125b03d3912bb4bafdf3da47ca29c213cb0279e45e7f0e38ec9a7dfbe845d679b64a1968be05a4d9295347d6ac24670e7f0229e94da58ebbbdc6bf953e6ec14306ac2aba86268fb1202aa0db26dace579eb1e1c1b3b9a26a6946ec5fd3d4675ed296acea5c4e123371102cb364e6ee46013dafa0902cd6a4cb221e752bca23ddcfa6b628196d5575cc77273f4fd7255139d55a8bad28dcdc87a80b070a71c92148ead6518a7b3", @ANYRES16=r3, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=r1, @ANYBLOB="08000300ffffffff"], 0x24}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000a80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0xff, {0x1, 0x0, 0x0, 0x1}}, 0x7) (async, rerun: 64) write$nci(r0, &(0x7f0000000ac0)=@DATA={0x2, 0x0, 0x0, 0x0, 0x1c, "32447c2ed35402e160505bc4772c313afa1533cc781d37c29346e82db46291415e94054b15478a0a19fb8eca5053b6e1066bfd58cc143b521cb6b9ea6ace62a3dd63faf61a44ca9b65b2dc11501355c617617656536deab87b09138fc3e320616ba75cb85513791b511f4795ddabca1179e9f686523d5b7f393eedd86e847140329ecd4a64a7f1019ca6c9f7e0b2c8c62d1d6563d4c960bd4d83902d0faf20456f0df89c9f717da53962ad9fdbea0b94cd8e9e9e203cb021bd1226243be77d0033bbb8ed6367c35597e1ed5713a14726c468afe820eea8bc62ff38e14ae914d03c5d1308b165"}, 0xe9) 01:02:44 executing program 0: syz_clone3(&(0x7f0000000280)={0x2206400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:02:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 01:02:48 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8913, &(0x7f0000000340)={'batadv_slave_1\x00'}) 01:02:49 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8918, &(0x7f0000000340)={'batadv_slave_1\x00'}) 01:02:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), 0xffffffffffffffff) 01:02:50 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 01:02:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}]}, 0x24}}, 0x0) 01:02:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8910, &(0x7f0000000340)={'batadv_slave_1\x00'}) 01:02:53 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001b80)=@generic={&(0x7f0000001b40)='./file0\x00'}, 0x18) 01:02:53 executing program 0: unshare(0x400) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) [ 3774.466870][T32635] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:02:54 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r4, 0x10, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:02:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a1, &(0x7f0000000340)={'batadv_slave_1\x00'}) 01:02:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000980)={0x28, r1, 0x209, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}}, 0x0) 01:02:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000980)={0x28, r1, 0x209, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}}, 0x0) 01:02:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000980)={0x28, r1, 0x209, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}}, 0x0) 01:02:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000980)={0x28, r1, 0x209, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}}, 0x0) 01:03:00 executing program 0: shmget(0x2, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) syz_clone(0x40000000, &(0x7f00000040c0), 0x0, 0x0, 0x0, 0x0) 01:03:01 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$MRT6(r0, 0x29, 0x0, 0x0, 0x0) 01:03:02 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$MRT6(r0, 0x29, 0x0, 0x0, 0x0) 01:03:03 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$MRT6(r0, 0x29, 0x0, 0x0, 0x0) [ 3783.416719][T32759] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:03:03 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r4, 0x10, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:03:04 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$MRT6(r0, 0x29, 0x0, 0x0, 0x0) 01:03:05 executing program 0: syz_clone3(0x0, 0x0) syz_open_dev$loop(&(0x7f00000003c0), 0xf11, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018a10000000000003cfdffffe12dbd54320000000b000000000000000005000000018000000b0000000100000004000000da14b3000100000007000000005f5f610000000000002cf085f7903f991e72f5b1a0a869599fb0000000000000000000005be98e0d081b95f38945381006b8e402"], &(0x7f0000000280)=""/233, 0x1d, 0xe9, 0x1}, 0x20) 01:03:06 executing program 0: syz_clone3(&(0x7f0000000280)={0x4001200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:03:07 executing program 0: syz_open_dev$mouse(&(0x7f0000000000), 0xfffffffffffff001, 0x0) [ 3788.066415][ T351] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:03:08 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x401c5820, &(0x7f0000000340)={'batadv_slave_1\x00'}) 01:03:08 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x80108906, 0x0) 01:03:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 01:03:10 executing program 0: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)={0x0, r0+60000000}, 0x0) 01:03:11 executing program 0: socket$inet6(0xa, 0x0, 0x7fffffff) 01:03:12 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x4141, 0x0) [ 3793.286857][ T358] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:03:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="0000ffffffffffffffff00000a0001006e6574656d0000001c0002"], 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) 01:03:13 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r4, 0x10, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3794.459294][ T483] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:03:14 executing program 0: unshare(0x400) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 01:03:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x3}]}, 0x38}}, 0x0) 01:03:16 executing program 0: shmget(0x2, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) getegid() syz_clone(0x40000000, &(0x7f00000040c0)="92302baf8fdfb478001bb65d084e821465e8b49845bd8420caca84d8ca41e106766bcd0bea66329a1fed0da46763384fe26bf16e64289bae16810e05e4b99f46678d54735a072993617f8bbd64445e89226d36246b94c6692332e5a3118c8a250eb90babd7d04f695295755d1cd33f8dc4521f23c7a2def8413640f587d3433f4ca1008522828692b58c0ebc87a9bba19b4dad29", 0x94, &(0x7f0000004180), &(0x7f00000041c0), &(0x7f0000004200)="62b2f5c5cfa6666a9f950ff18ebfa08fc9e83fae122500cf3131dc8876491713f407bd74e82aeb5cb66b1262c24ecb9c3ef1cf89c2e8abe126cc3bcf0361ab0955aa69a4ce4e9d43382e4c43b68d22b7791111137afd326bc919e2bd721ecdb5c65f50c028e7ae224b778b46c33b0409a3ce3134c7") 01:03:18 executing program 0: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000100)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x720}) poll(&(0x7f0000000040)=[{0xffffffffffffff9c}, {}, {}, {}], 0x31, 0xffffffff) 01:03:19 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x40086602, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x0, '\x00', 0x0, r0}, 0x48) [ 3801.452164][ T503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3801.458864][ T507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3801.459149][ T507] nci: nci_start_poll: failed to set local general bytes [ 3806.617228][ T481] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:03:26 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000640)=""/45, 0x2d) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5b068b3ba6f410373f"], 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x10, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3809.779600][T31095] nci: nci_rsp_packet: unknown rsp opcode 0xb06 [ 3810.639965][T31095] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 3812.198873][ T641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3812.208874][ T648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:03:32 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000640)=""/45, 0x2d) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5b068b3ba6f410373f"], 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 64) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async, rerun: 64) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x10, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3816.937952][ T662] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3816.938440][ T662] nci: nci_start_poll: failed to set local general bytes [ 3822.206860][ T653] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:03:42 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000640)=""/45, 0x2d) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) (async, rerun: 32) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5b068b3ba6f410373f"], 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 32) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x10, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3824.837891][T31095] nci: nci_rsp_packet: unknown rsp opcode 0xb06 [ 3826.268244][ T769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:03:46 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x3f, 0x1}, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3829.001444][ T782] nci: nci_start_poll: failed to set local general bytes [ 3829.657768][T31095] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 3831.253078][ T782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:03:51 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x3f, 0x1}, 0x5) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x3f, 0x1}, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3835.636758][ T799] nci: nci_start_poll: failed to set local general bytes [ 3836.258887][T31095] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 3836.259747][T31095] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 3836.882148][T32569] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3836.883039][T32569] CPU: 0 PID: 32569 Comm: syz-executor.0 Not tainted 6.8.0-rc7-syzkaller #0 [ 3836.883359][T32569] Hardware name: ARM-Versatile Express [ 3836.883618][T32569] Backtrace: [ 3836.883802][T32569] [<818382cc>] (dump_backtrace) from [<818383c8>] (show_stack+0x18/0x1c) [ 3836.884155][T32569] r7:81a18efc r6:81fce7c0 r5:60000113 r4:81fbd658 [ 3836.884415][T32569] [<818383b0>] (show_stack) from [<818558e4>] (dump_stack_lvl+0x48/0x54) [ 3836.884692][T32569] [<8185589c>] (dump_stack_lvl) from [<81855908>] (dump_stack+0x18/0x1c) [ 3836.885008][T32569] r5:eb56dab8 r4:83ec0000 [ 3836.885146][T32569] [<818558f0>] (dump_stack) from [<8183cad8>] (dump_header+0x4c/0x1ac) [ 3836.885870][T32569] [<8183ca8c>] (dump_header) from [<80428bfc>] (oom_kill_process+0x218/0x290) [ 3836.886345][T32569] r6:81fce7c0 r5:eb56dab8 r4:83ec0000 [ 3836.886837][T32569] [<804289e4>] (oom_kill_process) from [<804293bc>] (out_of_memory+0x114/0x378) [ 3836.887295][T32569] r9:826f6e80 r8:84f8b800 r7:84870000 r6:8289bfc0 r5:84870000 r4:eb56dab8 [ 3836.887508][T32569] [<804292a8>] (out_of_memory) from [<804c7cf4>] (mem_cgroup_out_of_memory+0xd8/0xf4) [ 3836.887781][T32569] r6:00100cca r5:84f8b800 r4:00000000 [ 3836.887932][T32569] [<804c7c1c>] (mem_cgroup_out_of_memory) from [<804cd48c>] (try_charge_memcg+0x61c/0x6dc) [ 3836.888233][T32569] r7:84f8b800 r6:8270f584 r5:00000001 r4:84f8b800 [ 3836.888412][T32569] [<804cce70>] (try_charge_memcg) from [<804cf9c0>] (mem_cgroup_swapin_charge_folio+0x90/0x170) [ 3836.888699][T32569] r10:000000f2 r9:8260c9b8 r8:eb56dbf7 r7:00000000 r6:00100cca r5:ded906bc [ 3836.888902][T32569] r4:84f8b800 [ 3836.889015][T32569] [<804cf930>] (mem_cgroup_swapin_charge_folio) from [<804ae868>] (__read_swap_cache_async+0x2d4/0x378) [ 3836.889323][T32569] r7:00100cca r6:000000f2 r5:83e41700 r4:ded906bc [ 3836.889498][T32569] [<804ae594>] (__read_swap_cache_async) from [<804aec1c>] (swap_cluster_readahead+0x28c/0x350) [ 3836.889794][T32569] r10:00100cca r9:00000000 r8:eb56dbf7 r7:00000000 r6:00000000 r5:00000000 [ 3836.889999][T32569] r4:00000001 [ 3836.890130][T32569] [<804ae990>] (swap_cluster_readahead) from [<804aeeac>] (swapin_readahead+0x68/0x4bc) [ 3836.890433][T32569] r10:00100cca r9:00000000 r8:83e41700 r7:000000f2 r6:000000f2 r5:00000000 [ 3836.890610][T32569] r4:eb56dd50 [ 3836.890723][T32569] [<804aee44>] (swapin_readahead) from [<80471f20>] (do_swap_page+0x200/0xcc4) [ 3836.890989][T32569] r10:00000000 r9:00000000 r8:83e41700 r7:857dbba0 r6:000000f2 r5:00000000 [ 3836.891186][T32569] r4:eb56dd50 [ 3836.891311][T32569] [<80471d20>] (do_swap_page) from [<80473844>] (handle_mm_fault+0x3d8/0x12d0) [ 3836.891628][T32569] r10:00000000 r9:85413000 r8:76b08000 r7:857dbba0 r6:76b08000 r5:84870000 [ 3836.891828][T32569] r4:00000214 [ 3836.891958][T32569] [<8047346c>] (handle_mm_fault) from [<80215d64>] (do_page_fault+0x148/0x3a8) [ 3836.892236][T32569] r10:00000007 r9:85413000 r8:76b08000 r7:00000207 r6:00000214 r5:76b08ae8 [ 3836.892442][T32569] r4:eb56de48 [ 3836.892576][T32569] [<80215c1c>] (do_page_fault) from [<802161ac>] (do_DataAbort+0x38/0xa8) [ 3836.892830][T32569] r10:003d0f00 r9:84870000 r8:80215c1c r7:eb56de48 r6:76b08ae8 r5:00000207 [ 3836.893032][T32569] r4:8261d050 [ 3836.893140][T32569] [<80216174>] (do_DataAbort) from [<80200ae4>] (__dabt_svc+0x44/0x60) [ 3836.893406][T32569] Exception stack(0xeb56de48 to 0xeb56de90) [ 3836.893583][T32569] de40: eb56ded0 76b08ae8 ffffffe8 00000000 84870000 eb56dee0 [ 3836.893808][T32569] de60: eb56dfb0 76b08ae0 00000000 84870000 003d0f00 eb56df44 00000018 eb56de94 [ 3836.894034][T32569] de80: 8041ae0c 818084cc 00000013 ffffffff [ 3836.894214][T32569] r8:00000000 r7:eb56de7c r6:ffffffff r5:00000013 r4:818084cc [ 3836.894610][T32569] [<8041ac78>] (__rseq_handle_notify_resume) from [<8020bbd0>] (do_work_pending+0xf8/0x4b0) [ 3836.894938][T32569] r10:003d0f00 r9:84870000 r8:00000000 r7:84870000 r6:00000000 r5:eb56dfb0 [ 3836.895148][T32569] r4:84870000 [ 3836.895258][T32569] [<8020bad8>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 3836.895496][T32569] Exception stack(0xeb56dfb0 to 0xeb56dff8) [ 3836.895805][T32569] dfa0: ffffffff 00000004 000001b0 00000000 [ 3836.896313][T32569] dfc0: 00000000 00000000 00000000 00000000 7ebd532e 7ebd532f 003d0f00 76b080fc [ 3836.896589][T32569] dfe0: 200000d0 200000d0 00016910 00016910 20000010 ffffffff [ 3836.896820][T32569] r9:84870000 r8:00000000 r7:84870000 r6:ffffffff r5:20000010 r4:00016910 [ 3837.227854][T32569] memory: usage 304596kB, limit 307200kB, failcnt 3354 [ 3837.228297][T32569] memory+swap: usage 306192kB, limit 8589934588kB, failcnt 0 [ 3837.228546][T32569] kmem: usage 304240kB, limit 8589934588kB, failcnt 0 [ 3837.228711][T32569] Memory cgroup stats for /syz0: [ 3837.230234][T32569] cache 28672 [ 3837.230497][T32569] rss 16384 [ 3837.230601][T32569] shmem 0 [ 3837.230692][T32569] mapped_file 0 [ 3837.231377][T32569] dirty 12288 [ 3837.232070][T32569] writeback 0 [ 3837.232668][T32569] workingset_refault_anon 102 [ 3837.232847][T32569] workingset_refault_file 0 [ 3837.233013][T32569] swap 1646592 [ 3837.233161][T32569] swapcached 16384 [ 3837.233312][T32569] pgpgin 133933 [ 3837.233452][T32569] pgpgout 133922 [ 3837.233587][T32569] pgfault 327442 [ 3837.233727][T32569] pgmajfault 88 [ 3837.233846][T32569] inactive_anon 8192 [ 3837.233960][T32569] active_anon 8192 [ 3837.234071][T32569] inactive_file 12288 [ 3837.234183][T32569] active_file 16384 [ 3837.234301][T32569] unevictable 0 [ 3837.234419][T32569] hierarchical_memory_limit 314572800 [ 3837.234560][T32569] hierarchical_memsw_limit 8796093018112 [ 3837.234709][T32569] total_cache 28672 [ 3837.234836][T32569] total_rss 16384 [ 3837.234949][T32569] total_shmem 0 [ 3837.235053][T32569] total_mapped_file 0 [ 3837.235169][T32569] total_dirty 12288 [ 3837.235280][T32569] total_writeback 0 [ 3837.235393][T32569] total_workingset_refault_anon 102 [ 3837.409620][T32569] total_workingset_refault_file 0 [ 3837.410749][T32569] total_swap 1646592 [ 3837.410899][T32569] total_swapcached 16384 [ 3837.411049][T32569] total_pgpgin 133933 [ 3837.411181][T32569] total_pgpgout 133922 [ 3837.411332][T32569] total_pgfault 327442 [ 3837.411455][T32569] total_pgmajfault 88 [ 3837.411614][T32569] total_inactive_anon 8192 [ 3837.411740][T32569] total_active_anon 8192 [ 3837.411857][T32569] total_inactive_file 12288 [ 3837.411980][T32569] total_active_file 16384 [ 3837.412138][T32569] total_unevictable 0 [ 3837.412253][T32569] anon_cost 0 [ 3837.412364][T32569] file_cost 0 [ 3837.412654][T32569] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=22872,uid=0 [ 3837.414020][T32569] Memory cgroup out of memory: Killed process 22872 (syz-executor.0) total-vm:34076kB, anon-rss:148kB, file-rss:684kB, shmem-rss:0kB, UID:0 pgtables:32kB oom_score_adj:1000 [ 3837.900233][ T799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:03:57 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x3f, 0x1}, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3839.757967][ T820] nci: nci_start_poll: failed to set local general bytes [ 3839.800456][T31095] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 3841.158063][ T820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:04:01 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x1, 0x3, 0x0, 0x1, "3c9e2a2d"}, 0x7) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) read$nci(r0, &(0x7f0000000b80)=""/4096, 0x1000) r4 = getpid() r5 = openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r0, &(0x7f0000000740)={r5, r0, 0x400}) write$nci(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="6103000001010101aa00ee53dc9be3a47df6d549a4bbf9cd32759215b2da66c62d6ced537897fd52348f699310c572a5c820099a4a4e9f3f927852517cc460a95fbfb071b98b686e6d8f5b0bfcc4e48e3b33d7c4a4f6aac175228199eab2d4eb5d94888f93e8d0d4d5e977aaee36b1136e67590d0bf55c2ac5b0d3ca8f27c7ad38c45f96afe4b5b51a4132267015e2a2cd8b14721955393654f551d3db8467812a3fe8b046f68a753594fda044c18c7eb42ca3234123c4662302a1d15870be74a1998a546dce9278fdee6b6b311c20f9fddf964e61a59bf704be393394dc9742d4bfed2511610b8096111f8fa39ef8319e93bfc671a7354b1f84912911ddd73cafb2809ddf78fe798179e1e9a605e526"], 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3843.549604][T31095] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 3846.299045][ T843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:04:06 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000000)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x1, 0x3, 0x0, 0x1, "3c9e2a2d"}, 0x7) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) read$nci(r0, &(0x7f0000000b80)=""/4096, 0x1000) r4 = getpid() (async) r5 = openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r0, &(0x7f0000000740)={r5, r0, 0x400}) (async) write$nci(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3847.835402][T31095] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 3849.636499][ T854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:04:09 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000000)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x1, 0x3, 0x0, 0x1, "3c9e2a2d"}, 0x7) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 32) read$nci(r0, &(0x7f0000000b80)=""/4096, 0x1000) (async, rerun: 32) r4 = getpid() (async, rerun: 32) r5 = openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) (rerun: 32) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r0, &(0x7f0000000740)={r5, r0, 0x400}) write$nci(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (rerun: 64) [ 3851.172235][T31095] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 01:04:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8912, &(0x7f0000000340)={'batadv_slave_1\x00'}) 01:04:13 executing program 0: socket(0x11, 0x3, 0x6) 01:04:14 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 01:04:15 executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 01:04:16 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x200440, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xe39, '\x00', r1, r2, 0x2, 0x5, 0x3}, 0x48) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xa, &(0x7f0000000380)={0xffffffffffffffff}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r4 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) r6 = landlock_create_ruleset(&(0x7f00000009c0)={0x400, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000a00)={0x20, r4}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/block/loop0', 0x1030c1, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xc0f7, 0xffff, 0xa59, 0x28, r3, 0x1ff, '\x00', r5, r7, 0x0, 0x0, 0x2, 0xe}, 0x48) syz_clone(0x40028080, &(0x7f0000000780)="61644b9430b9cb35421e41306c543f8eeea322a473bc47b39de9327e60bbbf7109b10f52e738a033bdaa22b7dc5dcff5d53cb1291591d6170be961d5f10c1677039be77b5743533f8028dd3f7bc203fdc8d243ec3de2ed9efa568a4934a6f9904e0d254737d6b9a272c9aead7e1cef334129450f56222ad455de81bd00843c869c879ae148ba9bc6a17b2542b045f731df8f430f3db8d8b66ed53f11fa79ddb12f4e7deadee4a87a9ec7bfd32829010364c01bc70d63", 0xb6, &(0x7f0000000840), 0xfffffffffffffffe, &(0x7f0000000880)="bf465c3d52b5b7345ab7335e253512fdf5") [ 3858.148855][ T871] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:04:18 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="73001a00376b2cf9ad2a6618e764e27f19882d7df1e84cfe207e7aba1c8f556360e7a4cfb499a44d64d0aa304f44bc7367777dad06ffbb7438a856a12ca5f294f3b961e2f0bea970c96a5d7b11a4a3a00e445c436e11d6dc320328e2dd5d79bb5e9fb7a39b179c1111ffa8a9a65217cca5816a1ea65b0546d5448a2e69cda33f9a731be6226488c09d7c81693f17e65cfeb6572f3b687df7f55f60b8bc21a762f7a9a37a83e52d5464ac60ea48bc073cb07383cb628ec624d0efa0e94c7d650084760c1976d9f6ae34ca3c91e7b7a8d642faed01077fe896d636055183452f0000000000"], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="3802000000"], 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) write$nci(r0, &(0x7f0000000a00)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x0, 0x3, 0x0, 0xff, "6c8add4e87e421eae19d3b6589e58875eb494c948c44cecc19c1efad9684e4b33222cb46497aad9b0c594548d47a615ebab84862f0121984e273c0c7fb5923233eeebc5abdf08ab8c6d8080e0838b77d28c733c769d24f257419650b28bf5a73fec4519a2c70e385d9a37164a5bed1dfddc5a1013540d49f0eb7eb10ddda8d7ae1f6ff626775b308d2d7adce61ee46e0d17dbd7befa1ae0d5b03dd9f671ae00909b317ac992d602fe497956d700da049a82a44cc60e20b5adcfa81a10280b51c484ffa98a0b71fe8d010960e689b0c2f5e34b57f3ca1aa3485927879bcdd84bf95e1338bc2ebd02ea9003e5900b37999e46df68e0cbf9233085ce066a925a74e9b75d730705b32416740e4ed5d1acc8f0a18fb32cb409928b8262fcf229c21987968de1b4cb7b2bff38408f4628ec80a8b9fdad574e462ef21a26d66a0e2494db19aa21d3492ddb05e1adfecc1a884893c25529ed9d679b735b7c0550c29b732374457892ac9baf4f428b20a598d8f05a34d080e0e94e86033dfa22cd9de6628800a6b939628fa3581ff759581817b9cbe3d3a6e743d51e50bfbba8a2bdbaaa580882059938cb2bf0d03ac83f27ee6868a74d1be089f7335746fc5ff3a134c3bbdc3116630e8a2a93ffe8e50aee6518d8c0818761a0af737cf2d0e4c6597d774ac562a15e0f55ecbdce88a211c376169ecea45e0ebac338d36e5b1b1dccc150760083de62ff50b109978e05772c29c81444aaaa26c0142e9ea3e83dedb5e224b78a0ee32371dc4de574d19fa273f450c8d339b8d2b370990c5fd911d842bf926869d44e6d6f45226b610bbacc7e1a05e308ff1c18603d5ee08c6d0ff455d79f0141973da83fac15a54711d493a959fa27b84d9e3cdf995d3b5e4d6488e3e41c2276f945189bb2ff5b9782876a73a3c20e0c96c5ba5afacdca942c771eea4a4b98a7b98f75efef517bd1409c3c2e258d36db350892ce2b127d9720fd5434cf1e54adc0efd2feb254dd9e5d46bbe0bf32a005ec547a70587b1602a0e6b2b3c6133848b6b7febcd12c90e7cfc703bac77a9f16ad119b68e03b9ceba88f13cfc406a1c0496df0d4bdc1824cb5322bf7c15be32a5d59dc83b4fe70a1b19e3d828dfe4d13ee24b598cea13f9804ceb7ae78e80802d1f2bd3e1514a71d0c6d6d7abffdbedc1be5e78fc65b291035691d0fec5dd937c2c50a668275b82977664d16f2f3cd407bf611cb8453d2eecb42e1911ed83090f4c3f1b1c237981844040e65b2e190b599f259b80b88957bed838d75749cc6201440935ebab519727dfc959f088edbb82e7a1ee835f0bf7882e8819732ee1dfdd1a71cdd7b62acf7d6916ed79149017c43d7a53e7d6a6508b7c6963d252953253ea1d91174c592d7c11ad49253373346bf25b6fa13a09b0d6bf90eca6d91f70bef9dfbd3db21ec5c907274be652f73112c465a5694e10bd7b3e7a702283cbdeedc29f7e81815088eacb8d350cb7d282440b06866ae48fe5986bc8ca29b66cece9b5fc5550c3b94108cdb282515c3ad7aa43002032ad2e32fbf2e20e3915ebc532a1aa0bac899b9843b5325de60526e6d1625b46b179c1d363eee8276ef074867ea92c635fa22f7bb1cb908d3c5d6623f741835cdffb7bc69b7f67802c68bc4da7e7cb5da4107e86e8db5d63d07ecf6aa6e81afd8811616153d3a7aaf94eb87dac436ea4c37268d2c88774e6926443fb52b89d6c8e310b9cecc7a4ac8c1c9014f1a80a74e8bb8b8a26d30ba8a4957904c7a473d8c10c05d155f2b8e88546143da1c7980a1c7ee44c7847ae359160639b08b558ddb2557033cf8cca0aa3b9bfab829bf14757912783cd5181c76108cea7edebf18ba4cf5a355c5589992936b831478bb20b0e1b44b9f40497052b5c3af75769a1ca681ad2363d78095ff9fa4ea4a9c4fa8f24eb7ce8bbed2edf4ea331f05c12aff5e7c5ae67eb6574ae73a538cbbc6f2a96969883dced46c7110752c2b369ca03b84d739bb0c89c45781bbcdd9343231565ae296c4b8c7257127f07557d0c0560c7c257a281dd7aac5b29ae114b96f68e8325e394f8d7b7a516da3623bf3d0e6026ea00a15586f6a186d4166d524792d3ba8f07b390dc2cae00daa528eab316438a2c72134a625eaa63f171f77a49d0da5f8312a42db11f4ba9707301972442b51c6928756c7b00612263723f41b57a832f94dd24ee9de57a431f33d184e8fdeed81dfde1b30036b45419f73a21920a7c09d7fdfcd6470a9eaecd9d6b2423a2fb534618cc1a7984f03dde4acdf8f13626df7d87df9b3d65c3efb1f12c60690e6a64de35a9f727355d516219821fb2fb913177374d9833789b806646277cd7c2f5957a257e1c48b510f0c7733fab68661f547b07b4a37e7b1f96d4559488d744434713dc5c683d6e8090276acc881eb6110c515eefe5370fd893605094e3aef13c40fce6b7f7e7c0de13074ebda2696a71c0c9197c53201683dde33a3a6494caefb3b50ace4e0f44acda6896f3d0d17e73e89baaf9fc25bfc27be2c0db9e6364ce6271e574f70059c945f828f0aedb92e7798ed2fb3df4efe7f486a76d92f953e612619f7911b541920660b047c22cf371d794a98708860cde59e992fb02c606e23e16ddcf52c900f224f5e1da0cebbbad17d12a64446228b9829d42e6d6ae4914d934edbbaf28077067a8709caffb5a55c1f506b97648a8fdbe5930c16f0ba4863500d26daaeebd12c4b71e776e0789ce04b1bfdf7221dfba3b4d016b96150a30886f4d3ef21b88da199122fa3d4dd1d368338fc517556c4ece33595a289bceacf8d2ffc6da4aabbe4b38991b5152d988d2d980c3a43daed1e666c901266c6d22bf3364ca44ef658f9e9ac1ce7d87aa309ddd22565ac066562be1bd13ffd63145363f3d2cd676d21beb29f40c7194f1e8f44605de4cafa66fa37c1be72ebc3bb9d1792f2781349575bb0af3f9b524cd0d751a142f563d63416cac899afad9707e9d49a7f3ea663170cfcae10d44d2a0656651bb0a817215a96297f678ff4fa1d717404796df45c34b1df5dd839b513278a8b659db5895a24b909a7af585acea3373bfd7b9b9acfcfc17b69452537a88ae5e33fda9b4b48d6cdf6122429a1102dd141c7dda59f7121d99861bfa5dcd3ce9ad104fe97c58df778b0abe82634bb735b19ddc86ec4db2bdb0e8b6790d242cff232f1f98f953e62c24915f15f313486e02f7579d0b5a4e9f9959a5756a8d8cc19ec7e80849bf0ffb63f42e4aa5c2cbf2437a398a93c940f67e96ae4632b5e73e97942f2363e64f657c3bbdd7ba63d131e4dbfdfcc50d8eba77f23abd51982efc83ebf5824798b77359f644588e801380c280e8623f9aea3eaa039f596c794c58194843a319aa29ac5290a57f70a8a103d64bc5b20bda3b5ba18a88a55392361a65e93b848acf2db7d1c4636f7dee3744da48306a919a27a9ac40e23c21781dc1c71d46df40c68b55e6aab19618595dc6c53b025072b4a6b161c03c2f2e55bf1aaf3f81c23c81b094bbdb6cf2a8a6e2151d9bcbfe1183c84620fca76d7ebea1792ab75752cf954b7117e1a92685b2ab6100f69cc987b665aae44308ce1c7ce24c1fc2d7cabeea158aed9ac43b8b74bd1430ec05da24d19a288d86ef6c9777953425d24051df00170f2ad8f1d7e10062df10965a0a6d0fa49b9d15570e2993eba30a659ea23a74df742041f4602abebbee2fe7b53a72ac27560d1bc5c2e039b0b15de4d64323a5f1162067179f2f9ebf83985775191aebc515d6469c17136290954adc291262b14adfd7bd72b7618f4c07949510bdb82045e8c2c4be18934bfbad5eee7886a8f5dc935635dbdd1591f6bb0b6e10314671375b20c7b7f569b9bfc317804683c2885e084958393c7ed02dd65bf6d5600800cdcd89985e0843da1f8acb77762393b4cf58e19af12c1969f11438017011ffcc916227ab34fda00d610995fe9f517d1422440c0686a3e01f5af6699d9c30c1d107ae1009942209c75e6b247fd58232034825324c0952b84fac46d202592c9f92bdc8f7e152fffc0d00860f302f545e533cc92cfd2a4a227101ee9b6203a9fc881478cdc5b65eeeb68059b518f0fef981a88b4b3c656b84ac2bf42b976f6a0c639c70acceae495417dc5618c87ad9ff6a504150941e567ae494757148d8ef1ff06bc1d2117ac44f908bcff28918575670949edf061d4c98a7cbbe2d4751b72192338697f68e475662ea10034e122adb6f1e89ebc646289e0abc960edd33515efee30093d2fd8dceb4eb93bf967b603035b89e92ec07dcf67b1ff9d3fce107bdba5e7b99c3d713a4372bb8317fe1b0d78a21770cd8424c57fed32645984e120624c684054836b4f99f390a35ea60d8b27265c2897dfb3dc8ebdc7c06f07de705fb4a6922d9ba881159c9d7fd295528c1ea03d4aaa107d7b1a76f007cacf9b60bc3fe200c35cb47c704be21b0722cc29311120113920142d3abcbb046bbf314d093aa35123aa9fce219e051c66be84e6a2373c6499ea6904ab6f6eded73d2e8e8a405ee57a8a247ea66889fdb0fea1263ff648c02c672a4820a7ebbb7a8c38b047ec7a2baa4c8fd86495829a3038a745c12a853eeae95bee515e5836779682c16a184f4d087dd5a8a2fa0077238ef9503a8debabd06895e1c1bbc7f29d0543481751e7a6350059b27f2287ee84b8389fc994eb4b074a1eda59af2362742b127220ee5423fc4ceab0616c1eba78b1c119b642d0fdc3f84b484267594010b4b68d97f40ef5ae8853f18e876a8f37d13119cd5542b041406d3f1026e01d96d3a54f4534d2b80de9fa8e512b105fe1cfe77cb2d080a2792d9ab6622fb27bf4ca3ee939bc0230aa8b40a093217f0301c3e251818b9dc821b8d614c8e5fb253209888e127eb6aa79c9da29d4a3c061d1cc7313c256d31eb82f3c5b9ec542401dfb8e79b78783151b925605b026434d4a7a7bd0cac0a12df1f0f4ca9b13d83c0126e96d8f98355229cf8ead5c26cfe4be252679667e3d588eede583f1fa4114f4a270f856f69b0cc38cad9efa8eaae084128aba51514fd80809d9d43f3b056c53903a41c301fe5ab3fbcf7508fabf685396d8c964198d10885ec6db6c3add0c8dadc7a107e64c0e1d9cc53696fba352b7d6c7b9e911dd2db62c57cba37e249a4d484d1cbfa50edeedb27aa0b1cbba081ba1e11df16cb5a04c22bf6a6b839f79d4d2e049b91b10e535e47d24ba02c31121f255560f95d49a006e57df6e5ae1de0ae0343216282dcb63ca39ebb15665ddba9485a73e4fc960caf734e4a0d4bb9b317d3d2f53a467a67b7c9bbca780d04962ea14cf8ad798bc452fcf90c26b3aaf0c7bb7751b7e21c4c881cf1668a0304efa961d8ba4bc0ccf3c92c42a0ccb059711eca3b0b9b553a7e2b36c8bec7be8020395d8b0feafb6c763edd4ce46d64a157cccc2c296db7cea2497e23e69b1d545a50ad60b7c4830d9340fea20d3612126fee66832e1b366858e6e0779c57ca1f09b870e022ee3922c66b37e86e25efe30680b1eef1bc0b8123e1feec6fe3b5ca95285e816b19af01628fc9cc45fd53e2e332e24020c5580a1ed36d310d68a3e082b95fc968c8a08e4dd712ccf9c1352e3d5d88fed4a1e8b8322645fd666c8da19bf3bfa019768d86f0bd1094a12a173fcb15fe3dadc0107d74ab575961fc1249d5b18e9e00fd446e0d406330ddc69fcc51391d35e7b9d08433795d052b2316e3c62eedd4900a946437d9ea6880c63c572487324200a6b66868906cca8dddd3ce75384f076079cd41bc71f1ef"}, 0x1003) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:04:18 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 01:04:19 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000027c0)) [ 3860.029333][T31095] nci: nci_ntf_packet: unknown ntf opcode 0x300 01:04:20 executing program 0: landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) io_setup(0xab6e, &(0x7f0000000080)=0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) io_submit(r0, 0x0, &(0x7f00000000c0)) [ 3861.241831][T31095] nci: nci_rx_work: unknown MT 0x1 [ 3861.761015][T31095] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 3863.877112][ T1031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3863.877537][ T1031] nci: nci_start_poll: failed to set local general bytes [ 3863.878139][T31095] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 3863.879585][ T1037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:04:24 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="73001a00376b2cf9ad2a6618e764e27f19882d7df1e84cfe207e7aba1c8f556360e7a4cfb499a44d64d0aa304f44bc7367777dad06ffbb7438a856a12ca5f294f3b961e2f0bea970c96a5d7b11a4a3a00e445c436e11d6dc320328e2dd5d79bb5e9fb7a39b179c1111ffa8a9a65217cca5816a1ea65b0546d5448a2e69cda33f9a731be6226488c09d7c81693f17e65cfeb6572f3b687df7f55f60b8bc21a762f7a9a37a83e52d5464ac60ea48bc073cb07383cb628ec624d0efa0e94c7d650084760c1976d9f6ae34ca3c91e7b7a8d642faed01077fe896d636055183452f0000000000"], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="3802000000"], 0x5) (async) write$nci(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="3802000000"], 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) write$nci(r0, &(0x7f0000000a00)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x0, 0x3, 0x0, 0xff, "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"}, 0x1003) (async) write$nci(r0, &(0x7f0000000a00)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x0, 0x3, 0x0, 0xff, "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"}, 0x1003) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:04:24 executing program 0: landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) io_setup(0xab6e, &(0x7f0000000080)=0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) io_submit(r0, 0x0, &(0x7f00000000c0)) [ 3866.180521][T31095] nci: nci_ntf_packet: unknown ntf opcode 0x300 01:04:27 executing program 0: landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) io_setup(0xab6e, &(0x7f0000000080)=0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) io_submit(r0, 0x0, &(0x7f00000000c0)) [ 3867.827037][T31095] nci: nci_rx_work: unknown MT 0x1 [ 3867.850128][T31095] nci: nci_rx_work: unknown MT 0x1 [ 3868.398051][T31095] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 3871.039982][ T1054] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3871.040450][ T1054] nci: nci_start_poll: failed to set local general bytes [ 3871.043068][T31095] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 3871.043412][T31095] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 01:04:31 executing program 0: landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) io_setup(0xab6e, &(0x7f0000000080)=0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) io_submit(r0, 0x0, &(0x7f00000000c0)) 01:04:32 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) 01:04:33 executing program 0: getrusage(0x0, &(0x7f0000000680)) 01:04:34 executing program 0: bpf$PROG_LOAD_XDP(0x12, &(0x7f00000018c0)={0x6, 0x0, 0x0, 0x0}, 0x90) 01:04:34 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 01:04:35 executing program 0: syz_open_dev$mouse(&(0x7f0000001980), 0x0, 0x190840) [ 3876.216064][ T1057] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:04:36 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="73001a00376b2cf9ad2a6618e764e27f19882d7df1e84cfe207e7aba1c8f556360e7a4cfb499a44d64d0aa304f44bc7367777dad06ffbb7438a856a12ca5f294f3b961e2f0bea970c96a5d7b11a4a3a00e445c436e11d6dc320328e2dd5d79bb5e9fb7a39b179c1111ffa8a9a65217cca5816a1ea65b0546d5448a2e69cda33f9a731be6226488c09d7c81693f17e65cfeb6572f3b687df7f55f60b8bc21a762f7a9a37a83e52d5464ac60ea48bc073cb07383cb628ec624d0efa0e94c7d650084760c1976d9f6ae34ca3c91e7b7a8d642faed01077fe896d636055183452f0000000000"], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="3802000000"], 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) write$nci(r0, &(0x7f0000000a00)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x0, 0x3, 0x0, 0xff, "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"}, 0x1003) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:04:36 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x200440, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xe39, '\x00', r1, r2, 0x2, 0x5, 0x3}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r3 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) r5 = landlock_create_ruleset(&(0x7f00000009c0)={0x400, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000a00)={0x20, r3}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/block/loop0', 0x1030c1, 0x100) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_clone(0x40028080, &(0x7f0000000780)="61644b9430b9cb35421e41306c543f8eeea322a473bc47b39de9327e60bbbf7109b10f52e738a033bdaa22b7dc5dcff5d53cb1291591d6170be961d5f10c1677039be77b5743533f8028dd3f7bc203fdc8d243ec3de2ed9efa568a4934a6f9904e0d254737d6b9a272c9aead7e1cef334129450f56222ad455de81bd00843c869c879ae148ba9bc6a17b2542b045f731df8f430f3db8d8b66ed53f11fa79ddb12f4e7deadee4a87a9ec7bfd32829010364c01bc70d63", 0xb6, &(0x7f0000000840), 0xfffffffffffffffe, &(0x7f0000000880)="bf465c3d52b5b7345ab7335e253512fdf5") [ 3877.683315][T31095] nci: nci_ntf_packet: unknown ntf opcode 0x300 [ 3878.771608][T31095] nci: nci_rx_work: unknown MT 0x1 [ 3878.866213][T31095] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:04:38 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) io_setup(0x1044, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f00000007c0)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000400)}]) 01:04:39 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}}]}}]}}, 0x0) [ 3879.946863][ T1198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3879.949796][ T1198] nci: nci_start_poll: failed to set local general bytes [ 3879.950514][T31095] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 3879.961355][ T1199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:04:40 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0xc4) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:04:42 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 01:04:43 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 01:04:44 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x7000) 01:04:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000175c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000017580)={&(0x7f00000004c0)=@deltfilter={0x1ec4, 0x2d, 0x0, 0x0, 0x0, {}, [@f_rsvp6={{0xa}, {0x498, 0x2, [@TCA_RSVP_PINFO={0x20}, @TCA_RSVP_PINFO={0x20}, @TCA_RSVP_POLICE={0x454, 0x5, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404}]}]}}, @f_rsvp={{0x9}, {0x19f0, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @private}, @TCA_RSVP_POLICE={0x490, 0x5, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c}]}, @TCA_RSVP_ACT={0x1554, 0x6, [@m_ctinfo={0xc4, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x8d, 0x6, "4d517f866208fad263f6bc18415659d98d1f72f7ebbbf9da98329655000b3b598eac834e438e19ceb1d9dd89070bacb72617795986819c07451c73993e6d417178e28e9fb88234b453fd8f4274c16bb6f32581ab7d7eee55d0c7c82d2765553796df1898d4928fec6423b9f8850ba29ea1c28c987248951f4c885d1d5999f2b6eedb98cd014b834cd5"}, {0xc}, {0xc}}}, @m_simple={0x14c, 0x0, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '1\x00'}, @TCA_DEF_DATA={0x7, 0x3, ']&\x00'}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0x10, 0x3, '^\xbb)&{}&\xbe#$^\x00'}, @TCA_DEF_PARMS={0x18}]}, {0xb5, 0x6, "0b5c4dfeca8df209c9e2e53d1243b23570670146900b78e1e5575d517dd074c4d47271f6de5c82fe8c0f71bc48ed0ad1feaa206c756d4a3169dbfb957319b7353b290738a4f5c6c4285659976e6e6c1a806b42f51b81defb7c4f0f6b4d4c1cf5be22751fe4a0db54946bf6a995a6abaf91e8453b860e98c3e6abf64a139c791a28e4964acac0c42d6c166615294b1dd6b2934b618cbb187c5a4e8c34861c1d3a07276f885500ed4729d57dd1174dcd3b13"}, {0xc}, {0xc}}}, @m_skbmod={0x78, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}]}, {0x41, 0x6, "a47d0cc644ff6f0b327cefda22ab2c38fb35493df3a2fed5c94c9876653481a05c81e649448b4d9bb73008fdd0b6d7ff6c7c0af1e60a344b9df3776e9d"}, {0xc}, {0xc}}}, @m_gact={0xe94, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0xe65, 0x6, "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"}, {0xc}, {0xc}}}, @m_police={0x434, 0x0, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}]]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x1ec4}}, 0x0) 01:04:46 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x3, [{0x2, &(0x7f0000000140)=@string={0x2}}, {0x5a, &(0x7f0000000240)=@string={0x5a, 0x3, "5bf6628944a6db5d5cdca923518699a92a2960c67ab0c4acbeed18a692898d0ffcba53b3b7cc221f5aadb025dda40039f649a12549cc9f68fa9a35e9df256a640ed7e64839d0258b3903dae1f0a0b440b98bdee179dbd67d"}}, {0x0, 0x0}]}) [ 3888.466281][ T1229] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:04:48 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0xc4) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:04:48 executing program 0: bpf$MAP_CREATE_RINGBUF(0x8, &(0x7f0000000a00), 0x48) 01:04:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x4, 0xfffffffb, 0x0, 0x1}, 0x48) 01:04:50 executing program 0: syz_clone(0x0, 0x0, 0x0, &(0x7f0000000840), 0xfffffffffffffffe, 0x0) [ 3890.717418][T31095] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:04:51 executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x48) 01:04:52 executing program 0: socketpair(0x10, 0x0, 0x0, &(0x7f0000000240)) [ 3892.243982][ T1255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:04:52 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) (rerun: 32) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0xc4) (async, rerun: 64) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:04:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 01:04:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000a40)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x4103fe) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) sendfile(r3, r4, 0x0, 0xffffffff054) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002980)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001740)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "285c4d007ecdfb"}) 01:04:56 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x80}, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x20, 0x5b, 0x57364a006f6ba0ba, 0x3, 0x5, 0x2}}, 0xc) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3903.896955][ T1398] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:05:04 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x80}, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x20, 0x5b, 0x57364a006f6ba0ba, 0x3, 0x5, 0x2}}, 0xc) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3906.410766][T31095] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:05:07 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000540)=@raw=[@btf_id], &(0x7f0000000100)='syzkaller\x00'}, 0x90) 01:05:07 executing program 0: landlock_create_ruleset(&(0x7f0000000000)={0x3080}, 0x10, 0x0) 01:05:08 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) [ 3908.598021][ T1416] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3908.646993][ T1418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:05:08 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x80}, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x20, 0x5b, 0x57364a006f6ba0ba, 0x3, 0x5, 0x2}}, 0xc) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:05:09 executing program 0: getuid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x6, 0x38, 0x7f, 0x7}, {0x1f, 0x46, 0x3f, 0xab60}, {0x5, 0x5, 0x4, 0x3}, {0x2, 0x3, 0x1, 0x2}, {0x4, 0x5, 0xfe, 0xffff0001}]}) 01:05:10 executing program 0: syz_open_dev$vcsn(&(0x7f0000002480), 0x1, 0x0) 01:05:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x1}]}, {0x0, [0x61]}}, &(0x7f00000004c0)=""/136, 0x27, 0x88, 0x1}, 0x20) 01:05:11 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 01:05:12 executing program 0: mlockall(0x3) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mlockall(0x1) rt_sigqueueinfo(0x0, 0x0, 0x0) [ 3916.216202][ T1426] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:05:16 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x1, 0x3, 0x0, 0x80, "51c10f6ba8b988fddcda5bb33652bf59db431fc714250e83cdf8261d7ebdff847679258790191ee4d84573ec218fe2fd874ae033c694f27523bc2c0db49bcf9e26765724"}, 0x47) write$nci(r0, &(0x7f0000000900)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @f={0x1f, 0x6, 0x2, 0x2, {0x6, 0xfe, "e755c18953c8bcd7e04bf8154437dd2994f6fa2bc5f15b54c4bbd35dd580e465ddfe7493cbb1f8843f3599929b40c0954f6e0364c781d3ed94b722ef487082dd7bbeda42242b3f555e81ef4fee9f0399a12b97fde15c97cae39a7396a51ae411e3eb134c5ad4a130a44a6bc60c2ce4ad19043eadcbdb2a48a3ac8239e7add1af66b57b7669f6ce1ef2d0405a6fdf210c700738340f7574631f16fe3597d1175dc0787adcea516a8b84c399d708b17019d09526ee2efeaa8f65377ab16d6f3541b3eb226c3774e70b42861500765db70a82078f69bd0d350dd27702465afd27c0cf75e6bac1edd905e6242087a6097325c2ee2f4c96ba09a14887816f9fdb"}, 0x1}}, 0x108) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3918.877256][T31095] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 3918.898186][T31095] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 3921.110912][ T1459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:05:21 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000000)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x1, 0x3, 0x0, 0x80, "51c10f6ba8b988fddcda5bb33652bf59db431fc714250e83cdf8261d7ebdff847679258790191ee4d84573ec218fe2fd874ae033c694f27523bc2c0db49bcf9e26765724"}, 0x47) write$nci(r0, &(0x7f0000000900)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @f={0x1f, 0x6, 0x2, 0x2, {0x6, 0xfe, "e755c18953c8bcd7e04bf8154437dd2994f6fa2bc5f15b54c4bbd35dd580e465ddfe7493cbb1f8843f3599929b40c0954f6e0364c781d3ed94b722ef487082dd7bbeda42242b3f555e81ef4fee9f0399a12b97fde15c97cae39a7396a51ae411e3eb134c5ad4a130a44a6bc60c2ce4ad19043eadcbdb2a48a3ac8239e7add1af66b57b7669f6ce1ef2d0405a6fdf210c700738340f7574631f16fe3597d1175dc0787adcea516a8b84c399d708b17019d09526ee2efeaa8f65377ab16d6f3541b3eb226c3774e70b42861500765db70a82078f69bd0d350dd27702465afd27c0cf75e6bac1edd905e6242087a6097325c2ee2f4c96ba09a14887816f9fdb"}, 0x1}}, 0x108) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 3923.108572][T31095] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 3923.110236][T31095] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:05:23 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x81) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x5521, 0x0) [ 3924.209814][ T1472] nci: nci_start_poll: failed to set local general bytes [ 3924.210761][ T1468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:05:24 executing program 0: r0 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000080), &(0x7f0000000800)={'syz', 0x0}, 0x0, 0x0, r0) 01:05:24 executing program 1: openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x1, 0x3, 0x0, 0x80, "51c10f6ba8b988fddcda5bb33652bf59db431fc714250e83cdf8261d7ebdff847679258790191ee4d84573ec218fe2fd874ae033c694f27523bc2c0db49bcf9e26765724"}, 0x47) write$nci(r0, &(0x7f0000000900)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @f={0x1f, 0x6, 0x2, 0x2, {0x6, 0xfe, "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"}, 0x1}}, 0x108) (async) write$nci(r0, &(0x7f0000000900)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @f={0x1f, 0x6, 0x2, 0x2, {0x6, 0xfe, "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"}, 0x1}}, 0x108) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:05:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)=ANY=[]}) 01:05:26 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@fwd={0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x3}]}]}, {0x0, [0x61]}}, &(0x7f00000004c0)=""/136, 0x43, 0x88, 0x1}, 0x20) 01:05:26 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) 01:05:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast1}}}}) 01:05:28 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x81) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x551f, 0x0) 01:05:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x80108906, 0x0) [ 3929.798012][T31095] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 3929.799617][ T1496] nci: nci_activate_target: unable to find the selected target 01:05:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 01:05:31 executing program 0: request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='+]k%{\'##&\\{{\x00', 0xfffffffffffffffb) [ 3931.457250][ T1496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:05:31 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB="d41ce525b448fafb029e80aa8aba336622bfd4fc581d05b03f0b91e7fea98ec177957c8f4caecaf154afaa7b510a805e77af118b14ed57538f1bcf12d846171bedc9efbf80d3b1a57873d438808631d5352e6407c5681836b70881c0456658ad"], 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x10000234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500110000"], 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) r4 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r4, &(0x7f0000000900)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x49, {0x1, 0x9, "4c8b6452d5e88d5f51501299116c788433fb0f18cd6fc1631eaff10be6062fb9785f319e8549994c7e927a3540fac992e9110906ce9c7b8f0c98e57629560621898d673e70dc3842468fce3065c92e499f2b5cf0d81070cbb4685a91b00c64a1fc54076bc6674a1bed93b43be2294ab9247f17fe4bf361062585776fe06d2b0d30c301dadb12cc81bd5c5a8beda0e9ae87627856a3fcfbf63b8939c2a6b032c7deab8d88543641eda62894afa071a4dbd178e96423295683c7054d8445e1456215f3c398dccb41467734fc8957644a4075b4809fc9298133104cb538b9c205c4"}}, 0xe5) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:05:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x14}, 0x14}}, 0x0) 01:05:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5421, 0x0) 01:05:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x16, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 01:05:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380), 0x4) [ 3934.866738][T31095] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:05:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8981, 0x0) 01:05:35 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18}, 0xfffffffffffffdef) 01:05:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) [ 3937.261119][ T1543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:05:37 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB="d41ce525b448fafb029e80aa8aba336622bfd4fc581d05b03f0b91e7fea98ec177957c8f4caecaf154afaa7b510a805e77af118b14ed57538f1bcf12d846171bedc9efbf80d3b1a57873d438808631d5352e6407c5681836b70881c0456658ad"], 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x10000234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500110000"], 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) r4 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r4, &(0x7f0000000900)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x49, {0x1, 0x9, "4c8b6452d5e88d5f51501299116c788433fb0f18cd6fc1631eaff10be6062fb9785f319e8549994c7e927a3540fac992e9110906ce9c7b8f0c98e57629560621898d673e70dc3842468fce3065c92e499f2b5cf0d81070cbb4685a91b00c64a1fc54076bc6674a1bed93b43be2294ab9247f17fe4bf361062585776fe06d2b0d30c301dadb12cc81bd5c5a8beda0e9ae87627856a3fcfbf63b8939c2a6b032c7deab8d88543641eda62894afa071a4dbd178e96423295683c7054d8445e1456215f3c398dccb41467734fc8957644a4075b4809fc9298133104cb538b9c205c4"}}, 0xe5) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:05:37 executing program 0: io_setup(0x1000, &(0x7f0000000000)) 01:05:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5451, 0x0) 01:05:39 executing program 0: bpf$BPF_PROG_ATTACH(0xb, &(0x7f0000002300)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) 01:05:40 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2002) io_setup(0x5, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f0000002080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 01:05:41 executing program 0: keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x0, 0x0) 01:05:42 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB="d41ce525b448fafb029e80aa8aba336622bfd4fc581d05b03f0b91e7fea98ec177957c8f4caecaf154afaa7b510a805e77af118b14ed57538f1bcf12d846171bedc9efbf80d3b1a57873d438808631d5352e6407c5681836b70881c0456658ad"], 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x10000234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500110000"], 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) r4 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r4, &(0x7f0000000900)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x49, {0x1, 0x9, "4c8b6452d5e88d5f51501299116c788433fb0f18cd6fc1631eaff10be6062fb9785f319e8549994c7e927a3540fac992e9110906ce9c7b8f0c98e57629560621898d673e70dc3842468fce3065c92e499f2b5cf0d81070cbb4685a91b00c64a1fc54076bc6674a1bed93b43be2294ab9247f17fe4bf361062585776fe06d2b0d30c301dadb12cc81bd5c5a8beda0e9ae87627856a3fcfbf63b8939c2a6b032c7deab8d88543641eda62894afa071a4dbd178e96423295683c7054d8445e1456215f3c398dccb41467734fc8957644a4075b4809fc9298133104cb538b9c205c4"}}, 0xe5) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:05:42 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18}, 0x20000058) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7}, 0x7) [ 3945.168450][T31095] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:05:46 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18}, 0x20000058) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7}, 0x7) [ 3946.620535][ T1703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3946.620978][ T1703] nci: nci_start_poll: failed to set local general bytes 01:05:49 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18}, 0x20000058) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7}, 0x7) [ 3952.146393][ T1690] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:05:52 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0x9, 0x1}, 0x4) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:05:53 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18}, 0x20000058) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7}, 0x7) [ 3954.569018][ T1833] nci: nci_start_poll: failed to set local general bytes [ 3955.852403][T31095] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:05:56 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/net\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 01:05:57 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x81) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x4004550c, 0x0) [ 3957.617882][ T1825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:05:57 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0x9, 0x1}, 0x4) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:05:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00Y)\a'], 0x24}}, 0x0) [ 3959.126099][ T1856] nci: nci_start_poll: failed to set local general bytes 01:05:59 executing program 0: io_setup(0x1f, &(0x7f0000001880)=0x0) io_destroy(r0) [ 3959.797886][T31095] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:06:00 executing program 0: add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f0000000280)="48b3", 0x2, 0xffffffffffffffff) [ 3960.830223][ T1859] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:06:00 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0x9, 0x1}, 0x4) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:06:01 executing program 0: io_setup(0x5, &(0x7f00000003c0)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000100)={0x0, r1+60000000}, 0x0) io_destroy(r0) 01:06:02 executing program 0: io_setup(0x5, &(0x7f00000003c0)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000100)={0x0, r1+60000000}, 0x0) io_destroy(r0) [ 3964.227342][ T1870] nci: nci_start_poll: failed to set local general bytes 01:06:04 executing program 0: io_setup(0x5, &(0x7f00000003c0)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000100)={0x0, r1+60000000}, 0x0) io_destroy(r0) 01:06:06 executing program 0: io_setup(0x5, &(0x7f00000003c0)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000100)={0x0, r1+60000000}, 0x0) io_destroy(r0) 01:06:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x5, 0x4) 01:06:08 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000002500)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x95e}, [@ncm={0x6}]}}}]}}]}}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000002600)=@string={0x2}}]}) 01:06:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x40087602, 0x0) 01:06:11 executing program 0: getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3972.617376][ T1868] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:06:12 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x0, {0x0, 0x14e, "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"}}, 0x153) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:06:12 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) io_setup(0x5, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f0000002080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000002340)="6742bb9f259fb162227b348d330dedbda729b6fe480c2331d709f56f59f52d49d1e3f86a492ddf", 0x27, 0x2}]) 01:06:13 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c2200, 0x0) 01:06:14 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) [ 3975.157139][T31095] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:06:15 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000001780)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x81, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x7, 0x24, 0x6, 0x0, 0x0, "1860"}, {0x5, 0x24, 0x0, 0xb858}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x0, 0xfff, 0x3}, [@acm={0x4, 0x24, 0x2, 0xb}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3f, 0xfc, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xf7, 0x3, 0x93}}}}}]}}]}}, &(0x7f0000001a40)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x310, 0xd1, 0x83, 0x81, 0x40, 0x7f}, 0x73, &(0x7f0000001840)={0x5, 0xf, 0x73, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x2, 0xf000, 0x7f, [0x0, 0xff3f00, 0x3e40, 0x0, 0xffff00]}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x1, 0xff0f, 0x2d, [0x30, 0x0, 0xd8cfa35266506e78]}, @generic={0x20, 0x10, 0xa, "e963f03966dbf386f0713078cd775498c40be9e88de2b3cad980046724"}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x1f, 0x1, 0x83, 0xff00, 0x3, [0xff3f30]}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0xed, &(0x7f0000001900)=@string={0xed, 0x3, "38fb373cf391016bbb7e670e4dd9749123c392d6ff8df9e5bab836319b7caaaa9510b3aa31711aca54cec3b6cfb58dd9919e6df4d54550c12898ce3f9d3ea9d33942da59daac887fe5a742e74661333c5de40038a54be771b0b775fc471fc63577ac6c55e3b671ee632e973d46a8f8bfb0a1ba8f255dd2a1e0d29eadbaaccfe044e1f13312c14deeca6ce970111479d2e5604246b195c3446cba0e4aacc211a41d917d7b4c5d39fa1894c099cdd88cd6d5e4ad53239010074ae43b39ab31d313065879bfcc14158b64f5afb81ba756ea49ec01eeb8719863b0e9e65e7aced3202f0240201bcc4448b0b762"}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x500a}}]}) [ 3976.759656][ T2009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:06:16 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x0, {0x0, 0x14e, "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"}}, 0x153) (async) write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x0, {0x0, 0x14e, "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"}}, 0x153) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:06:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001780)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f6367726f757059000000000000006f75702e70726f6373202f70726f632f7379732f6e65742f697076342f7463705f776d918348c3383e09cdfa50dbdc656d00202f70726f632f7379732f6e65742f697076242f7463705f776d656d00202e202f70726f632f7379732f6e65742f697076342f7463705f776d656d00202f70726f632f7379732f6e65742f697076342f7463705f776d656d000a9bd8c369e30cf70438c01422d72853077ebed4cf3655dadf514d0c4d43b7c8861c164ae0b3375582"], 0xc7) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1100005}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x18, 0xa01, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xb3100000}, 0x0) 01:06:18 executing program 0: bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{}, 0x0, 0x0}, 0x20) 01:06:19 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}, 0x90) 01:06:20 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2b, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 3981.159430][ T2027] nci: nci_activate_target: unable to find the selected target [ 3981.186850][ T2033] nci: nci_activate_target: unable to find the selected target 01:06:21 executing program 0: r0 = getegid() syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESHEX=0x0, @ANYRES64, @ANYRES16, @ANYRES32=r0], 0x1, 0x512, &(0x7f0000000cc0)="$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") prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {0x4, 0x2}, [{0x8, 0x1, r0}, {0x8, 0x2, r0}, {0x8, 0x5, r0}, {0x8, 0x6, r0}], {0x10, 0x6}, {0x20, 0x2}}, 0x44, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r2}, 0x38) mknod$loop(&(0x7f0000000200)='.\x02\x00', 0x0, 0x0) [ 3982.823225][ T2035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:06:22 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 32) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x0, {0x0, 0x14e, "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"}}, 0x153) (rerun: 32) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 32) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (rerun: 32) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:06:24 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='s']) [ 3985.882567][ T2125] tmpfs: Unknown parameter 's' 01:06:25 executing program 0: read$hidraw(0xffffffffffffffff, 0x0, 0x0) [ 3986.189254][ T2059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3986.189748][ T2059] nci: nci_start_poll: failed to set local general bytes 01:06:26 executing program 0: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000003600)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 01:06:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000440), &(0x7f00000002c0)=0x4) 01:06:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1, &(0x7f0000000380)=[@sndrcv={0x2c}], 0x2c}, 0x0) 01:06:29 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001280)="b4", 0x1}], 0x1, &(0x7f0000000000)=[@sndinfo={0x1c}], 0x1c}, 0x0) 01:06:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001200)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000040)="7a642eb6a58de565304c4a93cf7eddcf86e2fbe46d2234b814565e5827ee537e5b554284d5db16ca36cbd5cca7e1800bd01eadfbde7af6a658aaa25836fcc5741c3d7ce3eff79e8b699fdcbe96580b4c26f66eef21ba4a0e4c3fbbd223c04b46bb2f567508b91048f97355b4f7d86d707d2b29c502d99d175d995ec8dd", 0x7d}, {&(0x7f00000000c0)="c61032", 0x3}, {&(0x7f0000000100)="111146c2a7", 0x5}, {&(0x7f0000000140)="f1afd5df17be068dea0bc0dc", 0xc}], 0x4}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r1, r0) [ 3991.516743][ T2060] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:06:31 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) sendmsg$unix(r1, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002cc0)=[@cred, @cred], 0xd0}, 0x0) 01:06:31 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$nci(r2, &(0x7f0000000040)=""/31, 0x1f) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r2, &(0x7f0000001a00)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x0, {{0x0, 0x0, 0x20, "df88b03efe06401b42f4fc6a44a876a7ed6032ee34a784b7c8f9ab9675ad6a9a"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}}, 0x34) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) read$nci(r0, &(0x7f0000001940)=""/157, 0x9d) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000001900)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0x3, {0x0, 0xc0}}, 0x5) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="04000000", @ANYRES16=r4, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=r1, @ANYBLOB="08000400000000000800030001000000"], 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) read$nci(r2, &(0x7f0000000900)=""/4096, 0x1000) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:06:32 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, 0x0, 0x0) 01:06:32 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x7}, 0x10) 01:06:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1, &(0x7f0000000480)=[@dstaddrv4={0x10, 0x84, 0x9, @multicast2}], 0x10}, 0x0) 01:06:34 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001200)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000040)='z', 0x1}], 0x1}, 0x0) 01:06:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001100)={&(0x7f0000000cc0)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) 01:06:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000013c0)={&(0x7f0000000240)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f00000000c0), &(0x7f0000000100)=0x18) 01:06:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 3997.338114][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:06:37 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 01:06:38 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=[@prinfo={0x14}], 0x14}, 0x102) [ 3999.481856][ T2203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3999.493665][ T2195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:06:39 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$nci(r2, &(0x7f0000000040)=""/31, 0x1f) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r2, &(0x7f0000001a00)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x0, {{0x0, 0x0, 0x20, "df88b03efe06401b42f4fc6a44a876a7ed6032ee34a784b7c8f9ab9675ad6a9a"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}}, 0x34) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) read$nci(r0, &(0x7f0000001940)=""/157, 0x9d) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) write$nci(r0, &(0x7f0000001900)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0x3, {0x0, 0xc0}}, 0x5) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="04000000", @ANYRES16=r4, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=r1, @ANYBLOB="08000400000000000800030001000000"], 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r2, &(0x7f0000000900)=""/4096, 0x1000) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:06:39 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@dstaddrv6={0x1c, 0x84, 0xa, @loopback}], 0x1c}, 0x0) 01:06:41 executing program 0: r0 = socket$inet_sctp(0x2, 0x3, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001500)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f00000013c0)=[{&(0x7f00000000c0)="0481eea7f69f96ddb54cc2f552b1f074fb0832ddaa4573666490d48f03a6b9ce1801d27df789", 0x26}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000140)}, {&(0x7f00000001c0)="7d848d2f0bc910b0b0058e4c42f00fcc73a9a79986295c84", 0xfffffd68}, {&(0x7f0000000040)="598a5d760aced3d964faa8c2bf8241989908ec2cdfeca60f", 0x18}], 0x5, &(0x7f0000001440)=[@sndrcv={0x2c}, @dstaddrv4={0x10, 0x84, 0x9, @multicast1}, @authinfo={0x10}, @prinfo={0x14}, @init={0x14}, @sndinfo={0x1c}, @sndinfo={0x1c}, @authinfo={0x10}], 0xbc}, 0x0) 01:06:41 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@init={0x14}, @dstaddrv6={0x1c, 0x84, 0xa, @loopback}], 0x30}, 0x0) 01:06:42 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000140)={0x10, 0x2}, 0x10) dup2(r2, r1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, 0x0, 0x4b, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x28, &(0x7f0000000440), &(0x7f00000002c0)=0x4) sendmsg$inet_sctp(r2, &(0x7f00000028c0)={&(0x7f0000002680)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 01:06:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f00000000c0)=0x8001, 0x4) [ 4004.877290][ T2241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4004.877789][ T2241] nci: nci_start_poll: failed to set local general bytes 01:06:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000013c0)={&(0x7f0000000240)=@in={0x10, 0x2}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000280)='E', 0x1}], 0x1}, 0x0) 01:06:45 executing program 0: mlock(&(0x7f00007ff000/0x800000)=nil, 0x800000) msync(&(0x7f0000a44000/0x3000)=nil, 0x3000, 0x5) [ 4010.226459][ T2238] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:06:50 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$nci(r2, &(0x7f0000000040)=""/31, 0x1f) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r2, &(0x7f0000001a00)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x0, {{0x0, 0x0, 0x20, "df88b03efe06401b42f4fc6a44a876a7ed6032ee34a784b7c8f9ab9675ad6a9a"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}}, 0x34) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) read$nci(r0, &(0x7f0000001940)=""/157, 0x9d) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000001900)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0x3, {0x0, 0xc0}}, 0x5) (async) write$nci(r0, &(0x7f0000001900)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0x3, {0x0, 0xc0}}, 0x5) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="04000000", @ANYRES16=r4, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=r1, @ANYBLOB="08000400000000000800030001000000"], 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) read$nci(r2, &(0x7f0000000900)=""/4096, 0x1000) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 4016.567143][ T2371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:06:56 executing program 0: readv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) [ 4016.636968][ T2371] nci: nci_start_poll: failed to set local general bytes 01:06:57 executing program 0: r0 = socket(0x2, 0x3, 0x0) fcntl$getown(r0, 0x5) 01:06:58 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000000100)="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", 0xf90}], 0x3) 01:06:59 executing program 0: socket(0x0, 0xf6fe09a6721d1d2f, 0x0) 01:07:00 executing program 0: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$dsp(r0, &(0x7f0000000300)="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", 0xffffffc1) 01:07:01 executing program 0: r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='fusectl\x00', &(0x7f00000000c0)='/dev/autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='-##!)@-*$%$&+\x00', &(0x7f0000000100)='+/#}]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 4021.818097][ T2371] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:07:01 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r4, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x2c}}, 0x40) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0xffffffffffffff02, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="40041cd0cb5648"], 0x7) 01:07:02 executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000340)='0\x00', 0x2) 01:07:03 executing program 0: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000), 0xfdef) 01:07:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) 01:07:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x10}}], 0x10}, 0xfd) 01:07:05 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x6, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001040)={{r0}, &(0x7f0000000f00), &(0x7f0000001000)='%pI4 \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002f00)={r0, &(0x7f0000002e00)="8e"}, 0x20) 01:07:06 executing program 0: syz_clone(0x2c0a8400, 0x0, 0x0, 0x0, 0x0, 0x0) 01:07:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) 01:07:09 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x3, 0x8000, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000000), 0x20000000}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000340), 0x0}, 0x20) 01:07:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() r2 = getpid() sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)='.', 0x1}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}], 0x40}, 0x0) [ 4030.706710][ T2491] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:07:10 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r4, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x2c}}, 0x40) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0xffffffffffffff02, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="40041cd0cb5648"], 0x7) 01:07:10 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@ifindex, 0xffffffffffffffff, 0x4}, 0x20) 01:07:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x20) 01:07:12 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x36, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) 01:07:13 executing program 0: bpf$PROG_LOAD(0x9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}, 0x90) 01:07:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2e8}, 0x0) 01:07:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x3}]}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x35}, 0x20) [ 4035.076698][ T2525] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4035.087392][ T2533] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:07:15 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r4, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x2c}}, 0x40) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r4, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x2c}}, 0x40) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0xffffffffffffff02, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0xffffffffffffff02, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="40041cd0cb5648"], 0x7) 01:07:15 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000f80)="9a", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x24040054) 01:07:16 executing program 0: r0 = syz_clone(0xc6000000, &(0x7f00000000c0)="5dae02259f927f16bc2aff06b629910c8602fe2874a4b1b9e8fdbe25e932e1f0f975a994c6953a676a943938780febd9426f38875335d3847be8e224de0e2099da35", 0x42, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="ea04f15707aaad73cca9326fa01e676d076de7a07da75042be42dbdc96aaea32ff94673c2285a681") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='^\x00'}, 0x30) 01:07:19 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x9}]}]}}, &(0x7f0000000800)=""/18, 0x2e, 0x12, 0x1}, 0x20) 01:07:19 executing program 0: bpf$PROG_LOAD(0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}, 0x90) 01:07:20 executing program 0: socketpair(0x11, 0x0, 0x0, &(0x7f0000001780)) 01:07:21 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) 01:07:22 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2, &(0x7f0000000100)=@raw=[@alu, @kfunc], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x19, &(0x7f0000000180)=""/25}, 0x90) [ 4042.156861][ T2558] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:07:22 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f0000001900)=""/136, 0x88) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000900)=""/4096, 0x1000) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:07:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}], 0x40}, 0x0) 01:07:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x7, 0xfffffffa, 0x9, 0x0, 0x1}, 0x48) 01:07:25 executing program 0: syz_clone(0x1241000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="99") 01:07:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)='8', 0x1}], 0x1, &(0x7f0000001a80)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private}}}], 0x38}, 0x40) 01:07:27 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x109ac0, 0x0) [ 4047.757831][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:07:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 4049.905343][ T2600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4049.908856][ T2616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:07:29 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f0000001900)=""/136, 0x88) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000900)=""/4096, 0x1000) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:07:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003300)=[{0x10}], 0x10}, 0x81) [ 4052.297053][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:07:32 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) gettid() openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x4c000000, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 4054.422396][ T2634] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:07:34 executing program 0: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0)={'erspan0', 0x32, 0x33}, 0xa) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000180), 0x2, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000200), 0x2, 0x0) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r4, 0x58, &(0x7f0000000280)}, 0x10) recvmsg$kcm(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001780)=""/99, 0x63}], 0x1, &(0x7f0000001840)=""/197, 0xc5}, 0x10020) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002200)={@cgroup, 0x0, 0x1, 0x9, &(0x7f0000002100)=[0x0], 0x1, 0x0, &(0x7f0000002140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$cgroup_devices(r2, &(0x7f0000002240)='devices.deny\x00', 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)="06fad62b59559bdd854f16e6f693cc86ea1ea5c16824c83cf730fcaada10f45f42d897be958b11ed14cc0cd64fcb45f55ba68be101b54ddc5695dfd7a3203d6e2f387601559c1af21683ad26737ee44ab0533a782d8f0a455940c3cf2181ba5e03ee76cc6881d267806f0ab2910d9044428a39eff27e8bf47882569159ce9c58f2ac372894d4b4fef0cfe80da7b82148c35a781013afb6308f7f716d76ddd70df65606f01ae7d42b8d2177f2dcf147e674fe9ce0a1332def4cf23abda2b86449fbfe46fd9be5d1a4a7f24e8a99a8a2086acf1e92b83f4d9489cbe9a5f6594fab2359a1620ef8a93f2e0f27f1", 0xec}, {&(0x7f0000000640)="c5f9cc9b8c1d7725904a0bd74891a3f5c4fddf980bf22896d80c4de645b6e171c36faeaee30ec7c03e1cfe0ea1fe0a4e52f3c7d7f0e25e2110c177dbec8daa7fe2a137e4008e0204daf027e5c91400dccafb0458230e812810f3d2d6fcc0add0ebe3c25fc352e6842001f96523642289ce102970bc1b8c199f3e7a2a134db11784fcba2c6d8f2691743eba72e2c0715498ba1ddfdf2f35487031c442010c89fc8eb60c7b3cc1e4161a281fb1bbd7012f79d48400057567dc90221c65737ad61057da0ea219e11a8d7f6ea4efba4230d7d0e8c61f42c8fbf5a87cd4b3a048c8ab69fd8b5dd2db9da3ff350b6e41f6a3c6", 0xf0}, {&(0x7f0000000740)="a83e8467cef8d8920924a848c05ed90189f90c804ed88877daad6130219ffd6d1c8b3d69622137adfcd7", 0x2a}], 0x3}, 0x40804) r8 = openat$cgroup_type(r2, &(0x7f0000002280), 0x2, 0x0) r9 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000022c0), 0x2, 0x0) recvmsg$kcm(r4, &(0x7f00000033c0)={&(0x7f0000002300)=@rc={0x1f, @none}, 0x80, &(0x7f0000002380), 0x0, &(0x7f00000023c0)=""/4096, 0x1000}, 0x22023) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003440)=@o_path={&(0x7f0000003400)='./file0\x00', 0x0, 0x10, r2}, 0x18) r11 = openat$cgroup_pressure(r4, &(0x7f0000003480)='io.pressure\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003780)={r10, 0xe0, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000034c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000003500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f0000003580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000035c0), &(0x7f0000003600), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000003640)}}, 0x10) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000037c0)=r12) r13 = syz_clone(0x82084000, &(0x7f0000003d00)="e4286f414d03ba510dc4e7eb076d7bade2ceea991641c12a34", 0x19, &(0x7f0000003d40), &(0x7f0000003d80), &(0x7f0000003dc0)="aff15fd6390b970d3754a7e47075ed9ed1b9afdb4f45b99c57a392f2fbc1c60ac8fc7aac6ab21a5ba84c458a2a0b82be7197631cdbe202c43d80e63a7e6b1bf2374cb08dd9018b34b51a543ab2574b28cecc27eb28b2f51f4a9af4f27f1cc1e52bcf2df4a30e67ff8f09524dba5a4b8792c6d5423798f21dbb1ddfcfbe6eb25594aada998e413042d0e49bf3fc1e7881f6e5719037916ace60c9f9762aa5042acf8c9f5f53601bdfedd16833fcd94f5343cbae262f53605c8432f471c19d3b70bea8034a59aa199a") sendmsg$unix(r6, &(0x7f0000003f00)={&(0x7f0000003800)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003880)="88ff8533beb80dcf9f44d20f0a361eb737af247852f5740276c5f7834f7ab862668a8dd25165d058c77c418a6432ecd065fb4b940a08993d1247f4d78478db8ae41f69d4b2818be0219e3ec2e548110e4068187798430a106ab4c9d37db96f1f5230ee8de04857790f317dc5b4abbefd25648c43e35ca9f1ba45ad310fbd6cd3a1bd1fe17f9ae3c7ee3c260d4211", 0x8e}, {&(0x7f0000003940)="03bf6b31ca8e43562c110ca69903206b0ef8f997cbce52c7dba4c35e5f6e1682f9e75538ee8902b4d56d9f6fac80f9d6d0c3913701408654a375a7c38a645e7df75ca07fbc1955eb4860cc6d37c994b43e8e558c2af2d1efa61c55890297690ec9a6c0d8a116024b67d2007ceeeeed8e310524aa52384a517869bbe58f065cf92cf525ec98310ee79dbeba7053fad2f44269abab6e52ffe5d264c357bc47f3f8a7253bbdd8951321f28460918915d567007bc5825fb47772b4fb19d9a5189bf40a11e0124b969683d9d4d70bf4b1e37c8c0adf5fe30acf3d3b121c3ccc294815", 0xe0}, {&(0x7f0000003a40)="515ee29523eaf03bf579f00dd1f121f1dad0a5f7654e612e9e560d16f3c488d06e9588e829ae47ae23595bfc4977866d78be1d2005f82398f5adfc2bda3603963d9699a6f636313a6d3c8187b836f4e2ce1ee4f7f5ea4910cc7e545667537ed02fd12986f4cbde3e984cc2d07c6955a27bc2346ec7950e86ace760b2af49b8d509221de5581b15ade332d246ebf5fe67315fab09506039ea5051ccd0b7d9ebc8b9a1a16377901ea66e3380b290ed115c323dcb30aa4d7faabb54f42757bf3187e643a799ca701dc5b0ed2c7bc2f162a6dc", 0xd1}, {&(0x7f0000003b40)="3894a3d678ed03b193ecad818ee32393bf63864f9a7334a09a793dcf99201a36da56e9de0d2aabe992a0045cd5d3e5809434bf6196f42e90d2a351df3721b7a9116574546de14a56081c862cfa730db73f5926e6a779e0f2355c983b51f976a98667702df735689b6461ee1fb082cf88d5cfcba05165cc4f5cc8c4e3df9510a9d874fce5e52b3aa6ec457ad73f78109e3ca31b59cd3951f5148734fd6a139818c21ad920506e69a3d43bd4866d09058a9ad8a2b520af08ccc0a7424fa0d775e4c1fcde730c52495440d34b3656bb6260dfbe00a897d14ba2a17a6a23c9f928f5", 0xe0}, {&(0x7f0000003c40)="e131d291feaaec8e90194c93b6790b1aede184e9a865e514bdb2d8159640e6c6a7c747563b4469b23b47f2cd18470b941fc466da91e298", 0x37}], 0x5, &(0x7f0000003ec0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xee00, 0xffffffffffffffff}}}], 0x40, 0x4080}, 0x20000014) r14 = syz_clone(0x42080200, &(0x7f0000000880)="6d3abbee3b975e78490080018055b7b5dff1a3e0e1acdbf9ff6ab79fa917969e9a4ebdbf6a58af13726b9e9031ed48356e", 0x31, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)="193ffa5650094813e5183ec8bb86cffe51922a87074c2f06810b784c51fbce4dadd52f38a670d570447bfb7c6cee4c0166e2e6fd5259f8") r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r15, &(0x7f0000000140), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000005400)={0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000003f40)="84a252d7a99d089c82293637c032e247ce14087a59cf1512ffdb4d5fc2fc306b37aac7a81c15f6e456df17d71c78eb33c546050bf59264d9effa66829c0578e13c39291cb5ad8c0a42379a067c3d979777493c86fd1358d75433ed3db276dd0ef83f346c5bf555b4806a90c9a1fc23eecf157c78279ffd54dbdc782a8eb7bc32d80cd4f12ac2226b31933c0c005f315dfd4da970061dfbe975e46941245097cf9538741a360b0a080284021885ef59859e14cbd5e6afa79cf479015e30a4cd7218e2ae5dd9391a244ed2015e69ae", 0xce}, {&(0x7f0000004040)="3fee657fa2faa3f20360c56b55a26ebea8d1de963ff4b38ee0399a6661e5c44378652e819d6dd106d25f0ffba1", 0x2d}, {&(0x7f0000004080)="c60a26c6e1b33507ea41120f384865cacbdffd5e912d021fdd68b359684bc6703d56567e142122d7e7c755cc3eaa123a2144deeade3f2b781e8f0836f2b1f6cbd37d59b3d903dac68dcc203c09317855bd9ad991ccafa8a94dd14cff12a485a0cf51bf11bd7db4529674c0cf73a1dc792ed5257903cb96cd", 0x78}, {&(0x7f0000004140)="9f04ab455179df6e27f7576ee51d423f2d16be0c3af4033fc5fdddb3c353d85635fd773017678830c1b2f392fa06ca78ba5718acf21f7e9bb6e0e4af70d9abc6157670e6d0c1db5fdde64378574f64bf2879a18e", 0x54}, {&(0x7f00000041c0)="a3", 0x1}, {&(0x7f0000004200)="bfcdb29ed4f246462b749184f5ce1a2c04d3080092efff9ee19db0ba90ddde172108054adb3d463e9d02dcd6d4f989cc7c1375235d18fa744f86cf98f7b404e2b6c9ffb098518b16b45926fbf74c9e096d77674f08645a30495269492b9859eb1516e3487bc5813bacdbe01ff31fe90daf216975b2a8d9114554c146d960edb13a69b7442b760884bfc96370765fba4d4b58e19a3d40a8716782d03b886ad8659aca497bcaa0e74abe5464629b6b7f0fc028323b414f0586484bca5a1ca851140c1c72288476c81c3a4ad18c7a890183dac61c2b2c89233a29a6f4758170f51f4f884fba4ae34b21baa9160e4db032590b4f6d2d87a28ea1fe9d8cf3b46cb1d86d3b79bb95526585a2ee2f26fff1b27d32ddc99b13b95c886b7c0c601a2e4235630fdd110216f11724d1f73658a4a9b3fdd0b0a23e553fa46f42d04feeb6a8e6a6b52d9972301a58ddfdc9bcc636a2696159c4a2a39bb1518209fc94b99f1d7c9fac6c1adee89df596aa382d8da4fe876cb284b44f4e2490374d653ba3ba2910d390d49e7d9deaec207d9c2711a53fea0fcb97b96409debbdd281529e0b4b510cb607a03712407fd3ea52de275aaafb64f780a75f3e92fef81b0065b2e6ee9d9c39a2c0c01ce1b26b8c1a088f5f6391ec3b4c5bff9d176609d63f21c3d4d7b8a50620481853f2da9daf9f7b4863eedaa72e6fc108abd85289ae97f3b88517bc8276da1c2cc8c4ed3f3777dfa1bacc320be8b7db9e9ab1171bf97f16eebfcce664085b61fd110308c9fd3053c21cc22d52f69d956cb5a2f9e0a445093ec39895924d77c76b7b5c52574301e302cd5fa203df519edc2ecd2a956a6ff6cc5d363623714f79895e9e2ddc5148ef263d4cc214fa8adfe0add877f934765c80a6bbb1f9071fc60f2958cc293142439342c86a52349b432b777123a72f01693dc1688f6b40f7c2f0bef20931503240c757ebe238732af8267cc545150a7ee587bcf96c4cd32c1853a7525dccb62d0fa7a187b98fa2c10deb5dbdf617a79087ae8e2a773887bf9f1360155362a00d3697bf79ac7e331fd41c12db1942cab34801f5fa48874bb61c7b07108437dff4b1aa707603cf159a8e311d212971fbdd29aa36dc0cf3d30b3022fb2c84cbb91236cf7ec80a92c5cb0e3a8f54b5933944886ac17ec725d7f24243a177be94821529d431e9395a8920403194556c3c30123d29cdead685bb7b1af402772759886cdfe5e7850954000af0b51f2724e5ad174a820a6092f302db9af15fcf5ab518b7dbe6cb31eb9f040143bb5313afb04636312f0dc132d5b50e22763d2d0f0373cacdcca7f80ea5078b11fcbbd41a29c1198ddac93fb5dcff34d8e6b05c2ebfc88d47cfc7957027651e710d45e065c2a309d74b4a4284f29cfcb8d7c9fc700df16a0191f28cdb73f1f355efa14bc325f3f2ab31d310866275d346f66c82bf03a598eaa2bce16f3007e3155b1e0618af4835b7a8990e024d61d66aab12df9ca58bf45c890dc8b848402f0acd4a61265afaeae61b97377d00b30dd3622d69f25522a48cfc59ac25e59598faee1bf3f16d2c75cdaeebfe7ba024a54d18f6719493b41fc3f7f5fff6cf3d9709b5a5199310c89f4b8fb2dde901bf61f811b817f12215f0e9675437b39990a84850a459a00f0a11e6af8f60c43906cb6cbf07b57af2b229390e8eafd5022743da513357c279636a972b02de1b7fe47104709ae9a06b62b03fcb179b44a067cf2586bf28555326150dfe7b899e77473b1daa5602199714e69d2a03b4a4b98dd0283058ed93af0f5aa7d2fa81e82c6bb4f404d1aa7d136834ca032dc548f99d7e09c3cbb1a7b9728b20979c193e326c1046bcbd6bc2cecc57dd6920528db50e6fc1b85918e7344603a2dab384f14ff7ef426ae2adc3c6583172a59543a5a0209729e63d46acbd087ab682f6922371abb203f20ea03bd161ee203e24ffbd814ab2d66a4a2ff38070edc9fac3f2f3c9da6dca04d239e55c330f6eca57cd60aedccd9c87766dbb2a66ae6baae61b6d8b8bd2ebe9c852ee321423f62898b8bb5d59570d011473f1ab04ff52f6f95525807d4237dcd85aa14ad643507ea00c322b8ae53623a7bfcf5d82bd424a2baa9e578bf2c0854609ed6e0b020bd930571892788ae670bdf5c25fdd5605aafb368a59c7b046555d67e11769dd275fcaf936ffa78da1afe8ebd44e3cf60f9332d3a2483e7654ba2fea616046ca4af82d0c40a350ed1d8cad233e65c8939327aba5452aa1c7478bb4c916d8ae57a5a5578ef8e3434dcee3b6b5c3c7c8f36355b61ba62b83778d8678fc4a5255f31d736455c22b54b11d11f8174f74171996b93c273d2f57a55df939d6d57f84cd76c7b38c4b43f8d53b04660884e037291af5f1c4de23bcb02fc9e168c2eddef39ab5470bf0f32476b107ddc9c01aa7d1d2e2170458e002a6700382b917b5cac8f748f6e024632776f7ecf67b7b79ea21c3034c891de19d7306ee3b98e1e54e6c14a671df442f0fc44374def608e78fe1b18b4a04902f6de549fe2638e884890654844ac048b1ad920179ad2fe15471f0f82a2de6791b70bbfe3c899957370e6cc1272e87840a0763fd13e2753d978544c8c671cb7397de6e87739eb6ba434c65cda6ec406ec2fac9f7907958782633562a90274fab54a83752a09e33d93bfc92f6811b0f1543a98d3b494810b5ccdd868aa98c92983e4bab6dca8dbae60bcbf472b71bc9ec4b8f295da702211b1b7327a82a4cb4dc33233b301da239deed11b9cea039a774febae6a66d109e25db58957691477a7daca53868cfa8199b2208d81ff7d1d4859392d900ba23764988a384b3bb4beab9fec0e18bda16ebc7ae7948ec2ac0ad27faaf39fa7d5be6c35883ba16fab1ef6acff1fbbe0bd7cd281d1b760a4a33f551e9766af66e7217e3ed73ec0d5de97040b603d57ee9d45e6ab797c27f98365001f400a6dfa5fc58e6d9e450a6ecd1bcdf0ffcd7e9331dcfe338a9812df92d8a5dfc12c4ef4579611697995200b8dd66aa2683412f54f86a6fe1f36aa5e5995e3f52d249e74b9c628206320c263964bd4743ba0e476b23a980fc87287eb7a5cd35f91b69381aedcc20beaf6f1c2e6c50f48e12d6b512702909b97328ccffb945a81f80f22ef6c375f197e0850f84cbefc2f866487d1f595ae07bce6608eaf71995d25dc25a60d6f79da24b9f915c2f1ef3ed38f0c24a90f8e5ce561a5c7747873ea2c3fbe5e1d2abcc0ec7943eddff9ed0e4aadf03ebe62ec4924c2e6f5e06b2d29f36b3039bd597e7cffeee58214e9cd5649ff66e791789ddaeb66b25043e1dd3783d0bc275554fc854e96ad5bc115441af7707950b3ede3e354608f728cc15ebeed4304cb83926b7632a5b1c67fdbdb9bbe16cb3057e51e59f9dfdd65b79262847c894bacc74d9bee1d2fb94c3cc1279a00ed08670d4e3a99062f32344b0e8b75eb7a71239d0514106314feee0732965145792dcd6c1a81f6d146d05f86ecb23ef580a672e6af84f4d0f9dc8f44f649a4056e392cd2aacb1fe2ae7161a83d1237c85a181b5300f17cdf2590f858d9f57e18dcb8ce82bccf35996be56ad260b6a830696a7d47bac1468f5fe34a93c13ca51ee0419882ba198edb896347885749d9bcb413c147a0c0a2d27c2bfb6d8745f87c7af72aba560b9e0a81ed63a05d420784da0b091ff511271237a2670fef80ca459b8d5e9612cfe319dc595a669494ef0d97184e0f1f226b1ef5d03b90826d5ddda923c14755143c2e934a5506d5fa72026d7cb252d524f597bab4bcfdbc9ec2c2d477e9f1aef9156b44283cb23de167a56de7672c9bbcd9de119eff5019ff8a43690ea3009c399ea976f491c7ad12577d946e84637d83fb8bf2515e36f18e1a720776f6f88dada42a7a58352528eb77c9a3e2f3f2fbca2e40a51107ac7db24ed7add0cb55ec10baef67110b552b388634ac5d67aa44c7ba2c8b2dcb2fe1a997d59bba927fd85658781b2fdedeed4334b540d0aed0e2d498962c81b0068486cf3d43860957f6a87c88330adb6d06e56bd4a220059a333130580396b055909b169790feb419ad52f688b8fe16df82daad0a03faab8952d2bc5d5dca385353a2de9cfed5d6b1fc69472e05ebb0a7beac60c80de2e11bc6d2142a13165f3fd42b437168550e2befaf105c4a0af89ddbf321927ffbcd3dee3447ac18a0ea51f757d8d81ebe9b550f7e113a6d832ac0aed7edcd483591356b126b445b3d736ca248d06e48c4c56a81d77dda695808f098750ba3beb43e44947bcbd4e3c794f74cc3ec64d10aef412d94d05e72da5d1537f39dc948d06dd06afd73cfee55183eeb7d7e006279ca822b3b9900fcebb4b7e2209f187c0ea14103cc265254ab73d4289248a3ef6da2589b01b747088d2aed19bb4f29555eda0a497288a2192b62b46285fd478d70a2c16a69cb9b3e6d69100b39cc80010d466fdbf4e1556b0291d81b28f88e4c9c7c66a3e1ae45c1a552909c2c5f93b0bf1d76719e3cc459005838edb729dbc0389c382765dc951877b6bc82dbaf1d7d7274033c16c247feb11ae81ea638bd20dd91df0cd24e240572067ee6e6656ff06dceba787b9d060aa813ad2e0cb596f10a7de74aa740fe8eb1434966154a3eeafb179b8f776e388f2656c48e5a38df1ba7a6ec3da9e710fc207ad2d8b4685a4c39378bfe0672e1fc722a7615c23607d8ebd00a0a08a7eac47f1dc55143fa126ee7dd480626c78c525a22a646fc93a68f72062eefa8f6a1aa8ad09cc09f5beb85e25f9d22ca415c580f3aa89f6792fdf920b4c61a0361efb325818eece9b9a9a5f51be688249557c9099d4abaa30f673b948d1ec5336dfd844ae17f1b50dd395efa6c5e3a3b78dac771abd7176c69a21ab916131eee276fce346e5f1d588bcbfbc5d2cf6957bde02cc8cc47579873401c318b2256329f7b4615919cc2ccb03bb7cb67e4b2c92facef3ec65a21c5826345c61ecb24c0a9a2f2bb4fd1598fd4c378d22543b95fd25414edf01775aa87b394f827064aa0d3b94388c431b8b0edb7dbe8e594218555ffb0e7717129b08c8619e78f46090f41df652633d94e02907e3c6a213c1c754c022737ebbf0e22b143d734525e1f830131e45a4aba1c51a0515bcdb79aaaba7cda693f821c5fac032cf675248d32f329b436b625729b3d30dbce67f11ec48ed35044cc636d0b6aea1b236f774722212591437ec1806b59bb8b75dcd690ebec86c2a8f81f091163f3cda601520860f2828068f25ec5936695bf01f4c45f86a690409b31e9d1e41ba0193c9e863c3835f2fb4e96d9d7802419754e63a1661737880a7dd7eeadc4ba5afdd834310ac6610ef05141ce638780583323623c9069608403a34af43d89826a95fb150a4ca896f4ebcbcbaa72f324c8042508fc631d0de7d26b5d70e3d8f06d0d956dc8f2676faa5b72b76558588f207df3e7a207c2a6164b8878d361e503998188ba516ce45d74dbb36a8152d459609c3feecfe2d68ebc91573b1fd9155431bbf901baf54491cb79fae3125ad1c70650662d002393a4d52526612d3b34d24409c79f71fb276b7997cf6192b5b1067d580200b77d6ee9ae77eb6524087cfeff4afe7c0bc539e18e314c7894dfa86c4f79b0069f75d2a24fdb90a29afe2c26648fe0b6bbdf63e89544661cc0d5bb9ec4450e57850f61ce8dbc05ebe0937a908b5409db81679a84350d555e5709fea2f4b9f744936c463f3cd661fd19e5d0f12373ec39765b7e91cf533811aa1295144d665acee474a3667621b49713010b6665", 0x1000}, {&(0x7f0000000980)="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", 0x123}, {&(0x7f00000052c0)="38da10ca8acc40a5b9e7b4869ea731865fd03ac66b4cec361c0131df6c6d542146de067468686df26f9aba4a4df35ec8bfa4c8c0c2ac", 0x36}], 0x8, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r14, 0xee00, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r3, r15, r2, r9, r5]}}, @rights={{0x1c, 0x1, 0x1, [r7, r11, r8]}}], 0x68, 0x20044004}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r4, &(0x7f00000003c0)="cb85703175af38734ff0b14cebfba662f0008412a94163dfbc9c626386c6e2b12c562f807c7ba4cd97636087367b236d111a19ce1ea9067977dd3a0dac743822f9bd9da8d8206f1ead", &(0x7f0000000440)=""/199}, 0x20) 01:07:38 executing program 0: syz_clone(0x42080200, 0x0, 0x0, 0x0, 0x0, 0x0) [ 4059.506550][ T2638] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:07:39 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 64) read$nci(r0, &(0x7f0000001900)=""/136, 0x88) (async, rerun: 64) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000900)=""/4096, 0x1000) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (rerun: 64) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (rerun: 64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:07:40 executing program 0: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0)={'erspan0', 0x32, 0x33}, 0xa) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000180), 0x2, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000200), 0x2, 0x0) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r4, 0x58, &(0x7f0000000280)}, 0x10) recvmsg$kcm(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001780)=""/99, 0x63}], 0x1, &(0x7f0000001840)=""/197, 0xc5}, 0x10020) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002200)={@cgroup, 0x0, 0x1, 0x9, &(0x7f0000002100)=[0x0], 0x1, 0x0, &(0x7f0000002140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$cgroup_devices(r2, &(0x7f0000002240)='devices.deny\x00', 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)="06fad62b59559bdd854f16e6f693cc86ea1ea5c16824c83cf730fcaada10f45f42d897be958b11ed14cc0cd64fcb45f55ba68be101b54ddc5695dfd7a3203d6e2f387601559c1af21683ad26737ee44ab0533a782d8f0a455940c3cf2181ba5e03ee76cc6881d267806f0ab2910d9044428a39eff27e8bf47882569159ce9c58f2ac372894d4b4fef0cfe80da7b82148c35a781013afb6308f7f716d76ddd70df65606f01ae7d42b8d2177f2dcf147e674fe9ce0a1332def4cf23abda2b86449fbfe46fd9be5d1a4a7f24e8a99a8a2086acf1e92b83f4d9489cbe9a5f6594fab2359a1620ef8a93f2e0f27f1", 0xec}, {&(0x7f0000000640)="c5f9cc9b8c1d7725904a0bd74891a3f5c4fddf980bf22896d80c4de645b6e171c36faeaee30ec7c03e1cfe0ea1fe0a4e52f3c7d7f0e25e2110c177dbec8daa7fe2a137e4008e0204daf027e5c91400dccafb0458230e812810f3d2d6fcc0add0ebe3c25fc352e6842001f96523642289ce102970bc1b8c199f3e7a2a134db11784fcba2c6d8f2691743eba72e2c0715498ba1ddfdf2f35487031c442010c89fc8eb60c7b3cc1e4161a281fb1bbd7012f79d48400057567dc90221c65737ad61057da0ea219e11a8d7f6ea4efba4230d7d0e8c61f42c8fbf5a87cd4b3a048c8ab69fd8b5dd2db9da3ff350b6e41f6a3c6", 0xf0}, {&(0x7f0000000740)="a83e8467cef8d8920924a848c05ed90189f90c804ed88877daad6130219ffd6d1c8b3d69622137adfcd7", 0x2a}], 0x3}, 0x40804) r8 = openat$cgroup_type(r2, &(0x7f0000002280), 0x2, 0x0) r9 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000022c0), 0x2, 0x0) recvmsg$kcm(r4, &(0x7f00000033c0)={&(0x7f0000002300)=@rc={0x1f, @none}, 0x80, &(0x7f0000002380), 0x0, &(0x7f00000023c0)=""/4096, 0x1000}, 0x22023) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003440)=@o_path={&(0x7f0000003400)='./file0\x00', 0x0, 0x10, r2}, 0x18) r11 = openat$cgroup_pressure(r4, &(0x7f0000003480)='io.pressure\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003780)={r10, 0xe0, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000034c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000003500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f0000003580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000035c0), &(0x7f0000003600), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000003640)}}, 0x10) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000037c0)=r12) sendmsg$unix(r6, &(0x7f0000003f00)={&(0x7f0000003800)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003880)="88ff8533beb80dcf9f44d20f0a361eb737af247852f5740276c5f7834f7ab862668a8dd25165d058c77c418a6432ecd065fb4b940a08993d1247f4d78478db8ae41f69d4b2818be0219e3ec2e548110e4068187798430a106ab4c9d37db96f1f5230ee8de04857790f317dc5b4abbefd25648c43e35ca9f1ba45ad310fbd6cd3a1bd1fe17f9ae3c7ee3c260d4211", 0x8e}, {&(0x7f0000003940)="03bf6b31ca8e43562c110ca69903206b0ef8f997cbce52c7dba4c35e5f6e1682f9e75538ee8902b4d56d9f6fac80f9d6d0c3913701408654a375a7c38a645e7df75ca07fbc1955eb4860cc6d37c994b43e8e558c2af2d1efa61c55890297690ec9a6c0d8a116024b67d2007ceeeeed8e310524aa52384a517869bbe58f065cf92cf525ec98310ee79dbeba7053fad2f44269abab6e52ffe5d264c357bc47f3f8a7253bbdd8951321f28460918915d567007bc5825fb47772b4fb19d9a5189bf40a11e0124b969683d9d4d70bf4b1e37c8c0adf5fe30acf3d3b121c3ccc294815", 0xe0}, {&(0x7f0000003a40)="515ee29523eaf03bf579f00dd1f121f1dad0a5f7654e612e9e560d16f3c488d06e9588e829ae47ae23595bfc4977866d78be1d2005f82398f5adfc2bda3603963d9699a6f636313a6d3c8187b836f4e2ce1ee4f7f5ea4910cc7e545667537ed02fd12986f4cbde3e984cc2d07c6955a27bc2346ec7950e86ace760b2af49b8d509221de5581b15ade332d246ebf5fe67315fab09506039ea5051ccd0b7d9ebc8b9a1a16377901ea66e3380b290ed115c323dcb30aa4d7faabb54f42757bf3187e643a799ca701dc5b0ed2c7bc2f162a6dc", 0xd1}, {&(0x7f0000003b40)="3894a3d678ed03b193ecad818ee32393bf63864f9a7334a09a793dcf99201a36da56e9de0d2aabe992a0045cd5d3e5809434bf6196f42e90d2a351df3721b7a9116574546de14a56081c862cfa730db73f5926e6a779e0f2355c983b51f976a98667702df735689b6461ee1fb082cf88d5cfcba05165cc4f5cc8c4e3df9510a9d874fce5e52b3aa6ec457ad73f78109e3ca31b59cd3951f5148734fd6a139818c21ad920506e69a3d43bd4866d09058a9ad8a2b520af08ccc0a7424fa0d775e4c1fcde730c52495440d34b3656bb6260dfbe00a897d14ba2a17a6a23c9f928f5", 0xe0}, {&(0x7f0000003c40)="e131d291feaaec8e90194c93b6790b1aede184e9a865e514bdb2d8159640e6c6a7c747563b4469b23b47f2cd18470b941fc466da91e298", 0x37}], 0x5, &(0x7f0000003ec0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}], 0x40, 0x4080}, 0x20000014) r13 = syz_clone(0x42080200, &(0x7f0000000880)="6d3abbee3b975e78490080018055b7b5dff1a3e0e1acdbf9ff6ab79fa917969e9a4ebdbf6a58af13726b9e9031ed48356e", 0x31, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)="193ffa5650094813e5183ec8bb86cffe51922a87074c2f06810b784c51fbce4dadd52f38a670d570447bfb7c6cee4c0166e2e6fd5259f8") r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r14, &(0x7f0000000140), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000005400)={0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000003f40)="84a252d7a99d089c82293637c032e247ce14087a59cf1512ffdb4d5fc2fc306b37aac7a81c15f6e456df17d71c78eb33c546050bf59264d9effa66829c0578e13c39291cb5ad8c0a42379a067c3d979777493c86fd1358d75433ed3db276dd0ef83f346c5bf555b4806a90c9a1fc23eecf157c78279ffd54dbdc782a8eb7bc32d80cd4f12ac2226b31933c0c005f315dfd4da970061dfbe975e46941245097cf9538741a360b0a080284021885ef59859e14cbd5e6afa79cf479015e30a4cd7218e2ae5dd9391a244ed2015e69ae", 0xce}, {&(0x7f0000004040)="3fee657fa2faa3f20360c56b55a26ebea8d1de963ff4b38ee0399a6661e5c44378652e819d6dd106d25f0ffba1", 0x2d}, {&(0x7f0000004080)="c60a26c6e1b33507ea41120f384865cacbdffd5e912d021fdd68b359684bc6703d56567e142122d7e7c755cc3eaa123a2144deeade3f2b781e8f0836f2b1f6cbd37d59b3d903dac68dcc203c09317855bd9ad991ccafa8a94dd14cff12a485a0cf51bf11bd7db4529674c0cf73a1dc792ed5257903cb96cd", 0x78}, {&(0x7f0000004140)="9f04ab455179df6e27f7576ee51d423f2d16be0c3af4033fc5fdddb3c353d85635fd773017678830c1b2f392fa06ca78ba5718acf21f7e9bb6e0e4af70d9abc6157670e6d0c1db5fdde64378574f64bf2879a18e", 0x54}, {&(0x7f00000041c0)="a3", 0x1}, {&(0x7f0000004200)="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", 0x1000}, {&(0x7f0000000980)="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", 0x123}, {&(0x7f00000052c0)="38da10ca8acc40a5b9e7b4869ea731865fd03ac66b4cec361c0131df6c6d542146de067468686df26f9aba4a4df35ec8bfa4c8c0c2ac", 0x36}], 0x8, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r13, 0xee00, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r3, r14, r2, r9, r5]}}, @rights={{0x1c, 0x1, 0x1, [r7, r11, r8]}}], 0x68, 0x20044004}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r4, &(0x7f00000003c0)="cb85703175af38734ff0b14cebfba662f0008412a94163dfbc9c626386c6e2b12c562f807c7ba4cd97636087367b236d111a19ce1ea9067977dd3a0dac743822f9bd9da8d8206f1ead", &(0x7f0000000440)=""/199}, 0x20) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000800)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)='V'}, 0x50) 01:07:44 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x1010}, 0x24040010) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) [ 4064.679942][ T2834] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:07:47 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x1010}, 0x24040010) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) [ 4069.926880][ T2805] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:07:50 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd2a, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000a40)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x0, 0xda, "64aff13ddc1f98f1c30fcd47e23358169a89ae297f9b7688ed7bd9ff6eee30c8ec2776623ba9801d3d3a564ea5476442443a3d5bf1f05357eb04fd114e3d8aeb6c6884da95030db05b82afa7e2de5dd306c7e5cb3a6a2e806477702e25fee535c82e1ff766e4353fcd8aa2970d620189c044d10c3ff965c297f23d178246ea2af10459d2775e778c077e0405a8dd17f06926b39a86e1cb3dc1c08a052cae747d82efeab8f177dac4e19bc6ac3881aaad233c24787bb4d5b0497ed45a9a8ea617d43e720fc1087d77e4c9fdd348abe811951e847b6dd77dd12d2e"}}, 0xdf) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x0, {0x0, 0x129, "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"}}, 0x12e) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:07:50 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x1010}, 0x24040010) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) 01:07:53 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x1010}, 0x24040010) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) [ 4075.379135][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:07:56 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x1010}, 0x24040010) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) [ 4077.456783][ T3006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4077.467149][ T2997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:07:57 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd2a, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000a40)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x0, 0xda, "64aff13ddc1f98f1c30fcd47e23358169a89ae297f9b7688ed7bd9ff6eee30c8ec2776623ba9801d3d3a564ea5476442443a3d5bf1f05357eb04fd114e3d8aeb6c6884da95030db05b82afa7e2de5dd306c7e5cb3a6a2e806477702e25fee535c82e1ff766e4353fcd8aa2970d620189c044d10c3ff965c297f23d178246ea2af10459d2775e778c077e0405a8dd17f06926b39a86e1cb3dc1c08a052cae747d82efeab8f177dac4e19bc6ac3881aaad233c24787bb4d5b0497ed45a9a8ea617d43e720fc1087d77e4c9fdd348abe811951e847b6dd77dd12d2e"}}, 0xdf) (async, rerun: 64) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 32) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x0, {0x0, 0x129, "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"}}, 0x12e) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:08:00 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x1010}, 0x24040010) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) [ 4082.238605][T22660] nci: nci_stop_poll: unable to stop poll, since poll is not active 01:08:02 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x1010}, 0x24040010) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) 01:08:05 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) [ 4087.337325][ T3017] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:08:07 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd2a, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000a40)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x0, 0xda, "64aff13ddc1f98f1c30fcd47e23358169a89ae297f9b7688ed7bd9ff6eee30c8ec2776623ba9801d3d3a564ea5476442443a3d5bf1f05357eb04fd114e3d8aeb6c6884da95030db05b82afa7e2de5dd306c7e5cb3a6a2e806477702e25fee535c82e1ff766e4353fcd8aa2970d620189c044d10c3ff965c297f23d178246ea2af10459d2775e778c077e0405a8dd17f06926b39a86e1cb3dc1c08a052cae747d82efeab8f177dac4e19bc6ac3881aaad233c24787bb4d5b0497ed45a9a8ea617d43e720fc1087d77e4c9fdd348abe811951e847b6dd77dd12d2e"}}, 0xdf) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x0, {0x0, 0x129, "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"}}, 0x12e) (async) write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x0, {0x0, 0x129, "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"}}, 0x12e) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:08:08 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(0xffffffffffffffff) 01:08:09 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(0xffffffffffffffff) 01:08:10 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(0xffffffffffffffff) 01:08:11 executing program 0: r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) [ 4091.978576][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 4093.568809][ T3145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:08:13 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x3}, 0x4) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') setsockopt$inet6_int(r4, 0x29, 0x0, 0x0, 0x0) read$nci(r4, &(0x7f0000000900)=""/254, 0xfe) 01:08:14 executing program 0: r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) 01:08:18 executing program 0: r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) 01:08:21 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) [ 4102.068183][ T3170] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:08:22 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x3}, 0x4) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') setsockopt$inet6_int(r4, 0x29, 0x0, 0x0, 0x0) read$nci(r4, &(0x7f0000000900)=""/254, 0xfe) [ 4105.110428][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:08:25 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) [ 4106.669071][ T3201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:08:26 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 64) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (rerun: 64) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 64) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async, rerun: 64) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x3}, 0x4) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') setsockopt$inet6_int(r4, 0x29, 0x0, 0x0, 0x0) read$nci(r4, &(0x7f0000000900)=""/254, 0xfe) 01:08:28 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) [ 4108.807460][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 4110.568183][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 4110.568872][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 4110.569463][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 4110.570030][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 4110.570449][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 4110.572289][ T3211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:08:30 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="38226023fc0000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:08:31 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x0, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) 01:08:33 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x0, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) 01:08:35 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x0, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) 01:08:37 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) 01:08:38 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="38226023fc0000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:08:39 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) 01:08:40 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) 01:08:42 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x30004003) close(r0) 01:08:42 executing program 1: openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="38226023fc0000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="38226023fc0000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:08:43 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x30004003) close(r0) 01:08:45 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x30004003) close(r0) 01:08:47 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) 01:08:48 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) 01:08:49 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:08:50 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(r0) 01:08:52 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) close(r0) 01:08:53 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) close(r0) 01:08:55 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) close(r0) 01:08:56 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(0xffffffffffffffff) [ 4137.976639][ T3613] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:08:58 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:08:59 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(0xffffffffffffffff) [ 4141.930146][ T3651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:09:01 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:09:02 executing program 0: syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30004003) close(0xffffffffffffffff) 01:09:05 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f90424fc602f1a06000a740107053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 01:09:07 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xe2a4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000002640)={{r0}, 0x0, 0x0}, 0x20) 01:09:10 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000020000000000000000000850000000700000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x2a00000, &(0x7f0000000580)="d6dc86ec7a57225e4a6dbf797606dd732d31e5dd94476b4d8f21cfafbef4d2961bd926bfe76b46aeb60f192e23a7061dc91d63", 0x33, &(0x7f0000000680), &(0x7f0000000880), &(0x7f0000000dc0)="26b426be7ca77332d95d61a244a8d9581e232663f18eae778ed5fd379baad6bbeb6b52d4eb63f82c9cc92d531347e15cefa7cfeeae9880f23fde66f747a6fd8055582664786aee2328f3090c79c9cf6388c870cf1c4b52bf8800") sendmsg$unix(r2, &(0x7f0000000c80)={&(0x7f0000000500)=@file={0x1}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000300)="e7db843f5624edeb72be013b641cc1d641b6ccf1928556d0b748b8", 0x1b}, {&(0x7f0000000400)="f9444679609d73", 0x7}, {&(0x7f0000000980)="58e0de61aa01f905e7e54e52cb3ddede56cefc8a1399f97a3d8519862c77ab45f75bd41841ff038282281856026618e18331b8e76875aeb634ac37701b94d09125a7a5c4a1c292b1bdb6483a583be518e862cf24f9ee8bc30047de31968468283a4901f280f52b1f4d7aaaea1dd055966a6139abeabac9db622d0efda3d3bbae93e7ae80ae624434ab5fde82ef8c335cebdb8e78fe3f3616efe31b5ac66806d846d146bdd09248047743c35c631e7a7c8e05c2dbec6ba53af4b7322bb9f319c6cae13c960b7b4c5a050fc1826ca01a0c0cc01209ea162c", 0xd7}, {&(0x7f0000000800)="b04026a21d66849a0d0dc7afe5938257e52da4f3334514490b15bd23600779884f4f0c2eb8b72a3219167732a01009dc6f1c", 0x32}, {&(0x7f0000000b80)="604beba00dd883a303c6e67ec34e669cc81188d8635bba5e5a878de044480d22922364f5db82f916914f8e74c00ddc8f8fdfeb9cc6abd1eb2e8a5a888eee6b7cdf9889ca30afc39b6f8c65c088943ed0c52a826661584ec380950b4de357e6ba7b2ec6997430b10da212176765fa076826e0ac48372d1ce6c75d53dcd677bb672ad977e9ccbfeba5546c5b4106e0032758c80377f6ccdea795dfb6537f728da9fe4b46d7546c016a8841f8e87a4bdda4f8e705dd25e116310e56dbb88e8245bba89c1c8d84b389", 0xc7}], 0x5, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0x38, 0x1}, 0x20000000) 01:09:13 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, 0x0, 0x0) [ 4156.622121][ T3684] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:09:17 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000040)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x0, 0x2, 0x5, 0x2, 0x1}, 0x4) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$BLKPG(r4, 0x5452, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0}) read$nci(r4, &(0x7f0000000900)=""/16, 0x10) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x0, 0x2, 0x5, 0x10}, 0x4) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:09:18 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000180)=""/213, 0x1000000, 0xd5}, 0xe20) 01:09:21 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) 01:09:25 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x0, 0x5f, 0x30]}}, &(0x7f0000000180)=""/213, 0x29, 0xd5, 0x1}, 0x20) 01:09:29 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x2, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xf4240}}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x83, &(0x7f0000000100)=""/131}, 0x90) 01:09:30 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (rerun: 32) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000040)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x0, 0x2, 0x5, 0x2, 0x1}, 0x4) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 64) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$BLKPG(r4, 0x5452, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0}) (async, rerun: 64) read$nci(r4, &(0x7f0000000900)=""/16, 0x10) (async, rerun: 64) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 32) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x0, 0x2, 0x5, 0x10}, 0x4) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:09:31 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x4, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x27}}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x83, &(0x7f0000000100)=""/131}, 0x90) 01:09:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r0) [ 4174.860197][ T3918] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:09:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 01:09:35 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000040)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x0, 0x2, 0x5, 0x2, 0x1}, 0x4) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$BLKPG(r4, 0x5452, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0}) (async) read$nci(r4, &(0x7f0000000900)=""/16, 0x10) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x0, 0x2, 0x5, 0x10}, 0x4) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:09:36 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, 0x0, 0x0) [ 4177.536876][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:09:37 executing program 0: bpf$BPF_PROG_DETACH(0x4, 0x0, 0x0) [ 4178.685288][ T4037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:09:38 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000900)={0x2b4, r5, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2dadb2b5ee245eb3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2f33da7d428121cd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ad0f4657a1c46110"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b661604b214f7886"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe405}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="11afa60355a4ad10293d5e7ca83136cc195d1c636701dc1035924963182cfeba"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8c9f13757be9ae5ba288aff7530318a5"}]}, @NL80211_ATTR_REKEY_DATA={0xd0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="62a7058db043b836174f8c658312776b3a6994bc4bea0197109a9d8908e46849"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "32a3529ecf0317c4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8f79f2519140263ded7980d969314269"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ddec9af7631f04b1b3c03efc73edad2d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b9b8d43175c534000859b635e341cf4c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="af3f9f48a01ef48f61085a7fd7888a9d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9724723fc5e479966caee1abfa363b4a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "02e733cd28734f84"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="274d404ed108a64b2b8102fd772c07880b5c181ed00da228f0f5606faa1a4546"}]}, @NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "90f83a26ff68e53a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf79}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f500af6a8bc47bf445ca6e64829082aa2d43800d63afb290"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe2}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5b626165d3ee3811fa6f66b8122d280c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d73642a0a2b50aec468e9613e3e3da7db602b1b00e483a69f7ddb7ad0a90ad58"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="acf5043e9608cc1cc6ca8343baae858c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4e82552ae63ab7c485f287439583e7d9"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9be72e7fd76291b50a6171714482e393607adb283ea9ad4c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fd91bdefbb51ecb136d7f46f88aad809"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb1ca9770371ca7119943923e5144aa5"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a4319bee9e0e95455c1e9841fbf3f9ceb5811d5947581dd3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0abd04ee82e68c15121521ccfaf3f132"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e66d4104961afb96"}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x800}, 0x20040040) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r2) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x40004) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:09:39 executing program 0: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x1a00) 01:09:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000c40)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001340)={&(0x7f0000001240), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x28}}, 0x0) 01:09:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) [ 4182.288947][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:09:43 executing program 0: r0 = io_uring_setup(0x5166, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) [ 4184.129199][ T4069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:09:44 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000900)={0x2b4, r5, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2dadb2b5ee245eb3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2f33da7d428121cd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ad0f4657a1c46110"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b661604b214f7886"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe405}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="11afa60355a4ad10293d5e7ca83136cc195d1c636701dc1035924963182cfeba"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8c9f13757be9ae5ba288aff7530318a5"}]}, @NL80211_ATTR_REKEY_DATA={0xd0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="62a7058db043b836174f8c658312776b3a6994bc4bea0197109a9d8908e46849"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "32a3529ecf0317c4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8f79f2519140263ded7980d969314269"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ddec9af7631f04b1b3c03efc73edad2d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b9b8d43175c534000859b635e341cf4c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="af3f9f48a01ef48f61085a7fd7888a9d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9724723fc5e479966caee1abfa363b4a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "02e733cd28734f84"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="274d404ed108a64b2b8102fd772c07880b5c181ed00da228f0f5606faa1a4546"}]}, @NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "90f83a26ff68e53a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf79}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f500af6a8bc47bf445ca6e64829082aa2d43800d63afb290"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe2}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5b626165d3ee3811fa6f66b8122d280c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d73642a0a2b50aec468e9613e3e3da7db602b1b00e483a69f7ddb7ad0a90ad58"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="acf5043e9608cc1cc6ca8343baae858c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4e82552ae63ab7c485f287439583e7d9"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9be72e7fd76291b50a6171714482e393607adb283ea9ad4c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fd91bdefbb51ecb136d7f46f88aad809"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb1ca9770371ca7119943923e5144aa5"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a4319bee9e0e95455c1e9841fbf3f9ceb5811d5947581dd3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0abd04ee82e68c15121521ccfaf3f132"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e66d4104961afb96"}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x800}, 0x20040040) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (rerun: 32) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r2) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x40004) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:09:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 01:09:47 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 01:09:50 executing program 0: syz_io_uring_setup(0x75eb, &(0x7f0000005100)={0x0, 0x0, 0x4}, &(0x7f0000005180), &(0x7f00000051c0)) 01:09:56 executing program 0: syz_io_uring_setup(0x75eb, &(0x7f0000005100)={0x0, 0x0, 0x4}, &(0x7f0000005180), &(0x7f00000051c0)) 01:09:57 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000900)={0x2b4, r5, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2dadb2b5ee245eb3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2f33da7d428121cd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ad0f4657a1c46110"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b661604b214f7886"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe405}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="11afa60355a4ad10293d5e7ca83136cc195d1c636701dc1035924963182cfeba"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8c9f13757be9ae5ba288aff7530318a5"}]}, @NL80211_ATTR_REKEY_DATA={0xd0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="62a7058db043b836174f8c658312776b3a6994bc4bea0197109a9d8908e46849"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "32a3529ecf0317c4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8f79f2519140263ded7980d969314269"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ddec9af7631f04b1b3c03efc73edad2d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b9b8d43175c534000859b635e341cf4c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="af3f9f48a01ef48f61085a7fd7888a9d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9724723fc5e479966caee1abfa363b4a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "02e733cd28734f84"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="274d404ed108a64b2b8102fd772c07880b5c181ed00da228f0f5606faa1a4546"}]}, @NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "90f83a26ff68e53a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf79}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f500af6a8bc47bf445ca6e64829082aa2d43800d63afb290"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe2}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5b626165d3ee3811fa6f66b8122d280c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d73642a0a2b50aec468e9613e3e3da7db602b1b00e483a69f7ddb7ad0a90ad58"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="acf5043e9608cc1cc6ca8343baae858c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4e82552ae63ab7c485f287439583e7d9"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9be72e7fd76291b50a6171714482e393607adb283ea9ad4c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fd91bdefbb51ecb136d7f46f88aad809"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb1ca9770371ca7119943923e5144aa5"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a4319bee9e0e95455c1e9841fbf3f9ceb5811d5947581dd3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0abd04ee82e68c15121521ccfaf3f132"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e66d4104961afb96"}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x800}, 0x20040040) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r2) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x40004) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:10:00 executing program 0: syz_io_uring_setup(0x75eb, &(0x7f0000005100)={0x0, 0x0, 0x4}, &(0x7f0000005180), &(0x7f00000051c0)) [ 4202.194222][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:10:03 executing program 0: syz_io_uring_setup(0x75eb, &(0x7f0000005100)={0x0, 0x0, 0x4}, &(0x7f0000005180), &(0x7f00000051c0)) [ 4203.993635][ T4209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:10:06 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000005e00), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5) read$nci(r4, 0x0, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010100000000000000000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x5d, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x0, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x55, 0x1, r7}]}, 0x1c}}, 0x2) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:10:07 executing program 0: syz_clone(0x81140000, 0x0, 0x0, &(0x7f0000009e40), 0x0, 0x0) 01:10:10 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 01:10:13 executing program 0: syz_io_uring_setup(0x6e6a, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 4214.468266][ T4233] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:10:16 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) [ 4217.794343][ T4222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:10:18 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000005e00), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5) read$nci(r4, 0x0, 0x4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010100000000000000000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x5d, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x0, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x55, 0x1, r7}]}, 0x1c}}, 0x2) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:10:20 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@prinfo={0x14}, @dstaddrv4={0x10, 0x84, 0x9, @remote={0xac, 0x14, 0x0}}], 0x24}, 0x0) 01:10:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@authinfo={0x10}], 0x10}, 0x0) [ 4226.316967][ T4360] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:10:26 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x3}, 0x1c) [ 4227.510096][ T4353] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:10:28 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000005e00), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5) (async) read$nci(r4, 0x0, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010100000000000000000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x5d, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x0, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x55, 0x1, r7}]}, 0x1c}}, 0x2) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:10:29 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000000), &(0x7f00000000c0)=0xb0) 01:10:32 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0x8) 01:10:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000380)=ANY=[@ANYRES32=r2], 0xff9b) [ 4236.396316][ T4481] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 4237.889442][ T4487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:10:37 executing program 0: open$dir(&(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 01:10:38 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00ca'], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="e7ffff51906416659bbb46153dff00"], 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:10:41 executing program 0: open$dir(&(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) [ 4242.758250][T20736] nci: nci_rx_work: unknown MT 0x7 01:10:43 executing program 0: open$dir(&(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) [ 4243.430819][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 4245.646927][ T4609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:10:45 executing program 0: open$dir(&(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 01:10:46 executing program 1: openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00ca'], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="e7ffff51906416659bbb46153dff00"], 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:10:48 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x1f, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) 01:10:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x1f, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) [ 4253.619686][T20736] nci: nci_rx_work: unknown MT 0x7 01:10:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x1f, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) [ 4258.397547][ T4629] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:11:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x1f, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) [ 4263.676243][ T4645] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:11:04 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00ca'], 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="e7ffff51906416659bbb46153dff00"], 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:11:05 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x903, &(0x7f0000002280)={0x0, 0x7}, 0x8) 01:11:08 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x25, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000040)=0x8) 01:11:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) 01:11:13 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x0, {0x0, 0x1, 0x20, 0x4, 0x3f, 0x4, 0x3, 0x1, 0x20, "4f0770e4fc3fdd587ab91e76aa9258a244dbcc132714060092d16e5a24fc9948"}}, 0x31) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:11:15 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x10, 0x2}, 0x10) 01:11:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002280)={&(0x7f0000001200)=@in={0x10, 0x2}, 0x10, &(0x7f0000002240)=[{&(0x7f0000001240)="610b46909e3f9b17c55404169a8f942808919e0ce9da189edb951a319c60b484d6c9e95f38b009e7bad9e9c3328305ba9a08495be9b7070ec6fbb290a9c8f1030971077618f25a9b855a65c6d3272bbaf8d558448800e55d099c25a44c14269a133bd9c2e180f0720d75d89972d5da3ff6e07430f195a685f4c94e1feea65f414ca083e5e44eee09cdf2f84eb21c63690223ece6bb4c082ee8324c2638f547188081cc298781aa33ba19c686f3e213ff37a5f66d2d5c25194f57ed40672ed6414c6df19e60c9d51946bf6484f8d0d605430d0fc5a8681632d326f4174a805ae86daef306f9a3b7f7871829fc9da02100831fd0c42e918169b11b5f2a25d2d2163d3f445e0aa09f13ad91ea6f40c2380942aea44216793fd8d3032aa48265ac9945dfbceb31fda390af0a7397d32d3dbaed58a55f107b0f860de7c3508206017696b0e56e99a7dcfccd5215d0f64575d4cf25cd1f049d68dad8afb1e65dfb7264c13029b0a6af80f318c5a70b1618815dd1bb528f600bf0ee6d8284acac2f2ab6db81fc72a2a340bf10e4d055ae64f08cd9a3c94f10def216873530e086e47836553905bdb68080d97368c47658fd7ad3a50927d323227f36295dc29e5c94015bc71d6ba090f205272d349c31afc3bd6bb13c2dfe069d54932cb4b1e6ba00b207e00976f8ece2e2c69926ebdc8558dd8b36fb0265133a8fefb099d21124c2e1aed8ff73844fd9726b603b1618a701ea5673c69cda0cc7a9dedf59ee1d2c8a49ff9f3b313c44019bf34bb9e9f6422c77f5b3c72a3a780f3298749fad7a502e7045310de426872e363a44cefc54eaa257de6d44236ad24ef354551b36212f8580d7e015b56c5f9fb42e2edcc64b76f2247bf5603c128abf4e5b8932f7446bcb9c5827ba1b8a406af2abc75645b72fb2e9c4be24dde52aaab106bac274791e9f67f9fde119e2416a797771edfb0407b29f710bae7e8dbe9bde8976990d108b7f978d0f7ecc095314948cab01f7357437d4f83b3b4d5c363777faf07b548bd80f040a0c3521114df4a72286240263031d69b52bccf03145f410cbf9e64d24d2cd715e0d032489e7bd6d4a087620c5f438c11954ce6da0e075f2c2c34e7b7d467d4336c46565fda4e1e1ef9d44dee7ed03908d0dae00daa55a336e1a3fd034769d14e5a4a7ce24dd3006bab19e9b4a1a722ff36402d113b80997e755a4f92126bdb8941db1a22d0b7162a1e5408a77e4688ec3858458cce69e788731598149b1228c6a5ab14b6e102d50fd66fdcacb72a9868ab1cc1a2c054ff0ff928ba6c8bd31288075a493768d06a67f59d0936abe9474371fca001e7faa44512722d459007a1660a1345e253d3e8ff64f1ea424290cdc6849610e2d144402020f30aea4659eedaf7938adf00076f688dec0d102efc99bddadd58531f03f0b2e57b70589487c54bfef308aa6b2c5ce8434bd5ca6214ca0166835d648ac66f397a8ca147d5af6938936c06ffd92e69c20f65f7f2b4004e9f572f2636c9af8750da34f2a98e7a00b709783a7edbc8821cd95051c568c54284ae0a60ce15e6d1fb65483b0c00dfb2108f3d78621ed2a74f7226cbca02310142c5bba8caff5b44f42fbd45db7022d672dffb7c19ccd8192c4411b4fc37528173f3285ebc37d43c6c59c13771bfae3eeb79796f3a15a3b8935ce8edf916a150f96c5980f65c5815afc9b90f2c2f03f6b544cd5375fbe34d9732eed6e4a4b24f50bc0dd47e9e58c9a182946630fefc565032264eb4e9706efc95855e7de574e63acd4561ed89ab27db04b523aefa257c299bfc7b8c69c6ab67c1c52bb0d3ce7ed5f6d6ebe4841904f441d41cee725b8d9b095343e295c40f39f999fff89b42eeecec4841da5340ae08d9c4aeb583a440ef62a9403b160421afc32a6b32eb55156363c87b5ece1cd531bb3e229ee23feb2364e0430f39fccb7272c7449a5f8cf1475d661786796e0ed38459ee9021d6647d891c0b73091d6a4ed86d9bb4bbb92bb75dcff9167f701efad03114fc6608a0dbbe600aac9f484fd7763385e928d29d752ba69aaababf123dfd9c7b0064f23a92d4868c61ad727223f3c2507d62b7e03f0d9a5a11dfe36bc0bccaf36206cd78f50bd0c4b571635890016f411d5b8765016cf3c90f19d88068155ff1ea51080cfd85068cdabde4132d680debcf883178ee264c0e53771e0bcdd9ff0acbb8752488e94cb93fc86d1879e62c165f7f402202311a362536e5f4302cf48436427a1de680772741d1c2a93be4e6d4ddb21d622bbccafc6f4f06c7071b33730fbaa09104667c62e68b2b05287d910894a3bc4151b6c244ddc5a92645ff241f1a39b8b584b36465e0b4e3301e398c5ca2a06075cbacaf42d522806e3473cb172a3ecc60252f984ec4eef19ce85b22068dc1a89d4ee62f3e20936133a51fb14f96c8eae31cb2a418a97d620e8454b9667d317634f04e7d417bbce276a1e139add090492ac02a89b416f9e91fafd261c72ac498417c1d6a9d0c99addfa26148e0f0bb8a72de7acc2deea2d27bdd510349088ba1f17957160cd922d393dcd6672a1ad38ee6bdbb79b20a36c4a54eacb0e3af8df7d5e096bdbb4798821e9b1e5c5d155bd5a054387fdf2f95a5d299b58b7269bb38b4db2be254b0fcf9adbde11885def32e470e2838476625fa6e98dc46e446ce397697db4260f70f801f46fc8a7f7ae031474aa4faa4eaa1d4d32fefff2caa5d18a5a1dcf53ec92162fc09d2d831d046f15fd874ecea58e94430315eef0df27f443fd3fdaae70ce1c42358168dc0f8bdbcdbf23f392e781d6ee3b67c644b9f13ba324082ca2a92178c3582ee43599853a5e3ce0c59e05a8917215f0f7cfe5999bbf088902390239708e3efe0f76e2d3365740fec28173c44d98545e5e73209d358ffae851566e89dc5007979cc13be0ac644d5ffd377aa5ba50787af36e49cc2b3cdf458059b81fda2855219a022ea7d06fce1b15b733cbae122200a6f69a8acb0d70d58018ef8f8161df7e9a765c361b83639e1a8cd1295102715cbcce81e006c1c6d4a369bce7431b84897d7029ccbf2b25fe494822964180a057312d9fecb02337864eb2febc09605001464357f247aff26290447008bda9ee0f0b7b5e3fdb92d0c93714c396fa05b5b64c1feb8931048964050816237e6ec90e91f1274a4ff0e82b47406f41143b4e2ea9b8e8557d94ee5a4e8aaef75479a7f0f3ae609f8d961906d5f2f12eaf75ba52a26972d2609e12010def87f2523e13f11e7753fd5c0b45a2f1a48aa9d888ea507257dfaf4c675a242adbee45aac596532d04945244fc69353415f249cc246e8c14d1774d5fd83e87e1c2c857b0d4267c3d0dae772ce730a4c5e681cea8a938368eb6025232f9f51d985e031db73f36f0b32bff17563218d5fee81efe638fcfd8ce5e7bb9cf729d7e70c30d283297064f97b86909491d3591dafdc1abb72b31851c03825d46b667bf8440ac591a33fca9b86dde0a7d9562b187db5440a39887ff97686a91244b74544dad77223de4927924918bcf219b823d8a15780f2473de92b6899f2a5fc49b38d695eb8d8f46394d20745eb9dfd8b1beae3b1dc4261416d47311b3cfb48a1d67d57b808571b28aa942819166155dddecb07ebda43487bf7bcd2e022eca1c2e3835d825619813efb1942c491a52716f86c7d3fc660802f37b88c68acfb180dd2ed43abd84bce115655cf96a120d676140c0e3fb38e5efd235f21fe0e5ce6ce6f22538aace66fd0896a9af5338e22ce1477406e8df6ebed6d3b1ee0cac7ba492160c798dd94edb09c246182aa7f5aeb81dd729e2e75187b8a051c55f397817394a490dc970bdd92bd87cb78e4d6bb78be7d773d02dbaf9b1971f15a4f98ee1347d3d5805a64214f444cd19487153eb2017bd0a95ba3dc16d0fea4e5d4bfa469acb86adabb98fc5ca10bf5676504e964be9ead552f4ede0487f907766a569d13a42031e44db6d1424224fd2518f618554557c98127b8a2769d7c82d0bc36b9ec1e3f4c7a13c12fe96516df578521eb3487679a51a399ce64199697c81c7af41ccbe1175ca51e0aff2e729e8661766ca87b321c5686df97733b7cfcecccab020696f3048d54e76f8e0f1ac461c3df1130fd897b0e28256514d7aee895ea09f3c500b23624c92a5041104d7464050a8e4d9c62bffc35afebc681d93bd668a7f343699e0a08093bc7704f6ad003d8b21a9bcfe31cadc7119f510b98e7f0ac04660d42346db90876df0ea64c21f2cfb2ca7b733665c57683511ecc3a248d318e4f06990dbcb32c851431104c85358a76830d874c9485863e4c14ae61442b3bc06b656cf2a962e6c27e98900ed6e82e43bcc83c21e585fe773f513bb8aba6475dad6daa202f4ba4f5f1da08e6954fd2c5feddc4cf86cd6c5aff0904cdb0d20d717b9ec1f0c6432aa80d533620dc73660a060007af92e39f066f78466f9ddb81ba284325c2ea14ada20842075396135e1288e0c19ededec0ad63674ae1faf74e759204c45b0bc117a964602e2a637a3b1110ec217de1fc9549599809acb6215f1d08513ad01e9837f3b1322c417fed074f2e175f67ddcd865828eadf6158ee60bf8079ce237dc98426e228cb969e1b7eced28a7492a2ebbfe4644c39b52cfcba89fbebdc3acf436a5443ed432dccdefc9c69c0e41babeb284500ae463c9278cd0bfa17b218292b8163c0f99c69ea2901e74929d2e42fbc4e866d980a916916810c66f4ac11a23fea1fb6839e1d5d32cb760fbed98ac98aef811cc2c8bdcc69ff773f9b963f9a326668a790150a2515d6e6e62a3d6f45e59208ac855c3d9736da032daa303993e09a7058a19d4394b6c19a1f7d9aef5411dd501895be9a34425a080e97101e08e2aff096c88e2a39702929ba296c5eacbf6ae60d8df6b5f28ff52f3ddcdd38ca971aa048880a982317a7bbb5738347269567df66ecbf293e3c981945b50a53f522b4f5e637f5a3d32cbd71f07df3392195fee94bc9c7a42c78156293d33caab76c1600357489be1921f738d7885e9c36f4e3462ad5b68ef42586ffdfc35eee13a516efc5400926406b3ad7a7b9faceb5e03d20b4cc92746a863d67f48b6e309d38332d8503d43c8438c95b87da2b01d718c33b3e72cdc29a8eb10a7ca8cc963df60003c23d0f4de346e08274b6d82ab52070a28d5601592560e6424c431ce6d23ca810a14c942325b58a86db59dc15bf8257d9c1946a38f9dc047ef7b99dba2b0907cf2a217c43ea071848e5d35696db754daef99b963efc36f194c87c1a2291d757683933aec3395889fb3f357c602c699d7a189ee7a863a4d1dffedb467d6bd44760117e40453c8c5f10fa0743d932c5d0286d3119f09b11a25f76b4c90f0a493f535969e43b2e6799264eb5512ea75cb57f983f114fef784f0f9a02686d247ef894885717266c0b64a5073f3b2cbba9fd4fda94b16204a12abb5165ed78883a172f498063209fd9550fe2791e012c4d1c9769ceb901393ec2b5376414fa45417d071881a08aa1971b1acb50c46871663b00a20869a1c6b052da9a36cef146468431ac29cfeb7237482f6c2f373ca320b305a8abddfd39b6c1e17b776b7e5599a21e6d6fa1b76bb542142dd14457451a8a1481f2df48bde98e47d47c12f0d941ede53f1ea5cb54d32dd7bf05eb600823d003fd9571460a036bb7957f6f1050c6e9f61bb5e28c5f354ee14d89caaa8f39245005d018849796946db80a155ccbd2b666f0eb5b5360b44b5c78e30375ce653f3ce1401fd", 0xff8}], 0x1, 0x0, 0x0, 0x20001}, 0x80) [ 4283.116200][ T4876] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:11:23 executing program 0: getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x900, 0x0, &(0x7f0000000840)) getresgid(&(0x7f00000002c0), 0x0, &(0x7f0000000340)) 01:11:23 executing program 1: openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x0, {0x0, 0x1, 0x20, 0x4, 0x3f, 0x4, 0x3, 0x1, 0x20, "4f0770e4fc3fdd587ab91e76aa9258a244dbcc132714060092d16e5a24fc9948"}}, 0x31) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x0, {0x0, 0x1, 0x20, 0x4, 0x3f, 0x4, 0x3, 0x1, 0x20, "4f0770e4fc3fdd587ab91e76aa9258a244dbcc132714060092d16e5a24fc9948"}}, 0x31) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:11:26 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getpeername(r0, 0x0, &(0x7f0000000040)) [ 4290.902525][ T4892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4290.923007][ T4896] nci: nci_activate_target: unable to find the selected target [ 4290.931359][ T4906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:11:31 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x0, {0x0, 0x1, 0x20, 0x4, 0x3f, 0x4, 0x3, 0x1, 0x20, "4f0770e4fc3fdd587ab91e76aa9258a244dbcc132714060092d16e5a24fc9948"}}, 0x31) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:11:31 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000002500)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000002600)=@string={0x2}}, {0x0, 0x0}]}) [ 4294.729196][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 4295.831328][ T4927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:11:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000280)={@private0, 0x0, r3}) sendmsg$nl_route(r0, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@getstats={0x1c, 0x5e, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x4}, ["", "", ""]}, 0x1c}}, 0x400c1) r4 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) read$nci(r4, &(0x7f0000000200)=""/100, 0x64) write$nci(r4, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r4, &(0x7f00000002c0)=""/100, 0x64) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r4, &(0x7f0000000380)=""/100, 0x64) write$nci(r4, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r4, &(0x7f0000000500)=""/100, 0x64) write$nci(r4, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r4, &(0x7f00000005c0)=""/100, 0x64) write$nci(r4, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r4, &(0x7f0000000680)=""/100, 0x64) write$nci(r4, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r4, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r4, &(0x7f0000000840)=""/100, 0x64) write$nci(r4, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:11:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x40049409, 0x0) 01:11:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) 01:11:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001080)=""/91) [ 4307.221158][ T4931] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:11:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000280)={@private0, 0x0, r3}) (async) sendmsg$nl_route(r0, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@getstats={0x1c, 0x5e, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x4}, ["", "", ""]}, 0x1c}}, 0x400c1) r4 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) (async, rerun: 64) read$nci(r4, &(0x7f0000000200)=""/100, 0x64) (rerun: 64) write$nci(r4, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r4, &(0x7f00000002c0)=""/100, 0x64) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 32) read$nci(r4, &(0x7f0000000380)=""/100, 0x64) (async, rerun: 32) write$nci(r4, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r4, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r4, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r4, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r4, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r4, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 64) write$nci(r4, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 64) write$nci(r4, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r4, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r4, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:11:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000980)=""/74) 01:11:52 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x34000}], 0x1}}], 0x1, 0x0) [ 4315.726710][ T29] audit: type=1400 audit(4315.650:412): avc: denied { name_bind } for pid=4966 comm="syz-executor.0" src=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 01:11:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x14, &(0x7f0000000140)={@broadcast, @remote, @val={@void}, {@mpls_mc={0x8848, {[], @generic='bi'}}}}, 0x0) [ 4318.406273][ T4957] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 4318.408003][ T4957] nci: nci_start_poll: failed to set local general bytes 01:12:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005"], 0x34}}, 0x0) 01:12:04 executing program 0: bpf$BPF_PROG_DETACH(0x14, &(0x7f0000001880)={@map}, 0x20) [ 4326.591802][ T4948] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:12:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') r1 = socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000280)={@private0, 0x0, r3}) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@getstats={0x1c, 0x5e, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x4}, ["", "", ""]}, 0x1c}}, 0x400c1) (rerun: 64) r4 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) read$nci(r4, &(0x7f0000000200)=""/100, 0x64) write$nci(r4, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r4, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 64) read$nci(r4, &(0x7f0000000380)=""/100, 0x64) (rerun: 64) write$nci(r4, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r4, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 32) write$nci(r4, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r4, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r4, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r4, &(0x7f0000000680)=""/100, 0x64) (rerun: 32) write$nci(r4, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r4, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async, rerun: 32) read$nci(r4, &(0x7f0000000840)=""/100, 0x64) (async, rerun: 32) write$nci(r4, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:12:07 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:12:10 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:12:13 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) [ 4337.117192][ T5073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:12:17 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:12:20 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) [ 4342.516392][ T5084] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:12:23 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, &(0x7f00000009c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000900)={0x4c, r3, 0x609, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x20}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x52}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x1c}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x1c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2404c005}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d817fb1f7050069e0400ee", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f80)={'ip6gre0\x00', &(0x7f0000000f00)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, @mcast2, @private1, 0x40, 0x8, 0xbd, 0x7f}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000010c0)={'gretap0\x00', &(0x7f0000000fc0)={'syztnl1\x00', 0x0, 0x30, 0x8000, 0x0, 0x7, {{0x38, 0x4, 0x0, 0x3d, 0xe0, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x3c, 0x2f, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf9}, {@multicast2, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x20}, {@multicast1, 0x4}, {@empty, 0x48ddd42f}, {@multicast2, 0x1}]}, @generic={0x83, 0x10, "db9cb06413f5c6eca06af48feb37"}, @ssrr={0x89, 0x27, 0xe9, [@local, @empty, @broadcast, @remote, @private=0xa010100, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote]}, @end, @timestamp_addr={0x44, 0x1c, 0x1b, 0x1, 0x3, [{@private=0xa010102, 0x81}, {@empty, 0x42}, {@empty, 0x8000}]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x7}, {@empty, 0x5}, {@loopback, 0x800}, {@multicast2, 0xdbde}, {@dev={0xac, 0x14, 0x14, 0x39}}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x7fffffff}]}, @rr={0x7, 0x7, 0x4b, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000012c0)={&(0x7f0000001140)={0x158, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfd}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8084}, 0x24000010) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:12:24 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) [ 4346.813152][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:12:27 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) [ 4349.026614][ T5197] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:12:29 executing program 1: openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, &(0x7f00000009c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000900)={0x4c, r3, 0x609, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x20}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x52}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x1c}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x1c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2404c005}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d817fb1f7050069e0400ee", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f80)={'ip6gre0\x00', &(0x7f0000000f00)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, @mcast2, @private1, 0x40, 0x8, 0xbd, 0x7f}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000010c0)={'gretap0\x00', &(0x7f0000000fc0)={'syztnl1\x00', 0x0, 0x30, 0x8000, 0x0, 0x7, {{0x38, 0x4, 0x0, 0x3d, 0xe0, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x3c, 0x2f, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf9}, {@multicast2, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x20}, {@multicast1, 0x4}, {@empty, 0x48ddd42f}, {@multicast2, 0x1}]}, @generic={0x83, 0x10, "db9cb06413f5c6eca06af48feb37"}, @ssrr={0x89, 0x27, 0xe9, [@local, @empty, @broadcast, @remote, @private=0xa010100, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote]}, @end, @timestamp_addr={0x44, 0x1c, 0x1b, 0x1, 0x3, [{@private=0xa010102, 0x81}, {@empty, 0x42}, {@empty, 0x8000}]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x7}, {@empty, 0x5}, {@loopback, 0x800}, {@multicast2, 0xdbde}, {@dev={0xac, 0x14, 0x14, 0x39}}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x7fffffff}]}, @rr={0x7, 0x7, 0x4b, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000012c0)={&(0x7f0000001140)={0x158, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfd}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8084}, 0x24000010) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000012c0)={&(0x7f0000001140)={0x158, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfd}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8084}, 0x24000010) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:12:31 executing program 0: setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:12:34 executing program 0: setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:12:38 executing program 0: setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:12:40 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, &(0x7f00000009c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000900)={0x4c, r3, 0x609, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x20}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x52}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x1c}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x1c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2404c005}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d817fb1f7050069e0400ee", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f80)={'ip6gre0\x00', &(0x7f0000000f00)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, @mcast2, @private1, 0x40, 0x8, 0xbd, 0x7f}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000010c0)={'gretap0\x00', &(0x7f0000000fc0)={'syztnl1\x00', 0x0, 0x30, 0x8000, 0x0, 0x7, {{0x38, 0x4, 0x0, 0x3d, 0xe0, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x3c, 0x2f, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf9}, {@multicast2, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x20}, {@multicast1, 0x4}, {@empty, 0x48ddd42f}, {@multicast2, 0x1}]}, @generic={0x83, 0x10, "db9cb06413f5c6eca06af48feb37"}, @ssrr={0x89, 0x27, 0xe9, [@local, @empty, @broadcast, @remote, @private=0xa010100, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote]}, @end, @timestamp_addr={0x44, 0x1c, 0x1b, 0x1, 0x3, [{@private=0xa010102, 0x81}, {@empty, 0x42}, {@empty, 0x8000}]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x7}, {@empty, 0x5}, {@loopback, 0x800}, {@multicast2, 0xdbde}, {@dev={0xac, 0x14, 0x14, 0x39}}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x7fffffff}]}, @rr={0x7, 0x7, 0x4b, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000012c0)={&(0x7f0000001140)={0x158, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfd}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8084}, 0x24000010) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:12:41 executing program 0: r0 = socket(0x0, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:12:45 executing program 0: r0 = socket(0x0, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:12:48 executing program 0: r0 = socket(0x0, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:12:50 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r5, @ANYBLOB="10002dbd7000fcdbdf25180000002c00308014000400bb496df04e12bb4a4325cd88c5beb6b7140004002fb3f22e082fd56cd954fc71b49b186a0c00060000000000000000000c003080050002005a000000cc00308024000300ef112debc71d8faeb845bccc93825f88548d71b00c9b88f82b99a6d0e45419a71800018008000100010000000c00050005000000000000002776c195153014000400a1a9aec52a0b7e38a5ddf8998096e5ae240001009f6c27deafc72956b27d29cc19492b90d4d9c86ced5754af12fd39cf6d92f59c140004009bae53958b9692e2dc17f74298b481df240003002825e21f886711628c64cb31a394bcfbddafaf3ea53544a20a9fce2f8479feaa1c00cdd438c8f46e2eb038799f08000000040066000000050002000000000005000200020000", @ANYRES32=0x0, @ANYBLOB="0c00060001000000010000006000308024000300bbbae6594dc7275652c59d2bb83ecd2536480b6a38dc8bb6df4302dbed2b8a5c240001800c000500ff000000000000000c0003800800020003000000050002000100000005000200080000000c0001800800010001000000"], 0x1a4}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r5, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x4000000) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000009c0)) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:12:53 executing program 0: r0 = socket(0xa, 0x0, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:12:58 executing program 0: r0 = socket(0xa, 0x0, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:13:02 executing program 0: r0 = socket(0xa, 0x0, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:13:03 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c00060001000000010000006000308024000300bbbae6594dc7275652c59d2bb83ecd2536480b6a38dc8bb6df4302dbed2b8a5c240001800c000500ff000000000000000c0003800800020003000000050002000100000005000200080000000c0001800800010001000000"], 0x1a4}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r5, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x4000000) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000009c0)) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:13:05 executing program 0: r0 = socket(0xa, 0x3, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:13:09 executing program 0: r0 = socket(0xa, 0x3, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:13:12 executing program 0: r0 = socket(0xa, 0x3, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:13:14 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c00060001000000010000006000308024000300bbbae6594dc7275652c59d2bb83ecd2536480b6a38dc8bb6df4302dbed2b8a5c240001800c000500ff000000000000000c0003800800020003000000050002000100000005000200080000000c0001800800010001000000"], 0x1a4}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r5, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x4000000) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000009c0)) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:13:15 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:13:18 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) [ 4399.887920][T22660] nci: nci_stop_poll: unable to stop poll, since poll is not active [ 4401.020847][ T5726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:13:21 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x1, 0x2, 0x5, 0xcf}, 0xffb1) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:13:23 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) [ 4405.739427][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 4407.782780][ T5747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:13:27 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:13:28 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x1, 0x2, 0x5, 0xcf}, 0xffb1) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 64) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:13:29 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:13:34 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:13:37 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000080), 0x4) [ 4417.618283][ T5769] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:13:40 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000080), 0x4) 01:13:42 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000080), 0x4) [ 4422.903338][ T5769] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:13:42 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x1, 0x2, 0x5, 0xcf}, 0xffb1) (async, rerun: 32) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:13:45 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, 0x0, 0x0) 01:13:48 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, 0x0, 0x0) 01:13:51 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @v={0x9, 0x5, 0x6, 0x1, {0x9, 0xe7, "ef5485a5cd44295f"}}}, 0x12) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:13:52 executing program 0: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xc8, 0x0, 0x0) 01:13:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r1, 0x11, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) [ 4437.062991][ T6004] nci: nci_activate_target: target does not support the requested protocol 0x1 [ 4438.707580][ T6004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:13:59 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @v={0x9, 0x5, 0x6, 0x1, {0x9, 0xe7, "ef5485a5cd44295f"}}}, 0x12) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:13:59 executing program 0: quotactl$Q_SETQUOTA(0x0, &(0x7f00000086c0)=@filename='./file0\x00', 0x0, 0x0) 01:14:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) [ 4446.098290][ T6027] nci: nci_activate_target: target does not support the requested protocol 0x1 01:14:07 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x40) [ 4447.720841][ T6019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:14:07 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (rerun: 32) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @v={0x9, 0x5, 0x6, 0x1, {0x9, 0xe7, "ef5485a5cd44295f"}}}, 0x12) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:14:09 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x5460, 0x0) 01:14:11 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xd}, 0x48) [ 4452.516808][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:14:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xd}]}}, &(0x7f0000000240)=""/69, 0x26, 0x45, 0x1}, 0x20) [ 4454.819025][ T6046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4454.840652][ T6038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:14:15 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:14:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 01:14:18 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa4602, 0x0) 01:14:21 executing program 0: bpf$BPF_GET_MAP_INFO(0x4, 0x0, 0x0) 01:14:24 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)={0x14, 0x15, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 01:14:27 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:14:27 executing program 0: bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000001900)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 01:14:30 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000b3000000b3"], &(0x7f0000000240)=""/49, 0xd6, 0x31, 0x1}, 0x20) 01:14:32 executing program 0: socketpair(0x10, 0x3, 0x2000ff, &(0x7f0000000000)) 01:14:36 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff}) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:14:37 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff}) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 4477.939475][ T6183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:14:38 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004000}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:14:39 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff}) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:14:40 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff}) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:14:41 executing program 0: recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 4481.612473][ T6213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:14:41 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000900)={0xfd2, 0x10001, 0x0, 0x40, 0x2, [{0x8, 0x6, 0x8, '\x00', 0x402}, {0x1, 0x8, 0xdd7, '\x00', 0x80}]}) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="6101000001010101aa00"], 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:14:42 executing program 0: recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 01:14:43 executing program 0: recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 01:14:44 executing program 0: pipe(0x0) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 4484.639375][T20736] nci: nci_ntf_packet: unknown ntf opcode 0x101 01:14:45 executing program 0: pipe(0x0) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 4486.448948][ T6233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:14:46 executing program 1: openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000900)={0xfd2, 0x10001, 0x0, 0x40, 0x2, [{0x8, 0x6, 0x8, '\x00', 0x402}, {0x1, 0x8, 0xdd7, '\x00', 0x80}]}) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="6101000001010101aa00"], 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:14:46 executing program 0: pipe(0x0) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 01:14:47 executing program 0: pipe(&(0x7f0000000600)) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 01:14:48 executing program 0: pipe(&(0x7f0000000600)) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 01:14:49 executing program 0: pipe(&(0x7f0000000600)) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 01:14:50 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)={0x14, 0x13, 0x1}, 0x14}}, 0x0) 01:14:51 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000005b40)=@deltaction={0x14}, 0x14}}, 0x0) [ 4491.527496][T20736] nci: nci_ntf_packet: unknown ntf opcode 0x101 01:14:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}}, 0x0) 01:14:53 executing program 0: bpf$BPF_GET_MAP_INFO(0xa, 0x0, 0x0) [ 4493.328571][ T6263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:14:53 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000900)={0xfd2, 0x10001, 0x0, 0x40, 0x2, [{0x8, 0x6, 0x8, '\x00', 0x402}, {0x1, 0x8, 0xdd7, '\x00', 0x80}]}) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="6101000001010101aa00"], 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:14:54 executing program 0: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$rds(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) [ 4494.716746][T20736] nci: nci_ntf_packet: unknown ntf opcode 0x101 01:14:55 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000001580)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x20) [ 4496.587309][ T6296] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:14:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe}, {0x5}, {0x0, 0x2}]}, @volatile, @ptr]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000380)=""/12, 0x5b, 0xc, 0x1}, 0x20) 01:14:56 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)) read(r0, &(0x7f0000000900)=""/200, 0xc8) r1 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) read$nci(r1, &(0x7f0000000200)=""/100, 0x64) write$nci(r1, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r1, &(0x7f00000002c0)=""/100, 0x64) write$nci(r1, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r1, &(0x7f0000000380)=""/100, 0x64) write$nci(r1, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$binfmt_aout(r1, &(0x7f0000000a00)={{0x10b, 0x4, 0x3f, 0x333, 0x2e4, 0x3, 0x1e7, 0x2}, "5c4f2d12752e03e0c679a3c28ccadeb9e8082a0f18ff94fe3492a4d564e959d129130b128f14c95cf41611b7692fcb62f7b283bad755522eb7f82920341da954011564382a7fd02b4ed10090e5c261f36cf236f7bb6309cf46f60883f6f14d6da0243b954ad0ba899a1e5d1cb2228b5b39600832c2b2c03910e373edc69523387183d7e0cbae2f4479739df8369721433cfe499994021ce5d3a0c36cf84bdd51403536c575aa0fd0ec97a322b15f8b569cdf1eb415", ['\x00', '\x00', '\x00']}, 0x3d5) read$nci(r1, &(0x7f0000000500)=""/100, 0x64) write$nci(r1, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r1, &(0x7f00000005c0)=""/100, 0x64) write$nci(r1, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r1, &(0x7f0000000680)=""/100, 0x64) write$nci(r1, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r1, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r1, &(0x7f0000000840)=""/100, 0x64) write$nci(r1, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:14:57 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000080)=""/33, &(0x7f00000000c0)=0x21) 01:14:59 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000100)=@raw=[@tail_call], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x90) 01:15:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {0xe, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000380)=""/12, 0x3c, 0xc, 0x1}, 0x20) 01:15:01 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') dup3(r1, r0, 0x0) 01:15:02 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) dup2(r0, r1) 01:15:03 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8400, 0x88) 01:15:04 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) [ 4505.136565][ T6303] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:15:05 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)) read(r0, &(0x7f0000000900)=""/200, 0xc8) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) read$nci(r1, &(0x7f0000000200)=""/100, 0x64) write$nci(r1, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r1, &(0x7f00000002c0)=""/100, 0x64) write$nci(r1, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r1, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r1, &(0x7f0000000380)=""/100, 0x64) write$nci(r1, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$binfmt_aout(r1, &(0x7f0000000a00)={{0x10b, 0x4, 0x3f, 0x333, 0x2e4, 0x3, 0x1e7, 0x2}, "5c4f2d12752e03e0c679a3c28ccadeb9e8082a0f18ff94fe3492a4d564e959d129130b128f14c95cf41611b7692fcb62f7b283bad755522eb7f82920341da954011564382a7fd02b4ed10090e5c261f36cf236f7bb6309cf46f60883f6f14d6da0243b954ad0ba899a1e5d1cb2228b5b39600832c2b2c03910e373edc69523387183d7e0cbae2f4479739df8369721433cfe499994021ce5d3a0c36cf84bdd51403536c575aa0fd0ec97a322b15f8b569cdf1eb415", ['\x00', '\x00', '\x00']}, 0x3d5) read$nci(r1, &(0x7f0000000500)=""/100, 0x64) write$nci(r1, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r1, &(0x7f00000005c0)=""/100, 0x64) write$nci(r1, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r1, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r1, &(0x7f0000000680)=""/100, 0x64) write$nci(r1, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r1, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r1, &(0x7f0000000840)=""/100, 0x64) write$nci(r1, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) write$nci(r1, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:15:06 executing program 0: shmget$private(0x0, 0x1000, 0x40, &(0x7f0000fff000/0x1000)=nil) 01:15:06 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) 01:15:07 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x38000, 0x0) [ 4508.221662][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:15:09 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(r0) [ 4509.936392][ T6329] nci: nci_start_poll: failed to set local general bytes 01:15:10 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 01:15:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) 01:15:12 executing program 0: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, r0+10000000}, 0x0) 01:15:13 executing program 0: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, r0+10000000}, 0x0) 01:15:14 executing program 0: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, r0+10000000}, 0x0) [ 4515.055984][ T6328] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:15:15 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)) read(r0, &(0x7f0000000900)=""/200, 0xc8) r1 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) (async) read$nci(r1, &(0x7f0000000200)=""/100, 0x64) write$nci(r1, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r1, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r1, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r1, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r1, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000a00)={{0x10b, 0x4, 0x3f, 0x333, 0x2e4, 0x3, 0x1e7, 0x2}, "5c4f2d12752e03e0c679a3c28ccadeb9e8082a0f18ff94fe3492a4d564e959d129130b128f14c95cf41611b7692fcb62f7b283bad755522eb7f82920341da954011564382a7fd02b4ed10090e5c261f36cf236f7bb6309cf46f60883f6f14d6da0243b954ad0ba899a1e5d1cb2228b5b39600832c2b2c03910e373edc69523387183d7e0cbae2f4479739df8369721433cfe499994021ce5d3a0c36cf84bdd51403536c575aa0fd0ec97a322b15f8b569cdf1eb415", ['\x00', '\x00', '\x00']}, 0x3d5) read$nci(r1, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r1, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r1, &(0x7f00000005c0)=""/100, 0x64) write$nci(r1, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r1, &(0x7f0000000680)=""/100, 0x64) write$nci(r1, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r1, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r1, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r1, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:15:16 executing program 0: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, r0+10000000}, 0x0) 01:15:17 executing program 0: pipe2$9p(&(0x7f0000002a00)={0xffffffffffffffff}, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) 01:15:18 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) fstatfs(r0, 0x0) [ 4519.436512][ T6370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:15:19 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x70, {0x0, 0x4, 0x19}}, 0x7) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="400200000026bdfd199182d46f5e411e19f90f85505b82df6204fa49c1951696af7e53aba43a4f54e39d243a1323891c082e6eef38d65b78"], 0x5) read$nci(r0, &(0x7f00000005c0)=""/98, 0x62) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:15:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) 01:15:20 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(r1, 0x0, 0x0) 01:15:21 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) 01:15:22 executing program 0: pipe2$9p(&(0x7f0000002a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fallocate(r0, 0x26, 0x0, 0x0) 01:15:23 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) [ 4524.416636][ T6387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:15:24 executing program 1: openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x70, {0x0, 0x4, 0x19}}, 0x7) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x70, {0x0, 0x4, 0x19}}, 0x7) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="400200000026bdfd199182d46f5e411e19f90f85505b82df6204fa49c1951696af7e53aba43a4f54e39d243a1323891c082e6eef38d65b78"], 0x5) read$nci(r0, &(0x7f00000005c0)=""/98, 0x62) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:15:24 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x124) 01:15:26 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) write$P9_RREMOVE(r1, 0x0, 0x0) 01:15:27 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') dup2(r0, r0) 01:15:28 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0) 01:15:30 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) fcntl$lock(r0, 0x26, &(0x7f00000001c0)) 01:15:31 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/100) [ 4531.747891][ T6408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:15:31 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x70, {0x0, 0x4, 0x19}}, 0x7) (async) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="400200000026bdfd199182d46f5e411e19f90f85505b82df6204fa49c1951696af7e53aba43a4f54e39d243a1323891c082e6eef38d65b78"], 0x5) read$nci(r0, &(0x7f00000005c0)=""/98, 0x62) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:15:32 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/100) 01:15:34 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/100) [ 4535.216225][ T6446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:15:35 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$nci(r0, &(0x7f0000000a40)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x1, 0x2, 0x2, 0x2, {0x0, 0x66, "0f228fe331c7779689a7d0356633154464ceb9e3480287d48b804c617428d59f57dd9f03de12031d376c4f6471b49957c01c7cc624367059e82423cf3657320fc21bd867eb038ec64b0feeccc3a513bc2dae10f0175fdaee34d403ea787b4d821adb994d3fd1"}}, 0x6b) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="4000e520cc660500fb2c1b21000000000000"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="240010000647a502747a747827966ac7278ba21732558d3c4c800a4443bd8cd006a97020c58f36295db5a91cf3e16ac59f4c10a0ca9d57fd9fe5cdf5d24ee37d12a0d6269050170ab5f27d8d4ff2aa0da264d4c0a694acf6e5ff256884a5b1fddb036f53b27f4c8fd1f0c225f2efdd54bc85f6fbd0f3941f4898d282ef420bd2d2de5f8583f6da3554670797ce7817dff7a7e278f5a57078bcd8e47dfe8d2242c1d40cc17443917837791dc95c378d50f337c929fa4ac550423b4cdb979c71f0732603231498c3ec14dae31e0028d3545f76275b4e4ffca841764fab826a12c4a96b9f29ede05c2042875f9e32007753b487a9943f1316aba7c4a7fbd0ed7359", @ANYRES16=r3, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=r1, @ANYBLOB="08000300ffffffff"], 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000040)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x6, {0x3, [{0x4, 0x40}, {0x4, 0x7a}, {0x4, 0x6}]}}, 0xa) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) r4 = openat$vcs(0xffffff9c, &(0x7f0000000280), 0x200, 0x0) write$nci(r4, &(0x7f00000004c0)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x81, {0x0, 0x3}}, 0x5) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:15:35 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/100) 01:15:37 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) dup(r2) 01:15:38 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = dup2(r0, r1) write$P9_RMKNOD(r2, 0x0, 0x0) 01:15:39 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002540)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x4, 0x103) 01:15:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 01:15:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = epoll_create(0x6d) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 01:15:43 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) write$nci(r0, &(0x7f0000000a40)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x1, 0x2, 0x2, 0x2, {0x0, 0x66, "0f228fe331c7779689a7d0356633154464ceb9e3480287d48b804c617428d59f57dd9f03de12031d376c4f6471b49957c01c7cc624367059e82423cf3657320fc21bd867eb038ec64b0feeccc3a513bc2dae10f0175fdaee34d403ea787b4d821adb994d3fd1"}}, 0x6b) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="4000e520cc660500fb2c1b21000000000000"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=r1, @ANYBLOB="08000300ffffffff"], 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000040)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x6, {0x3, [{0x4, 0x40}, {0x4, 0x7a}, {0x4, 0x6}]}}, 0xa) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) r4 = openat$vcs(0xffffff9c, &(0x7f0000000280), 0x200, 0x0) write$nci(r4, &(0x7f00000004c0)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x81, {0x0, 0x3}}, 0x5) (async, rerun: 32) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async, rerun: 32) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:15:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000), 0x1) 01:15:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) write$P9_ROPEN(r1, 0x0, 0x0) 01:15:46 executing program 0: ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) 01:15:47 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x189d00, 0x136) 01:15:48 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$nci(r0, &(0x7f0000000a40)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x1, 0x2, 0x2, 0x2, {0x0, 0x66, "0f228fe331c7779689a7d0356633154464ceb9e3480287d48b804c617428d59f57dd9f03de12031d376c4f6471b49957c01c7cc624367059e82423cf3657320fc21bd867eb038ec64b0feeccc3a513bc2dae10f0175fdaee34d403ea787b4d821adb994d3fd1"}}, 0x6b) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="4000e520cc660500fb2c1b21000000000000"], 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=r1, @ANYBLOB="08000300ffffffff"], 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000040)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x6, {0x3, [{0x4, 0x40}, {0x4, 0x7a}, {0x4, 0x6}]}}, 0xa) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) r4 = openat$vcs(0xffffff9c, &(0x7f0000000280), 0x200, 0x0) write$nci(r4, &(0x7f00000004c0)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x81, {0x0, 0x3}}, 0x5) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:15:49 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 01:15:50 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') dup2(r0, r1) 01:15:51 executing program 0: socketpair(0x28, 0x0, 0x5, &(0x7f0000000040)) 01:15:52 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/110, 0x6e) write$nci(r0, &(0x7f0000000040)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x0, 0x3, 0x6, 0x6, {0x6, [{0x3, 0x7f}, {0x3, 0xdd}, {0x4, 0x7}, {0x2, 0xa8}, {0x2, 0x40}, {0x1, 0x70}]}}, 0x10) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) r4 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$nci(r4, &(0x7f0000000900)=""/249, 0xf9) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=r1, @ANYBLOB="08a5e400000000000800030001000000"], 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000a00)=""/114, 0x72) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:15:53 executing program 0: socketpair(0x10, 0x0, 0x5, &(0x7f0000000000)) 01:15:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r0]}}], 0x18}, 0x0) 01:15:56 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000001e40)=@o_path={0x0}, 0x18) [ 4556.538402][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:15:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x206403, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0x0) 01:15:59 executing program 0: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001f00), 0x10) [ 4559.297606][ T6834] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4559.301909][ T6837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4559.302423][ T6832] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 01:15:59 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000200)=""/110, 0x6e) (async, rerun: 64) write$nci(r0, &(0x7f0000000040)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x0, 0x3, 0x6, 0x6, {0x6, [{0x3, 0x7f}, {0x3, 0xdd}, {0x4, 0x7}, {0x2, 0xa8}, {0x2, 0x40}, {0x1, 0x70}]}}, 0x10) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 32) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (rerun: 32) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) r4 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$nci(r4, &(0x7f0000000900)=""/249, 0xf9) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=r1, @ANYBLOB="08a5e400000000000800030001000000"], 0x2c}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000a00)=""/114, 0x72) (async, rerun: 32) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:16:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000140)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 01:16:01 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={0x0, &(0x7f0000000140)=""/4096, 0x0, 0x1000, 0x1}, 0x20) 01:16:03 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) [ 4563.929755][ T6864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4563.930469][ T6864] nci: nci_start_poll: failed to set local general bytes 01:16:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x0) 01:16:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/162, 0xa2}, 0x140) 01:16:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000018c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 01:16:07 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) [ 4569.146297][ T6855] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:16:09 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/110, 0x6e) write$nci(r0, &(0x7f0000000040)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x0, 0x3, 0x6, 0x6, {0x6, [{0x3, 0x7f}, {0x3, 0xdd}, {0x4, 0x7}, {0x2, 0xa8}, {0x2, 0x40}, {0x1, 0x70}]}}, 0x10) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (rerun: 64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 64) r4 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) read$nci(r4, &(0x7f0000000900)=""/249, 0xf9) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async, rerun: 64) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=r1, @ANYBLOB="08a5e400000000000800030001000000"], 0x2c}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000a00)=""/114, 0x72) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:16:09 executing program 0: syz_clone(0x980080, 0x0, 0x0, 0x0, 0x0, 0x0) 01:16:11 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) syz_clone(0x90000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, &(0x7f0000001900), 0x0, &(0x7f0000002900), 0x0, 0x0) 01:16:12 executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) [ 4572.811631][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 4572.813516][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 4572.813966][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 4572.814304][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 4572.815028][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 4572.815423][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 4572.918055][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 4572.918562][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 4572.919201][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 4572.919473][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 01:16:14 executing program 0: bpf$MAP_CREATE(0x14, &(0x7f00000001c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 01:16:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)=[{0x10}], 0x10}, 0x0) 01:16:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002f40)={&(0x7f0000002b80)=@tipc=@name, 0x80, 0x0, 0x0, &(0x7f0000002d40)=[{0x10}, {0x10}], 0x20}, 0x40c7) 01:16:19 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff645}, 0x50) 01:16:20 executing program 0: socketpair(0x8, 0x0, 0x0, &(0x7f0000000600)) [ 4580.728142][ T6994] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:16:20 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="408f9c0000c6121c2080489af92a803f4923aa2fecb09d0dd76476c8aacbc1c3bfd231a7b04b8327fdfc5efb245506a3b642a369579e8296d5001e4a561cc6c9194a1ef3f42bb94ef857dd874e6707f7ec544d3fcaad5abee46f6441e7738d96eb0bc8b649eef7c0281dc498887b86d96d0494a4aa332af96206a2af46173c377f2c8871766a66ed571422031b63764770c5a11e824c3887628ff7a04db823991e6a24748ff6dd6040fe54ee8cf63819312152c89bc7c6ba4f8a000408fc5557ed"], 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 4581.482459][ T29] audit: type=1400 audit(4581.410:413): avc: denied { create } for pid=7261 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 01:16:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x1c4, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) [ 4583.219895][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf 01:16:23 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) [ 4583.857187][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:16:24 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002040)={@cgroup, 0xffffffffffffffff, 0x0, 0x35, 0xffffffffffffffff, @link_id}, 0x20) [ 4586.106577][ T7271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4586.130334][ T7264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:16:26 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="408f9c0000c6121c2080489af92a803f4923aa2fecb09d0dd76476c8aacbc1c3bfd231a7b04b8327fdfc5efb245506a3b642a369579e8296d5001e4a561cc6c9194a1ef3f42bb94ef857dd874e6707f7ec544d3fcaad5abee46f6441e7738d96eb0bc8b649eef7c0281dc498887b86d96d0494a4aa332af96206a2af46173c377f2c8871766a66ed571422031b63764770c5a11e824c3887628ff7a04db823991e6a24748ff6dd6040fe54ee8cf63819312152c89bc7c6ba4f8a000408fc5557ed"], 0x5) (async, rerun: 64) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:16:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 4587.830108][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.831375][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.831852][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.832227][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.832645][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.833041][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.833336][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.833519][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.833699][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.834116][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.834334][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.834592][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.835148][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.889108][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.889860][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.890450][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.890999][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.891230][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.891467][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.891929][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.892278][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.892507][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.892729][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.892958][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.893495][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.893716][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.894046][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.894274][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.894519][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.894751][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.894982][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.895201][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.895429][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.906482][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.906964][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.907692][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.908035][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.908434][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.908797][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.909104][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.909411][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.909695][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.909952][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.910167][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.910364][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.910659][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.910875][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.911086][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.911273][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.911570][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.911846][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.912379][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.912695][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.913029][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.913403][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.913774][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.914050][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.914315][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.914639][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.914869][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.915201][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.915380][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.916537][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.918323][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4587.918519][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf 01:16:28 executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="626172726965722c6e6f6175746f5f64615f616c6c6f632c64696f726561645f6e6f6c6f636b2c6f6c64616c6c6f632c00f501293add424f5564620d31dee986aff91abc6b72c5b14976ae8b78588d3ba5770ee190db0262b8ea08c96bf8d5dea39cef09030000003da1e4a3a041baf67c4e4b28548319386220177fa31c1149bab68ff80268443c615b5c036e6b39b692fbf13a7ff3e3bb4e4dff4eec118e2954a5fe289294828f4d8dab342c5703875045d660d6063c9927a0db22b43b5dca660491be34af04d4396ef68f94b304432cdd780000000080000000000000004c16bad1e6223c3e6278d869836ab05a87d3a1153d5bab"], 0x1, 0x793, &(0x7f0000001700)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x10000}) [ 4589.898287][ T7292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4589.898701][ T7292] nci: nci_start_poll: failed to set local general bytes 01:16:32 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @private1}}]}, 0x10c) 01:16:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') preadv2(r0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/119, 0x77}], 0x1, 0x24, 0x0, 0x0) [ 4595.116273][ T7295] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:16:35 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 32) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="408f9c0000c6121c2080489af92a803f4923aa2fecb09d0dd76476c8aacbc1c3bfd231a7b04b8327fdfc5efb245506a3b642a369579e8296d5001e4a561cc6c9194a1ef3f42bb94ef857dd874e6707f7ec544d3fcaad5abee46f6441e7738d96eb0bc8b649eef7c0281dc498887b86d96d0494a4aa332af96206a2af46173c377f2c8871766a66ed571422031b63764770c5a11e824c3887628ff7a04db823991e6a24748ff6dd6040fe54ee8cf63819312152c89bc7c6ba4f8a000408fc5557ed"], 0x5) (rerun: 64) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:16:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x10001, 0x0, 0x0, 0x0, 0x0, "f11bd9766c045085ebd45becabe84086803aff"}) 01:16:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "582e05430a7b6eb7"}}}]}, 0x2c}}, 0x0) [ 4597.268454][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.269347][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.269824][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.270286][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.270896][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.271178][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.271405][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.271843][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.272201][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.272406][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.272621][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.272834][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.273275][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.273437][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.273646][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.273882][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.274072][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.274508][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.274709][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.274861][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.275067][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.275227][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.275488][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.286144][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.286541][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.286859][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.287040][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.287339][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.287670][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.288031][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.288352][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.288661][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.289045][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.289295][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.289604][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.289842][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.290427][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.292246][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.292707][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.293270][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.293531][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.293764][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.294189][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.294544][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.294870][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.295089][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.295290][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.295530][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.326639][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.327103][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.327326][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.327558][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.327784][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.328012][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.328260][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.328502][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.328721][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.328948][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.329194][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.329432][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.329679][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.329912][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.330156][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.330386][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.330622][T20736] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 4597.331016][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:16:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x24}}, 0x0) [ 4600.119394][ T7412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4600.119971][ T7412] nci: nci_start_poll: failed to set local general bytes 01:16:40 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_delete(0x0) 01:16:42 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) ptrace(0x4207, r0) ptrace$getenv(0x4201, r0, 0x0, &(0x7f0000000280)) 01:16:44 executing program 0: io_setup(0x9, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 4605.337435][ T7405] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:16:45 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="4002000000b8562e42e61846b1bddc4f619c88014c93b411398734cb113310019374fa68b837dc386aec5a329f37a41db824b1a37868b2dcc2b1c9070b274a519416f10a7701e8ef23664233dae1ab40612ff9d9c9af31562eac7003af90d9bd5202a75034b59b3eeb7ccb6eba700bec1db2d12f968b2c701bb7bec912f15a4bcee2e508a0998f5783"], 0x5) read$nci(r0, &(0x7f0000000000)=""/124, 0x7c) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="410300d9"], 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:16:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000ec0)=0x3) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 01:16:47 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)) [ 4608.467550][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:16:48 executing program 0: r0 = socket(0x2, 0x2, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={0x0}}, 0x0) [ 4610.147521][ T7537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:16:50 executing program 0: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 01:16:50 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="4002000000b8562e42e61846b1bddc4f619c88014c93b411398734cb113310019374fa68b837dc386aec5a329f37a41db824b1a37868b2dcc2b1c9070b274a519416f10a7701e8ef23664233dae1ab40612ff9d9c9af31562eac7003af90d9bd5202a75034b59b3eeb7ccb6eba700bec1db2d12f968b2c701bb7bec912f15a4bcee2e508a0998f5783"], 0x5) read$nci(r0, &(0x7f0000000000)=""/124, 0x7c) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="410300d9"], 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:16:51 executing program 0: socketpair(0x25, 0x0, 0x0, &(0x7f00000002c0)) [ 4612.058754][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 4613.117163][ T7563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4613.117699][ T7563] nci: nci_start_poll: failed to set local general bytes [ 4613.121782][ T7554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:16:53 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="4002000000b8562e42e61846b1bddc4f619c88014c93b411398734cb113310019374fa68b837dc386aec5a329f37a41db824b1a37868b2dcc2b1c9070b274a519416f10a7701e8ef23664233dae1ab40612ff9d9c9af31562eac7003af90d9bd5202a75034b59b3eeb7ccb6eba700bec1db2d12f968b2c701bb7bec912f15a4bcee2e508a0998f5783"], 0x5) (async) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="4002000000b8562e42e61846b1bddc4f619c88014c93b411398734cb113310019374fa68b837dc386aec5a329f37a41db824b1a37868b2dcc2b1c9070b274a519416f10a7701e8ef23664233dae1ab40612ff9d9c9af31562eac7003af90d9bd5202a75034b59b3eeb7ccb6eba700bec1db2d12f968b2c701bb7bec912f15a4bcee2e508a0998f5783"], 0x5) read$nci(r0, &(0x7f0000000000)=""/124, 0x7c) (async) read$nci(r0, &(0x7f0000000000)=""/124, 0x7c) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="410300d9"], 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 4613.630338][ T29] audit: type=1400 audit(4613.560:414): avc: denied { create } for pid=7567 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 01:16:53 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000340)="f129bea63ea3ccc2c072df0a92778b8118403ce3d45e", 0x16, 0x0, 0x0, 0x0) 01:16:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 01:16:56 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, &(0x7f0000000100), 0x0) [ 4617.848041][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:16:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 01:16:59 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0xa, &(0x7f0000000180)=""/10}, 0x90) [ 4619.519286][ T7573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:16:59 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x3c, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8040) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:17:00 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@map=0x1, 0xffffffffffffffff, 0xa, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) 01:17:02 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000100), 0x4) 01:17:03 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000002280), 0x6000, 0x0) 01:17:05 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x28}}, 0x0) 01:17:06 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map=0x1, 0xffffffffffffffff, 0x24, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) 01:17:07 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000002b80)=""/4102, 0x497}], 0x1, 0x0, 0x82}}], 0x1, 0x40010123, 0x0) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)='N', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}], 0x2, 0x0) [ 4627.877551][ T7594] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:17:07 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x3c, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8040) (rerun: 64) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 64) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (rerun: 64) [ 4629.721579][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 4631.197279][ T7624] nci: nci_start_poll: failed to set local general bytes [ 4631.218679][ T7617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:17:11 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x3c, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8040) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:17:12 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002a40)={@map, 0xffffffffffffffff, 0x35, 0x0, 0x0, @link_id}, 0x20) 01:17:13 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@ifindex, 0xffffffffffffffff, 0x3, 0x0, 0xffffffffffffffff, @link_id}, 0x20) 01:17:14 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) 01:17:15 executing program 0: pselect6(0x40, &(0x7f0000002300), 0x0, 0x0, 0x0, 0x0) [ 4638.616911][ T7633] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:17:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "02b5c702f1bd325ba31563f9d41ae04b50118c25e3ff1db7e216fc0be2a8a882f31a7ebb2b294704736af3b903bd287a8f514ce727ad0462a11813a5cbdb7b0652075627dfa06dd87da65d35c4610190"}, 0xd8) 01:17:19 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) read$nci(r0, &(0x7f0000000a40)=""/190, 0xbe) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004850}, 0xc840) read$nci(r0, &(0x7f0000000a00)=""/20, 0x14) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, r4, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) read$nci(0xffffffffffffffff, &(0x7f0000000b00)=""/45, 0x2d) 01:17:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@bloom_filter={0x1e, 0x0, 0x8, 0xb4ea, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 01:17:21 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000580)=@framed={{}, [@cb_func]}, &(0x7f0000000600)='GPL\x00'}, 0x90) 01:17:22 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xb, 0x7, 0x0, 0x0}, 0x90) 01:17:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000018c0)={@ifindex=r1, 0x2e, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 01:17:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r2, 0x1}, 0x14}}, 0x0) [ 4645.690589][ T7668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:17:25 executing program 1: openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) read$nci(r0, &(0x7f0000000a40)=""/190, 0xbe) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004850}, 0xc840) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004850}, 0xc840) read$nci(r0, &(0x7f0000000a00)=""/20, 0x14) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, r4, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) read$nci(0xffffffffffffffff, &(0x7f0000000b00)=""/45, 0x2d) (async) read$nci(0xffffffffffffffff, &(0x7f0000000b00)=""/45, 0x2d) 01:17:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000008c0), 0x802, 0x0) write$input_event(r0, &(0x7f0000000940), 0x18) 01:17:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x2d38}, 0x48) 01:17:29 executing program 0: syz_clone(0xd4003180, &(0x7f00000001c0)="e91f4d7aec69d16db5bda2f64c72255e20c87687a60c131114a450f9409d494b3533ee0d4e7985ab8fd58354b3", 0x2d, &(0x7f0000000240), &(0x7f00000015c0), 0x0) 01:17:30 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000003c0), 0x10) 01:17:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) [ 4653.704555][ T7710] __nla_validate_parse: 55 callbacks suppressed [ 4653.704714][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:17:33 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x0, 0x34}, 0xc) 01:17:35 executing program 0: syz_clone(0xd4003180, &(0x7f00000001c0)="e91f4d7aec69d16db5bda2f64c72255e20c87687a60c131114a450f940", 0x1d, &(0x7f0000000240), &(0x7f00000015c0), &(0x7f00000003c0)) 01:17:36 executing program 0: bpf$BPF_PROG_DETACH(0x12, &(0x7f0000000380), 0x20) 01:17:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 01:17:39 executing program 0: syz_clone3(&(0x7f0000000440)={0x21001180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff], 0x1}, 0x58) 01:17:41 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000013c0)={@ifindex, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 4661.106887][ T7681] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:17:41 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 64) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 32) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) (async) read$nci(r0, &(0x7f0000000a40)=""/190, 0xbe) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004850}, 0xc840) read$nci(r0, &(0x7f0000000a00)=""/20, 0x14) (async, rerun: 64) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, r4, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async, rerun: 64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) read$nci(0xffffffffffffffff, &(0x7f0000000b00)=""/45, 0x2d) 01:17:42 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xf, &(0x7f0000000440)=@ringbuf, 0x0}, 0x90) 01:17:43 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0, 0xc298]) [ 4665.166745][ T7840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4665.170532][ T7840] nci: nci_start_poll: failed to set local general bytes 01:17:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xdd, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r2}) 01:17:46 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002680)={@map, 0xffffffffffffffff, 0x17, 0x0, 0xffffffffffffffff, @link_id}, 0x20) 01:17:48 executing program 0: bpf$MAP_CREATE_RINGBUF(0x14, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 01:17:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)={0x60, r1, 0xc0d, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44}}]}, 0x60}}, 0x0) [ 4670.406641][ T7830] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:17:50 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x1, 0x2, 0x1, 0x5, 0x1}, 0x4) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:17:51 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002680)={@map, 0xffffffffffffffff, 0x1d, 0x201c, 0xffffffffffffffff, @link_id}, 0x20) [ 4673.130695][ T7960] nci: nci_start_poll: failed to set local general bytes 01:17:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) [ 4674.341004][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:17:54 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001400)={@map, 0xffffffffffffffff, 0x1a, 0x11, 0xffffffffffffffff, @link_id=0xffffffffffffffff}, 0x20) 01:17:55 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) [ 4676.026520][ T7968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:17:56 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x1, 0x2, 0x1, 0x5, 0x1}, 0x4) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x1, 0x2, 0x1, 0x5, 0x1}, 0x4) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:17:56 executing program 0: fsopen(&(0x7f0000000240)='exfat\x00', 0x0) 01:17:58 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x1e, 0x2, &(0x7f0000000000)=@raw=[@cb_func], 0x0}, 0x90) 01:17:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) [ 4679.654449][ T7988] nci: nci_start_poll: failed to set local general bytes [ 4680.948703][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:18:00 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x182) 01:18:01 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000100)={0x18}) 01:18:03 executing program 0: syz_clone(0xd4003180, &(0x7f00000001c0), 0x0, &(0x7f0000000240), &(0x7f00000015c0), &(0x7f00000003c0)="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") 01:18:05 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x6}, 0x0, &(0x7f0000000100)={r0}, 0x0) 01:18:06 executing program 0: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3}, &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x800]}, 0x8}) 01:18:08 executing program 0: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x3fffff) [ 4689.256185][ T7980] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:18:09 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x1, 0x2, 0x1, 0x5, 0x1}, 0x4) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:18:09 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup, 0xffffffffffffffff, 0xb}, 0x20) 01:18:10 executing program 0: bpf$MAP_CREATE_RINGBUF(0x23, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 4691.106902][ T8123] nci: nci_start_poll: failed to set local general bytes [ 4691.620892][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:18:12 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x1b, 0x2, &(0x7f0000000000)=@raw=[@cb_func], 0x0}, 0x90) [ 4693.257292][ T8124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:18:13 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="400100000000f4a60000002015797d87d42168000000"], 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) read$nci(r0, &(0x7f0000000900)=""/239, 0xef) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="400200b4afdd6ae300ba261a00008e"], 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:18:14 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44f, 0xb653, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 4696.147330][ T8142] nci: nci_start_poll: failed to set local general bytes [ 4696.748555][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:18:17 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst]}, &(0x7f0000000040)='syzkaller\x00', 0x7}, 0x90) 01:18:18 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r0, 0x29, 0x21, 0x0, &(0x7f0000000100)) [ 4698.406908][ T8144] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:18:18 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="400100000000f4a60000002015797d87d42168000000"], 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (rerun: 64) read$nci(r0, &(0x7f0000000900)=""/239, 0xef) (async) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="400200b4afdd6ae300ba261a00008e"], 0x5) (async, rerun: 32) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async, rerun: 32) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:18:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@local, @empty}, 0xc) 01:18:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f0000000380)) [ 4701.194805][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.195459][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.259540][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.260114][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.260390][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.260662][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.260944][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.261230][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.261500][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.261806][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.262055][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.262328][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.262586][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.262893][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.263164][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.263430][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.263694][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.263971][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.264270][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.264566][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.264822][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.367384][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.368340][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.368649][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.368921][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.369179][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.369482][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.369744][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.370007][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.370259][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.370507][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.370754][ T8164] nci: nci_activate_target: unable to find the selected target [ 4701.371006][ T8164] nci: nci_activate_target: unable to find the selected target 01:18:22 executing program 0: syz_clone(0xd4003180, &(0x7f00000001c0)="e91f4d7aec69d16db5bda2f64c72255e20c87687a60c131114a450f9409d494b3533ee0d4e7985ab8fd58354b320d4f8bdf2acc0ea68f1100e1589", 0x3b, &(0x7f0000000240), &(0x7f00000015c0), &(0x7f00000003c0)="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") [ 4702.780232][ T8160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:18:22 executing program 1: openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="400100000000f4a60000002015797d87d42168000000"], 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) read$nci(r0, &(0x7f0000000900)=""/239, 0xef) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="400200b4afdd6ae300ba261a00008e"], 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:18:23 executing program 0: bpf$MAP_CREATE_RINGBUF(0x15, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 01:18:23 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x24, 0x0, &(0x7f0000000040)) 01:18:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 01:18:27 executing program 0: openat$damon_init_regions(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) [ 4707.678206][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:18:28 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000340)=0x1, 0x4) 01:18:29 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000340)=0x1, 0x4) 01:18:30 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000340)=0x1, 0x4) 01:18:32 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000340)=0x1, 0x4) 01:18:33 executing program 0: setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000340)=0x1, 0x4) 01:18:34 executing program 0: setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000340)=0x1, 0x4) 01:18:35 executing program 0: setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000340)=0x1, 0x4) [ 4716.066878][ T8192] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:18:36 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x800) 01:18:36 executing program 0: socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000340)=0x1, 0x4) 01:18:38 executing program 0: socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000340)=0x1, 0x4) 01:18:39 executing program 0: socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000340)=0x1, 0x4) 01:18:41 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) 01:18:42 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) 01:18:43 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) [ 4724.496352][ T8317] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:18:44 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x800) 01:18:45 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000340), 0x4) 01:18:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x213, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x24}}, 0x0) 01:18:47 executing program 1: openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x800) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x800) 01:18:48 executing program 0: syz_clone(0xc2180000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:18:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="9020bab80c553e0858fb7852acd667dec6dd1d53cb8a8f55e5cc34f7d44539f1bd942c207411a54b15e61695c2190a8b5f24709a123a370c3806e3ae450b38c61e8b5226682dca4986fd9597", 0x4c, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0xfffffffffffffcfb) 01:18:52 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_setup(0x5, &(0x7f0000000100)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x0, 0x0) [ 4733.753756][ T8464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:18:53 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="060000000000"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x0, {{}, {0x4, 0x9, 0x0, 0x4, 0x8}}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002240)={&(0x7f0000002140)=@newnexthop={0xec, 0x68, 0x2, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x2}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x2f}}, @NHA_ENCAP_TYPE={0x6}, @NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x55}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x400}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe9}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}}, @NHA_GROUP_TYPE={0x6}, @NHA_BLACKHOLE={0x4}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8001}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xa4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}, @NHA_RES_GROUP_BUCKETS={0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x84}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x16}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}]}, 0xec}, 0x1, 0x0, 0x0, 0x81}, 0x4014) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r4) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000000)="19", 0x1, 0x0) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0xfb) sendfile(r5, r5, &(0x7f0000000080), 0xe0000000) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4005060}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x6c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffe01}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xe}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x28}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xae8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:18:54 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) 01:18:55 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x105040) 01:18:57 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:18:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x8000000, 0x4e8, 0x13f4, 0x0, 0x13f4, 0x13f4, 0x13f4, 0x14bc, 0x14bc, 0x14bc, 0x14bc, 0x14bc, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24}}, {{@ipv6={@empty, @private2, [], [], 'veth0_macvtap\x00', 'syzkaller0\x00'}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@loopback}}}, {{@ipv6={@loopback, @private2, [], [], 'pim6reg1\x00', 'caif0\x00'}, 0x0, 0xa4, 0xc8}, @HL={0x24}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544) [ 4739.837098][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 4742.178493][ T8523] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4742.190565][ T8528] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:19:02 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="060000000000"], 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x0, {{}, {0x4, 0x9, 0x0, 0x4, 0x8}}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002240)={&(0x7f0000002140)=@newnexthop={0xec, 0x68, 0x2, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x2}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x2f}}, @NHA_ENCAP_TYPE={0x6}, @NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x55}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x400}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe9}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}}, @NHA_GROUP_TYPE={0x6}, @NHA_BLACKHOLE={0x4}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8001}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xa4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}, @NHA_RES_GROUP_BUCKETS={0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x84}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x16}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}]}, 0xec}, 0x1, 0x0, 0x0, 0x81}, 0x4014) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r4) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000000)="19", 0x1, 0x0) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0xfb) (async) sendfile(r5, r5, &(0x7f0000000080), 0xe0000000) (async) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4005060}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x6c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffe01}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xe}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x28}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xae8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 4747.609737][ T8543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4747.610425][ T8543] nci: nci_start_poll: failed to set local general bytes [ 4752.886785][ T8535] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:19:12 executing program 1: openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="060000000000"], 0x6) (async) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="060000000000"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x0, {{}, {0x4, 0x9, 0x0, 0x4, 0x8}}}, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x0, {{}, {0x4, 0x9, 0x0, 0x4, 0x8}}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002240)={&(0x7f0000002140)=@newnexthop={0xec, 0x68, 0x2, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x2}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x2f}}, @NHA_ENCAP_TYPE={0x6}, @NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x55}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x400}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe9}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}}, @NHA_GROUP_TYPE={0x6}, @NHA_BLACKHOLE={0x4}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8001}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xa4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}, @NHA_RES_GROUP_BUCKETS={0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x84}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x16}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}]}, 0xec}, 0x1, 0x0, 0x0, 0x81}, 0x4014) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r4) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r4) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000000)="19", 0x1, 0x0) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0xfb) sendfile(r5, r5, &(0x7f0000000080), 0xe0000000) (async) sendfile(r5, r5, &(0x7f0000000080), 0xe0000000) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4005060}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x6c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffe01}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xe}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x28}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xae8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 4760.018617][ T8651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4760.027093][ T8651] nci: nci_start_poll: failed to set local general bytes [ 4760.047663][ T8650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4760.076800][ T8650] nci: nci_start_poll: failed to set local general bytes [ 4764.518787][ T8531] vmap allocation for size 536875008 failed: use vmalloc= to increase size [ 4764.520399][ T8531] syz-executor.0: vmalloc error: size 536870912, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 4764.520865][ T8531] CPU: 0 PID: 8531 Comm: syz-executor.0 Not tainted 6.8.0-rc7-syzkaller #0 [ 4764.521134][ T8531] Hardware name: ARM-Versatile Express [ 4764.521301][ T8531] Backtrace: [ 4764.521453][ T8531] [<818382cc>] (dump_backtrace) from [<818383c8>] (show_stack+0x18/0x1c) [ 4764.521756][ T8531] r7:ff800000 r6:81fd4dac r5:60000113 r4:81fbd658 [ 4764.521932][ T8531] [<818383b0>] (show_stack) from [<818558e4>] (dump_stack_lvl+0x48/0x54) [ 4764.522173][ T8531] [<8185589c>] (dump_stack_lvl) from [<81855908>] (dump_stack+0x18/0x1c) [ 4764.522429][ T8531] r5:83ec2400 r4:00000000 [ 4764.522564][ T8531] [<818558f0>] (dump_stack) from [<8049a200>] (warn_alloc+0xd8/0x178) [ 4764.522803][ T8531] [<8049a128>] (warn_alloc) from [<80491e64>] (__vmalloc_node_range+0xc4/0x54c) [ 4764.523058][ T8531] r3:20000000 r2:81fd4dac [ 4764.523199][ T8531] r6:00000dc0 r5:20000000 r4:81fd4de4 [ 4764.523356][ T8531] [<80491da0>] (__vmalloc_node_range) from [<8044e444>] (kvmalloc_node+0xc0/0x110) [ 4764.523634][ T8531] r10:ed875d20 r9:95440000 r8:814f473c r7:ffffffff r6:00000dc0 r5:20000000 [ 4764.523820][ T8531] r4:00000000 [ 4764.523951][ T8531] [<8044e384>] (kvmalloc_node) from [<814f473c>] (xt_alloc_entry_offsets+0x24/0x30) [ 4764.524256][ T8531] r8:8491d940 r7:00000000 r6:00000000 r5:95440040 r4:08000000 [ 4764.524459][ T8531] [<814f4718>] (xt_alloc_entry_offsets) from [<8166953c>] (translate_table+0x70/0x794) [ 4764.524734][ T8531] [<816694cc>] (translate_table) from [<8166a64c>] (do_replace.constprop.0+0xc0/0x530) [ 4764.525622][ T8531] r10:00000126 r9:000004e8 r8:8491d940 r7:95440040 r6:00000000 r5:20000760 [ 4764.527311][ T8531] r4:95440000 [ 4764.527484][ T8531] [<8166a58c>] (do_replace.constprop.0) from [<8166abec>] (do_ip6t_set_ctl+0x130/0x29c) [ 4764.528056][ T8531] r10:00000126 r9:81350638 r8:83ec2400 r7:00000544 r6:ed875dc8 r5:8533c4c0 [ 4764.528297][ T8531] r4:00000040 [ 4764.528434][ T8531] [<8166aabc>] (do_ip6t_set_ctl) from [<81483608>] (nf_setsockopt+0x60/0x7c) [ 4764.528712][ T8531] r10:00000126 r9:81350638 r8:83ec2400 r7:00000544 r6:8533c4c0 r5:8166aabc [ 4764.528935][ T8531] r4:827ccb10 [ 4764.529072][ T8531] [<814835ac>] (nf_setsockopt) from [<81624dac>] (ipv6_setsockopt+0xb4/0xc8) [ 4764.529377][ T8531] r6:00000544 r5:8533c4c0 r4:00000040 [ 4764.529556][ T8531] [<81624cfc>] (ipv6_setsockopt) from [<81711908>] (sctp_setsockopt+0x70/0x2660) [ 4764.529827][ T8531] r6:00000029 r5:00000040 r4:81624cf8 [ 4764.530005][ T8531] [<8171189c>] (sctp_setsockopt) from [<81350638>] (sock_common_setsockopt+0x38/0x40) [ 4764.530295][ T8531] r10:00000126 r9:83ec2400 r8:80200288 r7:00000000 r6:8333cc80 r5:00000000 [ 4764.530506][ T8531] r4:81711898 [ 4764.530652][ T8531] [<81350604>] (sock_common_setsockopt) from [<8134c0b4>] (do_sock_setsockopt+0xb0/0x17c) [ 4764.530937][ T8531] r4:81350600 [ 4764.531076][ T8531] [<8134c004>] (do_sock_setsockopt) from [<8134f198>] (sys_setsockopt+0x78/0xbc) [ 4764.531344][ T8531] r6:8333cc80 r5:00000040 r4:00000029 [ 4764.531493][ T8531] [<8134f120>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4764.531800][ T8531] Exception stack(0xed875fa8 to 0xed875ff0) [ 4764.532011][ T8531] 5fa0: 00000544 00000000 00000003 00000029 00000040 20000700 [ 4764.532270][ T8531] 5fc0: 00000544 00000000 0014c2d0 00000126 7ebd532e 7ebd532f 003d0f00 76b080fc [ 4764.532502][ T8531] 5fe0: 76b07f08 76b07ef8 000167f8 00050bc0 [ 4764.532693][ T8531] r7:00000126 r6:0014c2d0 r5:00000000 r4:00000544 [ 4764.853749][ T8531] Mem-Info: [ 4764.854865][ T8531] active_anon:38193 inactive_anon:9 isolated_anon:0 [ 4764.854865][ T8531] active_file:4 inactive_file:40187 isolated_file:0 [ 4764.854865][ T8531] unevictable:768 dirty:0 writeback:0 [ 4764.854865][ T8531] slab_reclaimable:1335 slab_unreclaimable:8228 [ 4764.854865][ T8531] mapped:4957 shmem:4516 pagetables:635 [ 4764.854865][ T8531] sec_pagetables:0 bounce:0 [ 4764.854865][ T8531] kernel_misc_reclaimable:0 [ 4764.854865][ T8531] free:397620 free_pcp:810 free_cma:4032 [ 4765.296527][ T8531] Node 0 active_anon:152772kB inactive_anon:36kB active_file:16kB inactive_file:160748kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:19828kB dirty:0kB writeback:0kB shmem:18068kB writeback_tmp:0kB kernel_stack:1840kB pagetables:2540kB sec_pagetables:0kB all_unreclaimable? no [ 4765.297307][ T8531] Normal free:1373480kB boost:0kB min:4780kB low:6208kB high:7636kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:6476kB unevictable:0kB writepending:0kB present:1556480kB managed:1430196kB mlocked:0kB bounce:0kB free_pcp:3232kB local_pcp:2128kB free_cma:0kB [ 4765.297930][ T8531] lowmem_reserve[]: 0 4224 4224 [ 4765.298364][ T8531] Normal: 2*4kB (UM) 2*8kB (UM) 1*16kB (U) 0*32kB 2*64kB (UE) 13*128kB (UE) 16*256kB (U) 11*512kB (UME) 10*1024kB (UME) 8*2048kB (UM) 326*4096kB (UM) = 1373480kB [ 4765.299260][ T8531] 44733 total pagecache pages [ 4765.299433][ T8531] 30 pages in swap cache [ 4765.299599][ T8531] Free swap = 123612kB [ 4765.299794][ T8531] Total swap = 124996kB [ 4765.299980][ T8531] 524288 pages RAM [ 4765.300163][ T8531] 135168 pages HighMem/MovableOnly [ 4765.300456][ T8531] 31571 pages reserved [ 4765.300637][ T8531] 4096 pages cma reserved 01:19:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x84, 0x3, 0x0, 0x0) [ 4765.340834][ T8662] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:19:25 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000a00)=""/226, 0xe2) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x1, 0x3, 0x0, 0x0, "9fc9b7a9fe180f88e38e545d59275b3cecd95c40180fde39ebf7ed70a2a981fcbcac417b2d4864d1bb1611fb3577b8ad1f4a68c68406c6bcd37bd06e0142d021e3142f19468e6288aec04f2fb5a1c0a33e7227e57985ca5a7b33e56f7985c566c05a38e3bb04b046cb7bd36acfa1f552a2f7fe9cc7a081cd7d0a8643e9c876449573e649cfca0ed458e5211334ac22401efdc8477a3fedf2952c281e07397ebc8ebd3c59a944546d70860d0cd640eee2f4ec1b69bae495fcd4ac4b35b827ad597cd5a46683a2fd7bb5f9726e7fc0504cef10496d"}, 0xd7) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:19:26 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="5400000013002506"], 0x54}}, 0x0) 01:19:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x84, 0x84, 0x0, 0x0) [ 4769.828107][T20736] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 4769.917088][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:19:29 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@ifindex, 0xffffffffffffffff, 0x0, 0x20, 0xffffffffffffffff, @prog_id}, 0x20) 01:19:31 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000003ac0)=@generic={&(0x7f0000002bc0)='./file0\x00'}, 0x18) [ 4771.617081][ T8783] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:19:31 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000a00)=""/226, 0xe2) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x1, 0x3, 0x0, 0x0, "9fc9b7a9fe180f88e38e545d59275b3cecd95c40180fde39ebf7ed70a2a981fcbcac417b2d4864d1bb1611fb3577b8ad1f4a68c68406c6bcd37bd06e0142d021e3142f19468e6288aec04f2fb5a1c0a33e7227e57985ca5a7b33e56f7985c566c05a38e3bb04b046cb7bd36acfa1f552a2f7fe9cc7a081cd7d0a8643e9c876449573e649cfca0ed458e5211334ac22401efdc8477a3fedf2952c281e07397ebc8ebd3c59a944546d70860d0cd640eee2f4ec1b69bae495fcd4ac4b35b827ad597cd5a46683a2fd7bb5f9726e7fc0504cef10496d"}, 0xd7) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:19:32 executing program 0: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)) timer_create(0x4, &(0x7f0000000c40)={0x0, 0x3e, 0x0, @thr={0x0, &(0x7f0000000bc0)="840a77bc671e2ce6a00e4ac0bacf42870565698e197184a44a34e47749889aab559d21f5fc10b9b9dc7665eb81c2ece184ab93a74933fbc7d338d53e5408520eff549ddb5281a6182e75a6b725daa8e4d16b5d4fe3bf405d468550017f6e38c9575a4432f42793f3d440074def494386"}}, &(0x7f0000000c80)) syz_clone(0x800080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x60000, 0x0, 0x0, 0x0, {0x39}, &(0x7f00000004c0)=""/216, 0xd8, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 01:19:34 executing program 0: syz_io_uring_setup(0x433e, &(0x7f0000000780), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:19:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000020101010000000000000000005b"], 0x1c}}, 0x0) [ 4777.819836][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 01:19:37 executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0), 0x48) 01:19:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() r3 = syz_clone(0x400, &(0x7f0000001040)="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", 0x1000, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="fcd0d2a7264861ebeee5c3c3a569631236d444bd4fa99b42a4cf883fef53eeae50e6bf21cbf7d907b65e566f4e") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000008c0)=r2, 0x12) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/cgroup\x00') r5 = syz_clone(0x4c000000, &(0x7f0000000500)="7ad4f4431214d9982c9c2142abd8e3c551acfb0f5f89e49266fdf2f09b9de08e892245b313d03ffeb7fb1df00df06f3ce51dfd4dfd7530ba6e9386a7cc13bf1d25a308e0969787a5e9821d133a596442c1bd3a5706f346d1e3073e8225976d63ab07f7d5298f36a373d364b34544973ab00fdfb21f7221a1b68454f482f72ed67625e75f56aba6c3d46e55", 0x8b, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="b8e43737b92d80cf2d17bd24d56e0726e66b21469c3a95bfa70770ab31739777ee6ef3f18d013282336eaa4319e0b97ef0289fbcf77940f6f2a1e7df760e57fdc7a3bc6e3dd8d20ae2f33ef6bf0b0d3b535dc6074b374325e1f13f2745a5d0cb8d9dce6a48af5a2d8cece9a667c3527cff5fd665e361111ed1e7e28019f6bcfa662d7fcc1d52e2fffa6df9c15685683e3431427933d4c63462d49dbf8b4415b92935c761ccda75e99cd0ee37fa84b49513c43de3a3fe9d0eb77aebba4728a67f7179ab5fad5a23f30e95d8248ea671f615f15b589ce3a8146803325da0ac97ab0a669ce9173e17") sendmsg$unix(r1, &(0x7f0000000840)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000000c0)="4f5feabb8a29b916fe308366c92142581afb2b9474b312546fd1847c8a89073103c5b8638d4d3e198c4fd3de004d60015a4c574df4c4c7cea7e34ae048ca95fd1f33126ae946dc23a2e38085349dedbe8b50f04332e55d523b3b9635615350c2417e6b79a886788b375de31fba24b7f00fe8277b744a110463998ab7afd434dac63007a9cb8f091b5ece2416832ddb5fdd21097944a38511271af30b19286bbde7cd8e5c7c55d2cadb9f6a", 0xab}, {&(0x7f0000000180)="71261f7e0f187814d57ca9b9f1871a8ca7912fa25e526a41d97bafa26cfba6dd65224dabf7da8a8692c93f0f8dbf4799dcdfbc4dbd1a5a4e109c927f094d2129da531e845a319ea329bedcc80c5385961e4e6c14dd0adbd8a633a946e45e86b11164b9579d5519ed97d55bcf3157e1fc3346c36505650605e99756108e2b3c122ccfd88e4c5c0c9677efcfd7a6305fb889c783bc137a91dbbe529340b42b83c698a933826ff0e63f9ee44077e24d4d966ffb31399c6370399ee215b25f4abd2833cfbe55aab3ba6c99f92fe2f4f37d4e4d0544ac537e298a9100384cf9563dbcd1", 0xe1}, {&(0x7f0000000280)="f720bd620ad4d88c0ed8e9e965d21b44362235ac62e8d9889a8659aba565253098c4945fe22f110adee398a4a177b39f4ebd9d30c82a17f394bfed7e1b5964cc6f3e8ddc95eaf47ae01e4f856c381d582d6aa63bf2f84258febc9a20aeb710e39442b6f468b03f0e77c786c260b2749e9e1daf1894d2d539e50fa56e79a6f917c27978843a169e976d8bc369627423a320107428ddb89840e01924b7d41304e042c672c5fd0fa6b23b91852ba6339a46229f843e5661c4a23bf33b63d54f58f8cc86e987b9c6f6487d1ef9ef71e7081e3ef91aa0559d14c4ddac6e90ef89f65dcd1016838e0e", 0xe6}, {&(0x7f0000000380)="e9d3c459369476b83801f886264803c1f440dd50a8519bf94842f15839e3832c4220d2baf039ef50e0669986acb859", 0x2f}], 0x4, &(0x7f0000000740)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r4]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r1, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}], 0x100, 0x8080}, 0x40040f0) [ 4781.908894][ T8803] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:19:41 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000a00)=""/226, 0xe2) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x1, 0x3, 0x0, 0x0, "9fc9b7a9fe180f88e38e545d59275b3cecd95c40180fde39ebf7ed70a2a981fcbcac417b2d4864d1bb1611fb3577b8ad1f4a68c68406c6bcd37bd06e0142d021e3142f19468e6288aec04f2fb5a1c0a33e7227e57985ca5a7b33e56f7985c566c05a38e3bb04b046cb7bd36acfa1f552a2f7fe9cc7a081cd7d0a8643e9c876449573e649cfca0ed458e5211334ac22401efdc8477a3fedf2952c281e07397ebc8ebd3c59a944546d70860d0cd640eee2f4ec1b69bae495fcd4ac4b35b827ad597cd5a46683a2fd7bb5f9726e7fc0504cef10496d"}, 0xd7) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:19:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "41615beda72621ab6b95434d2cac3060cdb512"}) 01:19:44 executing program 0: clock_gettime(0x0, &(0x7f0000000f00)) 01:19:45 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000240)={0x28, 0x0, r1, r1, 0x2c4ffe, 0x4, 0x1, 0x11de3a}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9, 0xc2}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x8800, 0x0) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000340)={0x28, 0x5, r1, r1, 0x0, 0x47c, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x240400, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000440)={0x48}) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000500)={0x20, r1, 0x2, 0x0, &(0x7f00000004c0)=[{}, {}]}) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000540), 0x4100, 0x4) syz_clone(0x10080100, &(0x7f00000008c0)="75b5e223a25d6d70a169c1d42716e965", 0x10, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)="c298e67fb9e8852aa8097bf574462a100410c2294a987c203e9ed31137f9dd7da3cb2a4c74dc2093a0209a6a1b4026feed329d426d5367c0ef37353cc3d18fe16df9f66e685699ab6fc3ec280b559c36c9126815331d0c76d411608ab14a5734a8ad5fd870ca244b4de1f700b17618e72465e5afc48092830b2e8fa055ce8355907da4e1e6e812c7e22514dd4cacbbe74647b587b91332ed1d499b393e76f23564daf26528582539c494dd39f9") 01:19:47 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000a40)={0x48}) 01:19:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000280)=0x4) 01:19:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @loopback}}}}) 01:19:51 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x63) 01:19:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="080026009e0900000800b7"], 0x2c}}, 0x0) [ 4792.647184][ T8955] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:19:52 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x81}, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 4795.318550][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:19:55 executing program 0: memfd_create(&(0x7f0000000080)='.^@%*,\'-%+\x00', 0x0) [ 4796.886388][ T9074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:19:56 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x81}, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:19:57 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[], 0x3c) 01:19:58 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000008c0)) [ 4799.477498][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:20:00 executing program 0: getresuid(&(0x7f0000000000), 0x0, &(0x7f0000000080)) [ 4800.532884][ T9098] nci: nci_start_poll: failed to set local general bytes [ 4800.534143][ T9097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:20:00 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (rerun: 32) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 64) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (rerun: 32) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x81}, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:20:01 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002d00)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004c00)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) [ 4803.747830][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 4803.763850][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:20:03 executing program 0: eventfd2(0x3, 0x800) [ 4805.001693][ T9219] nci: nci_stop_poll: unable to stop poll, since poll is not active 01:20:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x10, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}}) [ 4810.186777][ T9110] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:20:11 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="400100000000000000000000000000ffde111d134ad1961c8340647f0000040000"], 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:20:11 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 01:20:12 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000940), 0x0, 0x0) 01:20:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 01:20:16 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) 01:20:17 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x0, 0x1, &(0x7f0000002640)=@raw=[@jmp], 0x0}, 0x90) 01:20:19 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x0, 0x1, &(0x7f0000002640)=@raw=[@jmp], 0x0}, 0x90) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000002a80), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003380)=@bpf_ext={0x1c, 0x3, &(0x7f0000002fc0)=@framed, 0x0}, 0x90) [ 4820.266244][ T9230] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:20:20 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x448) 01:20:20 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="400100000000000000000000000000ffde111d134ad1961c8340647f0000040000"], 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:20:21 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000000)=""/221, 0x26, 0xdd, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x2}, 0x48) 01:20:22 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x11, 0x2, &(0x7f0000002640)=@raw=[@map_idx], &(0x7f0000002700)='syzkaller\x00', 0x0, 0x0, &(0x7f0000002740)}, 0x90) [ 4824.308654][ T9254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:20:24 executing program 0: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002600)={{}, 0x0, 0x0}, 0x20) 01:20:24 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="400100000000000000000000000000ffde111d134ad1961c8340647f0000040000"], 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:20:25 executing program 0: syz_genetlink_get_family_id$nl802154(&(0x7f00000020c0), 0xffffffffffffffff) 01:20:26 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000480)={0x28}, 0x28) read$FUSE(r0, &(0x7f00000004c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000002500)={0x18, 0x0, r1}, 0x18) 01:20:28 executing program 0: gettid() r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000080), 0x48002, 0x0) write$damon_target_ids(r0, 0x0, 0x0) 01:20:29 executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f0000002a80), 0x2) 01:20:30 executing program 0: socketpair(0x18, 0x0, 0xea5, &(0x7f0000000440)) 01:20:31 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000380)={0x48}) [ 4831.777936][ T9389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:20:33 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB="17f3a68b4f9fef8769922dbdc8"], 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r2) read$nci(r0, &(0x7f0000000a40)=""/4, 0x4) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x2c0c03, 0x110) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x811220c8}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x66}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000801) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc6b}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4a}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x8c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '/,#/.)'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000000}]}, 0x54}}, 0x40000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x304, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2c}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x24e}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:20:33 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c}, 0x3c}}, 0x0) 01:20:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) 01:20:35 executing program 0: io_uring_setup(0xec8, &(0x7f0000000300)={0x0, 0x0, 0x200}) 01:20:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf2516"], 0x48}}, 0x0) 01:20:38 executing program 0: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 01:20:39 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x0, 0x1, &(0x7f0000002640)=@raw=[@jmp], &(0x7f0000002700)='syzkaller\x00'}, 0x90) [ 4840.567815][ T9411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:20:40 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB="17f3a68b4f9fef8769922dbdc8"], 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r2) (async) read$nci(r0, &(0x7f0000000a40)=""/4, 0x4) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x2c0c03, 0x110) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x811220c8}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x66}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000801) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc6b}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4a}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x8c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '/,#/.)'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000000}]}, 0x54}}, 0x40000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x304, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2c}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x24e}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:20:40 executing program 0: r0 = eventfd2(0x3, 0x0) read$eventfd(r0, &(0x7f0000000480), 0x8) 01:20:42 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 01:20:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) [ 4845.420464][ T9435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:20:45 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB="17f3a68b4f9fef8769922dbdc8"], 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r2) (async) read$nci(r0, &(0x7f0000000a40)=""/4, 0x4) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x2c0c03, 0x110) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x811220c8}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x66}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000801) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc6b}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4a}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x8c}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '/,#/.)'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000000}]}, 0x54}}, 0x40000) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x304, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2c}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x24e}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:20:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000680)={0x64, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x4}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x64}}, 0x0) [ 4847.487036][ T9465] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9465 comm=syz-executor.0 01:20:47 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) [ 4848.856729][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:20:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000000380)='\a', 0x1}, {&(0x7f0000001600)="cf", 0x1}, {0x0}], 0x4}, 0x0) [ 4850.588356][ T9464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:20:50 executing program 0: syz_emit_ethernet(0x1e, &(0x7f0000000080)={@dev, @link_local, @val, {@llc={0x4, {@snap={0x0, 0x0, '$', "e385da"}}}}}, 0x0) 01:20:51 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@map, 0xffffffffffffffff, 0x13}, 0x20) 01:20:53 executing program 0: syz_io_uring_setup(0x2773, &(0x7f0000000000)={0x0, 0x0, 0x6}, &(0x7f0000000080), &(0x7f00000000c0)) 01:20:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x2, 0xa}]}]}, 0x20}}, 0x0) [ 4855.758101][ T9464] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:20:55 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) write$nci(r4, &(0x7f0000000900)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x1, {0x7, 0x5c, "734b4d7b93b05aa083d6d1fec028118450de9c5ef2d261531354e09ae95a5c035565a26c99c6d7526ac8d2f82959c942488fda55f58f1dbdb9e87c394a47510452178d37a791ac3579d6f9a90b05d7389212dfab39a5c18ff50e451efb044fa0d8b17a07bb3e02ca1820ba76ad65cf06a49a39ee5a92f5d2a4566cf6"}}, 0x81) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 4856.227691][ T9582] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 4856.377123][ T9582] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 01:20:56 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x2025, 0x1}, 0x48) 01:20:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @empty}}) 01:20:59 executing program 0: r0 = socket(0x18, 0x0, 0x0) bind$packet(r0, 0x0, 0x0) 01:21:00 executing program 0: r0 = socket(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 01:21:01 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x59, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xb, "d9"}, @main=@item_4={0x3, 0x0, 0xa, "e5adecc4"}]}}, 0x0}, 0x0) [ 4864.066209][ T9585] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:21:04 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 32) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (rerun: 64) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) (async, rerun: 64) write$nci(r4, &(0x7f0000000900)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x1, {0x7, 0x5c, "734b4d7b93b05aa083d6d1fec028118450de9c5ef2d261531354e09ae95a5c035565a26c99c6d7526ac8d2f82959c942488fda55f58f1dbdb9e87c394a47510452178d37a791ac3579d6f9a90b05d7389212dfab39a5c18ff50e451efb044fa0d8b17a07bb3e02ca1820ba76ad65cf06a49a39ee5a92f5d2a4566cf6"}}, 0x81) (async, rerun: 64) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:21:05 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c00)={@map, 0xffffffffffffffff, 0x4, 0x10}, 0x20) 01:21:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, &(0x7f0000000040)=@un=@abs={0xa}, 0x2) 01:21:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 4868.619574][ T9616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:21:09 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 01:21:11 executing program 0: r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000000), 0x60002, 0x0) write$damon_attrs(r0, &(0x7f0000000000)={{}, {}, {' ', 0xffffffffffffffff}}, 0x69) 01:21:12 executing program 0: getpgid(0xffffffffffffffff) getpgrp(0x0) syz_clone3(&(0x7f00000011c0)={0x40824000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 4873.756777][ T9615] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:21:13 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) creat(&(0x7f0000000140)='./file0\x00', 0x0) (async) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) write$nci(r4, &(0x7f0000000900)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x1, {0x7, 0x5c, "734b4d7b93b05aa083d6d1fec028118450de9c5ef2d261531354e09ae95a5c035565a26c99c6d7526ac8d2f82959c942488fda55f58f1dbdb9e87c394a47510452178d37a791ac3579d6f9a90b05d7389212dfab39a5c18ff50e451efb044fa0d8b17a07bb3e02ca1820ba76ad65cf06a49a39ee5a92f5d2a4566cf6"}}, 0x81) (async) write$nci(r4, &(0x7f0000000900)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x1, {0x7, 0x5c, "734b4d7b93b05aa083d6d1fec028118450de9c5ef2d261531354e09ae95a5c035565a26c99c6d7526ac8d2f82959c942488fda55f58f1dbdb9e87c394a47510452178d37a791ac3579d6f9a90b05d7389212dfab39a5c18ff50e451efb044fa0d8b17a07bb3e02ca1820ba76ad65cf06a49a39ee5a92f5d2a4566cf6"}}, 0x81) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:21:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, &(0x7f0000000100)=@ax25={{0x3, @bcast}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:21:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, &(0x7f0000000100)=@ax25={{0x3, @bcast}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:21:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, &(0x7f0000000100)=@ax25={{0x3, @bcast}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 4879.658633][ T9761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:21:19 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/108, 0x6c) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x0, 0x3, 0x6, 0x6, {0x9, [{0x2, 0x1}, {0x4, 0x8}, {0x4, 0x73}, {0x4, 0x9}, {0x0, 0x4}, {0x4, 0x7}, {0x2}, {0x3, 0x1f}, {0x1, 0x20}]}}, 0x16) 01:21:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, &(0x7f0000000100)=@ax25={{0x3, @bcast}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:21:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:21:23 executing program 0: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:21:24 executing program 0: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:21:25 executing program 0: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:21:26 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:21:27 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 4888.716299][ T9773] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:21:28 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/108, 0x6c) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x0, 0x3, 0x6, 0x6, {0x9, [{0x2, 0x1}, {0x4, 0x8}, {0x4, 0x73}, {0x4, 0x9}, {0x0, 0x4}, {0x4, 0x7}, {0x2}, {0x3, 0x1f}, {0x1, 0x20}]}}, 0x16) 01:21:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:21:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x0) 01:21:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x0) [ 4891.890271][ T9809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 01:21:31 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/108, 0x6c) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 64) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (rerun: 64) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x0, 0x3, 0x6, 0x6, {0x9, [{0x2, 0x1}, {0x4, 0x8}, {0x4, 0x73}, {0x4, 0x9}, {0x0, 0x4}, {0x4, 0x7}, {0x2}, {0x3, 0x1f}, {0x1, 0x20}]}}, 0x16) 01:21:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x0) 01:21:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 01:21:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 4895.754223][ T8503] nci: nci_stop_poll: unable to stop poll, since poll is not active 01:21:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 01:21:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf2502000000280001800600010002"], 0x3c}}, 0x0) [ 4898.691411][ T9938] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 4898.697097][ T9938] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 01:21:38 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup, 0xffffffffffffffff, 0x26, 0x200c, 0x0, @prog_id}, 0x20) 01:21:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f00000005c0)=@delchain={0x24, 0x65, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) [ 4900.946981][ T9817] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 01:21:41 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x22}]}, 0x24}}, 0x80000) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 01:21:41 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) connect(r0, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x80) 01:21:43 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "a4e4817ba34ad646260cff7e2631a572"}]}}}}}}}}, 0x0) [ 4903.637117][T20736] nci: nci_add_new_protocol: the target found does not have the desired protocol 01:21:44 executing program 0: syz_emit_ethernet(0xe, &(0x7f0000000000)={@local, @random="e0f5f91a81cd", @void, {@mpls_mc}}, 0x0) [ 4905.499280][ T9955] nci: nci_start_poll: failed to set listen parameters 01:21:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@gettaction={0x18, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 01:21:47 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@ifindex, 0xffffffffffffffff, 0x1d, 0x2019}, 0x20) 01:21:48 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) bind$packet(r0, 0x0, 0x0) [ 4909.666234][ T29] audit: type=1400 audit(4909.590:415): avc: denied { bind } for pid=9967 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 01:21:49 executing program 0: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)}) syz_io_uring_setup(0x2870, &(0x7f0000000040)={0x0, 0x0, 0x2000}, &(0x7f00000000c0), &(0x7f0000000100)) 01:21:51 executing program 0: r0 = socket(0x18, 0x0, 0x2) bind$packet(r0, 0x0, 0x0) 01:21:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="360b8a1491f3"}, 0x9c) 01:21:53 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 4914.609094][ T29] audit: type=1400 audit(4914.540:416): avc: denied { create } for pid=9976 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 01:21:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8915, &(0x7f0000000100)={'tunl0\x00', 0x0}) 01:21:56 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)={@ifindex, 0xffffffffffffffff, 0x18, 0x8}, 0x20) 01:21:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c000180080001"], 0x20}}, 0x0) 01:23:01 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x22}]}, 0x24}}, 0x80000) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 4986.383402][ T9994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4986.391859][ T9994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4987.237467][ T9994] hsr_slave_0: entered promiscuous mode [ 4987.248294][ T9994] hsr_slave_1: entered promiscuous mode [ 4987.250616][ T9994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 4987.252282][ T9994] Cannot create hsr debugfs directory 01:23:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) [ 5001.232430][T10313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5001.237875][T10313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5001.927171][T10313] hsr_slave_0: entered promiscuous mode [ 5001.932729][T10313] hsr_slave_1: entered promiscuous mode [ 5001.933924][T10313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 5001.934174][T10313] Cannot create hsr debugfs directory [ 5172.887076][T10632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5172.893389][T10632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5173.668423][T10632] hsr_slave_0: entered promiscuous mode [ 5173.670693][T10632] hsr_slave_1: entered promiscuous mode [ 5173.672191][T10632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 5173.672511][T10632] Cannot create hsr debugfs directory [ 5188.723874][T10954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5188.729292][T10954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5189.447884][T10954] hsr_slave_0: entered promiscuous mode [ 5189.450621][T10954] hsr_slave_1: entered promiscuous mode [ 5189.452678][T10954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 5189.453005][T10954] Cannot create hsr debugfs directory [ 5343.896958][ T30] INFO: task kworker/u4:3:20736 blocked for more than 430 seconds. [ 5343.897419][ T30] Not tainted 6.8.0-rc7-syzkaller #0 [ 5343.897542][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 5343.898005][ T30] task:kworker/u4:3 state:D stack:0 pid:20736 tgid:20736 ppid:2 flags:0x00000000 [ 5343.898359][ T30] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 5343.898537][ T30] Backtrace: [ 5343.898625][ T30] [<818597ac>] (__schedule) from [<8185a3e4>] (schedule+0x2c/0xb8) [ 5343.898776][ T30] r10:856e6a05 r9:00000000 r8:854eb460 r7:00000002 r6:dfa7ddac r5:84efb000 [ 5343.898884][ T30] r4:84efb000 [ 5343.898955][ T30] [<8185a3b8>] (schedule) from [<8185a9b0>] (schedule_preempt_disabled+0x18/0x24) [ 5343.899079][ T30] r5:84efb000 r4:854eb45c [ 5343.899190][ T30] [<8185a998>] (schedule_preempt_disabled) from [<8185d298>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 5343.899408][ T30] [<8185cfb0>] (__mutex_lock.constprop.0) from [<8185db64>] (__mutex_lock_slowpath+0x14/0x18) [ 5343.899680][ T30] r10:856e6a05 r9:84efb000 r8:00000001 r7:854eb45c r6:00000000 r5:8530e8fc [ 5343.899868][ T30] r4:854eb400 [ 5343.899973][ T30] [<8185db50>] (__mutex_lock_slowpath) from [<8185dba4>] (mutex_lock+0x3c/0x40) [ 5343.900207][ T30] [<8185db68>] (mutex_lock) from [<817ad800>] (nfc_targets_found+0x5c/0x124) [ 5343.900408][ T30] [<817ad7a4>] (nfc_targets_found) from [<817bdcfc>] (nci_ntf_packet+0xa3c/0xe88) [ 5343.900631][ T30] r8:00000001 r7:00000000 r6:8530e800 r5:97ca9600 r4:00000103 [ 5343.900784][ T30] [<817bd2c0>] (nci_ntf_packet) from [<817baa44>] (nci_rx_work+0x64/0xe4) [ 5343.901027][ T30] r10:856e6a05 r9:84efb000 r8:00000100 r7:8530e8a4 r6:8530e870 r5:8530e800 [ 5343.901189][ T30] r4:97ca9600 [ 5343.901282][ T30] [<817ba9e0>] (nci_rx_work) from [<80267028>] (process_one_work+0x19c/0x4a4) [ 5343.901485][ T30] r7:82c0e400 r6:856e6a00 r5:8530e870 r4:83516e00 [ 5343.901602][ T30] [<80266e8c>] (process_one_work) from [<80267570>] (worker_thread+0x240/0x48c) [ 5343.901811][ T30] r10:61c88647 r9:84efb000 r8:82c0e420 r7:82604d40 r6:82c0e400 r5:83516e2c [ 5343.901975][ T30] r4:83516e00 [ 5343.902064][ T30] [<80267330>] (worker_thread) from [<8026e84c>] (kthread+0x104/0x134) [ 5343.902259][ T30] r10:00000000 r9:e4c69e90 r8:84c6a240 r7:83516e00 r6:80267330 r5:84efb000 [ 5343.902405][ T30] r4:8b2876c0 [ 5343.902491][ T30] [<8026e748>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30) [ 5343.902664][ T30] Exception stack(0xdfa7dfb0 to 0xdfa7dff8) [ 5343.902800][ T30] dfa0: 00000000 00000000 00000000 00000000 [ 5343.902980][ T30] dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 5343.903146][ T30] dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 5343.903303][ T30] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e748 r4:8b2876c0 [ 5343.903682][ T30] INFO: task syz-executor.1:9945 blocked for more than 430 seconds. [ 5343.903856][ T30] Not tainted 6.8.0-rc7-syzkaller #0 [ 5343.903994][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 5343.904178][ T30] task:syz-executor.1 state:D stack:0 pid:9945 tgid:9945 ppid:17775 flags:0x00000005 [ 5343.912216][ T30] Backtrace: [ 5343.912959][ T30] [<818597ac>] (__schedule) from [<8185a3e4>] (schedule+0x2c/0xb8) [ 5343.913269][ T30] r10:e0899eac r9:00000002 r8:e0899e54 r7:84282400 r6:e0899ea4 r5:00000000 [ 5343.913488][ T30] r4:84282400 [ 5343.913614][ T30] [<8185a3b8>] (schedule) from [<8186198c>] (schedule_timeout+0xe4/0x114) [ 5343.913876][ T30] r5:00000000 r4:7fffffff [ 5343.914033][ T30] [<818618a8>] (schedule_timeout) from [<8185b2e8>] (wait_for_completion+0x6c/0x144) [ 5343.914298][ T30] r7:84282400 r6:e0899ea4 r5:e0899ea8 r4:7fffffff [ 5343.914472][ T30] [<8185b27c>] (wait_for_completion) from [<8026375c>] (__flush_workqueue+0x118/0x5d0) [ 5343.914746][ T30] r10:00000006 r9:84f7e210 r8:84f7e23c r7:8530e830 r6:84f7e200 r5:e0899e98 [ 5343.914957][ T30] r4:00000001 [ 5343.915095][ T30] [<80263644>] (__flush_workqueue) from [<817ba32c>] (nci_close_device+0x8c/0x130) [ 5343.915370][ T30] r10:00000006 r9:84282400 r8:84ebc190 r7:8530e830 r6:8530e818 r5:8530e8c4 [ 5343.920133][ T30] r4:8530e800 [ 5343.921022][ T30] [<817ba2a0>] (nci_close_device) from [<817baae8>] (nci_unregister_device+0x24/0x98) [ 5343.923043][ T30] r7:8530e800 r6:830333f0 r5:000e001b r4:9712f200 [ 5343.924701][ T30] [<817baac4>] (nci_unregister_device) from [<80a85030>] (virtual_ncidev_close+0x18/0x30) [ 5343.925001][ T30] r9:84282400 r8:84ebc190 r7:83aaf098 r6:830333f0 r5:000e001b r4:9712f200 [ 5343.925199][ T30] [<80a85018>] (virtual_ncidev_close) from [<804eb3c8>] (__fput+0x84/0x2d4) [ 5343.925463][ T30] r5:000e001b r4:84eb3480 [ 5343.929327][ T30] [<804eb344>] (__fput) from [<804eb6d4>] (__fput_sync+0x3c/0x40) [ 5343.929838][ T30] r9:84282400 r8:80200288 r7:00000006 r6:00000000 r5:84eb3480 r4:00000000 [ 5343.930056][ T30] [<804eb698>] (__fput_sync) from [<804e6d9c>] (sys_close+0x30/0x64) [ 5343.930288][ T30] [<804e6d6c>] (sys_close) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5343.930719][ T30] Exception stack(0xe0899fa8 to 0xe0899ff0) [ 5343.930907][ T30] 9fa0: 00000003 00000004 00000003 00000002 00000000 00000000 [ 5343.931138][ T30] 9fc0: 00000003 00000004 00000000 00000006 0014d490 00140000 00140000 0014d490 [ 5343.931343][ T30] 9fe0: 32a60000 7ea863e0 00091154 0004f5cc [ 5343.931547][ T30] r5:00000004 r4:00000003 [ 5343.931721][ T30] INFO: task syz-executor.1:9948 blocked for more than 430 seconds. [ 5343.931952][ T30] Not tainted 6.8.0-rc7-syzkaller #0 [ 5343.932154][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 5343.932354][ T30] task:syz-executor.1 state:D stack:0 pid:9948 tgid:9945 ppid:17775 flags:0x00000005 [ 5343.932653][ T30] Backtrace: [ 5343.932783][ T30] [<818597ac>] (__schedule) from [<8185a3e4>] (schedule+0x2c/0xb8) [ 5343.933075][ T30] r10:00000000 r9:00000000 r8:827c45b0 r7:00000002 r6:e010db2c r5:84285400 [ 5343.933277][ T30] r4:84285400 [ 5343.933397][ T30] [<8185a3b8>] (schedule) from [<8185a9b0>] (schedule_preempt_disabled+0x18/0x24) [ 5343.933647][ T30] r5:84285400 r4:827c45ac [ 5343.933777][ T30] [<8185a998>] (schedule_preempt_disabled) from [<8185d298>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 5343.934061][ T30] [<8185cfb0>] (__mutex_lock.constprop.0) from [<8185db64>] (__mutex_lock_slowpath+0x14/0x18) [ 5343.934354][ T30] r10:00000000 r9:e010dc4c r8:00000000 r7:0000002c r6:97ca93c0 r5:8b393b00 [ 5343.934554][ T30] r4:821954c0 [ 5343.934656][ T30] [<8185db50>] (__mutex_lock_slowpath) from [<8185dba4>] (mutex_lock+0x3c/0x40) [ 5343.934888][ T30] [<8185db68>] (mutex_lock) from [<81466004>] (genl_rcv_msg+0x308/0x3d4) [ 5343.935134][ T30] [<81465cfc>] (genl_rcv_msg) from [<814645b8>] (netlink_rcv_skb+0xc0/0x120) [ 5343.935400][ T30] r10:00000000 r9:854ed97c r8:828f71c0 r7:0000002c r6:8b393b00 r5:81465cfc [ 5343.937618][ T30] r4:97ca93c0 [ 5343.937922][ T30] [<814644f8>] (netlink_rcv_skb) from [<814656e0>] (genl_rcv+0x2c/0x3c) [ 5343.942372][ T30] r7:97ca93c0 r6:82f23500 r5:827c45c0 r4:97ca93c0 [ 5343.942626][ T30] [<814656b4>] (genl_rcv) from [<81463af0>] (netlink_unicast+0x194/0x290) [ 5343.943378][ T30] r5:0000002c r4:82e08400 [ 5343.943576][ T30] [<8146395c>] (netlink_unicast) from [<81463dc8>] (netlink_sendmsg+0x1dc/0x434) [ 5343.944282][ T30] r9:00000000 r8:00000000 r7:854ed800 r6:0000002c r5:97ca93c0 r4:e010df38 [ 5343.956503][ T30] [<81463bec>] (netlink_sendmsg) from [<8134cb30>] (__sock_sendmsg+0x44/0x78) [ 5343.967338][ T30] r10:00000000 r9:e010ddd4 r8:e010ddd4 r7:00000000 r6:8333e500 r5:e010df38 [ 5343.969130][ T30] r4:00000000 [ 5343.969340][ T30] [<8134caec>] (__sock_sendmsg) from [<8134d9dc>] (____sys_sendmsg+0x22c/0x2a8) [ 5343.977664][ T30] r7:00000000 r6:00000000 r5:8333e500 r4:e010df38 [ 5343.979375][ T30] [<8134d7b0>] (____sys_sendmsg) from [<8134f738>] (___sys_sendmsg+0x9c/0xd0) [ 5343.980230][ T30] r10:e010de34 r9:20000780 r8:00000000 r7:00000000 r6:8333e500 r5:e010df38 [ 5343.980440][ T30] r4:00000000 [ 5343.980572][ T30] [<8134f69c>] (___sys_sendmsg) from [<8134fc34>] (sys_sendmsg+0x78/0xbc) [ 5343.980839][ T30] r10:00000128 r9:84285400 r8:80200288 r7:00000000 r6:20000780 r5:8333e500 [ 5343.981059][ T30] r4:00000000 [ 5343.981193][ T30] [<8134fbbc>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5343.981443][ T30] Exception stack(0xe010dfa8 to 0xe010dff0) [ 5343.981633][ T30] dfa0: 00000000 00000000 00000005 20000780 00000000 00000000 [ 5343.981851][ T30] dfc0: 00000000 00000000 0014c2c8 00000128 7ea8632e 7ea8632f 003d0f00 76bc80fc [ 5343.982081][ T30] dfe0: 76bc7f08 76bc7ef8 000167f8 00050bc0 [ 5343.982428][ T30] r7:00000128 r6:0014c2c8 r5:00000000 r4:00000000 [ 5343.985360][ T30] INFO: task syz-executor.1:9955 blocked for more than 430 seconds. [ 5343.993989][ T30] Not tainted 6.8.0-rc7-syzkaller #0 [ 5343.994236][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 5343.994460][ T30] task:syz-executor.1 state:D stack:0 pid:9955 tgid:9945 ppid:17775 flags:0x00000005 [ 5343.994769][ T30] Backtrace: [ 5343.994911][ T30] [<818597ac>] (__schedule) from [<8185a3e4>] (schedule+0x2c/0xb8) [ 5343.995187][ T30] r10:8530e8c4 r9:00000000 r8:8530e8c8 r7:00000002 r6:e0849a8c r5:84283000 [ 5343.995387][ T30] r4:84283000 [ 5343.995496][ T30] [<8185a3b8>] (schedule) from [<8185a9b0>] (schedule_preempt_disabled+0x18/0x24) [ 5343.996712][ T30] r5:84283000 r4:8530e8c4 [ 5343.996893][ T30] [<8185a998>] (schedule_preempt_disabled) from [<8185d298>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 5344.000623][ T30] [<8185cfb0>] (__mutex_lock.constprop.0) from [<8185db64>] (__mutex_lock_slowpath+0x14/0x18) [ 5344.001017][ T30] r10:8530e8c4 r9:00000001 r8:8530e8c4 r7:00000000 r6:8530e800 r5:00000022 [ 5344.001269][ T30] r4:8530e800 [ 5344.001406][ T30] [<8185db50>] (__mutex_lock_slowpath) from [<8185dba4>] (mutex_lock+0x3c/0x40) [ 5344.001691][ T30] [<8185db68>] (mutex_lock) from [<817bc058>] (nci_start_poll+0x9c/0x394) [ 5344.001957][ T30] [<817bbfbc>] (nci_start_poll) from [<817ae73c>] (nfc_start_poll+0x74/0xd8) [ 5344.002218][ T30] r10:828f71c0 r9:e0849c4c r8:00000000 r7:854eb45c r6:00000022 r5:00000000 [ 5344.002428][ T30] r4:854eb400 [ 5344.002533][ T30] [<817ae6c8>] (nfc_start_poll) from [<817afa08>] (nfc_genl_start_poll+0x70/0xfc) [ 5344.002788][ T30] r7:854eb610 r6:e0849bec r5:00000022 r4:854eb400 [ 5344.002964][ T30] [<817af998>] (nfc_genl_start_poll) from [<81465f7c>] (genl_rcv_msg+0x280/0x3d4) [ 5344.003236][ T30] r9:e0849c4c r8:97109c00 r7:00000000 r6:970f1600 r5:8b347d50 r4:821954c0 [ 5344.003530][ T30] [<81465cfc>] (genl_rcv_msg) from [<814645b8>] (netlink_rcv_skb+0xc0/0x120) [ 5344.003789][ T30] r10:00000000 r9:854ed97c r8:828f71c0 r7:00000024 r6:8b347d40 r5:81465cfc [ 5344.003992][ T30] r4:970f1600 [ 5344.004123][ T30] [<814644f8>] (netlink_rcv_skb) from [<814656e0>] (genl_rcv+0x2c/0x3c) [ 5344.004374][ T30] r7:970f1600 r6:82f23500 r5:827c45c0 r4:970f1600 [ 5344.004526][ T30] [<814656b4>] (genl_rcv) from [<81463af0>] (netlink_unicast+0x194/0x290) [ 5344.004759][ T30] r5:00000024 r4:82e08400 [ 5344.004884][ T30] [<8146395c>] (netlink_unicast) from [<81463dc8>] (netlink_sendmsg+0x1dc/0x434) [ 5344.005137][ T30] r9:00000000 r8:00000000 r7:854ed800 r6:00000024 r5:970f1600 r4:e0849f38 [ 5344.005339][ T30] [<81463bec>] (netlink_sendmsg) from [<8134cb30>] (__sock_sendmsg+0x44/0x78) [ 5344.007136][ T30] r10:00080000 r9:e0849dd4 r8:e0849dd4 r7:00000000 r6:8333e500 r5:e0849f38 [ 5344.007957][ T30] r4:00000000 [ 5344.008142][ T30] [<8134caec>] (__sock_sendmsg) from [<8134d9dc>] (____sys_sendmsg+0x22c/0x2a8) [ 5344.008529][ T30] r7:00000000 r6:00000000 r5:8333e500 r4:e0849f38 [ 5344.008888][ T30] [<8134d7b0>] (____sys_sendmsg) from [<8134f738>] (___sys_sendmsg+0x9c/0xd0) [ 5344.009220][ T30] r10:e0849e34 r9:20000440 r8:00080000 r7:00000000 r6:8333e500 r5:e0849f38 [ 5344.009583][ T30] r4:00000000 [ 5344.009736][ T30] [<8134f69c>] (___sys_sendmsg) from [<8134fc34>] (sys_sendmsg+0x78/0xbc) [ 5344.010040][ T30] r10:00000128 r9:84283000 r8:80200288 r7:00080000 r6:20000440 r5:8333e500 [ 5344.012244][ T30] r4:00000000 [ 5344.013212][ T30] [<8134fbbc>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5344.013529][ T30] Exception stack(0xe0849fa8 to 0xe0849ff0) [ 5344.013743][ T30] 9fa0: 00000000 00000000 00000005 20000440 00080000 00000000 [ 5344.014027][ T30] 9fc0: 00000000 00000000 0014c358 00000128 7ea8632e 7ea8632f 003d0f00 76ba70fc [ 5344.016365][ T30] 9fe0: 76ba6f08 76ba6ef8 000167f8 00050bc0 [ 5344.016630][ T30] r7:00000128 r6:0014c358 r5:00000000 r4:00000000 [ 5344.017912][ T30] NMI backtrace for cpu 1 [ 5344.019222][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.8.0-rc7-syzkaller #0 [ 5344.020280][ T30] Hardware name: ARM-Versatile Express [ 5344.020455][ T30] Backtrace: [ 5344.020722][ T30] [<818382cc>] (dump_backtrace) from [<818383c8>] (show_stack+0x18/0x1c) [ 5344.021017][ T30] r7:00000000 r6:00000013 r5:60000093 r4:81fbd658 [ 5344.021243][ T30] [<818383b0>] (show_stack) from [<818558e4>] (dump_stack_lvl+0x48/0x54) [ 5344.021614][ T30] [<8185589c>] (dump_stack_lvl) from [<81855908>] (dump_stack+0x18/0x1c) [ 5344.022018][ T30] r5:00000001 r4:00000001 [ 5344.022238][ T30] [<818558f0>] (dump_stack) from [<818256f8>] (nmi_cpu_backtrace+0x160/0x17c) [ 5344.022534][ T30] [<81825598>] (nmi_cpu_backtrace) from [<81825844>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8) [ 5344.023015][ T30] r7:00000001 r6:8260c494 r5:8261a7d8 r4:ffffffff [ 5344.023226][ T30] [<81825714>] (nmi_trigger_cpumask_backtrace) from [<80210574>] (arch_trigger_cpumask_backtrace+0x18/0x1c) [ 5344.023583][ T30] r9:00000001 r8:82895eb8 r7:8260c5ec r6:00007f24 r5:8261adc8 r4:82f9572c [ 5344.023813][ T30] [<8021055c>] (arch_trigger_cpumask_backtrace) from [<80347ebc>] (watchdog+0x48c/0x59c) [ 5344.024272][ T30] [<80347a30>] (watchdog) from [<8026e84c>] (kthread+0x104/0x134) [ 5344.024657][ T30] r10:00000000 r9:df819e58 r8:82e9f3c0 r7:00000000 r6:80347a30 r5:82ee8c00 [ 5344.025026][ T30] r4:82f45ac0 [ 5344.025162][ T30] [<8026e748>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30) [ 5344.025425][ T30] Exception stack(0xdf8d9fb0 to 0xdf8d9ff8) [ 5344.025751][ T30] 9fa0: 00000000 00000000 00000000 00000000 [ 5344.026123][ T30] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 5344.026454][ T30] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 5344.026757][ T30] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e748 r4:82f45ac0 [ 5344.027815][ T30] Sending NMI from CPU 1 to CPUs 0: [ 5344.028837][ C0] NMI backtrace for cpu 0 [ 5344.029260][ C0] CPU: 0 PID: 2795 Comm: klogd Not tainted 6.8.0-rc7-syzkaller #0 [ 5344.029402][ C0] Hardware name: ARM-Versatile Express [ 5344.029603][ C0] PC is at 0x76d72a60 [ 5344.030382][ C0] LR is at 0x76d725f4 [ 5344.030420][ C0] pc : [<76d72a60>] lr : [<76d725f4>] psr: 80000010 [ 5344.030472][ C0] sp : 7eb48b18 ip : 0000006e fp : 7eb48c34 [ 5344.030506][ C0] r10: 00000001 r9 : 7eb48b63 r8 : 0000005f [ 5344.030543][ C0] r7 : 00000005 r6 : 00000001 r5 : 00000000 r4 : 0140cb70 [ 5344.030581][ C0] r3 : 00000031 r2 : 80000000 r1 : 7eb48b64 r0 : 0140cb70 [ 5344.030697][ C0] Flags: Nzcv IRQs on FIQs on Mode USER_32 ISA ARM Segment user [ 5344.030761][ C0] Control: 30c5387d Table: 84292380 DAC: fffffffd [ 5344.030837][ C0] Backtrace: invalid frame pointer 0x7eb48c34 [ 5344.031906][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 5344.035470][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.8.0-rc7-syzkaller #0 [ 5344.036161][ T30] Hardware name: ARM-Versatile Express [ 5344.036326][ T30] Backtrace: [ 5344.036655][ T30] [<818382cc>] (dump_backtrace) from [<818383c8>] (show_stack+0x18/0x1c) [ 5344.037066][ T30] r7:00000000 r6:82622dc4 r5:60000093 r4:81fbd658 [ 5344.037276][ T30] [<818383b0>] (show_stack) from [<818558e4>] (dump_stack_lvl+0x48/0x54) [ 5344.037589][ T30] [<8185589c>] (dump_stack_lvl) from [<81855908>] (dump_stack+0x18/0x1c) [ 5344.038005][ T30] r5:00000000 r4:82850d18 [ 5344.038270][ T30] [<818558f0>] (dump_stack) from [<81838e70>] (panic+0x120/0x378) [ 5344.038579][ T30] [<81838d50>] (panic) from [<80347d48>] (watchdog+0x318/0x59c) [ 5344.038874][ T30] r3:00000000 r2:00000000 r1:00000001 r0:81fbe114 [ 5344.039167][ T30] r7:8260c5ec [ 5344.039299][ T30] [<80347a30>] (watchdog) from [<8026e84c>] (kthread+0x104/0x134) [ 5344.039664][ T30] r10:00000000 r9:df819e58 r8:82e9f3c0 r7:00000000 r6:80347a30 r5:82ee8c00 [ 5344.039971][ T30] r4:82f45ac0 [ 5344.040256][ T30] [<8026e748>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30) [ 5344.040522][ T30] Exception stack(0xdf8d9fb0 to 0xdf8d9ff8) [ 5344.040690][ T30] 9fa0: 00000000 00000000 00000000 00000000 [ 5344.040988][ T30] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 5344.041213][ T30] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 5344.041501][ T30] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e748 r4:82f45ac0 [ 5344.042478][ C0] CPU0: stopping [ 5344.042590][ C0] CPU: 0 PID: 2791 Comm: syslogd Not tainted 6.8.0-rc7-syzkaller #0 [ 5344.042646][ C0] Hardware name: ARM-Versatile Express [ 5344.042667][ C0] Backtrace: frame pointer underflow [ 5344.042732][ C0] [<818382cc>] (dump_backtrace) from [<818383c8>] (show_stack+0x18/0x1c) [ 5344.042862][ C0] r7:00000014 r6:81b0f9f8 r5:600001d3 r4:81fbd658 [ 5344.042877][ C0] [<818383b0>] (show_stack) from [<818558e4>] (dump_stack_lvl+0x48/0x54) [ 5344.042942][ C0] [<8185589c>] (dump_stack_lvl) from [<81855908>] (dump_stack+0x18/0x1c) [ 5344.043006][ C0] r5:00000000 r4:00000004 [ 5344.043017][ C0] [<818558f0>] (dump_stack) from [<8020fb78>] (do_handle_IPI+0x2ac/0x2d8) [ 5344.043076][ C0] [<8020f8cc>] (do_handle_IPI) from [<8020fbc4>] (ipi_handler+0x20/0x28) [ 5344.043161][ C0] r9:83ff2400 r8:df801f78 r7:00000014 r6:81b0f9f8 r5:82c0cc80 r4:82c96d00 [ 5344.043176][ C0] [<8020fba4>] (ipi_handler) from [<802c500c>] (handle_percpu_devid_irq+0x9c/0x2cc) [ 5344.043242][ C0] [<802c4f70>] (handle_percpu_devid_irq) from [<802be798>] (generic_handle_domain_irq+0x30/0x40) [ 5344.043313][ C0] r10:00000001 r9:83ff2400 r8:00000000 r7:df80a00c r6:824b0bc0 r5:df80a000 [ 5344.043335][ C0] r4:8260cd28 r3:00010001 [ 5344.043346][ C0] [<802be768>] (generic_handle_domain_irq) from [<802011c4>] (gic_handle_irq+0x68/0x7c) [ 5344.043396][ C0] [<8020115c>] (gic_handle_irq) from [<818561a8>] (generic_handle_arch_irq+0x60/0x80) [ 5344.043468][ C0] r7:ec735c40 r6:8213cd38 r5:82178950 r4:824b2224 [ 5344.043481][ C0] [<81856148>] (generic_handle_arch_irq) from [<81808348>] (call_with_stack+0x1c/0x20) [ 5344.043554][ C0] r9:83ff2400 r8:82eed400 r7:ec735c74 r6:ffffffff r5:20000013 r4:8027b450 [ 5344.043567][ C0] [<8180832c>] (call_with_stack) from [<80200b84>] (__irq_svc+0x84/0xac) [ 5344.043612][ C0] Exception stack(0xec735c40 to 0xec735c88) [ 5344.043656][ C0] 5c40: 00000001 81fbd658 00000001 83ff2400 00000000 dddd1600 81859bb0 a3ec4f30 [ 5344.043692][ C0] 5c60: 82eed400 83ff2400 00000001 ec735cd4 ec735c80 ec735c90 818628c0 8027b450 [ 5344.043712][ C0] 5c80: 20000013 ffffffff [ 5344.043729][ C0] [<8027b3c4>] (finish_task_switch) from [<81859bb0>] (__schedule+0x404/0xc0c) [ 5344.043818][ C0] r10:00000000 r9:840d8c00 r8:41af4173 r7:a3ec4f30 r6:83ff2400 r5:dddd1600 [ 5344.043834][ C0] r4:82eed400 [ 5344.043847][ C0] [<818597ac>] (__schedule) from [<8185a528>] (preempt_schedule+0x4c/0xb4) [ 5344.043948][ C0] r10:00000000 r9:8342c3a8 r8:ec735dd0 r7:802a3638 r6:00000001 r5:83ff2400 [ 5344.043966][ C0] r4:818629d4 [ 5344.043977][ C0] [<8185a4dc>] (preempt_schedule) from [<818629d4>] (_raw_spin_unlock_irqrestore+0x50/0x54) [ 5344.044041][ C0] r7:a0000013 r6:00000001 r5:00000304 r4:8342c580 [ 5344.044053][ C0] [<81862984>] (_raw_spin_unlock_irqrestore) from [<802a3638>] (__wake_up_sync_key+0x4c/0x54) [ 5344.044152][ C0] [<802a35ec>] (__wake_up_sync_key) from [<815f6fa0>] (__unix_dgram_recvmsg+0x13c/0x4d8) [ 5344.044223][ C0] r7:00000000 r6:8342c534 r5:8342c300 r4:97ca9e40 [ 5344.044238][ C0] [<815f6e64>] (__unix_dgram_recvmsg) from [<815f7380>] (unix_dgram_recvmsg+0x44/0x4c) [ 5344.044306][ C0] r10:00000001 r9:00000000 r8:01fda1d0 r7:00000000 r6:8314a780 r5:ec735e68 [ 5344.044320][ C0] r4:815f733c [ 5344.044332][ C0] [<815f733c>] (unix_dgram_recvmsg) from [<8134c6d8>] (sock_recvmsg+0x50/0x78) [ 5344.044389][ C0] r4:815f733c [ 5344.044400][ C0] [<8134c688>] (sock_recvmsg) from [<8134c7a4>] (sock_read_iter+0xa4/0xfc) [ 5344.044519][ C0] r7:8314a780 r6:82ec3cc0 r5:ec735f08 r4:ec735ef0 [ 5344.044538][ C0] [<8134c700>] (sock_read_iter) from [<804e93d0>] (vfs_read+0x2e4/0x314) [ 5344.044614][ C0] r7:00000000 r6:83ff2400 r5:000000ff r4:82ec3cc0 [ 5344.044627][ C0] [<804e90ec>] (vfs_read) from [<804e9e48>] (ksys_read+0xc4/0xf8) [ 5344.044697][ C0] r10:00000003 r9:83ff2400 r8:80200288 r7:000000ff r6:01fda1d0 r5:82ec3cc0 [ 5344.044714][ C0] r4:82ec3cc0 [ 5344.044726][ C0] [<804e9d84>] (ksys_read) from [<804e9e8c>] (sys_read+0x10/0x14) [ 5344.044792][ C0] r7:00000003 r6:01fda2d0 r5:76fcf5a0 r4:fffffc00 [ 5344.044804][ C0] [<804e9e7c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5344.044852][ C0] Exception stack(0xec735fa8 to 0xec735ff0) [ 5344.044886][ C0] 5fa0: fffffc00 76fcf5a0 00000000 01fda1d0 000000ff 00000000 [ 5344.044919][ C0] 5fc0: fffffc00 76fcf5a0 01fda2d0 00000003 00000000 01fda1c8 76f9854c 76f98548 [ 5344.044945][ C0] 5fe0: 76f979f8 7ef72c70 76f0d2ec 76e1b2fc [ 5344.055712][ T30] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:13:38 Registers: info registers vcpu 0 CPU#0 R00=828b7224 R01=00000000 R02=0000077c R03=828b7224 R04=00000000 R05=97149000 R06=00000100 R07=806ee6d8 R08=97149ac0 R09=97149a80 R10=8b0833c0 R11=ec735c2c R12=00000001 R13=ec735bb8 R14=807f5080 R15=818624e8 PSR=20000013 --C- A S svc32 s00=05ec76f0 s01=00000001 d00=0000000105ec76f0 s02=dea713f1 s03=00000000 d01=00000000dea713f1 s04=337917e4 s05=415f987d d02=415f987d337917e4 s06=00000000 s07=00000000 d03=0000000000000000 s08=b94611c0 s09=3395d851 d04=3395d851b94611c0 s10=00000000 s11=00000000 d05=0000000000000000 s12=ffffffff s13=00000000 d06=00000000ffffffff s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=fb0ac4ac s21=44d94e4a d10=44d94e4afb0ac4ac s22=6a579e6d s23=00000000 d11=000000006a579e6d s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=840c5440 R01=00000033 R02=ebde7000 R03=ebde7018 R04=828531b1 R05=840c5440 R06=809780ac R07=828531ce R08=828531ac R09=00000023 R10=60000013 R11=df8d9d34 R12=00000002 R13=df8d9d28 R14=82749300 R15=809780bc PSR=80000093 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=005027e9 s17=0050a335 d08=0050a335005027e9 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=d635b981 s33=434dfb04 d16=434dfb04d635b981 s34=45b66686 s35=23175886 d17=2317588645b66686 s36=10c982c1 s37=a990ea1e d18=a990ea1e10c982c1 s38=63034b4c s39=2493030b d19=2493030b63034b4c s40=4334b4e3 s41=4b334b23 d20=4b334b234334b4e3 s42=e5e81303 s43=a6a686cc d21=a6a686cce5e81303 s44=86264989 s45=e626c666 d22=e626c66686264989 s46=322aee38 s47=cba13045 d23=cba13045322aee38 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=f4fcc66f s53=dc92c136 d26=dc92c136f4fcc66f s54=7b6fd3be s55=353f5895 d27=353f58957b6fd3be s56=c95ab452 s57=c0d05620 d28=c0d05620c95ab452 s58=341905f9 s59=8ab4f0d7 d29=8ab4f0d7341905f9 s60=80b7d84b s61=c5a105ec d30=c5a105ec80b7d84b s62=f87da92d s63=2061d1cd d31=2061d1cdf87da92d FPSCR: 00000000