&(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) fcntl$notify(r0, 0x402, 0x10) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1241.034285][T22497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1241.146429][T22534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1241.760391][T22513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1241.769419][T22519] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:17 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(0xffffffffffffffff, &(0x7f0000000ac0)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5b7ddc71"], 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="410319c4b8484aa699e3d27aea00009f2d049ae16d8d08b7a7402c8f46f12a05ce14098e9600a4c18dcc6da3ced08be66bb839938e61d2e6fd1173c9b6b150294d037c7caa435278da61416af8cf2003f34fc0eb816131e195fd7d7142beb0390ba07b1777cc05b98b"], 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="e3021e1f817750dd45e724024696aa95078ee8c78fb4ef865b9fa5c99303f960e2de783a7db14afce6410afd15718af8f7e3b668565b543debe7f1fe2b76be4ad40e7e7db9a9e0cfa1ff6ba9bb317e661d0eb3822daaea8036041c2e52969ef6e6b7295d6e407dc0066c3801bfa7b297f839d876e5374bb33f88df87bace1109d61ed69f7dd91f744e41199c51cd5b6c35e0bbee7d1bbf02ed06ec7a5adea77bb3b1919151841d6f53e576dbe1d47ac94b4cf430706d8b3bfaac8b96dd9814f74dd326e7fd1a82894df61471321cc9de478c2c23cc1357c6293f362be583eb153fdc277fbb088d14b97b89bcbc34cb007bd4c6b1f43b72ca34bc2a90da9ff538e0413924843ba4107ef3de5a474dbf3276da12c785baefa3784c3dd0ceee9f2ff5a146ca510e22ad58f26168ba716f41e0aef2bb8cda82e5d4ae048143753c2be1bcc83c885210af2f42108ba59a71cefb2ddc3dd8a26cc46a92818da12881ef10293702a5b3cafb53ae2c923d89a4dba5093fcffd76cb519b8973436784bc633425536db2aa312126827aa4793fb7527dd89d106fcbe53fff5aa49c4693e441c264ab6c23a1d082d9f4e8e662ab3d137c89bc166c7a12750b94fd1dea1e2c9630325be25d4a02936cadb8bd94d215b4218e4cf6b345077c05ace1f707c1d98e792ed37ef69dedddd6fe89fa2e21c90cd6a092a86b50daba6a6d5f50222952d2e1090a17f1b7ee92d3d71e09ecc121813855ee8ea25fb2a7bd5f07da98a165127e94d25127514d0479c9ee64263b33619327af47558ca9ac9abedf918967d5946c5924324559c6ad0d901064bc7f68ecc418757be41e4afba04c7bfca41c0d55d11a4c5eb42980b2ac8e94c7244bbe897df8f0c6b6953a269af877c09637e986b91e43bd814773b193a58688b4f27cb447ea8da9c906e81c091781a51a388a8c61fc5557ba509b873e6a0360cec5f9024f75e6d9160d220687f5223a7c00a124cba5e62a56ea3a18e24395bcc59db624d008a94019a9fe421c4c35738ca6dbeb"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004090}, 0x20050800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000040)) 03:47:17 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f000031d000/0x4000)=nil, 0x3) setrlimit(0x0, 0x0) 03:47:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendto$inet6(r0, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) listen(r0, 0x400) accept4(r0, 0x0, 0x0, 0x0) 03:47:17 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0xc2ffffff00000000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:17 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0xffffff7f00000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:17 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) fcntl$notify(r0, 0x402, 0x10) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:17 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1245.264550][T22495] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1245.302196][T22549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1245.367262][T16741] nci: nci_rsp_packet: unknown rsp opcode 0xb3d 03:47:18 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f000031d000/0x4000)=nil, 0x3) setrlimit(0x0, 0x0) [ 1245.471640][T22588] nci: nci_start_poll: failed to set local general bytes [ 1245.479581][T16741] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:47:18 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f000031d000/0x4000)=nil, 0x3) setrlimit(0x0, 0x0) 03:47:18 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f000031d000/0x4000)=nil, 0x3) setrlimit(0x0, 0x0) 03:47:18 executing program 2: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) r1 = openat(r0, &(0x7f00000000c0)='.\x00', 0x0, 0x0) dup3(r1, r0, 0x0) link(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='.\x00') 03:47:18 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ftruncate(r2, 0x8001) write(r1, &(0x7f00000002c0)="03", 0x1) 03:47:18 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@fwd={0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x43}, 0x20) 03:47:18 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(0xffffffffffffffff, &(0x7f0000000ac0)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5b7ddc71"], 0x4) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="410319c4b8484aa699e3d27aea00009f2d049ae16d8d08b7a7402c8f46f12a05ce14098e9600a4c18dcc6da3ced08be66bb839938e61d2e6fd1173c9b6b150294d037c7caa435278da61416af8cf2003f34fc0eb816131e195fd7d7142beb0390ba07b1777cc05b98b"], 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004090}, 0x20050800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000040)) 03:47:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00208cc5c8ad401f18991900000000000000343fd159f8d3"], 0x100e) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 03:47:18 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0xc3ffffff00000000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:18 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0xffffffff00000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1246.125987][T22548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:18 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0x7fffffff}, {0x44}, {0x6, 0x0, 0x0, 0x7ffffdc3}]}) socket$netlink(0x10, 0x3, 0x0) 03:47:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) close(r0) 03:47:18 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:18 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = memfd_create(&(0x7f0000000100)='\x00\x00!QY\x00\x00\xef\x1c\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$eventfd(r3, &(0x7f0000000080)=0x20000100000094, 0x8) write(r3, &(0x7f0000000040)="0600", 0x2) sendfile(r3, r3, &(0x7f00000001c0), 0xfeff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) syz_clone3(&(0x7f0000006a00)={0x841400, &(0x7f0000006840), &(0x7f0000006880), &(0x7f00000068c0), {0x4}, &(0x7f0000006900)=""/80, 0x50, &(0x7f0000006980)=""/37, &(0x7f00000069c0)=[r0, 0x0, r0], 0x3}, 0x58) fstat(r2, &(0x7f0000006a80)) newfstatat(0xffffffffffffff9c, &(0x7f0000006b00)='./file0\x00', &(0x7f0000006b40), 0x4000) openat$vcs(0xffffffffffffff9c, &(0x7f0000006bc0), 0x200000, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000100)=0x45dc, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}, 0x1c) recvmmsg(r5, &(0x7f0000004dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12001, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000100)=0x45dc, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}, 0x1c) recvmmsg(r6, &(0x7f0000004dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12001, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 03:47:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) close(r0) [ 1246.229110][T16741] nci: nci_rsp_packet: unknown rsp opcode 0xb3d 03:47:18 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(0xffffffffffffffff, &(0x7f0000000ac0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5b7ddc71"], 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="410319c4b8484aa699e3d27aea00009f2d049ae16d8d08b7a7402c8f46f12a05ce14098e9600a4c18dcc6da3ced08be66bb839938e61d2e6fd1173c9b6b150294d037c7caa435278da61416af8cf2003f34fc0eb816131e195fd7d7142beb0390ba07b1777cc05b98b"], 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004090}, 0x20050800) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000040)) 03:47:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) close(r0) 03:47:18 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async, rerun: 64) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 32) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async, rerun: 32) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1246.280222][T22624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1246.309676][T22662] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:18 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="e3021e1f817750dd45e724024696aa95078ee8c78fb4ef865b9fa5c99303f960e2de783a7db14afce6410afd15718af8f7e3b668565b543debe7f1fe2b76be4ad40e7e7db9a9e0cfa1ff6ba9bb317e661d0eb3822daaea8036041c2e52969ef6e6b7295d6e407dc0066c3801bfa7b297f839d876e5374bb33f88df87bace1109d61ed69f7dd91f744e41199c51cd5b6c35e0bbee7d1bbf02ed06ec7a5adea77bb3b1919151841d6f53e576dbe1d47ac94b4cf430706d8b3bfaac8b96dd9814f74dd326e7fd1a82894df61471321cc9de478c2c23cc1357c6293f362be583eb153fdc277fbb088d14b97b89bcbc34cb007bd4c6b1f43b72ca34bc2a90da9ff538e0413924843ba4107ef3de5a474dbf3276da12c785baefa3784c3dd0ceee9f2ff5a146ca510e22ad58f26168ba716f41e0aef2bb8cda82e5d4ae048143753c2be1bcc83c885210af2f42108ba59a71cefb2ddc3dd8a26cc46a92818da12881ef10293702a5b3cafb53ae2c923d89a4dba5093fcffd76cb519b8973436784bc633425536db2aa312126827aa4793fb7527dd89d106fcbe53fff5aa49c4693e441c264ab6c23a1d082d9f4e8e662ab3d137c89bc166c7a12750b94fd1dea1e2c9630325be25d4a02936cadb8bd94d215b4218e4cf6b345077c05ace1f707c1d98e792ed37ef69dedddd6fe89fa2e21c90cd6a092a86b50daba6a6d5f50222952d2e1090a17f1b7ee92d3d71e09ecc121813855ee8ea25fb2a7bd5f07da98a165127e94d25127514d0479c9ee64263b33619327af47558ca9ac9abedf918967d5946c5924324559c6ad0d901064bc7f68ecc418757be41e4afba04c7bfca41c0d55d11a4c5eb42980b2ac8e94c7244bbe897df8f0c6b6953a269af877c09637e986b91e43bd814773b193a58688b4f27cb447ea8da9c906e81c091781a51a388a8c61fc5557ba509b873e6a0360cec5f9024f75e6d9160d220687f5223a7c00a124cba5e62a56ea3a18e24395bcc59db624d008a94019a9fe421c4c35738ca6dbeb"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) write$nci(r4, &(0x7f0000000900)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x20, {0x0, 0x1f, 0x7, 0x20, 0x20, 0x40, 0xd9, 0x0, 0x9f, "e68ced7c306c05190cd8cc6c880c18089dcb8ba2d28dd6d20bfd5c8c681792aa5442146fce34c2e35bdb33a02399e6078e512543076c6912e396ca54ec1499283b9984526d4298243b0ca51a7ea8dd3fac607d563c4f18090d1fe2c608396d19a6006333a24fa8a67f2adddaa4c4a9c6f64bf5b35311d1e88a5a8f289cc9356a252bdf955a345e900feb3067c538d2366a9d2c28a02d8598d999db2f1f2d44"}}, 0xb0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000480)={@loopback, @loopback={0x400000000000000}, @mcast2, 0x7, 0x4, 0x6, 0x400, 0x80000000000000, 0x400000, r5}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b00)={'gre0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000b40)={0x2cc, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x20000014}, 0x803) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:18 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/94, 0x5e) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/99, 0x63) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1246.360292][T22682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1247.200715][T22701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1247.209601][T22701] nci: nci_start_poll: failed to set local general bytes [ 1247.209611][T22711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:19 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0xe5d1000001000000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:19 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x2}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) close(r0) 03:47:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) close(r0) 03:47:19 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (rerun: 32) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 64) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r4, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) write$nci(r4, &(0x7f0000000900)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x20, {0x0, 0x1f, 0x7, 0x20, 0x20, 0x40, 0xd9, 0x0, 0x9f, "e68ced7c306c05190cd8cc6c880c18089dcb8ba2d28dd6d20bfd5c8c681792aa5442146fce34c2e35bdb33a02399e6078e512543076c6912e396ca54ec1499283b9984526d4298243b0ca51a7ea8dd3fac607d563c4f18090d1fe2c608396d19a6006333a24fa8a67f2adddaa4c4a9c6f64bf5b35311d1e88a5a8f289cc9356a252bdf955a345e900feb3067c538d2366a9d2c28a02d8598d999db2f1f2d44"}}, 0xb0) (async, rerun: 32) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async, rerun: 64) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000480)={@loopback, @loopback={0x400000000000000}, @mcast2, 0x7, 0x4, 0x6, 0x400, 0x80000000000000, 0x400000, r5}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b00)={'gre0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000b40)={0x2cc, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x20000014}, 0x803) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:19 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/94, 0x5e) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 32) read$nci(r0, &(0x7f00000002c0)=""/99, 0x63) (async, rerun: 32) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) (rerun: 32) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 32) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (rerun: 64) 03:47:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) close(r0) [ 1247.242054][T22697] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) close(r0) 03:47:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200400) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "99c931e712d6d374d29413f3c0af687ac2f508b35cb888525cbe9f258df1c3e14a5a611d355d6823bc63dda7337b7165945b15a05d1620f219c5673575bcac21", "f573b03cdaea267bd877f4d8b2be77a9853544f563cab3bb675c94c8544783968c2f015a492e9df070125f0cd057f4ae52cb9e480ddd06a20f22713e680d0f80", "0707a8114e77f54a6c48c364008192b0bab04bea5740ac4eb9cb441f7e750441"}}) 03:47:19 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="620af8ff0c250021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000008000000b70000000000000095000000000000003faf4f2add19b18ed8a25312a2e2c49e8020a69644a2f57ba32e8cf1cc1a100a9af698393aa0f3881f9c24aa56f15199fad05ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da8018b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef809606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec28b48b45ef413f634be763289d01aa27ae8b09e00e79ad30b0b8ed8fb7a68af2ad0000000000000006f803c6468972089c22db7548cf820c2db5e0125ebbcebdde510cb2364141215106bf04f658333719acd97cfa107d40224edc5465a932b77e74e84222642bc6099ad2300000080006ef6c1ff0900000000000000c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a99630200a04d5bb924cfe5f3185418d60532af9c4d2ec7c3272095e63c80aff9fa540b5b7632f32030910800000000000000a2a790d62c6faec2fed44da4928b3014ab2f70344e16cb9a6298060d6b2ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a82e80656b94d283523f4c0eb97fca585ec6bf58351d564beb61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13339ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa3716b5c0200000000000000000000000000030000000000000000000000000010008bc0d9559711f5d3c29f46493ba585a4b2d02edc3e28dd271c896249ed85b980680b6c294c8320002b435a5047c0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad897ef3b7cda42813d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be552a2f55941aff52a53a6edbb80d7c1f001b2cd317902f19f885be9e48dccff729433282830689da6b53b2633398631c7771429d120000003341bf4a00fcffffffffffffffe09fec2271fe01589646efd1cf870cd7bb2366fde4a59429738fcc917a57f94f6c453cea793cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d5bc8955778567bc79e13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7ffe222a06f56de922c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbff2e1c5560926e90109b598502d3eb59efc71f665c0900cf2458e3542c9062ec50804042b3eac1f879b136345cf67ca3fb5aac514fcea5a5ea0e109e186c366e3a06fb99e0aa2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39c000093947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acecc34f24c9ae153ee60ac0694da85bff9f5f4df9b3e90e5c708ce65cd6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f36a1f235745e7e340752e6bb3324b39191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9aa3d14f93100c2e0893862eef552fcde2981f48c482bde664a4304e50c34d538ba4958ea8e4aa37094191ebd7d439205991dcfa2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2d466483c17a65fc85fa3bce109b60000000000000000009cee560cb4c23d3a8d6550058dfaf622502aae9482aaacd5034000327283dde4368cc987a0ad0aa37b32544c74d06fa13a23268c022d39f1b722febf90b258daa4714f11b9349a1bfe16660000000000000000d8263c92777303c86adc752ebcb0ab614671e4bfacfcae2b91aa81ad2339d9cf6fc9683148432fb25e79225432e61bba99087bfc9455131cd79f63402d3b89c4140815713e904a4608c68201ba7e9de617adcbb2060d250ff77f2b738dbf9db2625182dafeb8e80387277420a3e9cf1c850e3989be6646bfa10bbd0005c24fbd0352db2590f0a56ac6fb8f0790dad9f9733cf0d46cc08b0688beacee8abc27e3e41eb17c9981c40ddc0aaad91853e18365dae2adca888944fb88bfa3b92708eb628e01879c835f4a54b484ae2a807d68db554e52cba4a3038a21e3be3f45b7a98cf75003a7cc1798f9b9aa8957797cb7f5dda5dd7f3969b7537b76010100000000000099d5cd9e326b98d785e14adee46d49ec4fe93d4275ee9f30c425a51c42e34e1b71e465e0739e240ddfa44cdb2e9fab7cee34760b5dd380a8de57299fb4f23770e35abe29f62cc7ff86d478815a9b1cc8db99d7d1061d0b7721061fe2e57108e7a3718b7cb6da01c68266aee8b3ab7c54f4a5839b2cb73726cdd102f52bf04fdd0328f7feabb2db83cb730bff6c2f62c2d341f1a3bba02537ba9c1f5009616692ec68a0de956e2f3b7934978e39df999854fa25d0227d5437f779a7d5aec500ed231bef1f15b155d2534f6e4abac8edea08eb791188eb35de85db6ee029b8384d6a98282d2e2123f2532ab44896b787b4ef6d99fbfd8956709902fa5e4251b0950ff98f9ba34628783b9dd80d0dbed6ed43fb3f14ae433aa756f643f7e153cebb374efb7dce74d3af2f287bb19f7249fbafda5d5f4509521cb8f70a84b6389b726fd0eafbae3ec34a49cfc4494574552307efcf4976e52862cd8891788873d4f7aa2aa7dc8164214d8f09ba01cc89ebf9b217c4fda612c71b31c0140c8ada9446d8555001f4b40000000000c776ef4188ce14fe05d56ab516dd3d0a99575b00e422d42b60bffe06941ab5d77469d6a5024d7a6c97b112b1e175146613ac600b612a5f84ca923617a8b291a47b430000000000000000000000003c1b370aa0ce225438882c9a7818ab47017a342dcd93272bbf9edc045817ba9c720829a72c6e970a0540c2cecc33e67c7b5a1417ba16259163bc0f42657ea6bb397c4d6d6882e0ca92e81080e37fc697f03ecd9648e6ba1a8bdc6f866d19557cdd99210601d460b7519630db1af21a2b887ea14578f25b6c1c4fb3d48f2b1066d104b921b48eebb9837547e934ea33ef3b1a791926ae9d60459eaa9c3f2376afca9f24cadd37c3af8413d2f070a113addd4f10fdb2da780dab1730825cfdaad56de801323a0000000000000000000000000000000000006da5a7a7521f6846a3b3626706129cb4ba04d41c18355d9b46d5d21405bd67b08d140e202ed7a9475174beed2b074ea2d552949a8672ac5e128a1333b4e7265ee8384e67b17caf4e5be1f0eab7cf6935ebd29ab4c4ac3b3901e42ce88adfc04307a43146283765c61a1d4e8a637fe17480ed3fd2a439b731a1d5f936926e03335424f28efe98ee971b2ce34de717087bb6e680894cb89c2e45f0a5c1dfb6dff6f65224527153046e916b39c682d09c0d7f8b15013508f937200375f4dbd313545a0e614894c7f753eca3809dc2a9f48c4b214059d0c6f300000000000000000000000000000000dea67fc233c80ff4cf12ac8e8a29086769e322d2168b2fb3800b0b3405833a4df30aab2c84af2c27e7cef3caea820e2dba49aab38ecae2893ab6707d4c725d27ca640ad3eaf6118b3ecdfbe83b00283ef04dc7e8373c787d8e50db5385d851ceaa753d2ab79cc4aa2ef0bdd96c15edaf90aa619661cafda261591eac9d2d2c8086d8b17458f4c5536ae481bfa58ea9ddd51a179b4d677b8e68eba6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffea3, 0x10, &(0x7f0000000040), 0x32}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x7300, 0xe, 0x0, &(0x7f0000000140)="800000000dc45d0ccf5e74626106", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 03:47:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x2}]}]}], {0x14, 0x10}}, 0x70}}, 0x0) 03:47:19 executing program 2: r0 = syz_clone3(&(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = pidfd_open(r0, 0x0) waitid$P_PIDFD(0x2, r1, 0x0, 0x1000005, 0x0) 03:47:22 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0xfcffffff00000000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:22 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0xbf}, @initr0, @exit, @alu={0x5, 0x0, 0x6, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:47:22 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000000)=0x7f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000280)=@newchain={0x24, 0x5f}, 0x24}}, 0x0) 03:47:22 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async) write$nci(r4, &(0x7f0000000900)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x20, {0x0, 0x1f, 0x7, 0x20, 0x20, 0x40, 0xd9, 0x0, 0x9f, "e68ced7c306c05190cd8cc6c880c18089dcb8ba2d28dd6d20bfd5c8c681792aa5442146fce34c2e35bdb33a02399e6078e512543076c6912e396ca54ec1499283b9984526d4298243b0ca51a7ea8dd3fac607d563c4f18090d1fe2c608396d19a6006333a24fa8a67f2adddaa4c4a9c6f64bf5b35311d1e88a5a8f289cc9356a252bdf955a345e900feb3067c538d2366a9d2c28a02d8598d999db2f1f2d44"}}, 0xb0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) (rerun: 32) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000480)={@loopback, @loopback={0x400000000000000}, @mcast2, 0x7, 0x4, 0x6, 0x400, 0x80000000000000, 0x400000, r5}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b00)={'gre0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000b40)={0x2cc, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x20000014}, 0x803) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:22 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/94, 0x5e) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/99, 0x63) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:22 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x3}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:22 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPOEIOCDFWD(r0, 0x8905, 0x1000000000000) [ 1250.279216][T22728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:22 executing program 2: r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) 03:47:22 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) write$nci(r4, &(0x7f0000000000)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0xe1, {0x0, 0x1}}, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:22 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/mipi-dsi', 0x0, 0x0) 03:47:22 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, 0x1410, 0xc05, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 03:47:22 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, 0x1410, 0xc05, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) [ 1250.323449][T22785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1250.443981][T16743] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:47:23 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, 0x1410, 0xc05, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 03:47:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xf, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast1}}}}, &(0x7f0000000200)=0xb0) 03:47:23 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="e3021e1f817750dd45e724024696aa95078ee8c78fb4ef865b9fa5c99303f960e2de783a7db14afce6410afd15718af8f7e3b668565b543debe7f1fe2b76be4ad40e7e7db9a9e0cfa1ff6ba9bb317e661d0eb3822daaea8036041c2e52969ef6e6b7295d6e407dc0066c3801bfa7b297f839d876e5374bb33f88df87bace1109d61ed69f7dd91f744e41199c51cd5b6c35e0bbee7d1bbf02ed06ec7a5adea77bb3b1919151841d6f53e576dbe1d47ac94b4cf430706d8b3bfaac8b96dd9814f74dd326e7fd1a82894df61471321cc9de478c2c23cc1357c6293f362be583eb153fdc277fbb088d14b97b89bcbc34cb007bd4c6b1f43b72ca34bc2a90da9ff538e0413924843ba4107ef3de5a474dbf3276da12c785baefa3784c3dd0ceee9f2ff5a146ca510e22ad58f26168ba716f41e0aef2bb8cda82e5d4ae048143753c2be1bcc83c885210af2f42108ba59a71cefb2ddc3dd8a26cc46a92818da12881ef10293702a5b3cafb53ae2c923d89a4dba5093fcffd76cb519b8973436784bc633425536db2aa312126827aa4793fb7527dd89d106fcbe53fff5aa49c4693e441c264ab6c23a1d082d9f4e8e662ab3d137c89bc166c7a12750b94fd1dea1e2c9630325be25d4a02936cadb8bd94d215b4218e4cf6b345077c05ace1f707c1d98e792ed37ef69dedddd6fe89fa2e21c90cd6a092a86b50daba6a6d5f50222952d2e1090a17f1b7ee92d3d71e09ecc121813855ee8ea25fb2a7bd5f07da98a165127e94d25127514d0479c9ee64263b33619327af47558ca9ac9abedf918967d5946c5924324559c6ad0d901064bc7f68ecc418757be41e4afba04c7bfca41c0d55d11a4c5eb42980b2ac8e94c7244bbe897df8f0c6b6953a269af877c09637e986b91e43bd814773b193a58688b4f27cb447ea8da9c906e81c091781a51a388a8c61fc5557ba509b873e6a0360cec5f9024f75e6d9160d220687f5223a7c00a124cba5e62a56ea3a18e24395bcc59db624d008a94019a9fe421c4c35738ca6dbeb"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 03:47:23 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x4}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:23 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0xffffff7f00000000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:23 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x49}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 03:47:23 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, 0x1410, 0xc05, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 03:47:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x34, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xe4c, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}]}, 0x34}], 0x1}, 0x0) [ 1251.148429][T22787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x38, r1, 0x1f19a1b24d6b14b5, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x38}}, 0x0) 03:47:23 executing program 4: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) write$nci(r4, &(0x7f0000000000)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0xe1, {0x0, 0x1}}, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1251.231161][T22866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1251.241756][T22866] 8021q: adding VLAN 0 to HW filter on device team0 [ 1251.252922][T22866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 03:47:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x38, r1, 0x1f19a1b24d6b14b5, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x38}}, 0x0) [ 1251.273814][T22866] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:47:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x38, r1, 0x1f19a1b24d6b14b5, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x38}}, 0x0) 03:47:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x38, r1, 0x1f19a1b24d6b14b5, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x38}}, 0x0) 03:47:23 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000200)='./file0\x00', 0x0, 0x101003, 0x0) chroot(&(0x7f0000000000)='./file0\x00') mount(&(0x7f00000001c0)=ANY=[@ANYBLOB='/dev'], &(0x7f0000000240)='./file0\x00', 0x0, 0x1008, 0x0) [ 1251.348181][T16743] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1251.361282][T16743] nci: nci_data_exchange_complete: no rx callback, dropping rx data... 03:47:24 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 32) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 64) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 03:47:24 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x5}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1252.006725][T22845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1252.021572][T22853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:24 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0xffffffff00000000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:24 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1, 0x0, 0x0, &(0x7f00000002c0)) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000002c0)={'wg2\x00'}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='()') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x81, 0x0, 0x1, 0x4504, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_config_ext={0xfc5f, 0x84}, 0x154, 0x5e, 0x92e, 0x3, 0x6, 0x9, 0x4, 0x0, 0x3, 0x0, 0x1}, 0xffffffffffffffff, 0x5, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETPERSIST(r2, 0x40086607, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x0, 0x0, 0xe4, 0x3, 0x0, 0x87a7, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x275, 0x0, 0xffffffff}, 0x0, 0x2, r0, 0x9) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240), 0xc) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000340)=0x101) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) 03:47:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x34, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xe4c, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}]}, 0x34}], 0x1}, 0x0) 03:47:24 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) [ 1252.049190][T22898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_IPT={0x20, 0x2, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x74}}, 0x0) [ 1252.098568][T22915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.106571][T22915] 8021q: adding VLAN 0 to HW filter on device team0 [ 1252.116849][T22915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1252.133319][T22929] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1252.174065][T16728] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1252.235901][T22921] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1252.278978][T22931] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1252.300216][T22933] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1252.882878][T22903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1255.067839][T22912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:28 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 64) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (rerun: 32) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async, rerun: 64) write$nci(r4, &(0x7f0000000000)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0xe1, {0x0, 0x1}}, 0x5) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x34, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xe4c, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}]}, 0x34}], 0x1}, 0x0) 03:47:28 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) write$nci(r4, &(0x7f0000000040)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x8, 0x1}, 0x4) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001000)={0x0, 0x0, 0x5d}) 03:47:28 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x6}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:28 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x2}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:29 executing program 1: r0 = io_uring_setup(0x3396, &(0x7f0000000000)) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000280), 0xc) read(r1, &(0x7f0000000180)=""/52, 0x34) r2 = gettid() setsockopt$sock_cred(r1, 0x1, 0x4c, &(0x7f0000000080)={r2}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) [ 1256.385846][T22871] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1256.423251][T22951] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1256.447683][T22946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1256.456062][T22946] 8021q: adding VLAN 0 to HW filter on device team0 [ 1256.465268][T22946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1256.481713][T22939] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1256.491457][T22961] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:47:29 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) write$nci(r4, &(0x7f00000005c0)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x4, 0x1}, 0x4) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x2, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000000)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1256.533992][T16743] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:47:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x8000080003, 0x800000000000005) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_setlink={0x34, 0x13, 0xb29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0xa, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) 03:47:29 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r3}, 0x10) 03:47:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x34, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xe4c, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}]}, 0x34}], 0x1}, 0x0) [ 1256.725541][T22992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1256.733343][T22992] 8021q: adding VLAN 0 to HW filter on device team0 [ 1256.742482][T22992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1256.762044][T22997] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:47:29 executing program 1: open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f0000000200), 0x0) unshare(0x60000200) [ 1256.877365][T23005] loop1: detected capacity change from 0 to 512 [ 1256.900988][T23005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 03:47:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f00000001c0)={'vlan0\x00', @ifru_data=0x0}) 03:47:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f00000001c0)={'vlan0\x00', @ifru_data=0x0}) [ 1256.914908][T23005] ext4 filesystem being mounted at /root/syzkaller-testdir3599517600/syzkaller.DObNtW/3378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1257.112999][T23019] wg1 speed is unknown, defaulting to 1000 [ 1257.245012][T22941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f00000001c0)={'vlan0\x00', @ifru_data=0x0}) 03:47:29 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x7}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:29 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x3}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:29 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (rerun: 64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 32) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async, rerun: 32) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) write$nci(r4, &(0x7f0000000040)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x8, 0x1}, 0x4) (async, rerun: 64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 64) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 32) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async, rerun: 64) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (rerun: 64) 03:47:29 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="e3021e1f817750dd45e724024696aa95078ee8c78fb4ef865b9fa5c99303f960e2de783a7db14afce6410afd15718af8f7e3b668565b543debe7f1fe2b76be4ad40e7e7db9a9e0cfa1ff6ba9bb317e661d0eb3822daaea8036041c2e52969ef6e6b7295d6e407dc0066c3801bfa7b297f839d876e5374bb33f88df87bace1109d61ed69f7dd91f744e41199c51cd5b6c35e0bbee7d1bbf02ed06ec7a5adea77bb3b1919151841d6f53e576dbe1d47ac94b4cf430706d8b3bfaac8b96dd9814f74dd326e7fd1a82894df61471321cc9de478c2c23cc1357c6293f362be583eb153fdc277fbb088d14b97b89bcbc34cb007bd4c6b1f43b72ca34bc2a90da9ff538e0413924843ba4107ef3de5a474dbf3276da12c785baefa3784c3dd0ceee9f2ff5a146ca510e22ad58f26168ba716f41e0aef2bb8cda82e5d4ae048143753c2be1bcc83c885210af2f42108ba59a71cefb2ddc3dd8a26cc46a92818da12881ef10293702a5b3cafb53ae2c923d89a4dba5093fcffd76cb519b8973436784bc633425536db2aa312126827aa4793fb7527dd89d106fcbe53fff5aa49c4693e441c264ab6c23a1d082d9f4e8e662ab3d137c89bc166c7a12750b94fd1dea1e2c9630325be25d4a02936cadb8bd94d215b4218e4cf6b345077c05ace1f707c1d98e792ed37ef69dedddd6fe89fa2e21c90cd6a092a86b50daba6a6d5f50222952d2e1090a17f1b7ee92d3d71e09ecc121813855ee8ea25fb2a7bd5f07da98a165127e94d25127514d0479c9ee64263b33619327af47558ca9ac9abedf918967d5946c5924324559c6ad0d901064bc7f68ecc418757be41e4afba04c7bfca41c0d55d11a4c5eb42980b2ac8e94c7244bbe897df8f0c6b6953a269af877c09637e986b91e43bd814773b193a58688b4f27cb447ea8da9c906e81c091781a51a388a8c61fc5557ba509b873e6a0360cec5f9024f75e6d9160d220687f5223a7c00a124cba5e62a56ea3a18e24395bcc59db624d008a94019a9fe421c4c35738ca6dbeb"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async) write$nci(r4, &(0x7f00000005c0)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x4, 0x1}, 0x4) (async, rerun: 64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (rerun: 64) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 32) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x2, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000000)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f00000001c0)={'vlan0\x00', @ifru_data=0x0}) [ 1257.393592][T22976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:30 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0x8, 0x4) 03:47:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x1) perf_event_open$cgroup(&(0x7f0000000fc0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:47:30 executing program 2: keyctl$clear(0x10, 0xfffffffffffffffb) [ 1257.552302][T23032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:30 executing program 1: add_key(&(0x7f00000001c0)='user\x00', 0x0, &(0x7f0000000300)='*', 0x1, 0xfffffffffffffffc) 03:47:30 executing program 2: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x58, &(0x7f0000000200)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6612, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x6, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x1ff, 0x49, &(0x7f00000009c0)=""/73, 0x41000, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x0, 0x0, 0x7f, 0x1}, 0x10}, 0x90) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xf452}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000180)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43405) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40), 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 03:47:30 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async) write$nci(r4, &(0x7f00000005c0)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x4, 0x1}, 0x4) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x2, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000000)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1257.708401][T16728] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1257.742806][ T3102] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:47:30 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="6103ffe4e201010101aa"], 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x0, 0x80) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1257.762336][T23066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1257.913908][T16728] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:47:30 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x9}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000504000000480000000000000000", @ANYRES32=0x0, @ANYBLOB="e7cfa88800000000140012800c0001006d61637674617000"], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x101}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xe7}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xba, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4456}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2cf}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r3, 0x1) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r4, @ANYRES64=r4], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r7, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000002ac0)={0x40, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x69}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008840}, 0x2000c881) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0xc, 0x10, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x70}}, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x1, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x10) [ 1258.275572][T23058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1258.285087][T23031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1258.323580][T23089] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1258.333041][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1258.348847][T23089] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1258.462731][T23091] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1258.479661][T23091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=23091 comm=syz-executor.1 [ 1258.645120][T23077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1259.154967][T23085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:35 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) write$nci(r4, &(0x7f0000000040)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x8, 0x1}, 0x4) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:35 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x4}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:35 executing program 2: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x58, &(0x7f0000000200)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6612, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x6, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x1ff, 0x49, &(0x7f00000009c0)=""/73, 0x41000, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x0, 0x0, 0x7f, 0x1}, 0x10}, 0x90) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xf452}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000180)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43405) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40), 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 03:47:35 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 32) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 64) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="6103ffe4e201010101aa"], 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x0, 0x80) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:35 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0xf}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000504000000480000000000000000", @ANYRES32=0x0, @ANYBLOB="e7cfa88800000000140012800c0001006d61637674617000"], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x101}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xe7}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xba, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4456}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2cf}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r3, 0x1) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r4, @ANYRES64=r4], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r7, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000002ac0)={0x40, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x69}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008840}, 0x2000c881) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0xc, 0x10, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x70}}, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x1, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x10) [ 1262.544556][T23023] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1262.583287][T23109] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 03:47:35 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 64) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (rerun: 32) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="6103ffe4e201010101aa"], 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x0, 0x80) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:35 executing program 2: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x58, &(0x7f0000000200)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6612, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x6, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x1ff, 0x49, &(0x7f00000009c0)=""/73, 0x41000, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x0, 0x0, 0x7f, 0x1}, 0x10}, 0x90) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xf452}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000180)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43405) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40), 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) [ 1262.593738][T23109] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1262.632114][T23097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:35 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x8a9fa2b601ae4bb5}, 0x14}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x48000) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0x80}, 0x4) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f00000009c0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x3, {0x0, 0x58, "6960ab7b77cdb443eaa8b57c0aaa8720fb8da3c1adcc18d8cd258b3b196a671eb0660a48662c88e1f7743a4b5c2cb321cda40e460e6fd2e31ae952f8d66c1ac24339577af8056ee9d0d0761fd9a6151edcd374a215ccc8a8"}}, 0x5d) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}, 0x1}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1262.694280][T23114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1262.707775][T23129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:35 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0xfffffffffffffca0, 0x1, r1}]}, 0x1c}}, 0x4000050) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="2411009726d2df784c4ecf07090000", @ANYRES16=r3, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=r1, @ANYBLOB="08000300ffffffff"], 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1262.758534][T16728] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1262.768726][T23147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23147 comm=syz-executor.1 [ 1262.784648][T23139] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1262.795866][T23139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=23139 comm=syz-executor.1 03:47:35 executing program 2: perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x58, &(0x7f0000000200)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6612, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x6, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x1ff, 0x49, &(0x7f00000009c0)=""/73, 0x41000, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x0, 0x0, 0x7f, 0x1}, 0x10}, 0x90) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xf452}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000180)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43405) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40), 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) [ 1262.799509][T16741] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:47:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000504000000480000000000000000", @ANYRES32=0x0, @ANYBLOB="e7cfa88800000000140012800c0001006d61637674617000"], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x101}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xe7}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xba, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4456}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2cf}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r3, 0x1) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r4, @ANYRES64=r4], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r7, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000002ac0)={0x40, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x69}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008840}, 0x2000c881) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0xc, 0x10, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x70}}, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x1, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x10) 03:47:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000504000000480000000000000000", @ANYRES32=0x0, @ANYBLOB="e7cfa88800000000140012800c0001006d61637674617000"], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x101}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xe7}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xba, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4456}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2cf}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r3, 0x1) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r4, @ANYRES64=r4], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r7, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000002ac0)={0x40, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x69}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008840}, 0x2000c881) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0xc, 0x10, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x70}}, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x1, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x10) [ 1262.943311][T23161] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1262.953487][T23161] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1262.965558][T23161] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1262.975981][T23161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=23161 comm=syz-executor.2 [ 1263.000671][T23163] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1263.010397][T23163] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1263.022870][T23163] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1263.031660][T23163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=23163 comm=syz-executor.2 03:47:35 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x5}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:35 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x300}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000504000000480000000000000000", @ANYRES32=0x0, @ANYBLOB="e7cfa88800000000140012800c0001006d61637674617000"], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x101}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xe7}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xba, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4456}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2cf}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r3, 0x1) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r4, @ANYRES64=r4], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r7, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000002ac0)={0x40, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x69}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008840}, 0x2000c881) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0xc, 0x10, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x70}}, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x1, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x10) 03:47:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000504000000480000000000000000", @ANYRES32=0x0, @ANYBLOB="e7cfa88800000000140012800c0001006d61637674617000"], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x101}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xe7}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xba, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4456}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2cf}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r3, 0x1) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r4, @ANYRES64=r4], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r7, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000002ac0)={0x40, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x69}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008840}, 0x2000c881) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0xc, 0x10, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x70}}, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x1, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x10) [ 1263.405174][T23141] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1263.408735][T23101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1263.445975][T23172] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1263.455322][T23172] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1263.465626][T23173] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1263.475042][T23173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:47:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x2, 0xa000000, 0x4}, 0x48) [ 1263.513957][T23172] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1263.522419][T23172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=23172 comm=syz-executor.2 [ 1263.620861][T16741] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1263.636609][T23188] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 03:47:36 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0xfffffffffffffca0, 0x1, r1}]}, 0x1c}}, 0x4000050) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="2411009726d2df784c4ecf07090000", @ANYRES16=r3, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=r1, @ANYBLOB="08000300ffffffff"], 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1263.674545][T16741] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1263.693564][T23188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=23188 comm=syz-executor.1 [ 1263.740896][T23192] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:47:36 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0xfffffffffffffca0, 0x1, r1}]}, 0x1c}}, 0x4000050) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="2411009726d2df784c4ecf07090000", @ANYRES16=r3, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=r1, @ANYBLOB="08000300ffffffff"], 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1263.928878][T23201] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1264.293119][T23175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1264.302394][T23176] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:38 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x500}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:38 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x6}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe, 0x0, &(0x7f00000000c0)) 03:47:38 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000504000000480000000000000000", @ANYRES32=0x0, @ANYBLOB="e7cfa88800000000140012800c0001006d61637674617000"], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x101}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xe7}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xba, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4456}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2cf}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r3, 0x1) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r4, @ANYRES64=r4], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r7, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000002ac0)={0x40, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x69}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008840}, 0x2000c881) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0xc, 0x10, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x70}}, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x1, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x10) 03:47:38 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) (rerun: 64) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x8a9fa2b601ae4bb5}, 0x14}}, 0x0) (async) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x48000) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0x80}, 0x4) (async, rerun: 32) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 32) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000009c0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x3, {0x0, 0x58, "6960ab7b77cdb443eaa8b57c0aaa8720fb8da3c1adcc18d8cd258b3b196a671eb0660a48662c88e1f7743a4b5c2cb321cda40e460e6fd2e31ae952f8d66c1ac24339577af8056ee9d0d0761fd9a6151edcd374a215ccc8a8"}}, 0x5d) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}, 0x1}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1265.738960][T23142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1265.772156][T23225] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 03:47:38 executing program 2: request_key(0x0, 0x0, &(0x7f0000000080)=']%\x00', 0xffffffffffffffff) getrlimit(0x0, &(0x7f0000000700)) 03:47:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000021c00000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x7, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 03:47:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000100001140000006cec41d89f37fa5897", @ANYRES32=r1, @ANYBLOB="f027"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x20803}}, 0x20}, 0x1, 0xf303000000000000}, 0x0) [ 1265.781553][T23225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:47:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x190, 0x150, 0x150, 0x190, 0x90a, 0x270, 0x238, 0x238, 0x270, 0x238, 0xf, 0x0, {[{{@uncond, 0x500, 0x128, 0x190, 0x2602, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x12c00, 0x7}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x2c000000000000}}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) [ 1265.829638][T23243] macsec0: entered promiscuous mode [ 1265.835230][T23243] macsec0: entered allmulticast mode [ 1265.841318][T23243] veth1_macvtap: entered allmulticast mode [ 1265.847288][T23243] macsec0: left promiscuous mode [ 1265.852292][T23243] macsec0: left allmulticast mode [ 1265.857357][T23243] veth1_macvtap: left allmulticast mode 03:47:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 03:47:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f, 0x10060}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) [ 1265.875738][T23250] --map-set only usable from mangle table [ 1265.930117][T16741] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1265.951668][T23260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23260 comm=syz-executor.1 [ 1265.966371][T23260] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1265.974821][T23260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=23260 comm=syz-executor.1 [ 1266.090805][T16747] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:47:39 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x600}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1266.593950][T23240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1266.602909][T23234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1266.605853][T23212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1266.613570][T23227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1266.623620][T23262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:39 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x7}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:39 executing program 2: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) 03:47:39 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x8a9fa2b601ae4bb5}, 0x14}}, 0x0) (async) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x48000) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0x80}, 0x4) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f00000009c0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x3, {0x0, 0x58, "6960ab7b77cdb443eaa8b57c0aaa8720fb8da3c1adcc18d8cd258b3b196a671eb0660a48662c88e1f7743a4b5c2cb321cda40e460e6fd2e31ae952f8d66c1ac24339577af8056ee9d0d0761fd9a6151edcd374a215ccc8a8"}}, 0x5d) (rerun: 32) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 32) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}, 0x1}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:39 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:47:39 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) write$cgroup_devices(r0, &(0x7f0000000240)={'a', ' *:* ', 'rwm\x00'}, 0xa) 03:47:39 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040), 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$llc(r0, &(0x7f0000000180)=""/181, 0xb5, 0x2, 0x0, 0x0) 03:47:39 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 64) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (rerun: 32) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x140d, 0x141d07f3b336b309}, 0x10}}, 0x0) 03:47:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x140d, 0x141d07f3b336b309}, 0x10}}, 0x0) 03:47:39 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) read$nci(r4, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) write$nci(r5, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x1, 0x2, 0x5, 0x9, 0x1}, 0x4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1266.811469][ T27] audit: type=1400 audit(2000000859.359:8993): avc: denied { read } for pid=23304 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1266.842959][T23310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1266.852176][T23286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1267.005707][T16743] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1267.060707][T16743] nci: nci_data_exchange_complete: no rx callback, dropping rx data... 03:47:40 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="410300dd"], 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:40 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x8}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x140d, 0x141d07f3b336b309}, 0x10}}, 0x0) 03:47:40 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x700}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x140d, 0x141d07f3b336b309}, 0x10}}, 0x0) [ 1267.512016][T23276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045438, 0xf0ff1f00000000) 03:47:40 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7000000000000004e0a0000000080001e000000000000009500000000000000079862c99d9ac1d05d0177731cb4b0a5d81371f047ec928e88bb7d45d8f125a8cb8f46cdeeb3ec7a8aab63f34faf1516d14fa13c7c2506f418a77a4beaa0ac79d8f3"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) 03:47:40 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040), 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$llc(r0, &(0x7f0000000180)=""/181, 0xb5, 0x2, 0x0, 0x0) 03:47:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1000440, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES64, @ANYRES64=0x0, @ANYRESOCT], 0x0, 0x435, &(0x7f0000000d40)="$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") 03:47:40 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0xb0}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 03:47:40 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x6, 0xb, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), 0x4) [ 1267.636870][T16743] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:47:40 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) read$nci(r4, &(0x7f0000000380)=""/100, 0x64) (async) read$nci(r4, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) write$nci(r5, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x1, 0x2, 0x5, 0x9, 0x1}, 0x4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1267.731337][T23328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1267.815175][T23380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1267.824258][T23381] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:40 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="410300dd"], 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:40 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x9}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000240), 0x1, 0x5e0, &(0x7f0000000600)="$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") rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)='./file0/file1\x00') quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)) 03:47:40 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) read$nci(r4, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) write$nci(r5, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x1, 0x2, 0x5, 0x9, 0x1}, 0x4) (async) write$nci(r5, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x1, 0x2, 0x5, 0x9, 0x1}, 0x4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:40 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x900}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:40 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="410300dd"], 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1268.364142][T23340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1268.392885][T23347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1268.399691][T23389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000004440)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000042c0)="c77307", 0x0, 0x80000000, 0x0, 0x0, 0x0}) 03:47:41 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040), 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$llc(r0, &(0x7f0000000180)=""/181, 0xb5, 0x2, 0x0, 0x0) 03:47:41 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x328) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r5, 0x8, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4005) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) write$nci(r6, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x1, 0x2, 0x0, 0x2, 0x2}, 0x4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:41 executing program 2: capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8953, 0x0) [ 1268.449797][T23401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:41 executing program 2: setrlimit(0xb, &(0x7f00000009c0)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x4000000003e) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x603) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x14) 03:47:41 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume_offset', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) 03:47:41 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)=[0x0]) [ 1268.671933][T16728] nci: nci_data_exchange_complete: no rx callback, dropping rx data... 03:47:41 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{}]}) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) 03:47:41 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0xf00}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1269.293329][T23461] autofs4:pid:23461:autofs_fill_super: called with bogus options [ 1270.133954][T23463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1271.488550][T23425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:46 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="6836d8ab14a7e1c541000000"], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) r4 = memfd_secret(0x0) read$nci(r4, &(0x7f0000000ac0)=""/201, 0xc9) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:46 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xa}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:46 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000314010000000000000000000900020073797a3100000000080041007278650014003300776731000000000000000000000000000900020073797a3100000000080041"], 0x60}}, 0x0) 03:47:46 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040), 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$llc(r0, &(0x7f0000000180)=""/181, 0xb5, 0x2, 0x0, 0x0) 03:47:46 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x30000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:46 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 32) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (rerun: 32) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x328) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r5, 0x8, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4005) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r6, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="e3021e1f817750dd45e724024696aa95078ee8c78fb4ef865b9fa5c99303f960e2de783a7db14afce6410afd15718af8f7e3b668565b543debe7f1fe2b76be4ad40e7e7db9a9e0cfa1ff6ba9bb317e661d0eb3822daaea8036041c2e52969ef6e6b7295d6e407dc0066c3801bfa7b297f839d876e5374bb33f88df87bace1109d61ed69f7dd91f744e41199c51cd5b6c35e0bbee7d1bbf02ed06ec7a5adea77bb3b1919151841d6f53e576dbe1d47ac94b4cf430706d8b3bfaac8b96dd9814f74dd326e7fd1a82894df61471321cc9de478c2c23cc1357c6293f362be583eb153fdc277fbb088d14b97b89bcbc34cb007bd4c6b1f43b72ca34bc2a90da9ff538e0413924843ba4107ef3de5a474dbf3276da12c785baefa3784c3dd0ceee9f2ff5a146ca510e22ad58f26168ba716f41e0aef2bb8cda82e5d4ae048143753c2be1bcc83c885210af2f42108ba59a71cefb2ddc3dd8a26cc46a92818da12881ef10293702a5b3cafb53ae2c923d89a4dba5093fcffd76cb519b8973436784bc633425536db2aa312126827aa4793fb7527dd89d106fcbe53fff5aa49c4693e441c264ab6c23a1d082d9f4e8e662ab3d137c89bc166c7a12750b94fd1dea1e2c9630325be25d4a02936cadb8bd94d215b4218e4cf6b345077c05ace1f707c1d98e792ed37ef69dedddd6fe89fa2e21c90cd6a092a86b50daba6a6d5f50222952d2e1090a17f1b7ee92d3d71e09ecc121813855ee8ea25fb2a7bd5f07da98a165127e94d25127514d0479c9ee64263b33619327af47558ca9ac9abedf918967d5946c5924324559c6ad0d901064bc7f68ecc418757be41e4afba04c7bfca41c0d55d11a4c5eb42980b2ac8e94c7244bbe897df8f0c6b6953a269af877c09637e986b91e43bd814773b193a58688b4f27cb447ea8da9c906e81c091781a51a388a8c61fc5557ba509b873e6a0360cec5f9024f75e6d9160d220687f5223a7c00a124cba5e62a56ea3a18e24395bcc59db624d008a94019a9fe421c4c35738ca6dbeb"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) (async) write$nci(r6, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x1, 0x2, 0x0, 0x2, 0x2}, 0x4) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:46 executing program 2: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d180000009282d9c66923c63a4541062101a59ea9cb0b36929302", 0x24, r0) 03:47:46 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x0, r3}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r2}) [ 1273.585472][T23398] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1273.611024][T23473] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1273.678311][T23479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:46 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 64) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 32) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x328) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r5, 0x8, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4005) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (rerun: 64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) (async) write$nci(r6, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x1, 0x2, 0x0, 0x2, 0x2}, 0x4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1273.766941][ T27] audit: type=1326 audit(2000000866.319:8994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23495 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd065644ae9 code=0x7fc00000 [ 1273.792545][ T27] audit: type=1326 audit(2000000866.319:8995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23495 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd065644ae9 code=0x7fc00000 03:47:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f0000000100)="1e", 0x1, 0x41, 0x0, 0x0) 03:47:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) setsockopt$inet_mreqn(r0, 0x0, 0x2f, 0x0, 0x0) 03:47:46 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)) [ 1273.812176][T23505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1273.817850][ T27] audit: type=1326 audit(2000000866.319:8996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23495 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd065644ae9 code=0x7fc00000 03:47:47 executing program 2: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2={0xff, 0x3}}}) 03:47:47 executing program 4: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000bc0)={0x54, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffb}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x9}, 0x20000000) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000b00000"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x7, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/89, 0x59) write$nci(r0, &(0x7f0000000c80)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0xfc, {0x0, 0x1b3, "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"}}, 0x1b8) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) write$nci(r4, &(0x7f0000000000)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x1, 0x3, 0x6, 0x1, {0x4, 0x3}}, 0x5) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="40040000010000"], 0x7) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x0, {0x5}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000900)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000940)) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40440e4}, 0x40004) 03:47:47 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xf}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:47 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x34000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:47 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="6836d8ab14a7e1c541000000"], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) r4 = memfd_secret(0x0) read$nci(r4, &(0x7f0000000ac0)=""/201, 0xc9) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:47 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f00000003c0)={r2, 0x3, 0x6, @broadcast}, 0x10) [ 1274.443439][T23475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:47 executing program 1: r0 = fsopen(&(0x7f0000000080)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000000)='source', &(0x7f0000000040)='c\x00\x02\x00\x00', 0x0) 03:47:47 executing program 1: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="900709e7ff60002200000e210806000108000604173ba9e62d56bf00364932f1d5532fae186980"], 0x120) 03:47:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x100, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0xd8, 0x8, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0xa, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x78, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0x100}}, 0x0) 03:47:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40b01) setuid(0xee00) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000740)="35cb420e28e5", 0x0, 0x0, 0x0, 0x0, 0x0}) 03:47:47 executing program 2: r0 = mq_open(&(0x7f0000000000)='eth0\x00', 0x0, 0x0, 0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000380)={0x267fa5ba2587f554}) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) 03:47:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b52, &(0x7f0000000080)={0x0, 0x0, 0x6}) 03:47:47 executing program 2: iopl(0x3) clock_nanosleep(0xfcfdffff, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) [ 1274.655861][T23575] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1274.768561][T16743] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:47:47 executing program 4: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000bc0)={0x54, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffb}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x9}, 0x20000000) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000b00000"], 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x7, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/89, 0x59) (async) write$nci(r0, &(0x7f0000000c80)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0xfc, {0x0, 0x1b3, "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"}}, 0x1b8) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) write$nci(r4, &(0x7f0000000000)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x1, 0x3, 0x6, 0x1, {0x4, 0x3}}, 0x5) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="40040000010000"], 0x7) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x0, {0x5}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000900)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000940)) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40440e4}, 0x40004) 03:47:47 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x300}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:47 executing program 2: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000080), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000280)={r0, &(0x7f0000000040), 0x0}, 0x20) 03:47:47 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="6836d8ab14a7e1c541000000"], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) memfd_secret(0x0) (async) r4 = memfd_secret(0x0) read$nci(r4, &(0x7f0000000ac0)=""/201, 0xc9) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:47 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=@raw=[@initr0, @call], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 03:47:47 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x400300}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:47 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071031c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 03:47:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x89}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 03:47:47 executing program 4: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000bc0)={0x54, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffb}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x9}, 0x20000000) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000b00000"], 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x7, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/89, 0x59) (async) write$nci(r0, &(0x7f0000000c80)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0xfc, {0x0, 0x1b3, "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"}}, 0x1b8) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async) write$nci(r4, &(0x7f0000000000)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x1, 0x3, 0x6, 0x1, {0x4, 0x3}}, 0x5) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="40040000010000"], 0x7) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x0, {0x5}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000900)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000940)) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40440e4}, 0x40004) 03:47:47 executing program 1: creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) [ 1275.331792][T23577] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1275.354875][T23590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newtaction={0x44, 0x2e, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0xf}, {0xc}}}]}]}, 0x44}}, 0x0) 03:47:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000040)) 03:47:48 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r0, 0x40047452, 0x0) [ 1275.440939][T16743] nci: nci_ntf_packet: unknown ntf opcode 0x836 [ 1275.491902][T23606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:48 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x500}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:48 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x61) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x1a200, 0x100) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) mount$bind(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='./bus\x00', &(0x7f0000000b00), 0x20a3006, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x0, 0x800) open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x100) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000220000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00080001003409215408010000000000000000000000000000000000002738482dcd6a00cf5279830e5f9ac73dd2e8b3e135b7b5285b8b1786d5431b897d0d01677bea6e49091bee9ca7b96432bafe934592b62a8ad9f720f35a7394d3832cffe903", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0500020000000000050004000100000018000180140002006970766c616e31000000000000000000050003000000000005000300000000001400018008000300030000000800030000000000050002000100000005000400000000000500020000000000"], 0x94}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) mount$9p_rdma(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]) lsetxattr$security_selinux(&(0x7f00000009c0)='./bus\x00', &(0x7f0000000a00), &(0x7f0000000a40)='system_u:object_r:systemd_passwd_agent_exec_t:s0\x00', 0x31, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.net/syz0\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4517, &(0x7f0000000800)=ANY=[], 0x12, 0x4b3, &(0x7f0000001b00)="$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") 03:47:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x2271) 03:47:48 executing program 4: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}]}, 0x1c}}, 0x0) read$nci(0xffffffffffffffff, &(0x7f0000000200)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="40007714cc16869c378ccb7bfa1c3b1400000045858e34cc882110db18fedd7e42eb56"], 0x6) read$nci(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(0xffffffffffffffff, &(0x7f0000000380)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(0xffffffffffffffff, &(0x7f0000000500)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(0xffffffffffffffff, &(0x7f00000005c0)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(0xffffffffffffffff, &(0x7f0000000680)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(0xffffffffffffffff, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c000010", @ANYRES16=r2, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=r0, @ANYBLOB="08000400000000000800030001000000"], 0x2c}}, 0x0) read$nci(0xffffffffffffffff, &(0x7f0000000840)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:48 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x74, 0x0, 0x1, 0x0, 0x0, {0x7}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x3, @dev}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:etc_aliases_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @mcast1}]}, 0x74}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r5) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000400000008000100000000000c000a"], 0x28}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:48 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x1000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:48 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x2, 0x0, r0}, @generic, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x28, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:47:48 executing program 1: r0 = io_uring_setup(0x30d3, &(0x7f0000000000)) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000280), 0xc) read(r1, &(0x7f0000000180)=""/52, 0x34) connect$qrtr(r1, &(0x7f00000012c0), 0xc) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1276.349237][T23684] SELinux: security_context_str_to_sid (system N©õF(ole=) failed with errno=-22 [ 1276.368883][T23684] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 1276.407894][ T27] audit: type=1400 audit(2000000868.939:8997): avc: denied { relabelto } for pid=23656 comm="syz-executor.2" name="bus" dev="sda1" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" 03:47:49 executing program 4: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}]}, 0x1c}}, 0x0) (async) read$nci(0xffffffffffffffff, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="40007714cc16869c378ccb7bfa1c3b1400000045858e34cc882110db18fedd7e42eb56"], 0x6) read$nci(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(0xffffffffffffffff, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(0xffffffffffffffff, &(0x7f0000000500)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(0xffffffffffffffff, &(0x7f00000005c0)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(0xffffffffffffffff, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(0xffffffffffffffff, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(0xffffffffffffffff, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c000010", @ANYRES16=r2, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=r0, @ANYBLOB="08000400000000000800030001000000"], 0x2c}}, 0x0) (async) read$nci(0xffffffffffffffff, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(0xffffffffffffffff, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1276.461867][T16741] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1276.532068][T16741] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1276.548570][T16750] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:47:49 executing program 4: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}]}, 0x1c}}, 0x0) (async) read$nci(0xffffffffffffffff, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="40007714cc16869c378ccb7bfa1c3b1400000045858e34cc882110db18fedd7e42eb56"], 0x6) (async) read$nci(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64) (async, rerun: 64) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 64) read$nci(0xffffffffffffffff, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(0xffffffffffffffff, &(0x7f0000000500)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(0xffffffffffffffff, &(0x7f00000005c0)=""/100, 0x64) (rerun: 32) write$nci(0xffffffffffffffff, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(0xffffffffffffffff, &(0x7f0000000680)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(0xffffffffffffffff, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c000010", @ANYRES16=r2, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=r0, @ANYBLOB="08000400000000000800030001000000"], 0x2c}}, 0x0) (async) read$nci(0xffffffffffffffff, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(0xffffffffffffffff, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:49 executing program 1: r0 = io_uring_setup(0x30d3, &(0x7f0000000000)) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000280), 0xc) read(r1, &(0x7f0000000180)=""/52, 0x34) connect$qrtr(r1, &(0x7f00000012c0), 0xc) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:47:49 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000000)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x3, {0x1, "aa"}}}, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) fcntl$setflags(r4, 0x2, 0x1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1276.789399][T16728] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1277.070057][T23691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1277.088849][ T27] audit: type=1400 audit(2000000869.639:8998): avc: denied { unlink } for pid=3092 comm="syz-executor.2" name="bus" dev="sda1" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 1277.098509][T23669] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1277.116870][T23685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:50 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x600}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 03:47:50 executing program 1: r0 = io_uring_setup(0x30d3, &(0x7f0000000000)) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000280), 0xc) read(r1, &(0x7f0000000180)=""/52, 0x34) connect$qrtr(r1, &(0x7f00000012c0), 0xc) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:47:50 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x74, 0x0, 0x1, 0x0, 0x0, {0x7}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x3, @dev}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:etc_aliases_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @mcast1}]}, 0x74}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r5) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000400000008000100000000000c000a"], 0x28}}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000400000008000100000000000c000a"], 0x28}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:50 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x2000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:50 executing program 2: r0 = socket(0xa, 0x3, 0x3a) getsockopt(r0, 0x3fe, 0x20, &(0x7f0000000080)=""/26, &(0x7f00000000c0)=0x1a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0x0, @private1}, {0xa, 0x0, 0x13e000, @private2}, 0x0, {[0x0, 0x0, 0xffdffffa, 0x80000001, 0x1f, 0x0, 0x10000]}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x10, r1, 0x412cf000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast1, @multicast1}, &(0x7f0000000280)=0xc) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000140)=0x28) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000380)={r2, r3/1000+60000}, 0x10) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000000013050000000000000000"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000180)={0x7, 0x0, 0x5, r6, 0x7ff}, 0xc) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) 03:47:50 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}}, 0x0) 03:47:50 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = syz_clone(0xc2000400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x1100, 0x0, 0xffffffff, 0x1, 0x8, 0x0, 0x8000, 0x0, 0x4181}, 0xffffffffffffffff, 0x0, r2, 0xb) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map, r1, 0xe, 0x0, r1}, 0x14) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x6611, 0x0) [ 1277.558644][T23739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23739 comm=syz-executor.2 [ 1277.571750][T23739] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1277.587850][T23739] veth95: entered allmulticast mode [ 1277.593236][T23739] veth95: left allmulticast mode 03:47:50 executing program 1: r0 = io_uring_setup(0x30d3, &(0x7f0000000000)) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000280), 0xc) read(r1, &(0x7f0000000180)=""/52, 0x34) connect$qrtr(r1, &(0x7f00000012c0), 0xc) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1277.743113][T23746] wg1 speed is unknown, defaulting to 1000 03:47:50 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = syz_clone(0xc2000400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x1100, 0x0, 0xffffffff, 0x1, 0x8, 0x0, 0x8000, 0x0, 0x4181}, 0xffffffffffffffff, 0x0, r2, 0xb) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map, r1, 0xe, 0x0, r1}, 0x14) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x6611, 0x0) [ 1277.809745][T16747] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:47:50 executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x9, 0x80, 0x0, 0x81, 0x0, 0x10000, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000300), 0x6}, 0x400, 0x9079, 0x3, 0x4, 0x2000, 0x0, 0x400, 0x0, 0x80000020, 0x0, 0xffff}, 0x0, 0x4, r0, 0xd) mremap(&(0x7f00004bb000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000759000/0x1000)=nil) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000000c0)="45b46fbe7fdca862f4484ad916fa919c93ce789aa142d489c5c618a242a6a6562e8410232a1a30da2dcca2d0023792d730311c7f6f52fe2c476b50a2cf43dfbf1bd69c74423ec5d003355b58735f7d1e195da755909b013846d77d0ce825bda2a5ba9952e169374b01829b61e5df3494b127b514df0f65cab0aef36090977d88130c5944645a291fc7") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000180)={0x0}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f00000002c0)={&(0x7f00000001c0)="a50196ab858500b0de8643b0c984a038327a0ed65dfaea9e86f97a6dbcc166ccb7a395f3daa0f5b9f84ac6d9e2ee7d69a8ead526cf8f4a2adbf4796317252c857199cd40f926c241d77ed8fce1c7de869cdf801ce796c39a5c23121b3e081cd863bce3e158729b2d6804a510a6d9dd7ecf7ab580d89c4d176fe6beb29a9477ffc2a16d2f49476ed8b8f31fda78c6ca8abd14549b240895d02d8e79d223d0596b6c98388dae76441a9dac6b003c7bce73afdc0dfe0ed614aee086cff87f1ea4b2dc2fd7d4371f96fd8702bb1a65d0", 0xce}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x810, r0, 0x9730f000) ptrace(0x11, r1) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)="45b46fbe7fdca862f4484ad916fa919c93ce789aa142d489c5c618a242a6a6562e8410232a1a30da2dcca2d0023792d730311c7f6f52fe2c476b50a2cf43dfbf1bd69c74423ec5d003355b58735f7d1e195da755909b013846d77d0ce825bda2a5ba9952e169374b01829b61e5df3494b127b514df0f65cab0aef36090977d88130c5944645a291fc7") ptrace$setregs(0x4, r1, 0x5, &(0x7f0000000440)="75f7254edecbd58e52c8604b08fe54231fb3f6d860b97e0f5370247f9242fff0b66d48d91b39c9b8637ae1ffa44332a4986afca89ae970f12b2fcb42d31080ebd303c578804a8272491663caf279dab34a6005ce6a12e02feb2c4da07c0939acef8d6bb94388dadce3b82e12d1c941f14e30c66ec17d802f37c625fb1b630c439b815dba5429f8f432fad1f7f3e0f7c564de4147393af2205b7fda8c139734338334f1e82a") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000180)={0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x4, &(0x7f00000006c0)={&(0x7f0000000640)="b5ce38353bf5fad2e9f448235bd4781e080d73f6532617c605bc7773ec9e7fc5cf7d8784e265526c9d097f1a46056d72e55e633c39649a8325d0d531c24f8d57fb19599e8923b7979cc52ff0405a6c7eb4854600918755f58e", 0x59}) r4 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cgroup.events\x00', 0x0, 0x0) r5 = getpid() ptrace$poke(0x5, r5, &(0x7f0000000000), 0x4) [ 1277.938835][T23763] wg1 speed is unknown, defaulting to 1000 [ 1278.376812][T23726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1278.386780][T23751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:52 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = syz_clone(0xc2000400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x1100, 0x0, 0xffffffff, 0x1, 0x8, 0x0, 0x8000, 0x0, 0x4181}, 0xffffffffffffffff, 0x0, r2, 0xb) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map, r1, 0xe, 0x0, r1}, 0x14) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x6611, 0x0) 03:47:52 executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x9, 0x80, 0x0, 0x81, 0x0, 0x10000, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000300), 0x6}, 0x400, 0x9079, 0x3, 0x4, 0x2000, 0x0, 0x400, 0x0, 0x80000020, 0x0, 0xffff}, 0x0, 0x4, r0, 0xd) mremap(&(0x7f00004bb000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000759000/0x1000)=nil) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000000c0)="45b46fbe7fdca862f4484ad916fa919c93ce789aa142d489c5c618a242a6a6562e8410232a1a30da2dcca2d0023792d730311c7f6f52fe2c476b50a2cf43dfbf1bd69c74423ec5d003355b58735f7d1e195da755909b013846d77d0ce825bda2a5ba9952e169374b01829b61e5df3494b127b514df0f65cab0aef36090977d88130c5944645a291fc7") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000180)={0x0}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f00000002c0)={&(0x7f00000001c0)="a50196ab858500b0de8643b0c984a038327a0ed65dfaea9e86f97a6dbcc166ccb7a395f3daa0f5b9f84ac6d9e2ee7d69a8ead526cf8f4a2adbf4796317252c857199cd40f926c241d77ed8fce1c7de869cdf801ce796c39a5c23121b3e081cd863bce3e158729b2d6804a510a6d9dd7ecf7ab580d89c4d176fe6beb29a9477ffc2a16d2f49476ed8b8f31fda78c6ca8abd14549b240895d02d8e79d223d0596b6c98388dae76441a9dac6b003c7bce73afdc0dfe0ed614aee086cff87f1ea4b2dc2fd7d4371f96fd8702bb1a65d0", 0xce}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x810, r0, 0x9730f000) ptrace(0x11, r1) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)="45b46fbe7fdca862f4484ad916fa919c93ce789aa142d489c5c618a242a6a6562e8410232a1a30da2dcca2d0023792d730311c7f6f52fe2c476b50a2cf43dfbf1bd69c74423ec5d003355b58735f7d1e195da755909b013846d77d0ce825bda2a5ba9952e169374b01829b61e5df3494b127b514df0f65cab0aef36090977d88130c5944645a291fc7") ptrace$setregs(0x4, r1, 0x5, &(0x7f0000000440)="75f7254edecbd58e52c8604b08fe54231fb3f6d860b97e0f5370247f9242fff0b66d48d91b39c9b8637ae1ffa44332a4986afca89ae970f12b2fcb42d31080ebd303c578804a8272491663caf279dab34a6005ce6a12e02feb2c4da07c0939acef8d6bb94388dadce3b82e12d1c941f14e30c66ec17d802f37c625fb1b630c439b815dba5429f8f432fad1f7f3e0f7c564de4147393af2205b7fda8c139734338334f1e82a") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000180)={0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x4, &(0x7f00000006c0)={&(0x7f0000000640)="b5ce38353bf5fad2e9f448235bd4781e080d73f6532617c605bc7773ec9e7fc5cf7d8784e265526c9d097f1a46056d72e55e633c39649a8325d0d531c24f8d57fb19599e8923b7979cc52ff0405a6c7eb4854600918755f58e", 0x59}) r4 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cgroup.events\x00', 0x0, 0x0) r5 = getpid() ptrace$poke(0x5, r5, &(0x7f0000000000), 0x4) 03:47:52 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x3000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:52 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000000)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x3, {0x1, "aa"}}}, 0xa) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="e3021e1f817750dd45e724024696aa95078ee8c78fb4ef865b9fa5c99303f960e2de783a7db14afce6410afd15718af8f7e3b668565b543debe7f1fe2b76be4ad40e7e7db9a9e0cfa1ff6ba9bb317e661d0eb3822daaea8036041c2e52969ef6e6b7295d6e407dc0066c3801bfa7b297f839d876e5374bb33f88df87bace1109d61ed69f7dd91f744e41199c51cd5b6c35e0bbee7d1bbf02ed06ec7a5adea77bb3b1919151841d6f53e576dbe1d47ac94b4cf430706d8b3bfaac8b96dd9814f74dd326e7fd1a82894df61471321cc9de478c2c23cc1357c6293f362be583eb153fdc277fbb088d14b97b89bcbc34cb007bd4c6b1f43b72ca34bc2a90da9ff538e0413924843ba4107ef3de5a474dbf3276da12c785baefa3784c3dd0ceee9f2ff5a146ca510e22ad58f26168ba716f41e0aef2bb8cda82e5d4ae048143753c2be1bcc83c885210af2f42108ba59a71cefb2ddc3dd8a26cc46a92818da12881ef10293702a5b3cafb53ae2c923d89a4dba5093fcffd76cb519b8973436784bc633425536db2aa312126827aa4793fb7527dd89d106fcbe53fff5aa49c4693e441c264ab6c23a1d082d9f4e8e662ab3d137c89bc166c7a12750b94fd1dea1e2c9630325be25d4a02936cadb8bd94d215b4218e4cf6b345077c05ace1f707c1d98e792ed37ef69dedddd6fe89fa2e21c90cd6a092a86b50daba6a6d5f50222952d2e1090a17f1b7ee92d3d71e09ecc121813855ee8ea25fb2a7bd5f07da98a165127e94d25127514d0479c9ee64263b33619327af47558ca9ac9abedf918967d5946c5924324559c6ad0d901064bc7f68ecc418757be41e4afba04c7bfca41c0d55d11a4c5eb42980b2ac8e94c7244bbe897df8f0c6b6953a269af877c09637e986b91e43bd814773b193a58688b4f27cb447ea8da9c906e81c091781a51a388a8c61fc5557ba509b873e6a0360cec5f9024f75e6d9160d220687f5223a7c00a124cba5e62a56ea3a18e24395bcc59db624d008a94019a9fe421c4c35738ca6dbeb"], 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async) fcntl$setflags(r4, 0x2, 0x1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1279.680329][T23706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1279.822909][T23779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1279.827519][T23773] wg1 speed is unknown, defaulting to 1000 [ 1280.548798][T23775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:55 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x74, 0x0, 0x1, 0x0, 0x0, {0x7}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x3, @dev}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:etc_aliases_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @mcast1}]}, 0x74}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r5) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000400000008000100000000000c000a"], 0x28}}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:55 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x700}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:55 executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x9, 0x80, 0x0, 0x81, 0x0, 0x10000, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000300), 0x6}, 0x400, 0x9079, 0x3, 0x4, 0x2000, 0x0, 0x400, 0x0, 0x80000020, 0x0, 0xffff}, 0x0, 0x4, r0, 0xd) mremap(&(0x7f00004bb000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000759000/0x1000)=nil) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000000c0)="45b46fbe7fdca862f4484ad916fa919c93ce789aa142d489c5c618a242a6a6562e8410232a1a30da2dcca2d0023792d730311c7f6f52fe2c476b50a2cf43dfbf1bd69c74423ec5d003355b58735f7d1e195da755909b013846d77d0ce825bda2a5ba9952e169374b01829b61e5df3494b127b514df0f65cab0aef36090977d88130c5944645a291fc7") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000180)={0x0}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f00000002c0)={&(0x7f00000001c0)="a50196ab858500b0de8643b0c984a038327a0ed65dfaea9e86f97a6dbcc166ccb7a395f3daa0f5b9f84ac6d9e2ee7d69a8ead526cf8f4a2adbf4796317252c857199cd40f926c241d77ed8fce1c7de869cdf801ce796c39a5c23121b3e081cd863bce3e158729b2d6804a510a6d9dd7ecf7ab580d89c4d176fe6beb29a9477ffc2a16d2f49476ed8b8f31fda78c6ca8abd14549b240895d02d8e79d223d0596b6c98388dae76441a9dac6b003c7bce73afdc0dfe0ed614aee086cff87f1ea4b2dc2fd7d4371f96fd8702bb1a65d0", 0xce}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x810, r0, 0x9730f000) ptrace(0x11, r1) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)="45b46fbe7fdca862f4484ad916fa919c93ce789aa142d489c5c618a242a6a6562e8410232a1a30da2dcca2d0023792d730311c7f6f52fe2c476b50a2cf43dfbf1bd69c74423ec5d003355b58735f7d1e195da755909b013846d77d0ce825bda2a5ba9952e169374b01829b61e5df3494b127b514df0f65cab0aef36090977d88130c5944645a291fc7") ptrace$setregs(0x4, r1, 0x5, &(0x7f0000000440)="75f7254edecbd58e52c8604b08fe54231fb3f6d860b97e0f5370247f9242fff0b66d48d91b39c9b8637ae1ffa44332a4986afca89ae970f12b2fcb42d31080ebd303c578804a8272491663caf279dab34a6005ce6a12e02feb2c4da07c0939acef8d6bb94388dadce3b82e12d1c941f14e30c66ec17d802f37c625fb1b630c439b815dba5429f8f432fad1f7f3e0f7c564de4147393af2205b7fda8c139734338334f1e82a") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000180)={0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x4, &(0x7f00000006c0)={&(0x7f0000000640)="b5ce38353bf5fad2e9f448235bd4781e080d73f6532617c605bc7773ec9e7fc5cf7d8784e265526c9d097f1a46056d72e55e633c39649a8325d0d531c24f8d57fb19599e8923b7979cc52ff0405a6c7eb4854600918755f58e", 0x59}) r4 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cgroup.events\x00', 0x0, 0x0) r5 = getpid() ptrace$poke(0x5, r5, &(0x7f0000000000), 0x4) 03:47:55 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000000)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 64) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x3, {0x1, "aa"}}}, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) fcntl$setflags(r4, 0x2, 0x1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:55 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x4000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:55 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = syz_clone(0xc2000400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x1100, 0x0, 0xffffffff, 0x1, 0x8, 0x0, 0x8000, 0x0, 0x4181}, 0xffffffffffffffff, 0x0, r2, 0xb) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map, r1, 0xe, 0x0, r1}, 0x14) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x6611, 0x0) 03:47:55 executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x9, 0x80, 0x0, 0x81, 0x0, 0x10000, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000300), 0x6}, 0x400, 0x9079, 0x3, 0x4, 0x2000, 0x0, 0x400, 0x0, 0x80000020, 0x0, 0xffff}, 0x0, 0x4, r0, 0xd) mremap(&(0x7f00004bb000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000759000/0x1000)=nil) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000000c0)="45b46fbe7fdca862f4484ad916fa919c93ce789aa142d489c5c618a242a6a6562e8410232a1a30da2dcca2d0023792d730311c7f6f52fe2c476b50a2cf43dfbf1bd69c74423ec5d003355b58735f7d1e195da755909b013846d77d0ce825bda2a5ba9952e169374b01829b61e5df3494b127b514df0f65cab0aef36090977d88130c5944645a291fc7") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000180)={0x0}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f00000002c0)={&(0x7f00000001c0)="a50196ab858500b0de8643b0c984a038327a0ed65dfaea9e86f97a6dbcc166ccb7a395f3daa0f5b9f84ac6d9e2ee7d69a8ead526cf8f4a2adbf4796317252c857199cd40f926c241d77ed8fce1c7de869cdf801ce796c39a5c23121b3e081cd863bce3e158729b2d6804a510a6d9dd7ecf7ab580d89c4d176fe6beb29a9477ffc2a16d2f49476ed8b8f31fda78c6ca8abd14549b240895d02d8e79d223d0596b6c98388dae76441a9dac6b003c7bce73afdc0dfe0ed614aee086cff87f1ea4b2dc2fd7d4371f96fd8702bb1a65d0", 0xce}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x810, r0, 0x9730f000) ptrace(0x11, r1) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)="45b46fbe7fdca862f4484ad916fa919c93ce789aa142d489c5c618a242a6a6562e8410232a1a30da2dcca2d0023792d730311c7f6f52fe2c476b50a2cf43dfbf1bd69c74423ec5d003355b58735f7d1e195da755909b013846d77d0ce825bda2a5ba9952e169374b01829b61e5df3494b127b514df0f65cab0aef36090977d88130c5944645a291fc7") ptrace$setregs(0x4, r1, 0x5, &(0x7f0000000440)="75f7254edecbd58e52c8604b08fe54231fb3f6d860b97e0f5370247f9242fff0b66d48d91b39c9b8637ae1ffa44332a4986afca89ae970f12b2fcb42d31080ebd303c578804a8272491663caf279dab34a6005ce6a12e02feb2c4da07c0939acef8d6bb94388dadce3b82e12d1c941f14e30c66ec17d802f37c625fb1b630c439b815dba5429f8f432fad1f7f3e0f7c564de4147393af2205b7fda8c139734338334f1e82a") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000180)={0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x4, &(0x7f00000006c0)={&(0x7f0000000640)="b5ce38353bf5fad2e9f448235bd4781e080d73f6532617c605bc7773ec9e7fc5cf7d8784e265526c9d097f1a46056d72e55e633c39649a8325d0d531c24f8d57fb19599e8923b7979cc52ff0405a6c7eb4854600918755f58e", 0x59}) r4 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cgroup.events\x00', 0x0, 0x0) r5 = getpid() ptrace$poke(0x5, r5, &(0x7f0000000000), 0x4) [ 1282.624546][T23741] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 03:47:55 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000000040), &(0x7f0000000080)=0x8) 03:47:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x20}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100000100000000000080"], 0x30}}, 0x0) 03:47:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x20}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100000100000000000080"], 0x30}}, 0x0) [ 1282.714794][ T27] audit: type=1400 audit(2000000875.269:8999): avc: denied { getopt } for pid=23824 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1282.750868][T23830] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 03:47:55 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x2c, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40005}, 0x4000000) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1282.766746][T16750] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1282.778918][T23807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1282.780239][T23836] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 03:47:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x20}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100000100000000000080"], 0x30}}, 0x0) 03:47:55 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="40010100"/20], 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) r4 = socket$tipc(0x1e, 0x5, 0x0) fcntl$addseals(r4, 0x409, 0x9) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1282.813756][T23823] wg1 speed is unknown, defaulting to 1000 [ 1282.847485][T23846] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1282.873383][T16750] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:47:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x20}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100000100000000000080"], 0x30}}, 0x0) 03:47:56 executing program 2: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_rdma(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0xfffffffffffffff9,fscache,timeout=0x0000000000000005,privport']) 03:47:56 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x900}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:56 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x5000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1283.480633][T23826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1283.490326][T23837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x34, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}]}, 0x34}], 0x1}, 0x0) 03:47:56 executing program 1: r0 = syz_io_uring_setup(0x336a, &(0x7f0000000100)={0x0, 0x0, 0x4}, &(0x7f0000000000), &(0x7f0000000580)) io_uring_enter(r0, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1211]}, 0x8) ppoll(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/35, 0xffffffffffffff13, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @mcast2}, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @local, 0x6}, 0x1c) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x8, 0x800, 0xa48b) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x40000004, 0x80000001, 0xa11, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000700)=@buf="bc", 0x1}, 0x1c) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r5, &(0x7f0000000100)}, 0x20) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f00000008c0)=ANY=[@ANYBLOB="00ed6116078098b30607ccf500230facc1814b1e645c89648e104b06e7fd5e2e1600f95c645213c4cf83d83d787890003978ef633a3a0c1db562f87a4675e1950ae09645cf5f706f159739d264c4f6c03415872dbf9845f2e7e34c153c46f3be21e229ce6c0100e361217b5d1a950a2438c79c68bc8927594e34c042080978842d7cb8e9", @ANYRES16=r5, @ANYBLOB="80c600bd6500fddbdf257a00000008000300a9ef7e3e3ab7", @ANYRES32=0x0, @ANYBLOB="0d40000022080091e97adf6dd0b4cc0d5cd78cd2253b57d781ad9ae2a1604c4a73b0b71659fb3b192e50a185b7912aed8066439ecdf04ea998380bd3cf38d204de76fde0ad37b4b30adfc8f445887b5882299e29b9f661c4b993ce70033c3caaae59d79f5b626bf3f2fc54298357e48c4890c8a6e29e5399d7b55ca9b1bf030076fdb4675049f54af58d8362748b5fae19e2f36dc77033de930fb5f473a3eaf1027095d2244bcc2867dab25a8c38635e29ab7cd177e6c8e34a01a0f209ac71faea046fc9dda9a8240c79111eac7aed12a801fe7d905aefc5b2b0e7c471edc0bee3a15065ed29b04196ae2ab96e303ee7f96c98dec67fa35f00"/258], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001000)=ANY=[@ANYRESHEX], &(0x7f00000000c0)='syzkaller\x00', 0xff7ffff7, 0x9e, &(0x7f0000001880)=""/158, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000600)='afs_cb_break\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES64=r5, @ANYRES32=r1, @ANYRES16, @ANYRESOCT=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r7 = mq_open(&(0x7f0000000840)='%\xb1elinuxse\x19\xbb\xf2\xce\x15\nlinux\xe1\xb7\xd9\xda\x17\xba\xf1\x00\x8f*\x0f\x1d\x94\x7f\xbe\xb6\x06h0\xd89\xedv\x99Z\xd38\xa7YKp\xe9\xe5\x949\xc6\xb7\x18\xde?k\xadz+\x10\x0e\xecls\xdf\x9c\b\x17\x84\x00\x00\xa6#CoG\xd0\xf72\xec\xbc\xae8\xd1\xe4\xb6\xec\xd3\xc8\x03\xca\xdd\xee\xcc\xc2\xdb\xde\xcc\xe6\xab\x87\'\xe5t\xa6\x00\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x10000006, 0x1, 0x3, 0x10}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000002b40)=ANY=[@ANYBLOB="d0110000", @ANYRES16=0x0, @ANYRES64, @ANYRES8=0x0, @ANYBLOB="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"], 0x11d0}, 0x1, 0x0, 0x0, 0x44084}, 0x4008040) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r7, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000800)) ioctl$FS_IOC_SETVERSION(r7, 0x40047602, &(0x7f0000000000)=0xe93) mq_timedreceive(r7, &(0x7f0000000780)=""/126, 0x7e, 0x8, 0x0) fallocate(r7, 0x30, 0x9, 0x10000) socket(0x10, 0x80002, 0x0) [ 1283.533633][T23872] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1283.547166][T23879] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1283.555412][T23879] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1283.581204][T23879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.590149][T23879] 8021q: adding VLAN 0 to HW filter on device team0 [ 1283.598977][T23881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23881 comm=syz-executor.1 [ 1283.612483][T23879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1283.629556][T23883] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:47:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x400}) 03:47:56 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="40010100"/20], 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 32) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) fcntl$addseals(r4, 0x409, 0x9) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:56 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="40010100"/20], 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) fcntl$addseals(r4, 0x409, 0x9) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1283.793180][T16747] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1283.842730][T23898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1284.360436][T23868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1284.366313][T23889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:58 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x2c, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40005}, 0x4000000) (async, rerun: 32) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (rerun: 32) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:58 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="9577832bc9bcaa41000000"], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x100, 0x2000123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) r4 = memfd_secret(0x80000) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000a00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44) write$binfmt_script(r0, &(0x7f0000000900)={'#! ', './file0', [{0x20, 'nfc\x00'}, {0x20, 'nfc\x00'}, {0x20, ':'}, {0x20, 'nfc\x00'}, {0x20, 'nfc\x00'}], 0xa, "daaadf9708d138b2d5cacf0d1c794162c49e9cae42b71b4e4504ae9aed67f886076a79dea1d5d47b034d67b7fa53d021ceeb66a4962afbc99c9ad74355031d21e5f50fc9e88ae79c7d60faecd04d45a9dfb3475fe1daeb34857c191457e11d87d3e0ec3272cc8f7bbd5407cf152195b7526a7fc204563cb7c6cc31fe16a8c2446945017220c247dc7ab2a03a85caf962f1bc347a01b892c7d04553fe3f8ee2f503f988"}, 0xc4) write$nci(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="6103000011010101bb41dc45a8ede1908506771807152eb9bb2cd05cc17b1ca0e415453a5f2be72796af4d79ce2f323187f4ad28889f5ade8b11d80a8abc219c8420841ffca76078ae130674761c826412cf6c0c611775d437d32b0647013a2122b11d61a63e73a512dedaa8c55992c982e18983b5ca3010734e44d3b08fab6cc8929f25974b273148d2616527b412a00bfb83b4eff310a0f42b6a7b14088574082c2632a6171517d9ff821dedae0a67d9ddf70ee8b178cefd9580a668414f293264e1751e0e"], 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000400)) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipmr_getroute={0x1c, 0x1a, 0x43d2163713cca40d, 0x0, 0x0, {0x80, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 03:47:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x33, 0x0, &(0x7f0000000100)) 03:47:58 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x6000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:58 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xa00}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:58 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) 03:47:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@noinit_itable}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x22}], [], 0x4a}, 0x84, 0x478, &(0x7f00000004c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3e, &(0x7f0000000100)={&(0x7f0000000000)=@ipmr_delroute={0xb0, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_TABLE={0x7}, @RTA_METRICS={0x60, 0x8, 0x0, 0x1, "58e98889f186c9ff199deaf26a2cfa59ffed22722dcaa13dcbe98dd15cd534b69314c4cdfa3b88aa2dd1f874b475bc154f386e83c6a5aae754d14ebadc498f90f484aaa104ff336e72900d306a98b1c7e83ad223f88e9ff1d6208552"}, @RTA_TABLE={0x8}, @RTA_SPORT={0x6}, @RTA_ENCAP_TYPE={0x6}, @RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0xb0}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r0}) 03:47:58 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0xa, 0x10, {0x2, 0x0, @remote}}, 0x24) [ 1285.826871][T23840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:58 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=@newspdinfo={0x1c, 0x24, 0x11, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) 03:47:58 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) [ 1285.887921][T23934] loop1: detected capacity change from 0 to 512 [ 1285.899266][T23934] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e0ac, mo2=0002] [ 1285.908862][T23934] System zones: 1-12 [ 1285.913310][T23934] EXT4-fs error (device loop1): dx_probe:820: inode #2: comm syz-executor.1: Directory hole found for htree index block [ 1285.927421][T23934] EXT4-fs (loop1): Remounting filesystem read-only 03:47:58 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) [ 1285.936482][T16750] nci: nci_rx_work: unknown MT 0x4 [ 1285.942806][T23934] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 1285.951378][T23934] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1285.959627][T23934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1285.973398][T23934] SELinux: (dev loop1, type ext4) getxattr errno 5 03:47:58 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) [ 1285.980336][T23934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1286.037356][T23934] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 1286.045944][T16728] nci: nci_rx_work: unknown MT 0x1 [ 1286.051854][T16728] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:47:59 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 32) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (rerun: 32) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="9577832bc9bcaa41000000"], 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x100, 0x2000123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) r4 = memfd_secret(0x80000) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000a00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44) (async, rerun: 32) write$binfmt_script(r0, &(0x7f0000000900)={'#! ', './file0', [{0x20, 'nfc\x00'}, {0x20, 'nfc\x00'}, {0x20, ':'}, {0x20, 'nfc\x00'}, {0x20, 'nfc\x00'}], 0xa, "daaadf9708d138b2d5cacf0d1c794162c49e9cae42b71b4e4504ae9aed67f886076a79dea1d5d47b034d67b7fa53d021ceeb66a4962afbc99c9ad74355031d21e5f50fc9e88ae79c7d60faecd04d45a9dfb3475fe1daeb34857c191457e11d87d3e0ec3272cc8f7bbd5407cf152195b7526a7fc204563cb7c6cc31fe16a8c2446945017220c247dc7ab2a03a85caf962f1bc347a01b892c7d04553fe3f8ee2f503f988"}, 0xc4) (async, rerun: 32) write$nci(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="6103000011010101bb41dc45a8ede1908506771807152eb9bb2cd05cc17b1ca0e415453a5f2be72796af4d79ce2f323187f4ad28889f5ade8b11d80a8abc219c8420841ffca76078ae130674761c826412cf6c0c611775d437d32b0647013a2122b11d61a63e73a512dedaa8c55992c982e18983b5ca3010734e44d3b08fab6cc8929f25974b273148d2616527b412a00bfb83b4eff310a0f42b6a7b14088574082c2632a6171517d9ff821dedae0a67d9ddf70ee8b178cefd9580a668414f293264e1751e0e"], 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000400)) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:59 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 64) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 64) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x2c, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40005}, 0x4000000) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async, rerun: 32) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:59 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) 03:47:59 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x7000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@noinit_itable}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x22}], [], 0x4a}, 0x84, 0x478, &(0x7f00000004c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3e, &(0x7f0000000100)={&(0x7f0000000000)=@ipmr_delroute={0xb0, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_TABLE={0x7}, @RTA_METRICS={0x60, 0x8, 0x0, 0x1, "58e98889f186c9ff199deaf26a2cfa59ffed22722dcaa13dcbe98dd15cd534b69314c4cdfa3b88aa2dd1f874b475bc154f386e83c6a5aae754d14ebadc498f90f484aaa104ff336e72900d306a98b1c7e83ad223f88e9ff1d6208552"}, @RTA_TABLE={0x8}, @RTA_SPORT={0x6}, @RTA_ENCAP_TYPE={0x6}, @RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0xb0}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r0}) 03:47:59 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xf00}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1286.685700][T23945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@noinit_itable}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x22}], [], 0x4a}, 0x84, 0x478, &(0x7f00000004c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3e, &(0x7f0000000100)={&(0x7f0000000000)=@ipmr_delroute={0xb0, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_TABLE={0x7}, @RTA_METRICS={0x60, 0x8, 0x0, 0x1, "58e98889f186c9ff199deaf26a2cfa59ffed22722dcaa13dcbe98dd15cd534b69314c4cdfa3b88aa2dd1f874b475bc154f386e83c6a5aae754d14ebadc498f90f484aaa104ff336e72900d306a98b1c7e83ad223f88e9ff1d6208552"}, @RTA_TABLE={0x8}, @RTA_SPORT={0x6}, @RTA_ENCAP_TYPE={0x6}, @RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0xb0}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r0}) [ 1286.730056][T23969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1286.734666][T23984] loop1: detected capacity change from 0 to 512 [ 1286.753766][T23984] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e0ac, mo2=0002] [ 1286.762251][T23984] System zones: 1-12 03:47:59 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000780)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@noinit_itable}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x22}], [], 0x4a}, 0x84, 0x478, &(0x7f00000004c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3e, &(0x7f0000000100)={&(0x7f0000000000)=@ipmr_delroute={0xb0, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_TABLE={0x7}, @RTA_METRICS={0x60, 0x8, 0x0, 0x1, "58e98889f186c9ff199deaf26a2cfa59ffed22722dcaa13dcbe98dd15cd534b69314c4cdfa3b88aa2dd1f874b475bc154f386e83c6a5aae754d14ebadc498f90f484aaa104ff336e72900d306a98b1c7e83ad223f88e9ff1d6208552"}, @RTA_TABLE={0x8}, @RTA_SPORT={0x6}, @RTA_ENCAP_TYPE={0x6}, @RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0xb0}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r0}) [ 1286.770170][T23984] EXT4-fs error (device loop1): dx_probe:820: inode #2: comm syz-executor.1: Directory hole found for htree index block [ 1286.785082][T23995] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 1286.788845][T23984] EXT4-fs (loop1): Remounting filesystem read-only [ 1286.800424][T23984] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 1286.808755][T23984] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1286.812522][T23986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:47:59 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (rerun: 32) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 64) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="9577832bc9bcaa41000000"], 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x100, 0x2000123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (rerun: 64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (rerun: 32) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) r4 = memfd_secret(0x80000) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000a00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44) (async) write$binfmt_script(r0, &(0x7f0000000900)={'#! ', './file0', [{0x20, 'nfc\x00'}, {0x20, 'nfc\x00'}, {0x20, ':'}, {0x20, 'nfc\x00'}, {0x20, 'nfc\x00'}], 0xa, "daaadf9708d138b2d5cacf0d1c794162c49e9cae42b71b4e4504ae9aed67f886076a79dea1d5d47b034d67b7fa53d021ceeb66a4962afbc99c9ad74355031d21e5f50fc9e88ae79c7d60faecd04d45a9dfb3475fe1daeb34857c191457e11d87d3e0ec3272cc8f7bbd5407cf152195b7526a7fc204563cb7c6cc31fe16a8c2446945017220c247dc7ab2a03a85caf962f1bc347a01b892c7d04553fe3f8ee2f503f988"}, 0xc4) write$nci(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="6103000011010101bb41dc45a8ede1908506771807152eb9bb2cd05cc17b1ca0e415453a5f2be72796af4d79ce2f323187f4ad28889f5ade8b11d80a8abc219c8420841ffca76078ae130674761c826412cf6c0c611775d437d32b0647013a2122b11d61a63e73a512dedaa8c55992c982e18983b5ca3010734e44d3b08fab6cc8929f25974b273148d2616527b412a00bfb83b4eff310a0f42b6a7b14088574082c2632a6171517d9ff821dedae0a67d9ddf70ee8b178cefd9580a668414f293264e1751e0e"], 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000400)) (async, rerun: 64) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:47:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@noinit_itable}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x22}], [], 0x4a}, 0x84, 0x478, &(0x7f00000004c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3e, &(0x7f0000000100)={&(0x7f0000000000)=@ipmr_delroute={0xb0, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_TABLE={0x7}, @RTA_METRICS={0x60, 0x8, 0x0, 0x1, "58e98889f186c9ff199deaf26a2cfa59ffed22722dcaa13dcbe98dd15cd534b69314c4cdfa3b88aa2dd1f874b475bc154f386e83c6a5aae754d14ebadc498f90f484aaa104ff336e72900d306a98b1c7e83ad223f88e9ff1d6208552"}, @RTA_TABLE={0x8}, @RTA_SPORT={0x6}, @RTA_ENCAP_TYPE={0x6}, @RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0xb0}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r0}) [ 1286.818365][T23984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1286.838955][T23984] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 1286.844250][T24007] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 1286.847099][T23984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:47:59 executing program 2: r0 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000400)={0x3, 'vlan1\x00', {0x622a}}) 03:47:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@noinit_itable}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x22}], [], 0x4a}, 0x84, 0x478, &(0x7f00000004c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3e, &(0x7f0000000100)={&(0x7f0000000000)=@ipmr_delroute={0xb0, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_TABLE={0x7}, @RTA_METRICS={0x60, 0x8, 0x0, 0x1, "58e98889f186c9ff199deaf26a2cfa59ffed22722dcaa13dcbe98dd15cd534b69314c4cdfa3b88aa2dd1f874b475bc154f386e83c6a5aae754d14ebadc498f90f484aaa104ff336e72900d306a98b1c7e83ad223f88e9ff1d6208552"}, @RTA_TABLE={0x8}, @RTA_SPORT={0x6}, @RTA_ENCAP_TYPE={0x6}, @RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0xb0}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r0}) 03:47:59 executing program 2: r0 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000400)={0x3, 'vlan1\x00', {0x622a}}) 03:47:59 executing program 2: r0 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000400)={0x3, 'vlan1\x00', {0x622a}}) [ 1286.886822][T24020] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 1286.925378][T23984] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 1286.958227][T24033] loop1: detected capacity change from 0 to 512 [ 1286.968481][T24033] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e0ac, mo2=0002] [ 1286.976764][T24033] System zones: 1-12 [ 1286.977235][T16750] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1286.981445][T24033] EXT4-fs error (device loop1): dx_probe:820: inode #2: comm syz-executor.1: Directory hole found for htree index block [ 1286.991884][T24014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1287.003173][T24033] EXT4-fs (loop1): Remounting filesystem read-only [ 1287.003193][T24033] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 1287.003230][T24033] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1287.003296][T24033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1287.003330][T24033] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 1287.003707][T24033] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1287.115024][T24033] netlink: 'syz-executor.1': attribute type 15 has an invalid length. 03:48:00 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x9000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:00 executing program 2: r0 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000400)={0x3, 'vlan1\x00', {0x622a}}) 03:48:00 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x30000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:00 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x3, 0x1}, 0x4) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:00 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000780)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@noinit_itable}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x22}], [], 0x4a}, 0x84, 0x478, &(0x7f00000004c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3e, &(0x7f0000000100)={&(0x7f0000000000)=@ipmr_delroute={0xb0, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_TABLE={0x7}, @RTA_METRICS={0x60, 0x8, 0x0, 0x1, "58e98889f186c9ff199deaf26a2cfa59ffed22722dcaa13dcbe98dd15cd534b69314c4cdfa3b88aa2dd1f874b475bc154f386e83c6a5aae754d14ebadc498f90f484aaa104ff336e72900d306a98b1c7e83ad223f88e9ff1d6208552"}, @RTA_TABLE={0x8}, @RTA_SPORT={0x6}, @RTA_ENCAP_TYPE={0x6}, @RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0xb0}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r0}) 03:48:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@setlink={0x28, 0x13, 0xdb2c244f5ba01c45, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 03:48:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000300), 0x4) [ 1287.663635][T24005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1287.695533][T24074] loop1: detected capacity change from 0 to 512 03:48:00 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x1}]}, @var={0x1, 0x0, 0x0, 0xe, 0x1}, @volatile]}, {0x0, [0x2e, 0x2e, 0x2e, 0x61]}}, &(0x7f0000000140)=""/4096, 0x4e, 0x1000, 0x1}, 0x20) 03:48:00 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40}, 0x18) [ 1287.707180][T24074] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e0ac, mo2=0002] [ 1287.715215][T24074] System zones: 1-12 [ 1287.720187][T24074] EXT4-fs error (device loop1): dx_probe:820: inode #2: comm syz-executor.1: Directory hole found for htree index block [ 1287.733721][T24074] EXT4-fs (loop1): Remounting filesystem read-only [ 1287.744353][T24074] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 1287.752913][T24074] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 03:48:00 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007ffeffffffffffffff000071673fa79d93014b8e7781b6"], 0xfdef) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) 03:48:00 executing program 2: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f00000000c0)=0x54) [ 1287.762298][T24074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1287.775156][T24074] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 1287.782077][T24074] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1287.801903][T24090] wg1 speed is unknown, defaulting to 1000 [ 1287.829579][T24074] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 1287.886324][T24078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1287.895083][T24078] nci: nci_start_poll: failed to set local general bytes 03:48:01 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0xf000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000980)={@val, @val={0x0, 0x5, 0x0, 0x8666}, @ipv6=@icmpv6={0x0, 0x6, "71d080", 0x18, 0x3a, 0x0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @mcast2}}}}, 0x4e) 03:48:01 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x1000000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:01 executing program 2: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f00000000c0)=0x54) [ 1288.439983][T24049] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1288.513527][T24107] wg1 speed is unknown, defaulting to 1000 [ 1288.713545][T16728] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1289.327414][T24121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1289.336485][T24113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:05 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000780)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:05 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x3, 0x1}, 0x4) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xffffffffffffffdd}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 03:48:05 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x2000000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:05 executing program 2: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f00000000c0)=0x54) 03:48:05 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0xffffff7f}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1292.944535][T24078] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 03:48:05 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) accept(r0, 0x0, 0x0) [ 1292.999643][T24135] wg1 speed is unknown, defaulting to 1000 [ 1293.037614][T24132] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:05 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x80001, 0x0) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) memfd_secret(0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x7b52, 0x0, 0x0, 0x0, 0x0) 03:48:05 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="41030000fcc818ab3aff77d78868f0fb1f3a3fc9824b048bf37977982b4752a58a03a63b82d4caf2c4a805e7318ef8514508799a70475dd107a6b7d21358c3c9c6cea2a15e936cc5236e6ba2cf923f0edac66ada"], 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:05 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x3, 0x1}, 0x4) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1293.057207][ T27] audit: type=1400 audit(2000000885.609:9000): avc: denied { accept } for pid=24163 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 03:48:05 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@mcast1}, 0x14) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 1293.124043][T24169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1293.152319][T24185] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.1'. 03:48:05 executing program 2: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f00000000c0)=0x54) 03:48:05 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="56d6b8041ac5f2268b4441e01ea06063cf562aa141d3843256f0db81d98f"], 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r8, 0x800, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048880}, 0x40800) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:05 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000004100)={0x0, 0x30, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8943, 0x20000000) [ 1293.250647][T16741] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1293.251263][T24193] wg1 speed is unknown, defaulting to 1000 03:48:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xd0, 0x0, 0x98, 0x0, 0x98, 0x178, 0x178, 0x178, 0x178, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x4, 0x3, 0x1]}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) [ 1293.336137][T24210] --map-set only usable from mangle table [ 1293.363646][T16747] nci: nci_rsp_packet: unknown rsp opcode 0x616 [ 1293.464847][T16741] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1293.953473][T24189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:08 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x3000000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xd0, 0x0, 0x98, 0x0, 0x98, 0x178, 0x178, 0x178, 0x178, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x4, 0x3, 0x1]}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) 03:48:08 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x3000000000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 03:48:08 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="41030000fcc818ab3aff77d78868f0fb1f3a3fc9824b048bf37977982b4752a58a03a63b82d4caf2c4a805e7318ef8514508799a70475dd107a6b7d21358c3c9c6cea2a15e936cc5236e6ba2cf923f0edac66ada"], 0x4) (async) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="41030000fcc818ab3aff77d78868f0fb1f3a3fc9824b048bf37977982b4752a58a03a63b82d4caf2c4a805e7318ef8514508799a70475dd107a6b7d21358c3c9c6cea2a15e936cc5236e6ba2cf923f0edac66ada"], 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:08 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="56d6b8041ac5f2268b4441e01ea06063cf562aa141d3843256f0db81d98f"], 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r8, 0x800, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048880}, 0x40800) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1296.245725][T24206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1296.260063][T24222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=@allocspi={0x124, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in=@dev}, {@in6=@empty, 0x0, 0x6c}, @in6=@private0}, 0x0, 0x3f}, [@replay_val={0x10}, @offload={0xc}, @replay_thresh={0x8}, @proto={0x5}]}, 0x124}}, 0x0) 03:48:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xd0, 0x0, 0x98, 0x0, 0x98, 0x178, 0x178, 0x178, 0x178, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x4, 0x3, 0x1]}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) 03:48:08 executing program 2: r0 = epoll_create1(0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff, 0x0, "ab524af86b9fa3dbe12557582dbf4b3c25a304"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 03:48:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xd0, 0x0, 0x98, 0x0, 0x98, 0x178, 0x178, 0x178, 0x178, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x4, 0x3, 0x1]}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) [ 1296.302026][T24236] --map-set only usable from mangle table [ 1296.326667][T24248] --map-set only usable from mangle table 03:48:08 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffc}, 0x10, 0x0, r0}, 0x90) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000005c0), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r2) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000005c0)=r2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r3) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000005c0)=r3, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000800000061b90000b24600f99500000000000000d94b02001400000018000000"], &(0x7f00000003c0)='GPL\x00', 0x800, 0xc3, &(0x7f0000000400)=""/195, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0x3, 0x6, 0x8}, 0x10, 0xfa9e, 0xffffffffffffffff, 0x2, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x0, 0x1, 0x5}, {0x3, 0x3, 0x0, 0x9}]}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001840)={r5, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000840)='blkio.bfq.io_service_bytes\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r5, r4, 0x0, 0x0, 0x0}, 0x30) r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x53, 0x10, 0x0}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000040)=0xc7ff) 03:48:08 executing program 1: socket(0x28, 0x1, 0x0) [ 1296.352029][T24255] --map-set only usable from mangle table [ 1296.403292][T24259] wg1 speed is unknown, defaulting to 1000 [ 1296.417148][T16741] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:48:09 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="56d6b8041ac5f2268b4441e01ea06063cf562aa141d3843256f0db81d98f"], 0x5) (async) write$nci(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="56d6b8041ac5f2268b4441e01ea06063cf562aa141d3843256f0db81d98f"], 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r2) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r8, 0x800, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048880}, 0x40800) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:09 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (rerun: 32) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 64) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="41030000fcc818ab3aff77d78868f0fb1f3a3fc9824b048bf37977982b4752a58a03a63b82d4caf2c4a805e7318ef8514508799a70475dd107a6b7d21358c3c9c6cea2a15e936cc5236e6ba2cf923f0edac66ada"], 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:09 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x4000000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:09 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x40030000000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\t'], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 03:48:09 executing program 2: ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)="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", 0xfa}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000380)="75d54d387d4050c3907cceac65672e74bccc8a7ed49a1bc95cd057e0f6c73784ff21816599c09462a27ba8ec177c8bda93093a3b7279513b278c3dfc4fd8ad50852726b34b149dbd1e9414571a0771ba800c2d7e4a4cf3f60feead917abd87d14f196060159f94cac7188729483180e0cc114babb5ff4cf50065c41dc96c81c5ddacf9d7962c285174449cb5366de4ff2867f19c3c0f9f3b352c1fcf8dbd2bcd0177caa79aa1bc1defa9eecdb4502c09c89e62879ecf2627e98de2bc8a04b9c5f4b68e5d91136de24c6551b24d616c04d0ae59", 0xd3}, {&(0x7f0000000480)="08d30d520945ba031d01384635f076df1bb9614685f060c3a9321863ad668f56e02f1c25afa7bd315ebfe8951d9b3665886ac6fbc0729e9d32cc2ee4db52bc38fe72b08eb5d6f997b21a2e73f4b3f3e1960d99ebb78c57bf54ac622d388313", 0x5f}, {&(0x7f0000000540)="89431b8a06768ec4f06f528bfe3d83a04ebcb9d6b88c18f2bc493c01850b8eedbc1260dc049e9c07ac430fa337d69a6e237d22139c8a1a3369fd102d646a8df059f03116a9d49fc5fc58b441f82fad0793b4c788b0800f063d09b2db60e11d3de704", 0x62}, {&(0x7f00000005c0)="09a2a2b50152d9c87fb03dfd64dc9470774e3e2a4be0e0c50543bbcc8f464e940cade7ffaab1c4d4164ec7a5a871fd1459f9dbb22ad0213eaff9da4dd570d4cb64e3834ba05f65da73988b6265ba13f4e0d66e2e4cb089c502290538a2f56bca166faa989fc8", 0x66}, {&(0x7f0000000680)="3c9493bf76a48b6ef81357fc1b866aac1225ed4e9fe41e93397b50baa08ee02ca63dc4b6e73ce289a86bf05dc4f816dd6f99d9e171c1175f8dc80982b941d6cf1f6a8bbec544321258d336c1e33e539ff63e7a5e19dbd40f1955ea63aaeef8cc2f6c01dc489235ae32ce369427bb4a6ad494d1b016605ed1952e63bdfef0fe9f3bd2fc5cc076f8c323aee37f9d26bb7ebf2babf55664f8489d578aabf6805acf0bd353b88f7f14ed79f94b5667c3200c4f2c69c63a6a961fd687ab02674e67006d1fe98aa741af630bea3c3d9c747aafcdb88135", 0xd4}, {&(0x7f0000000780)="e5f9f44b2b811f18af266fa9bcf6203849fb2766a0cfd4347407df619f7b78a68faccf44b69a676790dbdb04685d77952fa622fe1e8ef0e48f9dd87979c18ca63f494872faa1230d58aadeae638d51ac9d28b64af76e1049cced6b73199aa2723e898c942a8081a46a594c800ef4e48e72a35b3ff13f487fad1f61b85df64c40cbc8eab5c4d46039e2f507b5d82f8071468d6e76ac775b5573878be3bf21f99fa220c293653eeab8904da869a279518dde6a65430a7eeb5c4e33d8605e13007066be86b673c029993d4ebe92e16b2bb19b68b810610d4a", 0xd7}, {&(0x7f0000000880)='jbc', 0x3}], 0x7}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0)={'syz0', "9a21ac6f2fd9c85988276347d6a63728f0e8800824beab4237c96b28b1d913608634c477164acf7af917e6c0b98b924937178f81b74a3756b976b2ff7fae1b5c35c33b40e906ae4d94f3033ed1bbc2c93968713abbd5c139acde0bb17c7a830ff15bb9aa57c90db5b26e10c1f96e1fd8e0c8c8"}, 0x77) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(r0, 0x9, 0x0) [ 1297.131282][T24229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:09 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 03:48:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c75737465720000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000004493000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x3, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 03:48:09 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'veth1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @empty, 'veth1\x00'}}) 03:48:09 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000001c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) [ 1297.186219][T24292] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. 03:48:09 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x124, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:09 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0x1f]}, 0x8) write$nci(r1, &(0x7f00000008c0)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x0, 0x3, 0x7, 0x8, 0x1}, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000009c0)=@random={'security.', 'nfc\x00'}, &(0x7f0000000a00)=""/4096, 0x1000) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/123, 0x7b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) write$nci(r5, &(0x7f0000000000)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x4, {0x9b, 0x0, "2ff6229eeaa62bb8d2959e1d320f0403"}}, 0x15) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="405cfd2a00"], 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="4004000000b5458ff668d3115d15d6a340bfd4bb165ad1cc42341b71aaa1535e80672faef6904d965e5df8df5164b9960017503f7246ccebbef6d5256359181eb986b35c3aecb1e451c5d432f29a65786e0eef8dd1627809de0c6e5f6a8338414ce476d776116e99f3ef934f760caa0e2f37c3b70dccc699b196b7854122134b1a05179fb0f928c000"/150], 0x7) 03:48:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x290, 0x158, 0x0, 0x148, 0x0, 0x148, 0x1f8, 0x240, 0x240, 0x1f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@cgroup0={{0x28}, {0x0, 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) [ 1297.232421][T24287] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1297.246559][T24277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:10 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x5000000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:10 executing program 1: sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x4004040, &(0x7f0000000380)={0x1a, 0x321, 0x0, 0x0, 0x25, 0x0, @local}, 0x10) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000637c0)={0x0, 0x0, "2241230bde8ade2df4468ed98b7a43ecf59ac195ab40553c68401e328b7eeffb61f977c7625af4ee3b3ce2a551be9843e422adb3dab4d429278600047aa9a077f4da212c421c49330c3973d4a2298f5fbbac2a49c0df9416f263ac52df41f6dd022b841d1765bb5f731784eca8893ec31e40dbc250e411a7b89fcb50fbe689e6da9893e2555dd8407ae58f36268ef82fea2d70c24b8b9313cd1871b51707f79ec720ab4f124e51cc980508908ded212d79e503581fc569ece5be1b73f32681fed18d0579a4c66198f8d45f5ef647e8d689855da1ac3301a113bae5b13c3e8d8c359b38a32cfc6c9ee6f2ca3136a666ab8a3f93f7b83534dbffed5ba12b3531a2", "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"}) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={0x0, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x0, [], 0x0, "7464fbe08eb369"}) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 03:48:10 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x100000000000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000340)={'broute\x00'}, &(0x7f00000003c0)=0x78) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x2d) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000200)="df", 0x1) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 03:48:10 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0x1f]}, 0x8) write$nci(r1, &(0x7f00000008c0)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x0, 0x3, 0x7, 0x8, 0x1}, 0x4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) (async) fgetxattr(0xffffffffffffffff, &(0x7f00000009c0)=@random={'security.', 'nfc\x00'}, &(0x7f0000000a00)=""/4096, 0x1000) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/123, 0x7b) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) write$nci(r5, &(0x7f0000000000)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x4, {0x9b, 0x0, "2ff6229eeaa62bb8d2959e1d320f0403"}}, 0x15) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="405cfd2a00"], 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="4004000000b5458ff668d3115d15d6a340bfd4bb165ad1cc42341b71aaa1535e80672faef6904d965e5df8df5164b9960017503f7246ccebbef6d5256359181eb986b35c3aecb1e451c5d432f29a65786e0eef8dd1627809de0c6e5f6a8338414ce476d776116e99f3ef934f760caa0e2f37c3b70dccc699b196b7854122134b1a05179fb0f928c000"/150], 0x7) [ 1298.134955][T24327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:10 executing program 1: sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x4004040, &(0x7f0000000380)={0x1a, 0x321, 0x0, 0x0, 0x25, 0x0, @local}, 0x10) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000637c0)={0x0, 0x0, "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", "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"}) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={0x0, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x0, [], 0x0, "7464fbe08eb369"}) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 03:48:10 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0x1f]}, 0x8) write$nci(r1, &(0x7f00000008c0)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x0, 0x3, 0x7, 0x8, 0x1}, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000009c0)=@random={'security.', 'nfc\x00'}, &(0x7f0000000a00)=""/4096, 0x1000) (async) fgetxattr(0xffffffffffffffff, &(0x7f00000009c0)=@random={'security.', 'nfc\x00'}, &(0x7f0000000a00)=""/4096, 0x1000) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/123, 0x7b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="e3021e1f817750dd45e724024696aa95078ee8c78fb4ef865b9fa5c99303f960e2de783a7db14afce6410afd15718af8f7e3b668565b543debe7f1fe2b76be4ad40e7e7db9a9e0cfa1ff6ba9bb317e661d0eb3822daaea8036041c2e52969ef6e6b7295d6e407dc0066c3801bfa7b297f839d876e5374bb33f88df87bace1109d61ed69f7dd91f744e41199c51cd5b6c35e0bbee7d1bbf02ed06ec7a5adea77bb3b1919151841d6f53e576dbe1d47ac94b4cf430706d8b3bfaac8b96dd9814f74dd326e7fd1a82894df61471321cc9de478c2c23cc1357c6293f362be583eb153fdc277fbb088d14b97b89bcbc34cb007bd4c6b1f43b72ca34bc2a90da9ff538e0413924843ba4107ef3de5a474dbf3276da12c785baefa3784c3dd0ceee9f2ff5a146ca510e22ad58f26168ba716f41e0aef2bb8cda82e5d4ae048143753c2be1bcc83c885210af2f42108ba59a71cefb2ddc3dd8a26cc46a92818da12881ef10293702a5b3cafb53ae2c923d89a4dba5093fcffd76cb519b8973436784bc633425536db2aa312126827aa4793fb7527dd89d106fcbe53fff5aa49c4693e441c264ab6c23a1d082d9f4e8e662ab3d137c89bc166c7a12750b94fd1dea1e2c9630325be25d4a02936cadb8bd94d215b4218e4cf6b345077c05ace1f707c1d98e792ed37ef69dedddd6fe89fa2e21c90cd6a092a86b50daba6a6d5f50222952d2e1090a17f1b7ee92d3d71e09ecc121813855ee8ea25fb2a7bd5f07da98a165127e94d25127514d0479c9ee64263b33619327af47558ca9ac9abedf918967d5946c5924324559c6ad0d901064bc7f68ecc418757be41e4afba04c7bfca41c0d55d11a4c5eb42980b2ac8e94c7244bbe897df8f0c6b6953a269af877c09637e986b91e43bd814773b193a58688b4f27cb447ea8da9c906e81c091781a51a388a8c61fc5557ba509b873e6a0360cec5f9024f75e6d9160d220687f5223a7c00a124cba5e62a56ea3a18e24395bcc59db624d008a94019a9fe421c4c35738ca6dbeb"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) write$nci(r5, &(0x7f0000000000)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x4, {0x9b, 0x0, "2ff6229eeaa62bb8d2959e1d320f0403"}}, 0x15) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="405cfd2a00"], 0x5) (async) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="405cfd2a00"], 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="4004000000b5458ff668d3115d15d6a340bfd4bb165ad1cc42341b71aaa1535e80672faef6904d965e5df8df5164b9960017503f7246ccebbef6d5256359181eb986b35c3aecb1e451c5d432f29a65786e0eef8dd1627809de0c6e5f6a8338414ce476d776116e99f3ef934f760caa0e2f37c3b70dccc699b196b7854122134b1a05179fb0f928c000"/150], 0x7) (async) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="4004000000b5458ff668d3115d15d6a340bfd4bb165ad1cc42341b71aaa1535e80672faef6904d965e5df8df5164b9960017503f7246ccebbef6d5256359181eb986b35c3aecb1e451c5d432f29a65786e0eef8dd1627809de0c6e5f6a8338414ce476d776116e99f3ef934f760caa0e2f37c3b70dccc699b196b7854122134b1a05179fb0f928c000"/150], 0x7) 03:48:10 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getresgid(&(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000)) 03:48:10 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000000010000000000000000000000000000240010800800014000000000080001400000000008"], 0x38}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) [ 1298.245885][T24361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1298.341186][T16750] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1298.406672][T16747] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1298.450739][T24395] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1298.460188][T24395] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1299.012924][T24357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1299.028651][T24369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:12 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x124, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:12 executing program 1: sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x4004040, &(0x7f0000000380)={0x1a, 0x321, 0x0, 0x0, 0x25, 0x0, @local}, 0x10) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000637c0)={0x0, 0x0, "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", "0461e5d2c4f0a7e55e8da23c9d25a88e55ed4ee6725e8900d700ed7361d1613d30f8ed0c93de38e16f860e807a3d85994448310211031301328ff27e88dac58db2ea329209baba8a8537abfbb9744862ce0b24cf8f7bdb011213b9a2fc267432a16a9f343e761b2f98c43daf8ace304fa88aee4af9910264fe40e37ac1a2dd8d4cbc40d1bb0d993cd916a59169e91a0f15a29f8ffcb2410cdc7a9f99e65ce8f25712e548598e459191808e873f43729d3bc8dd66e5b68b1cc5a2e2370c933c426309e46a8bef902030d098f0ec9acc90173e8c694eb7ddcb3f2f51334df41b1826ca80a9180e718e2cd9b8c4534e5821f1992890440d8a85c0e79a66703144ed8593e722ea5998c429e77921a5c0f70a53157d5f89f11a42efb4e4ade913eaaee7eb0f2c1171fc7e540bfdab8b97d3857eba46625dc6c99c5cfdb04c58e7add074a142f7cbbe4bb296c6b10395e3dcbdb722902521a85b8cd504287a1dfb98544059ea52c3d609b58c8c57a59797e709dde2bfdc9d7f944ebb17b438118345f7b1037fdc853674a8b6bcd9265ee34f9068009169f9420e9db683b61d85430b465132ecd39b362616af050afe54928632b337a7fc3abd3a9770d3776c896ac78fb4a1833ddafc3b77c54fe1a6554c6efe92481a8c222bbbe11c175a7fcb842eaee67417cde3334714f1ce28811d7a65dd63b25e9477308027a634d0568c73f9a7333febf42849151b13ad08c7df56359c0d4afcd308a9740cb7506977f233c670af197715575d517939369cbb376f708b5b1aecb13fcb56aeba939889e027d076b17b26e5494f90fbd302635bd6987ba488a9d51ef6b819ecdeccf753bf8423e01f9cf55416c98db91a7840c5a0c589ee418f405cb04cd7e1b67a00b876f8d51701cbef52bad56003d5ca972e75961d8940e30591e09938a637a93b61012470027a9a939a23b4cd93d4627e7091cea5d95276017b4e7737382a68a70624c9c5289c526ce67256ecd35cae82013abab9701aa3eb7ccedd6139b8a8caa24832dababbd31ad699bc6795f7c1a8c468e59343508504137f253f238e90670edd066dbdf049fab722bcc212a835bb0f99fe11356f11a6d0aab365dbbdf5e5155a1c9899a5f1b488c399caa5dd50415512bec4ddae3c83c5cd352891a88a69eaaf53889656dcc405c0b15a83877257ecd73849c210d90b6af2d3d550e36d68d48d1b8500386fccbf778f7d43d457ed9d13b68e76f69dfc7e46310b7d6eff252ad88a7471d950bb51ceadcb2bedb3268b504a7e54d2482e4c198472bd018516f0162367922b83dbd14f2b4bce6de8acd045dee228240bc0b5437f41a398fddd9c6c2a23e6333cc8c551582cc4c4810d3f9e0cd3a20b5c2e096507a4a8ea10e6938580b26b73998070b3438517f691cf298698c343bb4c3c1419a8591e19aede2e08732ce5763c59a04aa53cee28988fbca0633820f4984535745d5432e51fa14579618dc6d6f24e81cce52b2b2b9f9b3b62c81b2be1c07ed7b37f7ae6bc37cf0dda406caa52c60966f9144a1a60d00c87641430eb48b4713c3640d901b857c8e35fd1e07d01fbce33b307eee8feeb34482ac2b7934b3543d468ec9b35933ecfe0d0da273e906eb353db98aa45b40bba5d9a4916d08bc602fb1d255b85be863c06b321c130cff82e779ca97f45c064e1ed8891c8ef3b00a1d18a6918299b643b6c5468bf01c5195fd77ed1385b1bd9c27e61f618647573997812283ae23fc53a84387324d56efaafe9dec60b7972813f5c2aa30af24e782b600aebeabcc031f3d04df69a3edd4ee760c8e63b2e81971e70fcad4d7e5c78b8a71781dd6657d09fb486658cd573617eb78b6130b0e06821db0033d2a869c16f1d5e2d1fe4d3f542e46e3c83d6fefb9717931a1472a864fc38f26e84bd3057da888c3937d9abc7dfe98dd2d12135436c93f8f8528136746762e171064f8fa8cc78e719e3acdee3018f64c25b5d8500bd076e32917985d593e19f95b7d57a14348089042953d01ef569b022e06dac50ccc2ad78a8e2f81672133ffce3d20ada62204a72f963b329386f080e92005f08bf196107aded8189014f23e3dfb69ec197a6088a4ea75a41049b09d667f2b531c46726dd54279665518acfb6c7f61d9c47c86d51840cfe8871557f92353575294a7a8c56ba57a46c0238af2f1ebf499e032adf098ad42b5e348b9a209480bb243e0aff4446a2e865103dc059089731a16ae4bf30091bc1c7fca65cb29e4542e9322261e3441675a21fc87d317f3e223a0fb0bfed392d20879204ab1f54fafa89f7242ec82860713a847f4dc6f3c6ba7a79e1f14d2b38a0d7b9e0c46f37dd42de29985e13440e4b791e63587fed3d1e03d87186e8194db155e26e210c400a9c847a2d94d31f8924dca55a7ee10e28211e8c02028679613ac1f9d2e51f7ae5cdd80e1628395af74ee8726331c0a1dd36a3dc2806fd3c412b5069d2294a2270245114733eb3cf02b2149e9ee41fa6f3b8b72ce28c816213add26b04ac91e696ee4c14e371ed974470e075fae74782713517fbd4e4a48055bbe0d957a16e31e4d8a97682fc1864a5adeedc9681b3840af3549d50333927856722ea48b1e52e7791e18b49aacaaa7c9c0123264a66a5edbe6d4a3d0e4b9f054868736cbf17705d8d0a9bd897fb1cbac53ff88fb2f99db073b2310fa50b2f7f3111ef0ae5d99b66273932054322fd0ca0c2b3ba149618a09fb1fb87c67ef718048d5e8d9fdb56eb39b51b6c8c9b5ac2b2ad8dd5dca5c97061760d0766cbacca5103c5332c5003436c8eb285fb5507afd5a124db43ec6f098d9951f6300ce538db4f77d6258d1d26def4aa4b5b9776c216bf310867e11f9d8458d19e7868069f21a77e4fc1c48c53438579d95a35645b291fe6ab018f63f071516d5f556b504a6ea94f7e097a48e179f5315ddb919101dfbc2ffc3b8124cfa56f4f7f0c4abfbfe6b189e56ce9a53a3bb8bcc32d8761bdeab8adb9ff78dc4c14d9aaf89a2ed6a9040e56a2b97f9b1b1708e8d693c8a244714ba1229cded6b9fc90357ae221cf4818f9ca93af467958d4b1bd3154ecae17e4414fb063ee70cd08921df1364c3dbfd39c690f6db2dc5b89d2d45d6b0b946dba2355dbbe1f1979264966db59c5c87b4944b139f4309fc4fa599a3bcf8e2b1e05d58313f91f16bdbee66fa3d2278da8878f82e94b7acab1e7b632af09751a30b2fab2cf5612cb3c29b665313375e52717f82d5215a8ebbb21ff85657197f22b7bc601fc30d0edae71cf887c5fd3969f1c23f1cbcb7b7430c97f679698b0639f32e00c813eaa587e85561d375a18d2bd52488f59465ef14921bae38d32db4d71d384506e0513dc5ef1689a49458f9a0e8f56bd594ae60fcb9828bc1ce6317347897a093eea3bf0d03212ddcd7a141e5d244aa34391cdc2af627212319247c67d36f58f4c4633516dad7101f06a7b72163ace8a0095926502af93dbc8bbe0c8dac0f7c3b375129f9ac8d310e3a80a10dcd62d9014f32e7ca683c122fed6767f8eba42d3633291e013772b684046ff0d5c2ff4df68ec95853ef7f0ebb2c6d0332d6a3a49967f641a6963e33ef92e018d1ebe108752aaadfe04f14422f1cc8e3797d4a4cd09f8de184c312e06ec311e61432e41fa2e4d34135a3c235583d167826b4040ff35b73a8501ca1a7598a27de83eefaab7320f5cd1367230a179cfd1dae87c8351f73a65fb76a1f2585bf5397b6e1951d3123292661fe46b41f47fa9ebc32e7602bee9add6801c05871288377ce2f1d9f812b8321c6ac56470b95e0c15fd1a5446dec4b59d671fb1f11f7c5206ad2ec0dbfc35ec6d8c256a342e77cc395dcee888897872df79db598c76f79289cde817997c33112db6a3b1aaa4ab4a4f822777502cf3cae87937b83c041fa6be988885d583a9aceab4c4345cbc2cf516f29e7ea443575d628dd014e121ff038f07cad34ab6485cbfa43c3740a905c26e484113ec4671c426254d581f7cb6950a81dc85ddc13a98a313a5cc69d67b5d3c6719b254f44e63f2d140acc727aa5f100afbc32a4aaf81ec6db8fcca7f0dbcae9b39a2790e45da98fbedd761d5eeb5f9f1e1a9d6669f26211c752758c9f2e864f7351a4e04e21f40d8ef6ce7a1c8154807e72041cd3a5dde9f00849c20c3ebd7afc3fe5a37bd10b0a2c0e39ccad131c96746a9ad8c3db6febe21023f24fbc9c3da317f2ee10f114b5ff5c0b37abe12dac9b38b42d26f883d77a2987672a86bda1248f15683b724e160c9807e25b8caa873cdcabbe1fab5794aec4ae9ce4ce623f58e18d11bb7fb199826c624c7389e0b51c0287f3ad5bc5f1121acdd9d02c8dd50fe8d87c0c8e8f788784c1be9b4169f4475d128df74ee6baae66f56f6f23624c4c3b0e910531aab1a3f0e0cb0d589ba6c5bf91a4089d3a2e9c22c5f8df7de8d7a444459aaaecaeb4f51f7f6f8809adb6cabc0f524bb43df893f0fc82e63264dcd96afb3ce45b772534b7c1389e7542c933830499b39f67a7dfc44efb9084b818948e655f907bf5fa8ba761c3e9dab2ac6597a3069938e4722d2615d6b9cab1945eb97a0e8f2382ca0b1795e355e7638dc2b0591607376312fca36b53223a9d6093fb64a2b8046095a7d2aabfeaa254dcbeb40040fb5d38ea7c43939dd31cdc7c2c714a97f97981c99fcde6a6620539351b56a14060825873f025bf49b9371fbd93949b1f7acb4363a6bad23d4308b95c6689809bad1f69f9b3922f0c6330399c7bcc6fe1ca95d68a3632274769cb1cfac49983393bc3ecf704e9bcb38a6ec7b58eb003c729eec6173fea44e5f9186e5574e8ffaa2066e6f288792a1fbbbeee21d80970667e9e2682ce25f8c7fc46ea829537471ed66e8cb1820b5538fe624bb45458c2597ff2bc8ba2ac36b9a1919557c4c7231047bf32c18a584f629fb4c476369d28975442b8934fa34364b20959dfbefc1fe400e1455a2c70943511dc26d6ef77a0a7480b44e219bb2d87d486cb1bd29818384885ee50ade1a4a6ee981d411ca4678c11f66764e8b60040b0efb350d6c75a1e73696563e9b3b026530e42dc5d1e34b231854847cffb6d5b3ae6e3baf657b1b2080e92cd9d3e120cb400a9edeb8be1bc0deb356691bb847a891db77669277a7f9d123a754ee4df1c15dbfa65ec41bb4eb8ed6d7f636726303d7b13d3c806a3a122ffdfe821fdb4150276fd7e3e4d650c38bfdf6e775a27b55115a3358efa9777b56558d4f9c38567fb6e9326bda3d84c40811020a272c662918a190173e60cdae6ba1148ae689516378a6939ac1a61cdfcf67437e0f9c7c76c4d7b9f3245ef745b923b5c944c3639a726e6333aaa29044f78168a01fdb932ba54956a59f4015436afa324a668b6ce1c8caf6f9a37e7b8b44e8079f"}) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={0x0, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x0, [], 0x0, "7464fbe08eb369"}) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 03:48:12 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:12 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x6000000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:12 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x200000000000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01100000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}]}}}]}, 0x40}}, 0x0) [ 1300.281928][T24318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1300.320608][T24423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:48:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_XOR={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '%'}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 03:48:12 executing program 1: sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x4004040, &(0x7f0000000380)={0x1a, 0x321, 0x0, 0x0, 0x25, 0x0, @local}, 0x10) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000637c0)={0x0, 0x0, "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", "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"}) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={0x0, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x0, [], 0x0, "7464fbe08eb369"}) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 03:48:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@mpls_newroute={0x1c, 0x18, 0x0, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}}, 0x1c}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000000100), 0x4) 03:48:12 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x2, 0x0, 0x1, 0x27, 0xffffffffffffffff}) [ 1300.330893][T24423] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1300.351099][T24423] bridge48: entered promiscuous mode [ 1300.357526][T24423] batadv_slave_1: entered promiscuous mode 03:48:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 03:48:13 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) setrlimit(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x1, r0, 0x1ff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000540)={r2}) [ 1300.422915][T16747] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1300.554905][ T27] audit: type=1326 audit(2000000893.109:9001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24454 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd065644ae9 code=0x7fc00000 [ 1300.579237][ T27] audit: type=1326 audit(2000000893.109:9002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24454 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fd065644ae9 code=0x7fc00000 [ 1300.603313][ T27] audit: type=1326 audit(2000000893.109:9003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24454 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd065644ae9 code=0x7fc00000 [ 1300.606891][T16747] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:48:13 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x124, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x22}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xffffffffffffffd0}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r13], 0x20}}, 0x0) [ 1301.147779][T24451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1301.148574][T24412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1301.173388][T24459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:13 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 32) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 64) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (rerun: 64) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004e80)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 03:48:13 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x7000000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:13 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x300000000000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:13 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="08b159476c3d3064b207f6d88250e47c14588546b7573169bd7f81018a8de374526cdee5cb0c"], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:13 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_nat_t_type={0x1}]}, 0x78}}, 0x0) [ 1301.190007][T24469] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1301.194527][T24471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1301.233447][T24469] 8021q: adding VLAN 0 to HW filter on device bond9 03:48:13 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_nat_t_type={0x1}]}, 0x78}}, 0x0) 03:48:13 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_nat_t_type={0x1}]}, 0x78}}, 0x0) [ 1301.245510][T24469] team0: Port device bond9 added [ 1301.261853][T24469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1301.278368][T24469] veth1_to_team: entered promiscuous mode [ 1301.286041][T24469] bond9: (slave macvlan5): Enslaving as an active interface with an up link 03:48:13 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_nat_t_type={0x1}]}, 0x78}}, 0x0) 03:48:13 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 32) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (rerun: 32) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (rerun: 64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (rerun: 64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1301.287473][T24482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x600) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) pselect6(0x40, &(0x7f0000000500), &(0x7f00000000c0)={0x3}, &(0x7f0000000580)={0x8}, 0x0, 0x0) 03:48:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f753010000000000000001"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) 03:48:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv4_delroute={0x24, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xf}, [@RTA_NH_ID={0x8}]}, 0x24}}, 0x0) [ 1301.322431][T24469] team0: Port device bond9 removed [ 1301.333340][T24469] bond9 (unregistering): (slave macvlan5): Releasing backup interface [ 1301.344057][T24469] veth1_to_team: left promiscuous mode [ 1301.351509][T24469] bond9 (unregistering): Released all slaves 03:48:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}}, 0x0) [ 1301.401880][T24526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1301.412581][T24526] bond0 (unregistering): Released all slaves [ 1301.573935][T16741] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1301.626213][T16741] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1301.667589][T16747] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:48:14 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x8000000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) 03:48:14 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="08b159476c3d3064b207f6d88250e47c14588546b7573169bd7f81018a8de374526cdee5cb0c"], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:14 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000000)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x1, 0x2, 0x0, 0x40, "9cc47ebb96bde51aa98e6ce430"}, 0x10) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) fsetxattr(r0, &(0x7f0000000bc0)=@known='trusted.overlay.nlink\x00', &(0x7f0000000c00)='{*+#)%,}\x00', 0x9, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x0) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000940)={0x1d4, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7e}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xb8}, @NFC_ATTR_VENDOR_DATA={0xf5, 0x1f, "05417ef05f45e83a1a10967bd01c25c8226478b5cd5c3a15181f8785054a031ec8c63150deee9df160c8245f73140bc5a7a7479c63372401ccaad3d77a3b45ca3e4cec3f5e2c069eff496878b07e20cc9f6e371fedfc71d88888e3284738dd628cf5a84ba33cf521e147e3454139dafe97e45ab270f8eb554ca6e8aeb248b7cc984606efc69de19a0d068dfb454f06b39cb5fd93cd89d247791e56ec5971bb957faf401975c2967e5ec8a5cbf5afb384f2db75117e7bce6c51645e1f047c1a4bd9d00639b0c4ce606c090a744aa0289a4c91832c0eb4ed7adbe3858942b5dc59a8b1d138b6580f2b8df6bc7904e8b825b3"}, @NFC_ATTR_VENDOR_DATA={0x98, 0x1f, "677db577a8681fb6ac87e445ff88bfc7dd89157e4c48a997a444f555042547bb1f5986ef4d29ee7307791f948bf218920e29311d17a9b2fc4a6c0caf59559e324e38cf0700b18e9c9c9c7f588cf14248f194831004e1654e6156a6567c7ad15e9ba0b93d3a0bb523ea03ac11601def7abf69196d43d1ef5e158dc8a9fb27447a46d9f835e42409548291e3662252570b4bfa3df6"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1d4}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:14 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x400000000000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:14 executing program 1: r0 = socket(0xa, 0x6, 0x0) connect$can_bcm(r0, &(0x7f0000000040)={0x2}, 0x2) 03:48:14 executing program 2: r0 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRESHEX=r0], 0x1, 0x522, &(0x7f0000000a80)="$eJzs1b1u01AYBuCvaSiBqTNiOBILU1XYmAhCqVRhCQmUASYiNSwxQooXJ1MvgQvgwhi4CJSpW1BlF2jFWP+oeZ4ln/LaPuc9g/3p8ZfF2dfi849v32M03ovBOB4MLvbiMAZx5TwAgLvkYruNX9tK13sBANrh+w8Au+f9h49vXmXZ5F1Ko4jNeTktp9VvlZ+cZpPjdOngn7s2ZTnd/5M/S5Xr+b14WOfP/5sfxNMnVX6ZvX6b3cjvx1nj7QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLcdpTSMiJRSOvz776Ysp/tVfpSu3Mir6eQ0mxzXF1zPh/Fo2FoNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BYUq/Vilufz5R0bIn5Gy4uO6iNtuem4XrYvJ9/k8LKJJ7+IiL4U7NHQ4UsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVLFaL2Z5Pl8WXe8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiLYrVezPJ8vmxw6LojAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0I3fAQAA///PCC46") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="4eac2e2e"], 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) [ 1302.056957][T24483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1302.071784][T24520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1302.081548][T24537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:14 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fstatfs(0xffffffffffffffff, 0x0) 03:48:14 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="8ec1cc54649640be1983f79c5bfe88cd6a6afd5570ab59578db363f4892559f334d436138406b699de69db13fd73742880", 0x31}, {&(0x7f0000000800)="b0fef28adda655a00a8ce0bb7d504206000000000000001abe0a88f67472c3cd975c9884ae01084df2b7f556e2a043b74efe85a302fae395e8a051934cefd1a1f19f89180ab1fe20a7e4198d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed23adce7939d37148e79c6b485db91083de9905e7de49fd8837cf3792d697bf8b29b9c6e8daee80e86778a4a2426e6459d4a30ad36b138b31570d8342f7094ca640633ba7e0793a6e21acbc4749413f629ba4de97b84ed9acc06a3d29ef68cd6d32fc4398429c472891f8e244d27a4b6241083efd4ecd2c92d91399de6ddcafbcd07000000000000009d1b7d60c898340102268c474bf8b7db27c8787b34cae8a9c676907ec017733c1ece82e11b99a4bdc74c8d9d1871be6af0fef62b529af9ab1f37d60a2f967d715b301856b033a7e7dac74416447a090f7b6693bbd2deaf5eebbfc9adff299bafcf57774d0c993f5524409672b4f35409a8720dc2b78f83198096c60126f911fd42c29cd6fa311e2c8daef3927ccdc90436b2b6ee4c79ff80f6938e0560d9d8e925bdc4fffffffffffffff8d9b7977fff6c4293065de2ff26a041e67954f68871d010d377f9ba1ee447b5bfd5b9d3711b3ea5c6361a07d4d46b8b406091be9433f950613083805aa4ae31e3aef57eb8d299548df54dffb7c4af7f00a869c6bdbc6c2bd1a83262981638ae365b2611d2b50c5f000000d620e2a52db4283dc9", 0x216}, {&(0x7f0000000740)="1b3b351333f3a3b13679144b7cd873d2ed55c75dde5829aceff19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1da5b2411d093471a30c77ca0d06d1576a43cbd422dd9fc5aeeef4a0a53a5d93a9b5b000bba7223848aa6b97abe164077f7737311f187ffdfefdae072f6c3d59bf3a7d156511c54fc3", 0x95}], 0x3}, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) 03:48:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), 0x4) 03:48:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), 0x4) 03:48:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), 0x4) [ 1302.189561][T24579] sctp: [Deprecated]: syz-executor.1 (pid 24579) Use of int in max_burst socket option deprecated. [ 1302.189561][T24579] Use struct sctp_assoc_value instead [ 1302.218641][T24584] sctp: [Deprecated]: syz-executor.1 (pid 24584) Use of int in max_burst socket option deprecated. [ 1302.218641][T24584] Use struct sctp_assoc_value instead [ 1302.250924][T24588] sctp: [Deprecated]: syz-executor.1 (pid 24588) Use of int in max_burst socket option deprecated. [ 1302.250924][T24588] Use struct sctp_assoc_value instead [ 1302.291566][T16750] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 1302.300067][T16750] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1302.300943][ T27] audit: type=1400 audit(2000000894.849:9004): avc: denied { setattr } for pid=24554 comm="syz-executor.5" name="virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1302.338844][T16728] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:48:15 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x9000000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), 0x4) 03:48:15 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="08b159476c3d3064b207f6d88250e47c14588546b7573169bd7f81018a8de374526cdee5cb0c"], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:15 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (rerun: 32) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) write$nci(r0, &(0x7f0000000000)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x1, 0x2, 0x0, 0x40, "9cc47ebb96bde51aa98e6ce430"}, 0x10) (async, rerun: 64) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 32) fsetxattr(r0, &(0x7f0000000bc0)=@known='trusted.overlay.nlink\x00', &(0x7f0000000c00)='{*+#)%,}\x00', 0x9, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x0) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000940)={0x1d4, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7e}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xb8}, @NFC_ATTR_VENDOR_DATA={0xf5, 0x1f, "05417ef05f45e83a1a10967bd01c25c8226478b5cd5c3a15181f8785054a031ec8c63150deee9df160c8245f73140bc5a7a7479c63372401ccaad3d77a3b45ca3e4cec3f5e2c069eff496878b07e20cc9f6e371fedfc71d88888e3284738dd628cf5a84ba33cf521e147e3454139dafe97e45ab270f8eb554ca6e8aeb248b7cc984606efc69de19a0d068dfb454f06b39cb5fd93cd89d247791e56ec5971bb957faf401975c2967e5ec8a5cbf5afb384f2db75117e7bce6c51645e1f047c1a4bd9d00639b0c4ce606c090a744aa0289a4c91832c0eb4ed7adbe3858942b5dc59a8b1d138b6580f2b8df6bc7904e8b825b3"}, @NFC_ATTR_VENDOR_DATA={0x98, 0x1f, "677db577a8681fb6ac87e445ff88bfc7dd89157e4c48a997a444f555042547bb1f5986ef4d29ee7307791f948bf218920e29311d17a9b2fc4a6c0caf59559e324e38cf0700b18e9c9c9c7f588cf14248f194831004e1654e6156a6567c7ad15e9ba0b93d3a0bb523ea03ac11601def7abf69196d43d1ef5e158dc8a9fb27447a46d9f835e42409548291e3662252570b4bfa3df6"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1d4}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1302.951754][T24550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1302.970659][T24558] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:15 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x500000000000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:15 executing program 2: unshare(0x60600) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x3, 0x0, 0x10) 03:48:15 executing program 1: r0 = io_uring_setup(0x6f54, &(0x7f0000000000)) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000280), 0xc) read(r1, &(0x7f0000000180)=""/52, 0x34) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) connect$qrtr(r1, &(0x7f0000000080), 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 03:48:15 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2, 0x0, 0x0, 0x13, 0x4}]}, {0x0, [0x0, 0x2e, 0x30]}}, 0x0, 0x29}, 0x20) 03:48:15 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000001080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) pause() [ 1302.993733][T24607] sctp: [Deprecated]: syz-executor.1 (pid 24607) Use of int in max_burst socket option deprecated. [ 1302.993733][T24607] Use struct sctp_assoc_value instead 03:48:15 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="15da02e517db1d36b6cfb030f2e4f28d0ce02d7c466dbf586897b9eb0331f034b9d89b2881ae696b8771e80d92b1b1fe4fd0d61406e8d34d9952d37da9d5401d00100d590a9e7322c6b8e73cc7c128dce4d0912b58fb6018d1e58bf786703062fd823a75f4f54d2023d53bc5ec6d8d42dc559d124c439a86132a"], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1303.138252][T24601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:15 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0x31, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0x10) 03:48:15 executing program 1: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, r0+10000000}, &(0x7f0000000340)) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) tkill(r1, 0x1000000000016) [ 1303.189633][T16750] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1303.367681][T16750] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1303.815999][T24654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1303.859324][T24619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:16 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xa000000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:16 executing program 1: r0 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 03:48:16 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000001080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) pause() [ 1303.994388][T24645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1304.235396][T16750] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1304.863219][T24671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:20 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) write$nci(r0, &(0x7f0000000000)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x1, 0x2, 0x0, 0x40, "9cc47ebb96bde51aa98e6ce430"}, 0x10) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) fsetxattr(r0, &(0x7f0000000bc0)=@known='trusted.overlay.nlink\x00', &(0x7f0000000c00)='{*+#)%,}\x00', 0x9, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x0) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000940)={0x1d4, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7e}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xb8}, @NFC_ATTR_VENDOR_DATA={0xf5, 0x1f, "05417ef05f45e83a1a10967bd01c25c8226478b5cd5c3a15181f8785054a031ec8c63150deee9df160c8245f73140bc5a7a7479c63372401ccaad3d77a3b45ca3e4cec3f5e2c069eff496878b07e20cc9f6e371fedfc71d88888e3284738dd628cf5a84ba33cf521e147e3454139dafe97e45ab270f8eb554ca6e8aeb248b7cc984606efc69de19a0d068dfb454f06b39cb5fd93cd89d247791e56ec5971bb957faf401975c2967e5ec8a5cbf5afb384f2db75117e7bce6c51645e1f047c1a4bd9d00639b0c4ce606c090a744aa0289a4c91832c0eb4ed7adbe3858942b5dc59a8b1d138b6580f2b8df6bc7904e8b825b3"}, @NFC_ATTR_VENDOR_DATA={0x98, 0x1f, "677db577a8681fb6ac87e445ff88bfc7dd89157e4c48a997a444f555042547bb1f5986ef4d29ee7307791f948bf218920e29311d17a9b2fc4a6c0caf59559e324e38cf0700b18e9c9c9c7f588cf14248f194831004e1654e6156a6567c7ad15e9ba0b93d3a0bb523ea03ac11601def7abf69196d43d1ef5e158dc8a9fb27447a46d9f835e42409548291e3662252570b4bfa3df6"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1d4}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:20 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 64) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="15da02e517db1d36b6cfb030f2e4f28d0ce02d7c466dbf586897b9eb0331f034b9d89b2881ae696b8771e80d92b1b1fe4fd0d61406e8d34d9952d37da9d5401d00100d590a9e7322c6b8e73cc7c128dce4d0912b58fb6018d1e58bf786703062fd823a75f4f54d2023d53bc5ec6d8d42dc559d124c439a86132a"], 0x4) (async, rerun: 32) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async, rerun: 32) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (rerun: 32) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xb) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xc, 0x4) 03:48:20 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000001080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) pause() 03:48:20 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x600000000000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:20 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xf000000}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1308.064557][T24636] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 03:48:20 executing program 1: r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040), 0x0) 03:48:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0xa80, 0x4) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x12020, 0x0, 0x0) 03:48:20 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f000000a0c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f000000b380)=""/4088, 0xff8}], 0x1}}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000003800)=""/4088, 0xff8}, {&(0x7f0000004800)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa, 0x42, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) read$nci(r1, &(0x7f0000000200)=""/100, 0x64) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) write$nci(r5, &(0x7f0000000900)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x7f, @b={0x7, 0x2, 0x1, 0x8, {0x1000, "8dd40d27dbbe1988eac435db0efe57a9f82fcffc29d980ca597758d8f6ce1571130f1dd01a5343a4face00d5e39f6383e1942c29c26c957695fbf6c57c699d69b60909514074df83e18b343d96ed56b6f9a5d35547bf46c167319c8552d50bf9e8959b8ce207b912c298aa6e26f932816eb4e00aca13d73a282149e21935056239c33d99b34cd907296eda06f0fcc1503dbbe26bcc4f923b16a0ba87967d9ec7908732b41d6fa5afb25c55110094e37a6d09277ab8a2714d2a094f479f3ef51ec53c21e8a131f5abf1e919d8fc829191c2eaf17de5ae34c22eca663e8680db37b1e01ff4d4d303b13805ea52a58fdca74d3bfc9b49f8d9bcfe7d8366ff9c855efcca38f865e30855f74f672ec3fc0848268a1f79338b176f261c136eaa16ff083895cb6b7b8265710ca268ed5b06d3f6d76170747670cfbe75586aa08f21d96f39057e30d6d3ccb36610ba5fdfeaac6e58141f961aea7006c75cd10e35ccd17abf4d286538aee19819727d97c249acd44c7b62019027d681749731e159fa5ca6e1f708158053ac60576415cf573cb33109fe0e092d93f16f1a85bee41765bb8c25fb1e46fe1dbed8814e4ba7e3dd1d7c958423347e69945cc0137dc1473db391a7db1f3dbe2541c04f93042d60a806fdc6e0412da83399cc0799116fce571099ee3bdbcafea248061064fc85bc4895481d8c2d8860d3c192a6dcfc74c1d65cbe347c621be0886ef4916a3a3cd2daace5263cba99b4597ce24243542c4650d63a14f068f5a3039b4d6ee8ed1ca279a8287ba5855970a4fba37ed532787dbaaa764e2eb413490d27912182d117d8c42f30a0b84bceac38b3890c6ba399507e5d3a43653bfb5533725acafd37e00c8d76caaa8e4a513eb8783b0f724b7365d7bac0e46a4c7c54d3cbd050746d1580bd7e3e3a0d21ca8216ca425c4e2a9139f5a5693b124f4e7d0c16d2fa4fc355d26e1cb532f951650644de250a1dd39d7cefd706113010063c387c56f46b81a4bb7abf214588e6e951956069e199761e62650a3fc0037af579823bc23be29f026c90a84e55d0a7a81a90dd5ea7cbeb92035a1025cf50404bf8068374effbedfd09a551cac85cf71abe52d699fde0b2da7ac8f9722247255bcaa9046dcb5b1b50afd8e29924056e4ea4d8c6c918d426739d7db05a089b9a5a2c745533a86828d8085a61f8b14bcafd0c23ca250fa4e8d0b35d232cfbd8b0b0b1b48eabd97399679658c783c462de6f866da39977de6be2f60b96ae5f76fac6d3a32a85dd775fa67a38ce922154dec2ed24914129bb15fd36592cb843b93ef79e4fca305317ad097be664fd7d5aa96938ee13dd2ecc5df921a4e9db025a5e8a13e7dcf89888b496e629c424817432a02d12baf0ee254cdb9e1720a0194e9e663dfef6b8cef669ce5a1697133dcf0da7886af25548fac6b768271cce4a7317a5c5d8695eadf272cf7021d7a6aaf384bfb48c6243886cbc353abc36f9a6e79ab5400012252c020e128380c5bf526375cd8f63760b06ddcbeaa8bf72d0d4ffd06cf0eddfd72d145ae3bc32c5cee63523fa2dee06fb10a4ddeaae651996741467aa867a185c8f49e0bbab60424968b571650a2e96d0ee2ea0dfb86c93db742d58827221bb118164fb0d5c9f331254e4d06b6bce47a85a10f0dc6025af1dc0d66728d014b6b2c4fbd2edc2658acc708e87ea3051d9d69bf6b1fe88d920a862b955ff9cab48dddb66ad6a87986e946a4dac9c438c23eb6ae3fc1a6ea1e9a88ecdf18774f9e30a645b3bcc981c555aae3a18207d07405206f888a2c3ff7fd2268c1e8bb49e3ceca50c4f992584dc4fc79bd91deaa4fd747c8190eebe4728e9d7baf9c0f830e356ae0a1077aff9dd7c818cd1eb4aa169f4bfa22071788ebf86c3cd58ee50ca26b2eda6e0387a510dc7a17ba7eafccd4c86a219a65e3ecc58951e27801c01b163f5f6fea1e68fff2fe1f26b2e25fd5c14153d41245b83a5d365918d113c0f0e9b622c0a7f4fb89a05b7e0e27bfc5b38ebd3e5a8d8988b0cf93cadee3efddfc002f01182e8f836c21e61698ad4734b9b3ac556adcc864be59285a5213f399ebefcb24a345e47574f5ce50a4128dc6c4044c0bc4749a3751d47cd0b651380406d110063c98a77533d330afc6d90dfac053b0dc679597126c5d49913ec32b77047389469b402048928fcfc2dd0f55679c77c6ab90206713d0f60dfa92525ed05c79c96fc31187617826caa5d095b27d2b220d17cfae5ae8fcf99f7ca1ff30eea405937ea28707a870fa1fc56d174e15842206facb45d485f971f573bb9216dc2662cfa7914e8167f15720288a3e635a863f4eb61b333dca3c6f8d6c98d216f250f8240174b54a7dc496425c8065ba1a0851aa23ff8f4270e2a6bdab7b14e6ce93a0f19e83f8b94cb51dbe071d0e96cebe6bc1294ef6d965d4f589375d0355aee63f8c90f376877e78e2ffa3b17874967358feae0ea1416b3ea2bd01263c39bfe2851c624b755a543a92f9bb2dbd07e4f88166c1153a5eb9c035bf4e1649561f362b7ff0898661bd7b09145289bd66208491dd38b1ab28adda9d05fb683cf9202c2a558d1666c8d09aba3ca2d55c2697929b3067af94b8618002bfb784f91cf21b6bd852db7c77ecbe52a4831e24070162b93603072ca347906e2c889745c2980952fc57cfb4e83cd3ce6e6f314d70b11c0daa87b0903a75ea8fe49bd8163de668bbaa3f5722be3d581427a629b796b108f0341e338bdcd359bd028f321f4ac6bc738084820306f781cf20d565f9b4b3a35c1b2328e9eca6123e6f907f2edea1d4edbb31036d6fc968d314bffa4f632b60279350b3392ec1cbaf3c0884c5396580397bcf45f39ccb0b9a10bb38e601ed4e9fc366efc50e0b23de5dc8af1d8b03f517828eff94cdcadbb64c47fb5d8e0fd2e270eadd41fb1016936366668d4752105fb6708e9610ada3a8fdaa0df5f3cd24682619f1a0ae2ab5179ae3040d503d68b2a16cf04709fc44c0b2768092e3dd55cc383fe8629ee439f7e3e346399b1b74ebffd153277535c76030f987ecbd6f1fc00e9c8826d8b922d1c8f0c1801ddd3ae56d6d994801b29cb525c5318a83691865d379edb20bab26f780c9955a963ac6ac7ee6954b244ddd79826f967024dee8c36e4bca569900697732dc678cc5db267303ac61ba51edfd3266f9cee27964e12393d67441279c28e63fbd820131c42384391805fdb6e3681e0bbc7e4edf41c72a5d7b4e98748f71c9358bc02fb4959e403e476fa911b328d1d57ad735dc396fc640d175c90aa2c054eda94b40fc744f5f73746154c063f3064714eeeb13babb0efdc521d0015f4050aa23e637a5d64230ca719f5bf4d8cdbec2b8a00bf248bedf73b6a75ef0ca21f40ec8cfd6a229f8c5ccb1c65a1019fd5e5a7d90bc6a2fad5224a17c8bd54fd2cd5b9926810cd989755d14f3510773736f84ae5cf827b0686b5d0cf251b981c55c6caabe4e8c9ec4e0c8aee6559eca0dcb7a9efdac6c08e40caf76134882b4bbfa0219a559182e31d52b3e00b2936cded7e66429e84de1e8c0fac44cac204c6de1de3f000cd8d2109b52fb09227e8fa0408c696518c23ab467926c93d2c100a06a9d3dcbc9059bb547aeef7e559ff64e929eab7584e367f1a96367314c4f23f198725499a5e7b1272af7543ed5826375e514d7e8ae7c5c9bd2a026ad80269c032f0edbea1840a3f426de43b8ceab0ce9611be319e814f47615a7ba469d5718a72b8771d62b1ff760315e634b6529dc807e3bfa164de6750c79b0aa03b16a26ad50b4c0fad81e7a7f63d2b3479d2988e8d077598f2a4e3131bf9f4eb5a18bcc8b1e5298bbbd25806309c85d53fc5dfe4277d2fd3da21bd26afd20a1018539d8c1e1bec0d898b7d0f4d3ddf2ad888e4a24ecf38a0652c827fe4071b364d96bb64ea7d8b7f447b578c7562e940c4e5ecd0183a71fc98365e147f40530bd04dda577211a21b40b5398d7234e37a7c820ae8a32da33bde0a7fe6f239379460756097d817f06284b6009daf555d511932a3c6668824137130ac8d4caf16b956671bb49b59296e91a62afe0d4fab62464738eaa0eeb8d1ac96a07ce41921cec2d4e1cc62eecec02ce8db334a45d075358508ffa8c965ea7b2647fbda112c42c4607ea316e17874b12b225d48fee11fec4256d3cf475a3ac0e92c9897d28f48348fc69e992f45d8134f090620c212e9aba7a497b5dd6f294adf5e45fd6b06fac54c68ff2414092c3efdc14a837bef6fb219f37271c5f4f7d32b8653319854a8e82d8611770862a1b132c419d4b6565047c5cef25d34625a01bf81dd4146320f5b5d014197e3e655e56223ad20092eb964bdedb70f1c007de10043795869961802a7cdc988c5c8f9cc61ed9d38a51a42bd97434d163e598ee662d48cac5b9a27131df882e3497824e1fe52b5437c5fa9e13e6120bd61f07bfab45170783319e98f56523f9474cb74620651f5f7d3110727c239cbf64ca6260e6268f5ca80b8e53927c52186cd130048f639b9ab50541a9bea98ddf46460025c77f5e0874b69ba22550389c3bc06fcbfcb286e057b0e1b33e55d5cb05760e35a62976a609b667cbf1d32164f2cfad2db4a56625be39fbd4c62156fe2e4b66e0aa64e88e68d1b2a865583c87ebdd5a179bbd37c905dcdce7a80bb1318eca154469446e012c9a2b169038d7fd786bf1e2d5ac5b179c61b72d53b4129bec6b7c077a388d3802b1a470d01490cd2fb2a89085f0f91b638946ea0e74a1c99c1662e254fe0d2a454dc68d979fb2dcaa1be9e093def49ef969c5e0cffee11bc5446115b4013d2f5968730f6bb96d4315f7d30303342c4a55cae956b993ff66d37afaa7ee1ec442f2f67727d875a11e2e6af2bdd0eff184b27d2d117dded2ba9aae18531f5848569c209ab81b69f33371ed2f1a98675023033adaf025a3fa4777c8eb29260470d88274ad1f014b2c04b7e178ccc3695e1b031119b01c81cdbe0b51675f9224531738826641dcb062b515a59679a2d039687c7ad076ddd285310d8f8968ba5536a4f20a6015d411f54425dc5b4a4509a67a325b34d580d9a425d47b00afe8ca0c31d80c1e0bf3d3a663dc7f2f6be38ed0b4e6f9bcd600074bad2c6f3feb58fb2412a0be07c9b27f8c125fb621761ea69b488fba5232da86b58622dfcc05d8b1a308f21a6f8bc0e4185f5a3aa2b747eee33db244febeee472a5f132dd5f3074ad9a2e3b74b13d3963c7bc35307b0b6c7f25e949722509c0d470503c74958db19aac74e54fe5ef105fd17522cfc38384aac701c96bebeae3d65d952799cca6fbf6ee36491c3c06549ad41843f0f1b8e4553fe09a2e719429dfa80df2a525ef342b5f6269164ac3c7e9a3a8f4b65f6b32dbf181c8a2c14fb5a9fa90b15db5df8f0e8ae1f082cf5d7066ec0f16d4b761b31458e65e3bd9e6bb9ecfaca34120173bbafb0309a1736a8b24ea6e571a8b5454eefba7bd3d0e43d4ad1d4bf436fd9c0cc1d3996a9a2123e4c9f278a7686cb9880c439ff7da5afd573a10aec64fa8aba7ca7c7e2aac0e26ba2743de214c291a233d94f7ab947b34fd37ff4bad6421cefc516e5ff66c5ded37f045a11bbce6be400663d2c2aa15988756fc88226355cbeb3e2379c6b14b9e05ed9f120eda7ed27cfb894310445be5dd221c25bb342a039756a05d88fa62a680b808bd1257ca00e8bf9b4ae4de88d6454b070bc7ed6ed2a528846e480cabf8ee3ac18ebc1d8234ef4c7787343b2d28b0f2934d8a79e754f0b845b38b732478efe9e01862a3"}, 0x1}}, 0x1009) write$nci(r1, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r1, &(0x7f00000002c0)=""/100, 0x64) write$nci(r1, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r1, &(0x7f0000000380)=""/100, 0x64) write$nci(r1, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001940)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002300000034020000060000000800010084dfcc985b1feccd4b3eb6c6443c52dfc7f7bddb120201d41f69c9443ffef7a6d6ff1c4120d9e14120f89ccb2478bb7b7afd72a3b9c25946c7ceb3fbf4f7f494453d6f22186142a613ecefaa68f5b01817da393fcf15c91ac3c01e76ebeb6a50bdef6f198e5fa2be605f8f505e49c2", @ANYRES32=r2, @ANYBLOB="08000300ffffffff"], 0x24}}, 0x0) read$nci(r1, &(0x7f0000000500)=""/100, 0x64) write$nci(r1, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r1, &(0x7f00000005c0)=""/100, 0x64) write$nci(r1, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r1, &(0x7f0000000680)=""/100, 0x64) write$nci(r1, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r1, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) read$nci(r1, &(0x7f0000000840)=""/100, 0x64) write$nci(r1, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:20 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000300), 0x8) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="8252", 0x2}], 0x1}, 0xfeb50000}], 0x1, 0x20008800) 03:48:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) readahead(r0, 0x0, 0x0) [ 1308.094438][ T27] audit: type=1400 audit(2000000900.639:9005): avc: denied { setopt } for pid=24675 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1308.118557][T24684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:20 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="15da02e517db1d36b6cfb030f2e4f28d0ce02d7c466dbf586897b9eb0331f034b9d89b2881ae696b8771e80d92b1b1fe4fd0d61406e8d34d9952d37da9d5401d00100d590a9e7322c6b8e73cc7c128dce4d0912b58fb6018d1e58bf786703062fd823a75f4f54d2023d53bc5ec6d8d42dc559d124c439a86132a"], 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:20 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x78) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @rand_addr, @loopback}, 0xc) 03:48:20 executing program 1: statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000100)) 03:48:20 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MTU={0x8, 0x4, 0xb43}]}, 0x28}}, 0x0) [ 1308.184407][T24681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1308.246418][T24737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1308.301469][T24727] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1308.360533][T16747] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1308.416841][T16747] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:48:21 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000001080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) pause() 03:48:21 executing program 1: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080200000000000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000908000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=""/183, 0xb7}}], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[], 0xfffffd6d) 03:48:21 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x5}, 0xfffffffffffffd2f) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) r4 = signalfd(r0, &(0x7f0000000a40)={[0x8]}, 0x8) read$nci(r4, &(0x7f0000000a80)=""/90, 0x5a) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/module/pata_amd', 0x20000, 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000a00)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) read$nci(r6, &(0x7f0000000900)=""/161, 0xa1) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x20}, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:21 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x700000000000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:21 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xa0ffffff}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1308.929045][T24741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:21 executing program 5: socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f000000a0c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f000000b380)=""/4088, 0xff8}], 0x1}}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000003800)=""/4088, 0xff8}, {&(0x7f0000004800)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa, 0x42, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) read$nci(r1, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r1, &(0x7f0000000200)=""/100, 0x64) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) write$nci(r5, &(0x7f0000000900)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x7f, @b={0x7, 0x2, 0x1, 0x8, {0x1000, "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"}, 0x1}}, 0x1009) (async) write$nci(r5, &(0x7f0000000900)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x7f, @b={0x7, 0x2, 0x1, 0x8, {0x1000, "8dd40d27dbbe1988eac435db0efe57a9f82fcffc29d980ca597758d8f6ce1571130f1dd01a5343a4face00d5e39f6383e1942c29c26c957695fbf6c57c699d69b60909514074df83e18b343d96ed56b6f9a5d35547bf46c167319c8552d50bf9e8959b8ce207b912c298aa6e26f932816eb4e00aca13d73a282149e21935056239c33d99b34cd907296eda06f0fcc1503dbbe26bcc4f923b16a0ba87967d9ec7908732b41d6fa5afb25c55110094e37a6d09277ab8a2714d2a094f479f3ef51ec53c21e8a131f5abf1e919d8fc829191c2eaf17de5ae34c22eca663e8680db37b1e01ff4d4d303b13805ea52a58fdca74d3bfc9b49f8d9bcfe7d8366ff9c855efcca38f865e30855f74f672ec3fc0848268a1f79338b176f261c136eaa16ff083895cb6b7b8265710ca268ed5b06d3f6d76170747670cfbe75586aa08f21d96f39057e30d6d3ccb36610ba5fdfeaac6e58141f961aea7006c75cd10e35ccd17abf4d286538aee19819727d97c249acd44c7b62019027d681749731e159fa5ca6e1f708158053ac60576415cf573cb33109fe0e092d93f16f1a85bee41765bb8c25fb1e46fe1dbed8814e4ba7e3dd1d7c958423347e69945cc0137dc1473db391a7db1f3dbe2541c04f93042d60a806fdc6e0412da83399cc0799116fce571099ee3bdbcafea248061064fc85bc4895481d8c2d8860d3c192a6dcfc74c1d65cbe347c621be0886ef4916a3a3cd2daace5263cba99b4597ce24243542c4650d63a14f068f5a3039b4d6ee8ed1ca279a8287ba5855970a4fba37ed532787dbaaa764e2eb413490d27912182d117d8c42f30a0b84bceac38b3890c6ba399507e5d3a43653bfb5533725acafd37e00c8d76caaa8e4a513eb8783b0f724b7365d7bac0e46a4c7c54d3cbd050746d1580bd7e3e3a0d21ca8216ca425c4e2a9139f5a5693b124f4e7d0c16d2fa4fc355d26e1cb532f951650644de250a1dd39d7cefd706113010063c387c56f46b81a4bb7abf214588e6e951956069e199761e62650a3fc0037af579823bc23be29f026c90a84e55d0a7a81a90dd5ea7cbeb92035a1025cf50404bf8068374effbedfd09a551cac85cf71abe52d699fde0b2da7ac8f9722247255bcaa9046dcb5b1b50afd8e29924056e4ea4d8c6c918d426739d7db05a089b9a5a2c745533a86828d8085a61f8b14bcafd0c23ca250fa4e8d0b35d232cfbd8b0b0b1b48eabd97399679658c783c462de6f866da39977de6be2f60b96ae5f76fac6d3a32a85dd775fa67a38ce922154dec2ed24914129bb15fd36592cb843b93ef79e4fca305317ad097be664fd7d5aa96938ee13dd2ecc5df921a4e9db025a5e8a13e7dcf89888b496e629c424817432a02d12baf0ee254cdb9e1720a0194e9e663dfef6b8cef669ce5a1697133dcf0da7886af25548fac6b768271cce4a7317a5c5d8695eadf272cf7021d7a6aaf384bfb48c6243886cbc353abc36f9a6e79ab5400012252c020e128380c5bf526375cd8f63760b06ddcbeaa8bf72d0d4ffd06cf0eddfd72d145ae3bc32c5cee63523fa2dee06fb10a4ddeaae651996741467aa867a185c8f49e0bbab60424968b571650a2e96d0ee2ea0dfb86c93db742d58827221bb118164fb0d5c9f331254e4d06b6bce47a85a10f0dc6025af1dc0d66728d014b6b2c4fbd2edc2658acc708e87ea3051d9d69bf6b1fe88d920a862b955ff9cab48dddb66ad6a87986e946a4dac9c438c23eb6ae3fc1a6ea1e9a88ecdf18774f9e30a645b3bcc981c555aae3a18207d07405206f888a2c3ff7fd2268c1e8bb49e3ceca50c4f992584dc4fc79bd91deaa4fd747c8190eebe4728e9d7baf9c0f830e356ae0a1077aff9dd7c818cd1eb4aa169f4bfa22071788ebf86c3cd58ee50ca26b2eda6e0387a510dc7a17ba7eafccd4c86a219a65e3ecc58951e27801c01b163f5f6fea1e68fff2fe1f26b2e25fd5c14153d41245b83a5d365918d113c0f0e9b622c0a7f4fb89a05b7e0e27bfc5b38ebd3e5a8d8988b0cf93cadee3efddfc002f01182e8f836c21e61698ad4734b9b3ac556adcc864be59285a5213f399ebefcb24a345e47574f5ce50a4128dc6c4044c0bc4749a3751d47cd0b651380406d110063c98a77533d330afc6d90dfac053b0dc679597126c5d49913ec32b77047389469b402048928fcfc2dd0f55679c77c6ab90206713d0f60dfa92525ed05c79c96fc31187617826caa5d095b27d2b220d17cfae5ae8fcf99f7ca1ff30eea405937ea28707a870fa1fc56d174e15842206facb45d485f971f573bb9216dc2662cfa7914e8167f15720288a3e635a863f4eb61b333dca3c6f8d6c98d216f250f8240174b54a7dc496425c8065ba1a0851aa23ff8f4270e2a6bdab7b14e6ce93a0f19e83f8b94cb51dbe071d0e96cebe6bc1294ef6d965d4f589375d0355aee63f8c90f376877e78e2ffa3b17874967358feae0ea1416b3ea2bd01263c39bfe2851c624b755a543a92f9bb2dbd07e4f88166c1153a5eb9c035bf4e1649561f362b7ff0898661bd7b09145289bd66208491dd38b1ab28adda9d05fb683cf9202c2a558d1666c8d09aba3ca2d55c2697929b3067af94b8618002bfb784f91cf21b6bd852db7c77ecbe52a4831e24070162b93603072ca347906e2c889745c2980952fc57cfb4e83cd3ce6e6f314d70b11c0daa87b0903a75ea8fe49bd8163de668bbaa3f5722be3d581427a629b796b108f0341e338bdcd359bd028f321f4ac6bc738084820306f781cf20d565f9b4b3a35c1b2328e9eca6123e6f907f2edea1d4edbb31036d6fc968d314bffa4f632b60279350b3392ec1cbaf3c0884c5396580397bcf45f39ccb0b9a10bb38e601ed4e9fc366efc50e0b23de5dc8af1d8b03f517828eff94cdcadbb64c47fb5d8e0fd2e270eadd41fb1016936366668d4752105fb6708e9610ada3a8fdaa0df5f3cd24682619f1a0ae2ab5179ae3040d503d68b2a16cf04709fc44c0b2768092e3dd55cc383fe8629ee439f7e3e346399b1b74ebffd153277535c76030f987ecbd6f1fc00e9c8826d8b922d1c8f0c1801ddd3ae56d6d994801b29cb525c5318a83691865d379edb20bab26f780c9955a963ac6ac7ee6954b244ddd79826f967024dee8c36e4bca569900697732dc678cc5db267303ac61ba51edfd3266f9cee27964e12393d67441279c28e63fbd820131c42384391805fdb6e3681e0bbc7e4edf41c72a5d7b4e98748f71c9358bc02fb4959e403e476fa911b328d1d57ad735dc396fc640d175c90aa2c054eda94b40fc744f5f73746154c063f3064714eeeb13babb0efdc521d0015f4050aa23e637a5d64230ca719f5bf4d8cdbec2b8a00bf248bedf73b6a75ef0ca21f40ec8cfd6a229f8c5ccb1c65a1019fd5e5a7d90bc6a2fad5224a17c8bd54fd2cd5b9926810cd989755d14f3510773736f84ae5cf827b0686b5d0cf251b981c55c6caabe4e8c9ec4e0c8aee6559eca0dcb7a9efdac6c08e40caf76134882b4bbfa0219a559182e31d52b3e00b2936cded7e66429e84de1e8c0fac44cac204c6de1de3f000cd8d2109b52fb09227e8fa0408c696518c23ab467926c93d2c100a06a9d3dcbc9059bb547aeef7e559ff64e929eab7584e367f1a96367314c4f23f198725499a5e7b1272af7543ed5826375e514d7e8ae7c5c9bd2a026ad80269c032f0edbea1840a3f426de43b8ceab0ce9611be319e814f47615a7ba469d5718a72b8771d62b1ff760315e634b6529dc807e3bfa164de6750c79b0aa03b16a26ad50b4c0fad81e7a7f63d2b3479d2988e8d077598f2a4e3131bf9f4eb5a18bcc8b1e5298bbbd25806309c85d53fc5dfe4277d2fd3da21bd26afd20a1018539d8c1e1bec0d898b7d0f4d3ddf2ad888e4a24ecf38a0652c827fe4071b364d96bb64ea7d8b7f447b578c7562e940c4e5ecd0183a71fc98365e147f40530bd04dda577211a21b40b5398d7234e37a7c820ae8a32da33bde0a7fe6f239379460756097d817f06284b6009daf555d511932a3c6668824137130ac8d4caf16b956671bb49b59296e91a62afe0d4fab62464738eaa0eeb8d1ac96a07ce41921cec2d4e1cc62eecec02ce8db334a45d075358508ffa8c965ea7b2647fbda112c42c4607ea316e17874b12b225d48fee11fec4256d3cf475a3ac0e92c9897d28f48348fc69e992f45d8134f090620c212e9aba7a497b5dd6f294adf5e45fd6b06fac54c68ff2414092c3efdc14a837bef6fb219f37271c5f4f7d32b8653319854a8e82d8611770862a1b132c419d4b6565047c5cef25d34625a01bf81dd4146320f5b5d014197e3e655e56223ad20092eb964bdedb70f1c007de10043795869961802a7cdc988c5c8f9cc61ed9d38a51a42bd97434d163e598ee662d48cac5b9a27131df882e3497824e1fe52b5437c5fa9e13e6120bd61f07bfab45170783319e98f56523f9474cb74620651f5f7d3110727c239cbf64ca6260e6268f5ca80b8e53927c52186cd130048f639b9ab50541a9bea98ddf46460025c77f5e0874b69ba22550389c3bc06fcbfcb286e057b0e1b33e55d5cb05760e35a62976a609b667cbf1d32164f2cfad2db4a56625be39fbd4c62156fe2e4b66e0aa64e88e68d1b2a865583c87ebdd5a179bbd37c905dcdce7a80bb1318eca154469446e012c9a2b169038d7fd786bf1e2d5ac5b179c61b72d53b4129bec6b7c077a388d3802b1a470d01490cd2fb2a89085f0f91b638946ea0e74a1c99c1662e254fe0d2a454dc68d979fb2dcaa1be9e093def49ef969c5e0cffee11bc5446115b4013d2f5968730f6bb96d4315f7d30303342c4a55cae956b993ff66d37afaa7ee1ec442f2f67727d875a11e2e6af2bdd0eff184b27d2d117dded2ba9aae18531f5848569c209ab81b69f33371ed2f1a98675023033adaf025a3fa4777c8eb29260470d88274ad1f014b2c04b7e178ccc3695e1b031119b01c81cdbe0b51675f9224531738826641dcb062b515a59679a2d039687c7ad076ddd285310d8f8968ba5536a4f20a6015d411f54425dc5b4a4509a67a325b34d580d9a425d47b00afe8ca0c31d80c1e0bf3d3a663dc7f2f6be38ed0b4e6f9bcd600074bad2c6f3feb58fb2412a0be07c9b27f8c125fb621761ea69b488fba5232da86b58622dfcc05d8b1a308f21a6f8bc0e4185f5a3aa2b747eee33db244febeee472a5f132dd5f3074ad9a2e3b74b13d3963c7bc35307b0b6c7f25e949722509c0d470503c74958db19aac74e54fe5ef105fd17522cfc38384aac701c96bebeae3d65d952799cca6fbf6ee36491c3c06549ad41843f0f1b8e4553fe09a2e719429dfa80df2a525ef342b5f6269164ac3c7e9a3a8f4b65f6b32dbf181c8a2c14fb5a9fa90b15db5df8f0e8ae1f082cf5d7066ec0f16d4b761b31458e65e3bd9e6bb9ecfaca34120173bbafb0309a1736a8b24ea6e571a8b5454eefba7bd3d0e43d4ad1d4bf436fd9c0cc1d3996a9a2123e4c9f278a7686cb9880c439ff7da5afd573a10aec64fa8aba7ca7c7e2aac0e26ba2743de214c291a233d94f7ab947b34fd37ff4bad6421cefc516e5ff66c5ded37f045a11bbce6be400663d2c2aa15988756fc88226355cbeb3e2379c6b14b9e05ed9f120eda7ed27cfb894310445be5dd221c25bb342a039756a05d88fa62a680b808bd1257ca00e8bf9b4ae4de88d6454b070bc7ed6ed2a528846e480cabf8ee3ac18ebc1d8234ef4c7787343b2d28b0f2934d8a79e754f0b845b38b732478efe9e01862a3"}, 0x1}}, 0x1009) write$nci(r1, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r1, &(0x7f00000002c0)=""/100, 0x64) write$nci(r1, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r1, &(0x7f0000000380)=""/100, 0x64) write$nci(r1, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001940)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002300000034020000060000000800010084dfcc985b1feccd4b3eb6c6443c52dfc7f7bddb120201d41f69c9443ffef7a6d6ff1c4120d9e14120f89ccb2478bb7b7afd72a3b9c25946c7ceb3fbf4f7f494453d6f22186142a613ecefaa68f5b01817da393fcf15c91ac3c01e76ebeb6a50bdef6f198e5fa2be605f8f505e49c2", @ANYRES32=r2, @ANYBLOB="08000300ffffffff"], 0x24}}, 0x0) read$nci(r1, &(0x7f0000000500)=""/100, 0x64) write$nci(r1, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r1, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r1, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r1, &(0x7f00000005c0)=""/100, 0x64) write$nci(r1, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r1, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r1, &(0x7f0000000680)=""/100, 0x64) write$nci(r1, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r1, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) read$nci(r1, &(0x7f0000000840)=""/100, 0x64) write$nci(r1, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) write$nci(r1, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1308.991093][T24737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x802, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x510, &(0x7f0000000f40)="$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") r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x82, &(0x7f0000000140)={r3}, 0x8) [ 1309.067391][T24783] loop1: detected capacity change from 0 to 512 [ 1309.086513][T24783] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz-executor.1: bg 0: block 97: padding at end of block bitmap is not set [ 1309.101589][T24783] Quota error (device loop1): write_blk: dquota write failed [ 1309.110242][T24783] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1309.120680][T24783] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2976: inode #15: comm syz-executor.1: corrupted xattr block 19: overlapping e_value [ 1309.136078][T24783] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117) [ 1309.145936][T24783] EXT4-fs (loop1): 1 orphan inode deleted [ 1309.151679][T24783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 03:48:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000080)={&(0x7f0000000380)={0x54, 0x2, 0x6, 0x5, 0x54000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x80028}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) [ 1309.164312][T24783] ext4 filesystem being mounted at /root/syzkaller-testdir3599517600/syzkaller.DObNtW/3458/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1309.179231][T16728] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 1309.188830][T16728] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1309.201610][ T3102] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:48:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0}, {@in6=@remote}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) [ 1309.250587][T16743] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:48:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x30}}, 0x0) 03:48:22 executing program 2: creat(&(0x7f0000001640)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB=',debug=0x0000000000000008,appraise,obj_user=,seclabel,defcontext']) 03:48:22 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f000000a0c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f000000b380)=""/4088, 0xff8}], 0x1}}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000003800)=""/4088, 0xff8}, {&(0x7f0000004800)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa, 0x42, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) read$nci(r1, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r1, &(0x7f0000000200)=""/100, 0x64) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) write$nci(r5, &(0x7f0000000900)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x7f, @b={0x7, 0x2, 0x1, 0x8, {0x1000, "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"}, 0x1}}, 0x1009) (async) write$nci(r5, &(0x7f0000000900)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x7f, @b={0x7, 0x2, 0x1, 0x8, {0x1000, "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"}, 0x1}}, 0x1009) write$nci(r1, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) write$nci(r1, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r1, &(0x7f00000002c0)=""/100, 0x64) write$nci(r1, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r1, &(0x7f0000000380)=""/100, 0x64) write$nci(r1, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) write$nci(r1, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001940)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002300000034020000060000000800010084dfcc985b1feccd4b3eb6c6443c52dfc7f7bddb120201d41f69c9443ffef7a6d6ff1c4120d9e14120f89ccb2478bb7b7afd72a3b9c25946c7ceb3fbf4f7f494453d6f22186142a613ecefaa68f5b01817da393fcf15c91ac3c01e76ebeb6a50bdef6f198e5fa2be605f8f505e49c2", @ANYRES32=r2, @ANYBLOB="08000300ffffffff"], 0x24}}, 0x0) read$nci(r1, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r1, &(0x7f0000000500)=""/100, 0x64) write$nci(r1, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r1, &(0x7f00000005c0)=""/100, 0x64) write$nci(r1, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r1, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r1, &(0x7f0000000680)=""/100, 0x64) write$nci(r1, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r1, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r1, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) write$nci(r1, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) read$nci(r1, &(0x7f0000000840)=""/100, 0x64) write$nci(r1, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:22 executing program 2: r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x40000000, 0x0, 0x0) 03:48:22 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xa1ffffff}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:22 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x5}, 0xfffffffffffffd2f) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) r4 = signalfd(r0, &(0x7f0000000a40)={[0x8]}, 0x8) read$nci(r4, &(0x7f0000000a80)=""/90, 0x5a) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/module/pata_amd', 0x20000, 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000a00)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) read$nci(r6, &(0x7f0000000900)=""/161, 0xa1) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x20}, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, 0x15, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x4, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}}, 0x0) 03:48:22 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x900000000000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1309.796416][T24758] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:22 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x20) fcntl$setsig(r1, 0xa, 0x12) syz_clone(0x0, &(0x7f00000044c0), 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x14) 03:48:22 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001400)=ANY=[@ANYBLOB="18000000ffffffff000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x14, 0x33, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:48:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000800000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4103fe) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000280)) sendfile(r4, r5, 0x0, 0xffffffff054) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x89a0, &(0x7f00000002c0)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "02b66c11beed7c64705a2327ec95767e4393a580b2c3043a2fcfb08839b8897467f4a525091f0f7d2480b2fbdcfd2a3924b674e8aed38628fb035a463934e151ef7c0289d4fd7b308135026f77657ca78a849330727be579703bef5f51cf16a7198f8eb8e962cc55e47a88645dc99b6e4dfd15399b64e979124ef3a9120208d05d9de3ff1ce9cc9e6353b97b13c914e3530a6ec5b967674f3cbc69538c66356f6777af618dd96e1730048727e164fcc8139776c1e5061154ffe7838008ce90ccbf0827c03a28016d5f3bdabbc98bee9c405509e3e094ba1677d6b347061c346722828810ba1b68424c585770f6527f3856630aedb97f2ee0742e013d5d412046", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={0x0, 0x100000000}) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000400)={0x0, 'bond_slave_1\x00', {0x700}, 0x9}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000940)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001740)={0xeeb, [{}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "285c4d007ecdfb"}) write$binfmt_script(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x7b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000629c0)={0x1, [{}, {}, {}, {}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r20}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r21}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r23}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x3, "7318effc2d2c0d"}) [ 1310.068437][T16743] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:48:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000b80)='./bus\x00', 0xa10014, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x1, 0x26b, &(0x7f0000000280)="$eJzs3ctqE2EYxvGnB+3JtvFUbTd90Y1uBq1XEEoLYkCpjXgAYUqmGhKTkhkwEcGudeNNuCm6cyeIN9C7cFcE6aorR5JJ28RUSpR00ub/23xv+2Qm35d3Er5Fhmw9fP8it+o7q26g/j7ToLSuHSmhfg0o0lcf+2v1aTVa1/UPme239x89vpNMpRaWzBaTy7fmzGxi9uvL1x+vfAvGHnye+DKkzcTTrZ9z3zenNqe3fi0/z/qW9a1QDMy1lWIxcFfynmWyfs4xu5f3XN+zbMH3Sk35ar64tlYxt5AZH10reb5vbqFiOa9iQdGCUsXcZ262YI7j2PiocJj0xtKSm2z8z0B8k0GHlEpJd17STEuS3ohlQgAAIFbs/3tZ6/4fJ091//+k/v5txv4fAAAAAAAAAAAAAAAAAAAAAIDjYCcMJ8MwnNwdT0m1O3zC+t8jkkYljUk6I2lc0oSkSUkJSWclnZN0XtIFSRclTUm6JKl6rumGc8W9VrTqZP8v0/+uR/97W4f7P1J/GvrfpRpu3B2WfqyX0+V0NEb54u3Uwg2rSewftV0upwf28ptRbs35UO26qeZzB+bDunY1yqvZ/N3UH/mMMp1ffs9zbM+B/XWcv+VR1XB9zDbng5oZPLJl4B/5lVc5N5/3SocVn9618eBjVIRvumIaBxZSV0zjP4sw0vHXWcNxr/REFXF/MuEo7Dc97pkAAAAAAAAAAAAAAAAAANrR9hcDd39EqI2jYl4iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfgcAAP//E5YDWQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000000c0)='./bus/file0\x00', 0x0) rmdir(&(0x7f0000000000)='./bus/file0\x00') [ 1310.119183][T24834] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1310.133723][T24823] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:22 executing program 4: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x5}, 0xfffffffffffffd2f) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x5}, 0xfffffffffffffd2f) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) r4 = signalfd(r0, &(0x7f0000000a40)={[0x8]}, 0x8) read$nci(r4, &(0x7f0000000a80)=""/90, 0x5a) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/module/pata_amd', 0x20000, 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000a00)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) read$nci(r6, &(0x7f0000000900)=""/161, 0xa1) (async) read$nci(r6, &(0x7f0000000900)=""/161, 0xa1) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x20}, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1310.215470][T24848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1310.232619][T24863] loop1: detected capacity change from 0 to 128 03:48:22 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x0, 0x3, 0x9, 0xe}, 0x3) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000b80)='./bus\x00', 0xa10014, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x1, 0x26b, &(0x7f0000000280)="$eJzs3ctqE2EYxvGnB+3JtvFUbTd90Y1uBq1XEEoLYkCpjXgAYUqmGhKTkhkwEcGudeNNuCm6cyeIN9C7cFcE6aorR5JJ28RUSpR00ub/23xv+2Qm35d3Er5Fhmw9fP8it+o7q26g/j7ToLSuHSmhfg0o0lcf+2v1aTVa1/UPme239x89vpNMpRaWzBaTy7fmzGxi9uvL1x+vfAvGHnye+DKkzcTTrZ9z3zenNqe3fi0/z/qW9a1QDMy1lWIxcFfynmWyfs4xu5f3XN+zbMH3Sk35ar64tlYxt5AZH10reb5vbqFiOa9iQdGCUsXcZ262YI7j2PiocJj0xtKSm2z8z0B8k0GHlEpJd17STEuS3ohlQgAAIFbs/3tZ6/4fJ091//+k/v5txv4fAAAAAAAAAAAAAAAAAAAAAIDjYCcMJ8MwnNwdT0m1O3zC+t8jkkYljUk6I2lc0oSkSUkJSWclnZN0XtIFSRclTUm6JKl6rumGc8W9VrTqZP8v0/+uR/97W4f7P1J/GvrfpRpu3B2WfqyX0+V0NEb54u3Uwg2rSewftV0upwf28ptRbs35UO26qeZzB+bDunY1yqvZ/N3UH/mMMp1ffs9zbM+B/XWcv+VR1XB9zDbng5oZPLJl4B/5lVc5N5/3SocVn9618eBjVIRvumIaBxZSV0zjP4sw0vHXWcNxr/REFXF/MuEo7Dc97pkAAAAAAAAAAAAAAAAAANrR9hcDd39EqI2jYl4iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfgcAAP//E5YDWQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000000c0)='./bus/file0\x00', 0x0) rmdir(&(0x7f0000000000)='./bus/file0\x00') 03:48:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000b80)='./bus\x00', 0xa10014, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x1, 0x26b, &(0x7f0000000280)="$eJzs3ctqE2EYxvGnB+3JtvFUbTd90Y1uBq1XEEoLYkCpjXgAYUqmGhKTkhkwEcGudeNNuCm6cyeIN9C7cFcE6aorR5JJ28RUSpR00ub/23xv+2Qm35d3Er5Fhmw9fP8it+o7q26g/j7ToLSuHSmhfg0o0lcf+2v1aTVa1/UPme239x89vpNMpRaWzBaTy7fmzGxi9uvL1x+vfAvGHnye+DKkzcTTrZ9z3zenNqe3fi0/z/qW9a1QDMy1lWIxcFfynmWyfs4xu5f3XN+zbMH3Sk35ar64tlYxt5AZH10reb5vbqFiOa9iQdGCUsXcZ262YI7j2PiocJj0xtKSm2z8z0B8k0GHlEpJd17STEuS3ohlQgAAIFbs/3tZ6/4fJ091//+k/v5txv4fAAAAAAAAAAAAAAAAAAAAAIDjYCcMJ8MwnNwdT0m1O3zC+t8jkkYljUk6I2lc0oSkSUkJSWclnZN0XtIFSRclTUm6JKl6rumGc8W9VrTqZP8v0/+uR/97W4f7P1J/GvrfpRpu3B2WfqyX0+V0NEb54u3Uwg2rSewftV0upwf28ptRbs35UO26qeZzB+bDunY1yqvZ/N3UH/mMMp1ffs9zbM+B/XWcv+VR1XB9zDbng5oZPLJl4B/5lVc5N5/3SocVn9618eBjVIRvumIaBxZSV0zjP4sw0vHXWcNxr/REFXF/MuEo7Dc97pkAAAAAAAAAAAAAAAAAANrR9hcDd39EqI2jYl4iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfgcAAP//E5YDWQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000000c0)='./bus/file0\x00', 0x0) rmdir(&(0x7f0000000000)='./bus/file0\x00') [ 1310.353491][T24876] loop1: detected capacity change from 0 to 128 [ 1310.385586][T24883] loop1: detected capacity change from 0 to 128 [ 1310.427037][T24865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:23 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xb0ffffff}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000b80)='./bus\x00', 0xa10014, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x1, 0x26b, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000000c0)='./bus/file0\x00', 0x0) rmdir(&(0x7f0000000000)='./bus/file0\x00') 03:48:23 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000100200"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000000)) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x40, {0x0, 0x41}}, 0x5) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:23 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0xf00000000000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1310.667908][T24815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1310.685478][T24825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1310.709589][T24898] loop1: detected capacity change from 0 to 128 03:48:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000800000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4103fe) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000280)) sendfile(r4, r5, 0x0, 0xffffffff054) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x89a0, &(0x7f00000002c0)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={0x0, 0x100000000}) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000400)={0x0, 'bond_slave_1\x00', {0x700}, 0x9}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000940)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001740)={0xeeb, [{}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "285c4d007ecdfb"}) write$binfmt_script(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x7b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000629c0)={0x1, [{}, {}, {}, {}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r20}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r21}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r23}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x3, "7318effc2d2c0d"}) 03:48:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000b80)='./bus\x00', 0xa10014, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x1, 0x26b, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000000c0)='./bus/file0\x00', 0x0) rmdir(&(0x7f0000000000)='./bus/file0\x00') 03:48:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000b80)='./bus\x00', 0xa10014, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x1, 0x26b, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000000c0)='./bus/file0\x00', 0x0) rmdir(&(0x7f0000000000)='./bus/file0\x00') 03:48:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000b80)='./bus\x00', 0xa10014, &(0x7f0000002280)=ANY=[@ANYBLOB="646f74732c646f733178666c6f7070792c7379735f696d6d757461626c652c666c7573682c6e66732c6e6f646f74732c646f74732c00d0825d18e26fbecc0706cc41255e12fa3efe9c502718a953b9808d8cd8ae8a76cdad6b18463730fdb2c3ffbd093f97ce8d04671645d83196ccb6eaa521c074dedbda146ce668c6e90c2b75be7be9d8bfd15dc7494aa955cb80b1e4522adc4f3dded59219d6e3f0c5a7491564991d684e4f3656d05176f12cef326bc28ab7ab79e6d1265e23e3b2000000005c41d19b526c3a4f0f07fb8cccbbadf4a70329b2f3372a13b17700d93b330c38c035ddba5ff777e0b40cd8a1b71df36b8643db21d5f863ef4222c69d5901650cd6fa196158ac19555bb30b3c5cb5e1d331a1f43edc620077273688a8a06ae3755396bed465a5"], 0x1, 0x26b, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000000c0)='./bus/file0\x00', 0x0) rmdir(&(0x7f0000000000)='./bus/file0\x00') [ 1310.752215][T24910] loop1: detected capacity change from 0 to 128 [ 1310.780398][T24914] loop1: detected capacity change from 0 to 128 [ 1310.808006][T24917] loop1: detected capacity change from 0 to 128 [ 1310.859050][T16743] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:48:23 executing program 1: syslog(0x4, &(0x7f0000000080)=""/213, 0xd5) 03:48:23 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$nci(r0, 0x0, 0x4c4b) 03:48:23 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x0, 0x3, 0x9, 0xe}, 0x3) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:23 executing program 1: io_setup(0x80000000, &(0x7f0000000080)) [ 1311.172213][T16728] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1311.370150][T24935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:24 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xb1ffffff}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:24 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r0) tkill(r0, 0x16) tkill(r0, 0x14) 03:48:24 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000100200"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000000)) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x40, {0x0, 0x41}}, 0x5) (async, rerun: 32) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (rerun: 32) dup3(r0, 0xffffffffffffffff, 0x80000) (async, rerun: 32) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (rerun: 32) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:24 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1311.530990][T24927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1311.552721][T24903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000800000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4103fe) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000280)) sendfile(r4, r5, 0x0, 0xffffffff054) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x89a0, &(0x7f00000002c0)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "02b66c11beed7c64705a2327ec95767e4393a580b2c3043a2fcfb08839b8897467f4a525091f0f7d2480b2fbdcfd2a3924b674e8aed38628fb035a463934e151ef7c0289d4fd7b308135026f77657ca78a849330727be579703bef5f51cf16a7198f8eb8e962cc55e47a88645dc99b6e4dfd15399b64e979124ef3a9120208d05d9de3ff1ce9cc9e6353b97b13c914e3530a6ec5b967674f3cbc69538c66356f6777af618dd96e1730048727e164fcc8139776c1e5061154ffe7838008ce90ccbf0827c03a28016d5f3bdabbc98bee9c405509e3e094ba1677d6b347061c346722828810ba1b68424c585770f6527f3856630aedb97f2ee0742e013d5d412046", "e26481ed1e7c639b5947fa03672a9556f2d9c88f35f8f8b62d6b01c1aef3d08f4ee43881217f959db47d280e8448925694f755ec0256840e58a31c14f0d78d223c58da8e0bd812fb893403e655823624c9e0581484207a6d914ad9befaa148971274f98aa0b753b38761ffcd20135aa09bee95ffc38cfb410de6eb0b1c0eaf69af8375bb982d21281acaa2966378f31ed037b8789d3bf55cda6f1fdefac7c7d4eec101525b850f72c5d3515de41ea6c4cc0a1d4c9d0e83fe98d8baa6325482d6270833cf890aba6768abf6a6ac45c0268bac824f692a521bf8500ce437d7bd4ecafbf918c063d8af3d110e24ddc569f535794d4c8c4ab3897b27310c8d39efca731b7a22caf0ec5f2df04ce6b496582e72b5cbb10480d59c191cd3eca3d3a973fe653216cd08c8de4098133f85da499af2f6a6c7513755f40d13810388f5476a67bb722dc832e4af4c76fda32aa9699c8191a644df90df4b2b2e7993e90bee48e3b65cbc84de44a15926c157018e46c849d57933b96f67dcec40eb733515b880aabbfd1324433ef61e0a112430d3829717820a9eb79c8767614facf386e07a7df2ceb2e9f9d33d65d33fecc7697f5bf74769a67ac297756ec495eaf87674ad5fae2fd772301896e85c617328f32f69bb718bf1ade1d8fd637a6bb4c7044929bf43757821b2bde4ce2ec164ef3841458207326249547ccd2c3ca3467e8c5474cb820ee8647c90d2da6af054fa1f25afb1b0792dcf21b2736c67fc8119a6bdbe19689bb639113f5b9165a50b6f2df8dd8c549220488da3bb10e45dcc7a6207635a550e5ee913aa8ec6ea5f92ba59eb003424e6ea472df633220c8e9644d5bf2f4b01027fc5c0422c39932531e1be7e62e021ac4592b57d95720d5ae86f4bd11d95ad82569ab24e0d1b5a144e6fbcc76c4d7800a70069a852979a3a1f02fcbef6bfeff2101576c998109c65350175bd05435d4be236097340cfafadfde768b1176e6c40f34731164afcd0c3620a0cd015494e432e9aff2c59a4cf476d9037a398183fe74789da0300172e1c02173ff867faf6fbed165ca819be3e4ea05fb6ff1633430984bece64ef93ff8d012b9c321941d59f5b8572008f6bb22597864ea1fbd6b9e349b6d9dc1adc185ea32d5e67e44ac5ebea2063635a53e1718a4246ea47a8874daae0ac6653f821f381a940cbfc98d4a25aea33c63309ee1c6c20f349b673509f09b5381956611359754bdb2eeda100ccb4834596de45556611d5b568f2604653c2129a7d5bd50a209a6d4a956c108b5349a8d208431a2edb17d7650332d308ea2e6f324e589f0e98de49ab655a77509637f0a65614c33f16f91e0d6305e8f9ba0766154e1599f67005ff75af7a6143e574acb799f2363dbb37971fc451c0054b5753de3e2278afe06b9e64b93ab09b4985fe26626a6266da1088f7b9755ac8a9e4e6e99a0dedfe2b1509de12f75d9dea83475543d2b328e986779f4992c870ad128b9d09e8ebcc264e8bb5b85d6d62ab902b8ed7409448cc26a777882627bf3e0c9cdd473289154560c2838c6d4fdaea97ff5d7992909c67710dfeb4977ea7bc06d77b06a19efa42178c46a3fa66ed7d6e2b67ab86be5d94721b099947563db706c5c3a12744ea61d63fce93f546f2669c50b6568e3f32d79bfc75adefc21ee93c5c5360cf2e7ac19571c3663857baf3325b666570642da4dcb309dab05b7ad05bf832d28fa8e871f7b89d6f4327953f4dbde3aac022f4dfe050d0924427e39a8027fbc4b54c4a8c2bf35f8c11c9c0ac4bc1fc31d6bdb2cee2675c5a782aa3ab5ffcc7be7207c89cdb8546fcfdd3a5aadfee5a296abd9afc127ebbf580649e9132b55d9f40a3778af49248b593e00c9f4812b8f7adb7323ab7852e4ed09c55aa356b2e8fee6eb14be3659fdf821d23ac556845f70670d8b6a417c29ac0b1585ea865634c0c921e9d930d4018f66d1e024179d80a7154c491c8662d427ab44a3633480782889f1d00c1d182ede30d4127d769291ef408b574a41c29153b7d949d4648b60a4faf32b380dbc87146c36479d47023876abd4ae7e289ba79d988f6c3a86a75bdc784bea2f0b7e2f77cb1282f54a18e1117e50ffa46ac208fcf8a7b5751e83b3e80cb428e4c2ae63ca3cf7b2c4353303edfe328626391f7925f1ab4ef1c7d0f54d0e45590188ecdb6d2c9c0db9b0552dc81b21dc1bbe9e94be5f78dad11f53d6fc3602e9ffb872d3557c44a133ee94e50d57d5eae2214569975982c63f22750db6f5c979ed81b3f68fe6be6daa85bcd98f25548c1d4db1f15394bc708933e0352e4059bedbf832abaf75e9bdca6fea93600357ca4153357d2e0661a308edf82c0f53e7a121c7e1e8bafdc5fdb61c21f4716d06b43a8395aa915a34c4dc4b5b15ba70a4e163728a9966515682b9ca3c2499aeb17a3c17f905fefed806b504f77c52564006273282db5e0c70565ee1016fc7c241830bef951294db9682ef41742b6550246e539143f15d6c2f017a8083ec97eb3a2de8bc2d8d5fec2b9b88996b3ff6c5aa5bed326f72fe9190de74a83e380b9fe89324421697d124d9a1bd3ced8e1856923147958582d737a36da6af4a0fd92b83f0ef0cb1a725d3a5ecb3a39ad039d200989a281a0686336457824ef582698222b7a063475b793a21745d6701940a0baf124461ad71de8dff6a6f7ed676d107e01ae6b7b79aa1f96efce91039dead977bf70365de8ebb3ec06634246d62f78287831984accef27048794468f520db5c71b4fa94818ddc7394fa1b609adb8cc80c0f32efac26a47bd74119100f0cfdcb889aab1019786cc0eefc1e4295ae919e9f6c8c8a16aa76a2bfe39adf5929e9b9925da0241e734378fe140981e3536bf0b77eb0263297a936a5f37605f128d79b16723b953331f99633b8d29ad1d1dbdb74188488ea0d1b7e0ddb652c040aa0477a079e92618e52f3b7ceebd62e0f0c6946469c19ae828b7eed288c3a53320c9d5468c39d608bd42d967a21e6b788de7c6826d1b99130083182562f63443290aeeb24308d3eb4881547db34b284d9af2bd7cac0d2f66bd14758c079c345d2bce3e1efc3599b0d06e69a92db7e05473673726e1848df75e83df50f98a9321468c10c6514dd7b3cb5b0ddf2fef13284463fe88ef2bc95d51288e41e3e0ba5c91bd686d7f7658b5bac8e3991a0f3b36f004585d9edd09d478ede73e7da067ea502894fc1247e62c1a84c9065ffccc3da96f07ddce135ceafdd784dda6f64a7add400d21ae13abf98e90fb96fcda23a8ad79905428a349b2230c19cf8cdca1724382bd19b4b075438098bd46cbc668bcbdcf1da85f733a50669f976a7106ff1936f20d799e7d01b0beeba7057a90016fb2d36bb3d14e11ac077ffb91f139d16ae5e78d84559312c9fd1a91ff70e5d9b4fd279420f7647151fe951b705082230ad20415d2f605665cd9374a50f7fc3c32efe30e4c0fc84f0c0e0bcd35e46665e4f29371c1c96324f65a94c85874e8e3baba68b88acc85c38f466d7353b5a00953c8ff5522cf0903e646301e3539d047286d10be16d9fbef02d450b7b12b1ead250f68c4c893fbc6f48765f34a81c477966278a1c6945d14d6531f0b5e4cef4edaf3708a5787162c39b236272694b0a302465d01004fa9d516414c040c27fccbf38466023b06293bd07f31fcdbb3b5378a8b2c7886e1551b1caeab96f7f3c159075756f5f8aaa05b6f87f581d802903c36d84169f87c01a77c43284adf66daa38fe8633a8f6d258231466aba89bb9e56ef289d2815cde433e381ddf74852302684b974c80d0a1d7d578039120a2db36213d167687e9390ed8f14c709d3149d2f5cfbc42a9b85e6d10c4ee77270534fdff2ccb816dedc6377257a73ba2a4ea82c0cc4a81bfb939f710b109beb279edeeda345867c0130ff6fc0fbbbbd25d16d2e73f6ab2fbb4c72abc0713ef9e4690b72208c468fa64c21f2247867b5edd514e5be23733ef2136b10e03161fe3b4e6018933df1f97a8250747e6140780a064e0c35bfafcb8177a75e8fde25e61e1c6332bbf7ddc3a11910feb3bd66707a7c1a9f87b320298acec88135a177b2f6f3c0ff02765f34c30b078b58470cd227ce4c0a1a77e662180b28fb360c3fbf47ba8982510979b86332b6d8a53d5f3947665c119a71e5b6ddc64228b47c3e23c30ebbede354d71d2780456de3f717a384112ccc9805dfe107fc9440ab7abccd8463150ce1306778fbea9793d88c4a7864a925bac5da593d6b72ee2c743f0b732a10285d293359c8126004f06fa12c0b3ca9c1e9c0a75b587207965c49f7450cb4210da01e5604f83f849b7eb9cb3f73de4bcff064b4fe08580971184db940bf29d6b8cea027dbfe0b78d6fa574da4b5b4db57b4e1939213c9848537baaf8076b1db4e767a467ec6a47c67aa33df96d7113cc9884124bca5579ce0058618b1b1f13ff3b102ff54e6bde7e29fd555acd6ffe6429af27301b6bbda38403d8f6f3266d7724f517778e7b2c1e13e3d83104ce743857c07b70cb5be8d6d8757d63a3bedfc9de79cc7e96c9833e15fd65f1336178568c2453a49cfc8c8dcb4f5d978f0a6144d62a5da6fd75d08a41084d4c59b345e07a5f4446af6e5216cc8d94347d333030015e262036f0a4fa6d2ae523654c55b37ac179efb66d230de5c70a9b33738ef0cd4ba2710d9ec03f426701101182051516a9be380a07e2555a8cda03eafc72d2bc2bc1dcadde4bb819692c1736b0ed203c4934842d791aae9e10bf239cc5393c9faf967109444c8f44532766ca5481f0ac16d25753a121727271c71d97b401dafe91588b362f2798f047deece9f860624b2d5753e46f929f8c2d03753e7245ffed6d8e36c7b380c4fb6a27e087a38b5e4a80f0043f95e5a20701c62692e684a764074e47badcecf8b2145be47b5b7089c249abcf0743a61b517004d120929d7846a39a46e0ddbcf5334fc01aca0bff31e67da8b3c88e38504db1dc3940c55bee158ae6dfcce289cf91106397d8e3990149a86c819e0354d785a4eed76fa6380491b01efbc23e7189ec253884d384865bca5da9a0917d68144a0a02cde867c365d339a025b7c8a16b82e341719a259ede8f09c165a354fd3e8f5d59e349e7c36302cf8ed115537969b598337fe7575157c89a254c0829cdb243d3d788321c756bf2817721db4bead96e1f25be5b8c7100d149d13900b6c6491ddbdbeaef7753ed5c5d9b07449bfd023501075ec08c37c13df696bf73500bd440a6522f5b955862c5eee8dc6e875c5055350b3397a6b31d2b764308ad24aafd4113af76f38f4aaba9e24efa3ad5b1c008a6cad2411ef6c7276dd3a5a2ae8130f91c36c34137731426fdf5272ef4ac5c4415e2d0f7b50da3ae910ba22bb5b962351e841746b"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={0x0, 0x100000000}) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000400)={0x0, 'bond_slave_1\x00', {0x700}, 0x9}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000940)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001740)={0xeeb, [{}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "285c4d007ecdfb"}) write$binfmt_script(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x7b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000629c0)={0x1, [{}, {}, {}, {}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r20}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r21}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r23}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x3, "7318effc2d2c0d"}) 03:48:24 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x0, 0x3, 0x9, 0xe}, 0x3) (async, rerun: 32) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (rerun: 64) 03:48:24 executing program 4: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000100200"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000000)) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x40, {0x0, 0x41}}, 0x5) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1311.716928][T24966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1311.771117][T16741] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1311.808900][T16750] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:48:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0), 0x8) 03:48:24 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a80), 0x200000, 0x0) fcntl$getflags(r4, 0x1) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="a20e0000"], 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000ac0)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0x7, {0x1, 0xfa}}, 0x5) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r5 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000024c0)={0x2, 0x2, 0x100000001, 0x4, r5}) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xd0, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24115}, 0x4) 03:48:24 executing program 1: ioperm(0x0, 0x7, 0x5) socketpair(0x0, 0x0, 0x0, 0x0) 03:48:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_MODULUS={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 03:48:24 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) [ 1312.179481][T16741] nci: nci_rx_work: unknown MT 0x5 [ 1312.187467][T16741] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1312.405946][T24972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1312.423627][T24960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:25 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xb2ffffff}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:25 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x40, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER]}]}, 0x40}}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000009c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7f}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x25}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x20}, @IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0xc024}, 0x20000040) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="577d082723550a73872baa8dc34c62a4f0ae5e765c8d26be5d4df760b9dfc3a1b40276f8ef22dff6c4f54556fa64ed379b9ccae89b776d23d5f77e0ed6e6e649d5c34e4aa1f5a97eb3a66c5baa42626cc6b91917c8add97ab67317ad737d168cd496f415549d1c003b90ed93f6409ffb626cfa418984243133b089d6cc98654c0934428ff953fdbfb6f17b8c38bb87c55bd4ae75b786b47f6423477e412f13c3d2935b32"], 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)={0x34, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) r8 = socket(0x10, 0x3, 0x0) getsockopt$nfc_llcp(r8, 0x10e, 0xa, 0x0, 0x20000000) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:25 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) 03:48:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000800000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4103fe) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000280)) sendfile(r4, r5, 0x0, 0xffffffff054) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x89a0, &(0x7f00000002c0)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={0x0, 0x100000000}) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000400)={0x0, 'bond_slave_1\x00', {0x700}, 0x9}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000940)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001740)={0xeeb, [{}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "285c4d007ecdfb"}) write$binfmt_script(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x7b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000629c0)={0x1, [{}, {}, {}, {}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r20}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r21}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r23}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x3, "7318effc2d2c0d"}) 03:48:25 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 32) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 32) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (rerun: 32) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a80), 0x200000, 0x0) fcntl$getflags(r4, 0x1) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="a20e0000"], 0x4) (async, rerun: 64) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async, rerun: 64) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 64) write$nci(0xffffffffffffffff, &(0x7f0000000ac0)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0x7, {0x1, 0xfa}}, 0x5) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) (async) r5 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000024c0)={0x2, 0x2, 0x100000001, 0x4, r5}) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xd0, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24115}, 0x4) 03:48:25 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0xffffffff00000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1312.884301][T25000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1312.894686][T25012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1313.100965][T16741] nci: nci_rsp_packet: unknown rsp opcode 0x73d [ 1313.164212][T16750] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1313.252919][T16728] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:48:25 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) 03:48:26 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) 03:48:26 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) setreuid(0xee01, 0xee00) fcntl$setpipe(r0, 0x4, 0x3f67c8f9) 03:48:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv4_getnexthop={0x20, 0x6a, 0x520860a5bd28a1ef, 0x0, 0x0, {}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) 03:48:26 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) iopl(0x0) 03:48:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000003940)={0x0, 0x0, &(0x7f00000026c0)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001fff00"/20, @ANYRES32=r2, @ANYBLOB="e3ffffff00000000140012800b000100626174616476"], 0x68}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)={&(0x7f0000000400)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) [ 1313.691162][T25074] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1313.703985][T25074] batadv8: entered promiscuous mode [ 1313.709289][T25074] batadv8: entered allmulticast mode [ 1313.715896][T25074] 8021q: adding VLAN 0 to HW filter on device batadv8 03:48:26 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xc0ffffff}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:26 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 32) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (rerun: 32) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a80), 0x200000, 0x0) (rerun: 64) fcntl$getflags(r4, 0x1) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="a20e0000"], 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) (async) write$nci(0xffffffffffffffff, &(0x7f0000000ac0)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0x7, {0x1, 0xfa}}, 0x5) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) (async) r5 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000024c0)={0x2, 0x2, 0x100000001, 0x4, r5}) (async) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xd0, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24115}, 0x4) 03:48:26 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000440)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x40, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER]}]}, 0x40}}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000009c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7f}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x25}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x20}, @IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0xc024}, 0x20000040) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="577d082723550a73872baa8dc34c62a4f0ae5e765c8d26be5d4df760b9dfc3a1b40276f8ef22dff6c4f54556fa64ed379b9ccae89b776d23d5f77e0ed6e6e649d5c34e4aa1f5a97eb3a66c5baa42626cc6b91917c8add97ab67317ad737d168cd496f415549d1c003b90ed93f6409ffb626cfa418984243133b089d6cc98654c0934428ff953fdbfb6f17b8c38bb87c55bd4ae75b786b47f6423477e412f13c3d2935b32"], 0x5) (async) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="577d082723550a73872baa8dc34c62a4f0ae5e765c8d26be5d4df760b9dfc3a1b40276f8ef22dff6c4f54556fa64ed379b9ccae89b776d23d5f77e0ed6e6e649d5c34e4aa1f5a97eb3a66c5baa42626cc6b91917c8add97ab67317ad737d168cd496f415549d1c003b90ed93f6409ffb626cfa418984243133b089d6cc98654c0934428ff953fdbfb6f17b8c38bb87c55bd4ae75b786b47f6423477e412f13c3d2935b32"], 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)={0x34, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}}, 0x0) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)={0x34, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) r8 = socket(0x10, 0x3, 0x0) getsockopt$nfc_llcp(r8, 0x10e, 0xa, 0x0, 0x20000000) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1313.751529][T25048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1313.760855][T25045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:26 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) read$nci(r0, &(0x7f00000001c0)=""/173, 0xad) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:48:26 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:26 executing program 1: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 03:48:26 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x80}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xb6}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f00000009c0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x0, {0x0, 0x5a, "dabd5115f2ffb561a538ed0a6bc04ce2127f6ce9061b1421274eba94ecff9d0bce718722197faf5cde7aeaf0a48234b85f5c9b65a3bb084640ae5ce2b725d557d424acb5a6c9f8122a6fd78410d8343304abb34b021f0853eee8"}}, 0x5f) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:26 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xb, 0x101301) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x1122) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x8008551c, &(0x7f0000000040)=@usbdevfs_connect) [ 1313.821874][T25077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:26 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200200, 0x0) sendmsg$unix(r1, &(0x7f0000000680)={&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x18, 0x1, 0x1, [r2]}}], 0x18}, 0x0) 03:48:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 03:48:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002240)={@val={0x0, 0x800}, @val={0x5}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0xfdef) 03:48:26 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x40, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER]}]}, 0x40}}, 0x0) (async) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000009c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7f}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x25}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x20}, @IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0xc024}, 0x20000040) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="577d082723550a73872baa8dc34c62a4f0ae5e765c8d26be5d4df760b9dfc3a1b40276f8ef22dff6c4f54556fa64ed379b9ccae89b776d23d5f77e0ed6e6e649d5c34e4aa1f5a97eb3a66c5baa42626cc6b91917c8add97ab67317ad737d168cd496f415549d1c003b90ed93f6409ffb626cfa418984243133b089d6cc98654c0934428ff953fdbfb6f17b8c38bb87c55bd4ae75b786b47f6423477e412f13c3d2935b32"], 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)={0x34, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) r8 = socket(0x10, 0x3, 0x0) getsockopt$nfc_llcp(r8, 0x10e, 0xa, 0x0, 0x20000000) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1314.089492][T16750] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1314.652536][T25117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:27 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xc1ffffff}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:27 executing program 4: bpf$MAP_CREATE(0xa, &(0x7f0000000000)=@base={0x1d}, 0x8) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, r0, 0x235, 0x0, 0x0, {}, [{{0x8, 0x1, r1}, {0x4}}]}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="350200000000000000000300000008000100", @ANYRES32=r5, @ANYBLOB="ff000280"], 0x20}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000180)) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @initdev}, &(0x7f0000000240)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) 03:48:27 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x97, 0x0, &(0x7f00000000c0)) 03:48:27 executing program 2: ioperm(0x0, 0x2, 0x6) futex_waitv(0x0, 0x0, 0x3, 0x0, 0x0) [ 1314.732147][T25155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1314.950286][T16750] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1315.562243][T25162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:29 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:29 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x80}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xb6}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000009c0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x0, {0x0, 0x5a, "dabd5115f2ffb561a538ed0a6bc04ce2127f6ce9061b1421274eba94ecff9d0bce718722197faf5cde7aeaf0a48234b85f5c9b65a3bb084640ae5ce2b725d557d424acb5a6c9f8122a6fd78410d8343304abb34b021f0853eee8"}}, 0x5f) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001040)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000002}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 03:48:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2}, 0x1c) listen(r0, 0x1000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000100)=0x41, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x2, @dev}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff00000002ad89000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 03:48:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x26}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 03:48:29 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xc2ffffff}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303, 0x38}, "837ad552eed22b08", "e420000021000000000800", '\x00', "0000ff45004fffff"}, 0x28) setsockopt$inet6_tcp_TCP_ULP(r0, 0x29, 0x1f, 0x0, 0x4) 03:48:29 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01f80000000000000008020000000900010073797a30000000000900030073797a3200000000140004800800014000000002080002"], 0xdc}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000080)=""/100, 0x64}], 0x1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) [ 1316.823768][T25083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x44}}, 0x0) [ 1316.902225][T25196] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:48:29 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x4b, 0x0, 0xfff8, 0x8003, 0x0, "00030000000000fa"}) 03:48:29 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 32) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (rerun: 32) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x80}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xb6}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f00000009c0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x0, {0x0, 0x5a, "dabd5115f2ffb561a538ed0a6bc04ce2127f6ce9061b1421274eba94ecff9d0bce718722197faf5cde7aeaf0a48234b85f5c9b65a3bb084640ae5ce2b725d557d424acb5a6c9f8122a6fd78410d8343304abb34b021f0853eee8"}}, 0x5f) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 32) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (rerun: 32) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:29 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1}}}}) [ 1316.944498][T25173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1317.011953][T25212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1317.022720][T25221] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1317.039379][T25221] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1317.048833][T25221] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 03:48:30 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:30 executing program 2: syz_clone(0x8300080, 0x0, 0x0, 0x0, 0x0, 0x0) 03:48:30 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB="01000000"], 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x32, 0xe, {@wo_ht={{0x0, 0x2, 0x3}, {}, @broadcast, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}]]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0x800, @from_mac=@device_b, @device_b}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40044) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:30 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46000000000000000000000000020003000000000000000000380000000000000000000000000020"], 0x38) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 03:48:30 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xc3ffffff}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:30 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46000000000000000000000000020003000000000000000000380000000000000000000000000020"], 0x38) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 03:48:30 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000940)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="d082cebe62f8bfc31d212705fbb8b8490368ebf2badf50c137ba67e1476b095abebd68767f5718b4450c0d55c638c7dbc716f770a25a13e0bd7ae182a0d8e75bb0919436a66e9c5b007cc721a674acb115e2e64f5bf06ac68225c489b28698bf03cc6ff681707d0647", 0x69}, {&(0x7f0000001340)="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", 0x1be}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="daeb3f32f9a24d9be98d7dfe0cb643fac97830643cc8636c67d4f1dd69640cf976aa970fa79faa7c1f90c4b6d9eee23b070ea4b3491a768c77bacdd9c8f51e28c285e86fe47821445cdad3f7ff1027a523cb2a4250883060eaa7c4d7acf7e76b874baf3e393f210c9568ea6cea00adaceaa8c2c2773de7017f510fe3c03e7b0cef6cc1f9be32a64fec66aa3c986722882be196cf50b37228908bbd52ac9f5990b26a", 0xa2}, {&(0x7f0000000400)="b024639830020fc3dc5bf0f82f3ff91c646995d3f85a416c7eadce2620683c5c327aadb3fb16d72eb3c153c8ec05831f3b149a48e571", 0x36}, {&(0x7f0000000640)="1921da163e2e49bf4ff79cf4fb129348bbcd677882e335d02656dc475b4dbb1db8d8e61d694d23ebaeb2c881a8d98f16f6ce2c122757885b7fa34ba6092873d3aa6169b4048e45f76603588f287d", 0x4e}], 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="1400000000000000000000000100000001000000000000001400000000000000000000000100000000100000000000001400000000000000000000000200000001000080000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000011000000000000000000000001000000030000000000000014000000000000000000000001000000400000000000000064000000000000000000000007000000864f000000010607367c3a8845060e9006ffc43fce4dae503feee1020e8292d40f664e0e761619492b01084f51e55ad65901056eb9e8000f750fe613786f919d1d94a5e6cc010a1efda099a22834679404010000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="64010101640101020000000014"], 0x138}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 03:48:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3f, 0x7fe2, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdeb2912}, 0x10}, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000180), 0x0}, 0x20) 03:48:30 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46000000000000000000000000020003000000000000000000380000000000000000000000000020"], 0x38) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 03:48:30 executing program 2: timer_create(0x0, &(0x7f0000000100)={0x0, 0x21}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) 03:48:30 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46000000000000000000000000020003000000000000000000380000000000000000000000000020"], 0x38) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 03:48:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)=0xffffffffffffffff) [ 1317.857156][T16741] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1317.907217][T16741] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:48:31 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:31 executing program 1: ioperm(0x0, 0x200, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 03:48:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000940)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="d082cebe62f8bfc31d212705fbb8b8490368ebf2badf50c137ba67e1476b095abebd68767f5718b4450c0d55c638c7dbc716f770a25a13e0bd7ae182a0d8e75bb0919436a66e9c5b007cc721a674acb115e2e64f5bf06ac68225c489b28698bf03cc6ff681707d0647", 0x69}, {&(0x7f0000001340)="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", 0x1be}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="daeb3f32f9a24d9be98d7dfe0cb643fac97830643cc8636c67d4f1dd69640cf976aa970fa79faa7c1f90c4b6d9eee23b070ea4b3491a768c77bacdd9c8f51e28c285e86fe47821445cdad3f7ff1027a523cb2a4250883060eaa7c4d7acf7e76b874baf3e393f210c9568ea6cea00adaceaa8c2c2773de7017f510fe3c03e7b0cef6cc1f9be32a64fec66aa3c986722882be196cf50b37228908bbd52ac9f5990b26a", 0xa2}, {&(0x7f0000000400)="b024639830020fc3dc5bf0f82f3ff91c646995d3f85a416c7eadce2620683c5c327aadb3fb16d72eb3c153c8ec05831f3b149a48e571", 0x36}, {&(0x7f0000000640)="1921da163e2e49bf4ff79cf4fb129348bbcd677882e335d02656dc475b4dbb1db8d8e61d694d23ebaeb2c881a8d98f16f6ce2c122757885b7fa34ba6092873d3aa6169b4048e45f76603588f287d", 0x4e}], 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="1400000000000000000000000100000001000000000000001400000000000000000000000100000000100000000000001400000000000000000000000200000001000080000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000011000000000000000000000001000000030000000000000014000000000000000000000001000000400000000000000064000000000000000000000007000000864f000000010607367c3a8845060e9006ffc43fce4dae503feee1020e8292d40f664e0e761619492b01084f51e55ad65901056eb9e8000f750fe613786f919d1d94a5e6cc010a1efda099a22834679404010000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="64010101640101020000000014"], 0x138}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 03:48:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000940)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="d082cebe62f8bfc31d212705fbb8b8490368ebf2badf50c137ba67e1476b095abebd68767f5718b4450c0d55c638c7dbc716f770a25a13e0bd7ae182a0d8e75bb0919436a66e9c5b007cc721a674acb115e2e64f5bf06ac68225c489b28698bf03cc6ff681707d0647", 0x69}, {&(0x7f0000001340)="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", 0x1be}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="daeb3f32f9a24d9be98d7dfe0cb643fac97830643cc8636c67d4f1dd69640cf976aa970fa79faa7c1f90c4b6d9eee23b070ea4b3491a768c77bacdd9c8f51e28c285e86fe47821445cdad3f7ff1027a523cb2a4250883060eaa7c4d7acf7e76b874baf3e393f210c9568ea6cea00adaceaa8c2c2773de7017f510fe3c03e7b0cef6cc1f9be32a64fec66aa3c986722882be196cf50b37228908bbd52ac9f5990b26a", 0xa2}, {&(0x7f0000000400)="b024639830020fc3dc5bf0f82f3ff91c646995d3f85a416c7eadce2620683c5c327aadb3fb16d72eb3c153c8ec05831f3b149a48e571", 0x36}, {&(0x7f0000000640)="1921da163e2e49bf4ff79cf4fb129348bbcd677882e335d02656dc475b4dbb1db8d8e61d694d23ebaeb2c881a8d98f16f6ce2c122757885b7fa34ba6092873d3aa6169b4048e45f76603588f287d", 0x4e}], 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="1400000000000000000000000100000001000000000000001400000000000000000000000100000000100000000000001400000000000000000000000200000001000080000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000011000000000000000000000001000000030000000000000014000000000000000000000001000000400000000000000064000000000000000000000007000000864f000000010607367c3a8845060e9006ffc43fce4dae503feee1020e8292d40f664e0e761619492b01084f51e55ad65901056eb9e8000f750fe613786f919d1d94a5e6cc010a1efda099a22834679404010000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="64010101640101020000000014"], 0x138}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 03:48:31 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB="01000000"], 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x32, 0xe, {@wo_ht={{0x0, 0x2, 0x3}, {}, @broadcast, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}]]}, 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0x800, @from_mac=@device_b, @device_b}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40044) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:31 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xfcffffff}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x15}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:48:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000940)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="d082cebe62f8bfc31d212705fbb8b8490368ebf2badf50c137ba67e1476b095abebd68767f5718b4450c0d55c638c7dbc716f770a25a13e0bd7ae182a0d8e75bb0919436a66e9c5b007cc721a674acb115e2e64f5bf06ac68225c489b28698bf03cc6ff681707d0647", 0x69}, {&(0x7f0000001340)="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", 0x1be}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="daeb3f32f9a24d9be98d7dfe0cb643fac97830643cc8636c67d4f1dd69640cf976aa970fa79faa7c1f90c4b6d9eee23b070ea4b3491a768c77bacdd9c8f51e28c285e86fe47821445cdad3f7ff1027a523cb2a4250883060eaa7c4d7acf7e76b874baf3e393f210c9568ea6cea00adaceaa8c2c2773de7017f510fe3c03e7b0cef6cc1f9be32a64fec66aa3c986722882be196cf50b37228908bbd52ac9f5990b26a", 0xa2}, {&(0x7f0000000400)="b024639830020fc3dc5bf0f82f3ff91c646995d3f85a416c7eadce2620683c5c327aadb3fb16d72eb3c153c8ec05831f3b149a48e571", 0x36}, {&(0x7f0000000640)="1921da163e2e49bf4ff79cf4fb129348bbcd677882e335d02656dc475b4dbb1db8d8e61d694d23ebaeb2c881a8d98f16f6ce2c122757885b7fa34ba6092873d3aa6169b4048e45f76603588f287d", 0x4e}], 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="1400000000000000000000000100000001000000000000001400000000000000000000000100000000100000000000001400000000000000000000000200000001000080000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000011000000000000000000000001000000030000000000000014000000000000000000000001000000400000000000000064000000000000000000000007000000864f000000010607367c3a8845060e9006ffc43fce4dae503feee1020e8292d40f664e0e761619492b01084f51e55ad65901056eb9e8000f750fe613786f919d1d94a5e6cc010a1efda099a22834679404010000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="64010101640101020000000014"], 0x138}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) [ 1318.545078][T25264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1318.570656][T25251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000940)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="d082cebe62f8bfc31d212705fbb8b8490368ebf2badf50c137ba67e1476b095abebd68767f5718b4450c0d55c638c7dbc716f770a25a13e0bd7ae182a0d8e75bb0919436a66e9c5b007cc721a674acb115e2e64f5bf06ac68225c489b28698bf03cc6ff681707d0647", 0x69}, {&(0x7f0000001340)="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", 0x1be}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="daeb3f32f9a24d9be98d7dfe0cb643fac97830643cc8636c67d4f1dd69640cf976aa970fa79faa7c1f90c4b6d9eee23b070ea4b3491a768c77bacdd9c8f51e28c285e86fe47821445cdad3f7ff1027a523cb2a4250883060eaa7c4d7acf7e76b874baf3e393f210c9568ea6cea00adaceaa8c2c2773de7017f510fe3c03e7b0cef6cc1f9be32a64fec66aa3c986722882be196cf50b37228908bbd52ac9f5990b26a", 0xa2}, {&(0x7f0000000400)="b024639830020fc3dc5bf0f82f3ff91c646995d3f85a416c7eadce2620683c5c327aadb3fb16d72eb3c153c8ec05831f3b149a48e571", 0x36}, {&(0x7f0000000640)="1921da163e2e49bf4ff79cf4fb129348bbcd677882e335d02656dc475b4dbb1db8d8e61d694d23ebaeb2c881a8d98f16f6ce2c122757885b7fa34ba6092873d3aa6169b4048e45f76603588f287d", 0x4e}], 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="1400000000000000000000000100000001000000000000001400000000000000000000000100000000100000000000001400000000000000000000000200000001000080000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000011000000000000000000000001000000030000000000000014000000000000000000000001000000400000000000000064000000000000000000000007000000864f000000010607367c3a8845060e9006ffc43fce4dae503feee1020e8292d40f664e0e761619492b01084f51e55ad65901056eb9e8000f750fe613786f919d1d94a5e6cc010a1efda099a22834679404010000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="64010101640101020000000014"], 0x138}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 03:48:31 executing program 2: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) 03:48:31 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000300), 0x0, &(0x7f0000000380)={0x8}, &(0x7f00000003c0), 0x0) 03:48:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000940)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="d082cebe62f8bfc31d212705fbb8b8490368ebf2badf50c137ba67e1476b095abebd68767f5718b4450c0d55c638c7dbc716f770a25a13e0bd7ae182a0d8e75bb0919436a66e9c5b007cc721a674acb115e2e64f5bf06ac68225c489b28698bf03cc6ff681707d0647", 0x69}, {&(0x7f0000001340)="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", 0x1be}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="daeb3f32f9a24d9be98d7dfe0cb643fac97830643cc8636c67d4f1dd69640cf976aa970fa79faa7c1f90c4b6d9eee23b070ea4b3491a768c77bacdd9c8f51e28c285e86fe47821445cdad3f7ff1027a523cb2a4250883060eaa7c4d7acf7e76b874baf3e393f210c9568ea6cea00adaceaa8c2c2773de7017f510fe3c03e7b0cef6cc1f9be32a64fec66aa3c986722882be196cf50b37228908bbd52ac9f5990b26a", 0xa2}, {&(0x7f0000000400)="b024639830020fc3dc5bf0f82f3ff91c646995d3f85a416c7eadce2620683c5c327aadb3fb16d72eb3c153c8ec05831f3b149a48e571", 0x36}, {&(0x7f0000000640)="1921da163e2e49bf4ff79cf4fb129348bbcd677882e335d02656dc475b4dbb1db8d8e61d694d23ebaeb2c881a8d98f16f6ce2c122757885b7fa34ba6092873d3aa6169b4048e45f76603588f287d", 0x4e}], 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="1400000000000000000000000100000001000000000000001400000000000000000000000100000000100000000000001400000000000000000000000200000001000080000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000011000000000000000000000001000000030000000000000014000000000000000000000001000000400000000000000064000000000000000000000007000000864f000000010607367c3a8845060e9006ffc43fce4dae503feee1020e8292d40f664e0e761619492b01084f51e55ad65901056eb9e8000f750fe613786f919d1d94a5e6cc010a1efda099a22834679404010000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="64010101640101020000000014"], 0x138}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) [ 1318.771937][T16747] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1318.822478][T16747] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:48:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) sendmmsg$unix(r1, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)='U', 0x1}], 0x1}}], 0x1, 0x404c801) 03:48:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x2001, 0x3, 0x2b0, 0x0, 0x800000a, 0x0, 0x108, 0x150, 0x218, 0x1e8, 0x1e8, 0x218, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @common=@unspec=@MARK={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'xfrm0\x00', 'veth1_macvtap\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x310) 03:48:32 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000940)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="d082cebe62f8bfc31d212705fbb8b8490368ebf2badf50c137ba67e1476b095abebd68767f5718b4450c0d55c638c7dbc716f770a25a13e0bd7ae182a0d8e75bb0919436a66e9c5b007cc721a674acb115e2e64f5bf06ac68225c489b28698bf03cc6ff681707d0647", 0x69}, {&(0x7f0000001340)="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", 0x1be}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="daeb3f32f9a24d9be98d7dfe0cb643fac97830643cc8636c67d4f1dd69640cf976aa970fa79faa7c1f90c4b6d9eee23b070ea4b3491a768c77bacdd9c8f51e28c285e86fe47821445cdad3f7ff1027a523cb2a4250883060eaa7c4d7acf7e76b874baf3e393f210c9568ea6cea00adaceaa8c2c2773de7017f510fe3c03e7b0cef6cc1f9be32a64fec66aa3c986722882be196cf50b37228908bbd52ac9f5990b26a", 0xa2}, {&(0x7f0000000400)="b024639830020fc3dc5bf0f82f3ff91c646995d3f85a416c7eadce2620683c5c327aadb3fb16d72eb3c153c8ec05831f3b149a48e571", 0x36}, {&(0x7f0000000640)="1921da163e2e49bf4ff79cf4fb129348bbcd677882e335d02656dc475b4dbb1db8d8e61d694d23ebaeb2c881a8d98f16f6ce2c122757885b7fa34ba6092873d3aa6169b4048e45f76603588f287d", 0x4e}], 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="1400000000000000000000000100000001000000000000001400000000000000000000000100000000100000000000001400000000000000000000000200000001000080000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000011000000000000000000000001000000030000000000000014000000000000000000000001000000400000000000000064000000000000000000000007000000864f000000010607367c3a8845060e9006ffc43fce4dae503feee1020e8292d40f664e0e761619492b01084f51e55ad65901056eb9e8000f750fe613786f919d1d94a5e6cc010a1efda099a22834679404010000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="64010101640101020000000014"], 0x138}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 03:48:32 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB="01000000"], 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x32, 0xe, {@wo_ht={{0x0, 0x2, 0x3}, {}, @broadcast, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}]]}, 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0x800, @from_mac=@device_b, @device_b}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40044) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:32 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:32 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xffffff7f}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1319.431805][T25321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1319.440597][T25294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x61, 0x0, 0x0) 03:48:32 executing program 1: r0 = socket$inet6(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) sendto$l2tp6(r1, &(0x7f0000000100)="cc906675da10ade9ca0c05e79cd9307d8957c76d89c08677d40f43edad0b33a096c8be398a9d047fc5fc6190d9f4ec6eb48612f7e1e67ed5040a3894b9cbf791a01002e3cdc613270550a08980d35426e6402226a6252616bf41403f8b27", 0x5e, 0x4040000, &(0x7f0000000180)={0xa, 0x0, 0x12, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x20) r2 = getgid() getsockname(r0, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000080)=0x80) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r3 = socket(0x5, 0xa, 0xd1b) r4 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r4, 0x9201) r5 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) r6 = getgid() r7 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r7, 0x9201) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x1, &(0x7f00000019c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x9, 0x5, 0x4, 0x10}], &(0x7f0000001a00)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x5, 0x7, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001ac0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000001b00)=[{0x3, 0x2, 0x9, 0xb}, {0x3, 0x4, 0x8, 0x1}, {0x0, 0x2, 0x2, 0xc}], 0x10, 0x729}, 0x90) r9 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r9, 0x9201) r10 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r10, 0x9201) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001c00)=0xffffffffffffffff, 0x4) r12 = socket$can_j1939(0x1d, 0x2, 0x7) r13 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001c40), 0x2, 0x0) socketpair(0x18, 0x4, 0x2, &(0x7f0000001c80)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff}) r16 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r16, 0x9201) r17 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r17, 0x9201) sendmmsg$unix(r1, &(0x7f0000002140)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000280)="6bd9f78414292ade17dcd899a4880e921f2589cacb22e67fcf3aaa7ee996478efa79aed7880786c8afcbeae7528f66ad27bb8e7e5610276c5f2eb0baec5f7eec6ed4dc303bfe28f89b23e3ec7e894288b98ab307b5ad94532dc2b453ab82b8f246e8fb", 0x63}, {&(0x7f0000000300)="762033889a81afbeea260ff661042efa06c65887bd008c14b0615ff94ed85bbb8ad863ff58ab363aae96a5bb714f79a6ad4d3c9002c1c47fc274f2aff951b331c8ef2065961417e0feea9f5a0c48466003975f7b771d6806c74478e5f9b361fb6a02daa511bf2565f4c8f24731654ff3d7ee0eb92493e9edc8c4c0d0dcd00912c49a17f339a2059d103438349a1126380f5b0cba15a368c7ea2a1d7e21c6888e7c46e72a349c69cf20633cb078b580deff3f4819e0ad", 0xb6}], 0x2, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r2}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r2}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0, r0]}}], 0x118, 0x800}}, {{&(0x7f0000000780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000800)="01f23837d6d224a55757e74f61a01cce11d0e192dda0251793aaac8f6f1deef18f0c128eaf6ff2", 0x27}, {&(0x7f0000000840)="ba6bb741269a5e527fa080fe91dfadb545e7991a31466fd6207fc914b929a9c7ea27ee96de71a8c31ca6b94cf31b847da8effa95f54c25a9ad0f1092e2b4ca8516ce70bf6d4152fdc8e21f0d926527eae5fb241fa6c38cc964b59abfb11183fb", 0x60}, {&(0x7f00000008c0)="14e951425fd11a63f1b187b05f2b0cd3650c7aabd77cffe43cfd4199fd3d34d1a82cf14b79a08d7a1fb44595b6ca0bbdc25a1a6d36f86c5a4d07ebc0", 0x3c}, {&(0x7f0000000900)="a7624495008361e2bbfffd1fe933cb2dbd126e218d11b4334a9d506f93e333610356a6cedfead640708970b4afcfcfcbac40aa99523af8d2fbb0637629484c55a3111ddd543048e7070df9ac8656f72f2bc7dc144876140a7ff109e245cc9b79d3cfdf612e2ed0dc093eb9910d3bbbc9bc8cce65be8b", 0x76}, {&(0x7f0000000980)="3f3c501d8cc9e7748cbae02ce1a77c164888851e8ec9b6c58234b0a52e23bff299a669462031397efe74b84a48a1018fd342733bf8b7dc626a160cede1a3244218ca70973b8a138352bac764863b39e1de4f3ae008edbd90f024210b699cccf126dd7b6c1243294e641df9d71d7e9052159c388677466d3ccb3d427e90744488a949d2dec44696f7343a6fad849bddf51d7527fa14315cdeb4602e5f5df30892d1d1b927ce0ab762cc48ef985efbac9be63f2897d948151c0f280eecb4b636ff6dbf103c38b9a98347ad836a126d810c3a38b1b2fa1cbc48946f04a09236ff44b159a3aed2", 0xe5}, {&(0x7f0000000a80)="4eb21a287a0d9976c6981794dc67a0806bdaa32f2672a1cef34500ba3780bde80bec0068de73a8a431f97b00702839ad08b3bcd365197e4e3aeedfdc05dd2b57e251458186c0016018b13a13f2b0a0576cef03c45dd6", 0x56}, {&(0x7f0000000b00)="747ed3f5646e1e8905755e6c822322d4f87725dd22242db598299e8506044e9a07f801ca30db546f62cce428105618e44262f814013ebe43b142a2842d8e2334ca66be9c45b72daa0d903f477394521b0f70bdc4bf6ab69ef7c739123a369da62ef8227fd96d71c805a28e307856f94359811952dade1d6e47f4c6145de0e89927d8", 0x82}, {&(0x7f0000000bc0)="19be480173888d413155b4b354", 0xd}, {&(0x7f0000000c00)="766cdd611aba627ec8ce1326f9174070c41f8c2a6f880175f2fe41d042d679ff8927c5703f2cddae5736c7362bfbc83e6af6273aba8e0567e22b3fa8f5d08a022dfd92a4", 0x44}], 0x9, &(0x7f0000000d80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18, 0x4040000}}, {{&(0x7f0000000dc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000e40)="8c52a5796e991dc452b392ee1512357671a4f0d7cb26433e397de45978bf791559b7f26cc1f5e3846e4d635ffe0b2c84a578df100a358adf33ddfbbaf1cbf2440c51ec08882f959b66b0b9601df49b12d43cb862d5ee360001e781938f368d9c0d3bfdb43dba5e176fb4a17a2a8f9a60fb92e9017457dbbfeab1fcdd13ecc9", 0x7f}], 0x1, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r0]}}], 0xa0}}, {{&(0x7f0000001000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001080)="0d9313b9c3666ebd75c37173ee7989f290eda1f7b2922a8098ec0f6d0937f6e6ad48e551bb48a87888b1bf29ec69053de7f3", 0x32}, {&(0x7f00000010c0)="a1c6cdcd890b63e1efb443242799aba4be3764e0a8e961ebf627f80b23e59cc0c7e59013fd4b3cf6bf05d37843e74c75c35bc6ce3f92092f94d9425cbd1088157d2d0ffdcc9b80c688e7473fabe03b6e25f61e3088a2b6fa434f8ee000799624fd03f043b405e0ae4584e9575c457fa2693ab89966fc8911720fb1db9fdb7e1b5f566140cbe97d27e1d4c640d589daeda6416cf0f5dfe54d4ffe0e53b869f271f0685e691dad84b7d115a21fdb6959974c61eb9e07e48a53ca2892f5152db8c4e6a30039aed6e31732ddd0c200", 0xcd}], 0x2}}, {{&(0x7f0000001200)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000001280)="12a77d2f61a6c4235976054d4277060cc80021d4173deccb938a2b3edae696d94ade613a6e10a7923efcb9bcd5af147cfa421800462146f38e8a56cfd76ebcc44bac05d365c558182558fb67fbe18277785b85af632c7be2ef9b9d3488db4a598db5c19395bc28150603338c73db5c9f81297ab9f78cede45bc9f9b1441b049f9d", 0x81}, {&(0x7f0000001340)="7cf3ce718b43a622c4bbf48a8f8c161930d5f2038c62fa0c6c9befe8001c6f90ef31660660078905af11231678db3551d8ed47cfe1283c0c3975d752b4aea313825c78dc53101f987e3720cf4b33edb0d734d1aeefc6b78dd5c1c7aa2a699e2cad1184351b8620fb53cd96f28251f46b1e40b5824f4c55712dd4282463e6620393736160e7c2f41c72f96b47d2b85e0026", 0x91}], 0x2, &(0x7f0000001740)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r2}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68, 0x7a5264b0445d5ba8}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)="0f40b4a2933b5d3e20806b9cca5271f2fe", 0x11}, {&(0x7f0000001800)="1b3355e7f3bce37653284918a8131502bd7e9157035770ef440ffb7b6923bc446a922be83dd28f4d04383a1c21c19540f120c9a457ff556be7b15031a2e7e55e558cdb740af4b7057dbadf8790c2eeb12ac2605e2bd52a7eac7fa6b2", 0x5c}, {&(0x7f0000001880)="b4745d2579ec0778898b66ca212b27dff67732c66603e2b1921ef53b4342fe7a4bdb40e902323c9c403faae2a6438323611f99cbfdcc95cbe652dc6352c1274fdbb9812ecc79f388882598031800c5c199b99256a3f455dbc563bddeccaf91db4e99880e49b179c954461b911b6343c12cbf06702bf842e30b1c43de33fcdeffad77ccd0f911fee878cdb2adb163d060ebd03b44ff8c451acb1e48e361167a7e55d8f7887ec0a0c9cfccf9eff2639b6c1381facaf5821576e15b8e805d638cc571f4f000387235793930ac423a0e0e6272e8d32d11801b995f7701bfaa", 0xdd}], 0x3, &(0x7f0000001d00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, r1, r4, r5]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r6}}}, @rights={{0x24, 0x1, 0x1, [r7, r1, r1, r8, r9]}}, @rights={{0x28, 0x1, 0x1, [r10, r0, r11, r0, r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, r12]}}, @rights={{0x20, 0x1, 0x1, [r13, 0xffffffffffffffff, r0, r1]}}, @rights={{0x2c, 0x1, 0x1, [r14, r0, r15, 0xffffffffffffffff, r16, r17, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}], 0x138, 0x40880}}, {{&(0x7f0000001e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000001ec0)="1cc0e7ae8a4ef853a7a5985691ad4fb82509ccca6dd27c654c146f3d19bf7ba3b3dd184a3e3291b0fce33ea77b4bf7462134b2a0b8a414f4c1a8363b427f39a73170d4567f8cf5fa635418e644bc078b4b7d53ed4ceadffd8807f968d7d5d320f57fd6d385f05ebd1ec5efd366ee1fb1c7d2815c4d19c152e87fa59915760d2c3ae5180e5ae00419b5e42dd75489b7d4a838391cce2658a202b3e4cc90f479fb90742c0cd2a7fa0694c4caa8e444b85c9f9ea8404269ed51", 0xb8}, {&(0x7f0000001f80)="8753ac3de29f432d89b5fe3326f095f852", 0x11}, {&(0x7f0000001fc0)="6214ab8e789b34c4816eb32d97f3a40c5a05170c006916f8949a43ace83086e75e074b81635a2c4dbfa866eb4822e240666fc523e1d4691a1bd93c971c609f4cccf2f7daae830949e22013db9e9869f83685bf6b7f1d940ff816c14810d931a287b2a55adf22f8a5785e1180994caa0ea901921fcc8a0175a0ade9ee6eb644ea3d3bae0cf5e813dac4927ff308381d6c63d6be42", 0x94}, {&(0x7f0000002080)="e85391c35c324a06c86332bd6573d97530d3543f55d63d54478d127bf45434ca379e4f8a34fc185bf5315c72685df76b05a31f5d00ddaddf91ccba20c04848b3cb2590d40400d52f65efb8b3f901b2073c39a568d79d", 0x56}], 0x4, 0x0, 0x0, 0x1}}], 0x7, 0x80) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000001c0)={0x1, 'vlan0\x00', {}, 0x3}) 03:48:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@RTM_NEWMDB={0x18, 0x55, 0x1}, 0x18}}, 0x0) 03:48:32 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0xb}, 0x20) [ 1319.476352][T25336] xt_limit: Overflow, try lower: 0/0 [ 1319.486158][T25326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 03:48:32 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) dup2(r1, r0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r1, r0, 0x4}, 0x10) 03:48:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@RTM_NEWMDB={0x18, 0x55, 0x1}, 0x18}}, 0x0) 03:48:32 executing program 2: futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x2000000) [ 1319.545808][T25355] veth0_vlan: left promiscuous mode 03:48:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@RTM_NEWMDB={0x18, 0x55, 0x1}, 0x18}}, 0x0) 03:48:32 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x24}}, 0x4481d) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x6010}, 0x18) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="41030800"], 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x84, 0x1, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x3c, 0x6, "184f2d151c5969902cf2570ddcebfd1ebb398164593a9ed3c11ca678ccb8793df3c6b6deab1d4b1dd9222fd35f7b4e11a49f8bc7d7cb96fa"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004005) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x10001, 0x3f}}, './file0\x00'}) write$nci(r4, &(0x7f0000000900)=@DATA={0x3, 0x1, 0x0, 0x0, 0x2, "3bb67de74bd446abfab5d9ed626b1d812f052775a49389c5d78ea5ff61b7b7bd3193993dbe6bff38156a503f91706aa9e9cd46b99fa739264671a488f583ffcfa635a14c443cfeebb62a029fdc4011cf13cf851dedf8abe5dfa55a827f634587e31e4b9099ec39637b7dcc25be7f90ff6c925228973aeaf9a744a304e315e2e248164d520c8160"}, 0x8a) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1319.604053][T16750] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1319.689930][T25381] ================================================================== [ 1319.698086][T25381] BUG: KCSAN: data-race in virtual_nci_send / virtual_ncidev_read [ 1319.705891][T25381] [ 1319.708211][T25381] write to 0xffff88813328cb08 of 8 bytes by task 16747 on cpu 0: [ 1319.715918][T25381] virtual_nci_send+0x84/0xe0 [ 1319.720672][T25381] nci_cmd_work+0x15c/0x1a0 [ 1319.725164][T25381] process_scheduled_works+0x5b8/0xa30 [ 1319.730620][T25381] worker_thread+0x525/0x730 [ 1319.735194][T25381] kthread+0x1d7/0x210 [ 1319.739247][T25381] ret_from_fork+0x48/0x60 [ 1319.743645][T25381] ret_from_fork_asm+0x11/0x20 [ 1319.748399][T25381] [ 1319.750708][T25381] read to 0xffff88813328cb08 of 8 bytes by task 25381 on cpu 1: [ 1319.758500][T25381] virtual_ncidev_read+0x90/0x2b0 [ 1319.763517][T25381] vfs_read+0x19f/0x5c0 [ 1319.767793][T25381] ksys_read+0xeb/0x1a0 [ 1319.772032][T25381] __x64_sys_read+0x42/0x50 [ 1319.776609][T25381] do_syscall_64+0x41/0xc0 [ 1319.781006][T25381] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1319.786974][T25381] [ 1319.789288][T25381] value changed: 0x0000000000000000 -> 0xffff88813a147600 [ 1319.796376][T25381] [ 1319.798678][T25381] Reported by Kernel Concurrency Sanitizer on: [ 1319.804809][T25381] CPU: 1 PID: 25381 Comm: syz-executor.5 Tainted: G W 6.6.0-rc1-syzkaller-00033-g3669558bdf35 #0 [ 1319.816696][T25381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1319.826751][T25381] ================================================================== [ 1319.990504][T16741] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:48:32 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:32 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000140), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/152, 0x98}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000002440)={&(0x7f0000002380)={0x1d, r3}, 0x10, &(0x7f0000002400)={&(0x7f00000023c0)=@can={{}, 0x0, 0x0, 0x4, 0x0, "bc3b2faec60e7db4"}, 0x10}}, 0x0) 03:48:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@RTM_NEWMDB={0x18, 0x55, 0x1}, 0x18}}, 0x0) 03:48:32 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xffffffa0}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:32 executing program 4: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d45cb388dd965f4e8112779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x48) 03:48:32 executing program 4: sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x200, 0x101301) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000140)={0x0, 0x8, 0x120000, {r1}}, 0x20) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 1320.305979][T25331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:32 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="6d69da32d513b621b2f0fe869a7b010f6c5eebdb03f2512fef6f45c7eb522d4b855548a02607a3061796f07192555ef75f13dc323147c480c0e36596eb08d594bedc06"], 0x9) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x80800, 0x0) openat$cgroup_ro(r4, &(0x7f00000013c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000005c00)=ANY=[@ANYBLOB, @ANYBLOB="c697ca307b6d12310ec0d3726c915e2a64690383502c0b7c279e05be352428c3329557ba75b55d685b3cea45ef1ddbf48ed1cf9fff4b0d1f83ffcb0fd9", @ANYRES16=r5]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000003c0)={{r2}, r5, 0x4, @unused=[0xffff, 0x8, 0x3, 0x2], @subvolid=0x4}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) pread64(r6, &(0x7f0000000080)=""/179, 0xb3, 0x2a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'gretap0\x00'}) r7 = gettid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r7, 0x0, 0xffffffffffffffff, 0x4) 03:48:33 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x2, &(0x7f0000000700)=@raw=[@call={0x85, 0x0, 0x0, 0x2d}, @exit], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 03:48:33 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x4, 0x3, 0x73, 0x0, 0x20000000000003, 0x400, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0xaa8}, 0x0, 0x3, 0x4, 0x4, 0x87, 0x5, 0x2, 0x0, 0x40, 0x0, 0xffffffff}, r0, 0xe, 0xffffffffffffffff, 0xb) r2 = getpid() perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0x81, 0xff, 0x3, 0x67, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x11021, 0x29, 0x2, 0x6, 0x7, 0xfffffffb, 0x0, 0x0, 0x4, 0x0, 0x2}, r2, 0xc, r1, 0x9) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x5, 0x0, 0x5, 0xb, 0x0, 0x7, 0x8000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x80000001, 0x8}, 0x10000, 0x1000, 0x0, 0x0, 0xc, 0x0, 0xffc0, 0x0, 0x8e, 0x0, 0x400}, 0xffffffffffffffff, 0xc, r0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x70d3a01bc75f6180, 0x40, 0x5, 0x7f5b, 0x1000, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x9, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x7ff, 0x0}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086607, &(0x7f0000000040)) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000008c0), 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1896d702000091c0f79f1c066e75050000e1fd00000000000000"], &(0x7f0000000340)='GPL\x00', 0x1, 0x1000, &(0x7f0000000d40)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x7, 0x2, 0x8, 0xffffffff}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[r5]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x8, 0x101, 0x280, 0x911, r5, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0xffffffff, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x53, &(0x7f00000003c0)=""/83, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x4, 0x8, 0x3}, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, 0x0, 0x25, 0x19}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x19) openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.bfq.sectors\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001d40)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)=""/20, 0x28, 0x65}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x20000117, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0xf}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40), 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @alu={0x7, 0x1, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffffd}, @btf_id={0x18, 0xd, 0x3, 0x0, 0x5}, @ldst={0x2, 0x2, 0x4, 0x0, 0xa, 0xc, 0x10}, @jmp={0x5, 0x1, 0x6, 0x7, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc}, @generic={0x2, 0xd, 0x1, 0x80, 0xffff0001}]}, &(0x7f0000000600)='syzkaller\x00', 0x3, 0x6f, &(0x7f0000000a80)=""/111, 0x41100, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000780)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x2, 0x7, 0x200, 0x3ff}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000bc0)=[{0x2, 0x3, 0x6, 0x6}, {0x5, 0x5, 0x9, 0x6}, {0x3, 0x3, 0x8, 0x8}], 0x10, 0x7fffffff}, 0x90) [ 1320.405623][ T27] audit: type=1400 audit(2000000912.959:9006): avc: denied { ioctl } for pid=25410 comm="syz-executor.1" path="socket:[150196]" dev="sockfs" ino=150196 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1320.408549][T25407] hub 2-0:1.0: USB hub found [ 1320.440713][T25407] hub 2-0:1.0: 8 ports detected [ 1320.443915][T16741] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:48:33 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @random="7f0a00030200", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @empty, {[@generic={0x0, 0x10, "f4000000000000330000000086dd"}, @cipso={0x86, 0x2d, 0x0, [{0x0, 0xb, "80389986e7326a9b0d"}, {0x0, 0x8, "eddc50fd6d69"}, {0x0, 0x12, "3f01fa8248c6bf2535db4833b5ea3c6b"}, {0x0, 0x2}]}]}}}}}}}, 0x0) 03:48:33 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x24}}, 0x4481d) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x6010}, 0x18) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="41030800"], 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x84, 0x1, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x3c, 0x6, "184f2d151c5969902cf2570ddcebfd1ebb398164593a9ed3c11ca678ccb8793df3c6b6deab1d4b1dd9222fd35f7b4e11a49f8bc7d7cb96fa"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004005) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x10001, 0x3f}}, './file0\x00'}) write$nci(r4, &(0x7f0000000900)=@DATA={0x3, 0x1, 0x0, 0x0, 0x2, "3bb67de74bd446abfab5d9ed626b1d812f052775a49389c5d78ea5ff61b7b7bd3193993dbe6bff38156a503f91706aa9e9cd46b99fa739264671a488f583ffcfa635a14c443cfeebb62a029fdc4011cf13cf851dedf8abe5dfa55a827f634587e31e4b9099ec39637b7dcc25be7f90ff6c925228973aeaf9a744a304e315e2e248164d520c8160"}, 0x8a) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:33 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="6d69da32d513b621b2f0fe869a7b010f6c5eebdb03f2512fef6f45c7eb522d4b855548a02607a3061796f07192555ef75f13dc323147c480c0e36596eb08d594bedc06"], 0x9) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x80800, 0x0) openat$cgroup_ro(r4, &(0x7f00000013c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000005c00)=ANY=[@ANYBLOB, @ANYBLOB="c697ca307b6d12310ec0d3726c915e2a64690383502c0b7c279e05be352428c3329557ba75b55d685b3cea45ef1ddbf48ed1cf9fff4b0d1f83ffcb0fd9", @ANYRES16=r5]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000003c0)={{r2}, r5, 0x4, @unused=[0xffff, 0x8, 0x3, 0x2], @subvolid=0x4}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) pread64(r6, &(0x7f0000000080)=""/179, 0xb3, 0x2a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'gretap0\x00'}) r7 = gettid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r7, 0x0, 0xffffffffffffffff, 0x4) [ 1320.466577][T25375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:33 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x7}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:33 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="6d69da32d513b621b2f0fe869a7b010f6c5eebdb03f2512fef6f45c7eb522d4b855548a02607a3061796f07192555ef75f13dc323147c480c0e36596eb08d594bedc06"], 0x9) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x80800, 0x0) openat$cgroup_ro(r4, &(0x7f00000013c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000005c00)=ANY=[@ANYBLOB, @ANYBLOB="c697ca307b6d12310ec0d3726c915e2a64690383502c0b7c279e05be352428c3329557ba75b55d685b3cea45ef1ddbf48ed1cf9fff4b0d1f83ffcb0fd9", @ANYRES16=r5]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000003c0)={{r2}, r5, 0x4, @unused=[0xffff, 0x8, 0x3, 0x2], @subvolid=0x4}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) pread64(r6, &(0x7f0000000080)=""/179, 0xb3, 0x2a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'gretap0\x00'}) r7 = gettid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r7, 0x0, 0xffffffffffffffff, 0x4) 03:48:33 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 64) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x24}}, 0x4481d) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x6010}, 0x18) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="41030800"], 0x4) (rerun: 64) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x84, 0x1, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x3c, 0x6, "184f2d151c5969902cf2570ddcebfd1ebb398164593a9ed3c11ca678ccb8793df3c6b6deab1d4b1dd9222fd35f7b4e11a49f8bc7d7cb96fa"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004005) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x10001, 0x3f}}, './file0\x00'}) write$nci(r4, &(0x7f0000000900)=@DATA={0x3, 0x1, 0x0, 0x0, 0x2, "3bb67de74bd446abfab5d9ed626b1d812f052775a49389c5d78ea5ff61b7b7bd3193993dbe6bff38156a503f91706aa9e9cd46b99fa739264671a488f583ffcfa635a14c443cfeebb62a029fdc4011cf13cf851dedf8abe5dfa55a827f634587e31e4b9099ec39637b7dcc25be7f90ff6c925228973aeaf9a744a304e315e2e248164d520c8160"}, 0x8a) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async, rerun: 64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (rerun: 64) 03:48:33 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xffffffa1}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 03:48:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x3e) poll(&(0x7f0000000080)=[{r0}, {r0}], 0x2, 0x643) dup2(r0, r1) 03:48:33 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="6d69da32d513b621b2f0fe869a7b010f6c5eebdb03f2512fef6f45c7eb522d4b855548a02607a3061796f07192555ef75f13dc323147c480c0e36596eb08d594bedc06"], 0x9) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x80800, 0x0) openat$cgroup_ro(r4, &(0x7f00000013c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000005c00)=ANY=[@ANYBLOB, @ANYBLOB="c697ca307b6d12310ec0d3726c915e2a64690383502c0b7c279e05be352428c3329557ba75b55d685b3cea45ef1ddbf48ed1cf9fff4b0d1f83ffcb0fd9", @ANYRES16=r5]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000003c0)={{r2}, r5, 0x4, @unused=[0xffff, 0x8, 0x3, 0x2], @subvolid=0x4}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) pread64(r6, &(0x7f0000000080)=""/179, 0xb3, 0x2a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'gretap0\x00'}) r7 = gettid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r7, 0x0, 0xffffffffffffffff, 0x4) [ 1321.172243][T25395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x3e) poll(&(0x7f0000000080)=[{r0}, {r0}], 0x2, 0x643) dup2(r0, r1) 03:48:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000200)='6p', 0x2, 0x8101, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20d6, 0x4000090, 0x0, 0x27) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000180)=0x40) 03:48:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a20033000301000a000002a257fc5ad90200bb6a880000d6c8db0000dba67e06020000e28900000200df01800a000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2", 0xb8) 03:48:33 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 03:48:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x20000) fallocate(r0, 0x20, 0x0, 0x2000) [ 1321.313698][T25440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1321.331347][T16747] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1321.469407][T16747] nci: nci_add_new_protocol: the target found does not have the desired protocol 03:48:34 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:34 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="897b428e75eb"}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="02034c00040044070c030c2cfff57b016d2763bd563786dd398d537503e52b02591f111ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa02b801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x2378, 0x4000002, 0x0, 0x2ff) 03:48:34 executing program 1: kexec_load(0x0, 0x1, &(0x7f00000013c0)=[{0x0, 0x0, 0x100000000, 0xffffffffffffff2f}], 0x0) 03:48:34 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xffffffb0}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x3e) poll(&(0x7f0000000080)=[{r0}, {r0}], 0x2, 0x643) dup2(r0, r1) 03:48:34 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x0, 0x0, {0x5}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0x14, r5, 0x400, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000009c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=r1, @ANYBLOB="08000300ffffffff24e0d3f5b479e4fb9c116de00aaf69c44e46850ce70660efc4fb7d6ef8abbf656810ac13816d6a3efbce6f0bfc1ea33dc82d343677b4e1d8768bcaa857739b859b97fde661398378786f38c18bf7f8a65e915c113a6326a3d068284841fde0ccb30bd125709e0d03ac8246d02538e0b4cf7a60c89ef70b54843c44f2d5ea155997852799ab9e6a9e2c599913419478ca0944e358575019e988c1ab23ce2a0f9a59c69b6fb2318b1e557da6d9b7ed3b92041d81c0"], 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="40020000000c0d9fe4258d8755c5ff6b0d24929fe8cef17f4f5e46da6d4d1e4f92c9c257bf2518c995814812c5733fdefa4ab3af75f6a5743a7a940ea6e831b2"], 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010023010000340200001c00000008000100d4", @ANYRES32=r1, @ANYBLOB="08000400000000000800030001000000"], 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:34 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000e88e"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 03:48:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@ipmr_delroute={0x28, 0x18, 0x831, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) [ 1322.032777][T25441] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1322.048904][T25472] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/wireless\x00') preadv(r0, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/147, 0x93}], 0x1, 0x0, 0x0) 03:48:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffebe, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x34, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0xa2}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x4, 0xa}]}]}, 0x34}}, 0x0) 03:48:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x20, 0x3, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) 03:48:34 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000140)={0x0, 0x0}, 0x10) [ 1322.328480][T16750] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1322.483610][T25525] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1322.932164][T25499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:37 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:37 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xffffffb1}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x20, 0x1a, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x68}}, 0x0) 03:48:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x3e) poll(&(0x7f0000000080)=[{r0}, {r0}], 0x2, 0x643) dup2(r0, r1) 03:48:37 executing program 1: shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/241) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) r1 = getegid() r2 = gettid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0xffffffffffffffff, 0xee01, r1, 0x108}, 0x4, 0x5, 0x23e, 0x3, 0xffffffffffffffff, r2, 0x2}) r3 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_RMID(r3, 0x0) r4 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r4, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) 03:48:37 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x0, 0x0, {0x5}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0x14, r5, 0x400, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000009c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=r1, @ANYBLOB="08000300ffffffff24e0d3f5b479e4fb9c116de00aaf69c44e46850ce70660efc4fb7d6ef8abbf656810ac13816d6a3efbce6f0bfc1ea33dc82d343677b4e1d8768bcaa857739b859b97fde661398378786f38c18bf7f8a65e915c113a6326a3d068284841fde0ccb30bd125709e0d03ac8246d02538e0b4cf7a60c89ef70b54843c44f2d5ea155997852799ab9e6a9e2c599913419478ca0944e358575019e988c1ab23ce2a0f9a59c69b6fb2318b1e557da6d9b7ed3b92041d81c0"], 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="40020000000c0d9fe4258d8755c5ff6b0d24929fe8cef17f4f5e46da6d4d1e4f92c9c257bf2518c995814812c5733fdefa4ab3af75f6a5743a7a940ea6e831b2"], 0x5) (async) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) (async) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010023010000340200001c00000008000100d4", @ANYRES32=r1, @ANYBLOB="08000400000000000800030001000000"], 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) (async) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:37 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=';', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001840), 0x27148e3ad6f70ee, 0x2, 0x0) 03:48:37 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYBLOB="860bac402582cdd363f2b8cd1f8a442e335c4a49d2eb3b0713353e7bc41944fca7a12d336964b03c65bd29f06945046900e9d6d5dfc599c40eb9bf91ba822e51bc6b45bd0235c50a4eb5445532c854c66da873ba840645f8b76aa3912802ab8cd0b231676cc1ca722331a97a245829be6fd05bc2ce8d11fa19f2e72e7e65395c99f9958c414ac34e81218aa3293b846751ab6e49e311fde35fe005a9fab42386eafbaea6b264f1605fed769b93ba03d23b726f6e5294016e82003acef81285596f92a85dbe2fff0cd5c8896e96546400e8008bc94304ffa0088965a6d3fe0b4df0126f43f374f4af22396871290626fc5de69673a08023244039", @ANYRES32], 0x1, 0x2e5, &(0x7f00000007c0)="$eJzs3M9P02AYwPGHMcY2At3BaDQxvNGLXhqYno2LgcS4RILM+CPRFOh0Wd3IumBmjOjJq/GP8EA4ciNR/gEu3vTixcQDFxMPcjDWrO1ggwIG2Iru+0lIH973fdr3pYU8L6Gs33nzpJi39bxRlUhcSY+IyIZISiLS0OMfI24ck2Yv5eLAj09nb929dyOTzY5NKjWembqUVkoNDb9/+jzhD1vpl7XUg/Xv6a9rJ9dOr/+eelywVcFWpXJVGWq6/KVqTFummi3YRV2pCcs0bFMVSrZZ8frLXn/eKs/N1ZRRmh1MzlVM21ZGqaaKZk1Vy6paqSnjkVEoKV3X1WBSAlk9we1dKbc4OWlkDpg8c8STQZtUKhmjV0QSO3pyi6FMCAAAhGp7/R+pl/RHV/8vnVutDtxeHvLr/5VYUP1/+bN3rpb6Py4i7aj/W+ysiLrLoep/HA/DsR1NrXvcev2f9L9/Xa/uL424AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3H0RzH0TYcJ+r4cf2jX0TiItL4POx5oj2a7r/G/e8+Wy/uRYdErNfzufmcd/QHrIqIJaaMiCa/3OfBV48bbx6pupR8sBb8/IX5XK/bk8lLwc0fFU1S2/MdZ/x6dmxUeVrz+yTZnJ8WTU4E56cD82Ny4XxTvi6afJyRslgy6z7XW/kvRpW6djO7LT/hjgMAAAAA4H+gq02B+3dd363fy9/cXwf+fsDbX48E7s+jciYa7toBAAAAAOgWdu1Z0bAss7JHkJD9xxw8iLbpzP4C+0Tkr7Iaf8vQvpXuETQu3tIV9xtDmM++QUQOkjVcX4061NW/LW8+u7uNkYmwviyn3r77eXQnvLIc32elhwweaiLBXX0d+wEEAAAAoGO2iv5Gy9VwJwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBfqxH9HC3uNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHHxJwAA//8WYgwx") r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="000e000000000000c91000000000000000000000ffffffffffffc910fe8000000000000000000000000000bb07"], 0x78) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x3a, &(0x7f0000000380)=[{&(0x7f00000003c0)="2c9a", 0x2d2c}], 0x1, 0x0, 0x0, 0xc12}, 0x4) [ 1325.058828][T25484] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1325.088934][T25533] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 03:48:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x67}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 03:48:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x67}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 03:48:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x67}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) [ 1325.121305][T25552] loop4: detected capacity change from 0 to 128 [ 1325.129206][T25552] FAT-fs (loop4): error, invalid access to FAT (entry 0x04fffff8) [ 1325.137843][T25552] FAT-fs (loop4): Filesystem has been set read-only 03:48:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x67}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) [ 1325.311379][T16750] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1325.919616][T25534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:40 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x89940, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10000020) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000b40)) 03:48:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@can_delroute={0x34, 0x19, 0xc01, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x0, 0x8}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "95bf7c740e7e837a"}, 0x4}}]}, 0x34}}, 0x0) 03:48:40 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x0, 0x0, {0x5}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0x14, r5, 0x400, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000009c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=r1, @ANYBLOB="08000300ffffffff24e0d3f5b479e4fb9c116de00aaf69c44e46850ce70660efc4fb7d6ef8abbf656810ac13816d6a3efbce6f0bfc1ea33dc82d343677b4e1d8768bcaa857739b859b97fde661398378786f38c18bf7f8a65e915c113a6326a3d068284841fde0ccb30bd125709e0d03ac8246d02538e0b4cf7a60c89ef70b54843c44f2d5ea155997852799ab9e6a9e2c599913419478ca0944e358575019e988c1ab23ce2a0f9a59c69b6fb2318b1e557da6d9b7ed3b92041d81c0"], 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="40020000000c0d9fe4258d8755c5ff6b0d24929fe8cef17f4f5e46da6d4d1e4f92c9c257bf2518c995814812c5733fdefa4ab3af75f6a5743a7a940ea6e831b2"], 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010023010000340200001c00000008000100d4", @ANYRES32=r1, @ANYBLOB="08000400000000000800030001000000"], 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:40 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x300}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:40 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001400)=ANY=[@ANYBLOB="18000000ffffffff000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x1, 0xc07, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "624bd2efc42aa8c5df1618cd306864e6097885f110a19c98cddf9bf5490a8da23ecb846b0cac573b832b737b3edd7c976919cebc92476923ecea8dd3106f5793"}}, 0x80}}, 0x0) 03:48:40 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0xffffffb2}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 03:48:40 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x96}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:48:40 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000000)=0x3c00, 0x4) 03:48:40 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='alarmtimer_suspend\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, r1, 0x0, 0x6, &(0x7f0000000040)='kfree\x00'}, 0x13) 03:48:40 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000840)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) [ 1328.086448][T25529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 03:48:40 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_nat_t_type={0x1}]}, 0x58}}, 0x0) 03:48:40 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000000)=0x3c00, 0x4) 03:48:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001280)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x80}}, 0x1c}}, 0x0) 03:48:40 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000240)) 03:48:40 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="4001000000000000000000000000000000000000d988d4da9c491e8cf30d3e68"], 0x14) write$nci(r0, &(0x7f0000000040)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x1, 0x2, 0x4, 0x4, {0x1, 0x2, 0x6, 0x4}}, 0x7) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x400, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) pwritev(r4, &(0x7f0000000a80)=[{&(0x7f0000000900)="bc589115334936b3cca9ce5d7966434da609894312f2292dfb154d18500af9b9a7281634a3ddb5a8ca5938b3e07dc7944a4c739ca5793c112297b3a6139e433e229c9d63871f3422a0e7dbf0d8b729749dbfd4699145bcc8a1", 0x59}, {&(0x7f0000000980)="75e19e519b5883466e8cc9d961a71c8c38266bc9d0e91cb936c5c1699bce0fcf0f0eb56f7ed10bd0b4ffa8532407e974a72a65feb278591f60466fe822ae90a7c1b1d87287ec16ce50cc5e90e6facf899212e1fc6477f4983e3e9ec931041bd58490d56b8dddd764c9ecde1ba7a7d223e083ed8e5fa30290f910641fa32d452a68442a8150f7e232f876966a518340055840b19cdfd6e2a1e1b5fbcea00552d461cfea57c27a4fc371b4c95d54013c1768fc903b8dec369673e8301c4d8cc8925e49d34b2ceac9d7d3f4cff49638c8e10c93a493b59c", 0xd6}], 0x2, 0x40000, 0x1) write$nci(r4, &(0x7f0000000000)=@NCI_OP_CORE_RESET_RSP={0x0, 0x1, 0x2, 0x0, 0x1, {0x0, 0x0, 0x8}}, 0x6) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1328.383631][T16741] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1328.952298][T25618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512